Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3628288/4693761EBED711EF82A7A345762E951A/lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.mft
File:                     lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.mft (raw, json)
Hash identifier:          9jwV6Jwofxkefn+cbjD75HJbVVf4GIUxmx+DxlfS0/s=
Subject key identifier:   8E:B8:E7:A9:3B:B1:6A:BE:E6:D7:0B:99:88:30:B3:31:7D:7B:F6:93
Authority key identifier: 94:96:71:27:FF:64:EC:7C:72:A3:AB:EA:16:CE:69:AE:DA:7F:68:34
Certificate issuer:       /CN=F3628288AF/serialNumber=94967127FF64EC7C72A3ABEA16CE69AEDA7F6834
Certificate serial:       0203
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3628288/4693761EBED711EF82A7A345762E951A/lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.mft
Manifest number:          0202
Signing time:             Thu 07 May 2026 04:42:04 +0000
Manifest this update:     Thu 07 May 2026 04:42:03 +0000
Manifest next update:     Sat 09 May 2026 04:42:03 +0000
Files and hashes:         1: lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.crl (hash: CLUa8o16A90BbQnvBlKw0voLjjDN5f5giHXizn+rPnc=)
                          2: 5607C3B0BEE211EFA4CEA589762E951A.roa (hash: OpcRwl+jfvnh8TAOsFlPTty/eZv7mZcg2dDEa8udpEA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3628288/4693761EBED711EF82A7A345762E951A/lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3628288/4693761EBED711EF82A7A345762E951A/lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 09 May 2026 00:07:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 515 (0x203)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3628288AF, serialNumber=94967127FF64EC7C72A3ABEA16CE69AEDA7F6834
        Validity
            Not Before: May  7 04:42:03 2026 GMT
            Not After : May  9 04:42:03 2026 GMT
        Subject: CN=69fc181c-6148
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d4:d6:65:52:26:f4:94:61:55:9c:be:74:b7:
                    b1:aa:ef:0c:32:ed:8d:d4:68:27:13:da:25:a0:55:
                    0a:22:1b:91:65:12:92:6b:c1:48:cb:35:6d:d8:91:
                    30:a0:59:35:f3:94:44:66:7b:96:75:20:cb:67:99:
                    18:0b:37:44:36:0b:aa:ce:cc:0c:d3:58:4d:4e:76:
                    ce:25:78:82:39:4e:d4:c0:5b:f6:21:51:8d:b8:b8:
                    76:94:c9:d1:0f:24:f9:b9:1b:ba:77:85:c3:94:49:
                    08:28:da:ec:77:7c:4b:5b:f8:35:63:d4:d5:81:61:
                    3a:ee:b4:f3:24:a2:89:10:36:3f:26:cd:2d:c7:02:
                    6b:ff:c9:bf:d1:b4:ec:1e:91:02:ae:c2:e2:3c:01:
                    38:63:85:c4:44:98:dc:87:3e:c7:a4:97:3a:b9:f3:
                    40:9b:78:19:4c:88:80:3f:fc:1d:b2:2c:6e:3a:ec:
                    73:d3:e2:0d:bc:df:22:e3:9b:84:36:09:d8:ff:d1:
                    b3:90:98:8c:99:27:8a:e7:30:ce:d6:1b:95:71:4f:
                    ac:61:23:1a:ea:2b:1e:7b:57:fa:1e:35:c1:c8:7b:
                    b5:4c:84:14:f0:ed:4a:d5:c3:33:55:3b:ae:35:d6:
                    c8:e6:7a:8d:11:aa:70:1a:91:a3:2f:58:f0:b8:34:
                    75:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:B8:E7:A9:3B:B1:6A:BE:E6:D7:0B:99:88:30:B3:31:7D:7B:F6:93
            X509v3 Authority Key Identifier:
                keyid:94:96:71:27:FF:64:EC:7C:72:A3:AB:EA:16:CE:69:AE:DA:7F:68:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3628288/4693761EBED711EF82A7A345762E951A/lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3628288/4693761EBED711EF82A7A345762E951A/lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:34:a4:94:7d:e0:e5:2c:ec:6f:9f:da:3d:f2:05:5d:d0:c2:
         03:44:47:ef:d9:47:e2:c0:84:5b:d7:fc:10:63:7a:98:bb:0a:
         4a:48:f4:a6:23:57:d8:ad:11:9f:c1:97:d5:62:17:e3:30:81:
         09:5d:81:e9:c2:85:db:d9:be:05:6d:07:38:02:ad:50:c2:5f:
         5e:ed:28:f9:89:b1:00:22:08:d2:52:3e:5b:84:ec:4c:2f:3f:
         68:f0:ed:38:d1:5a:fe:aa:72:bf:95:72:36:d0:c9:4b:b7:ad:
         1f:57:78:01:a1:a4:50:2b:82:15:e8:e4:a4:d0:be:a3:98:d6:
         2f:c9:35:24:83:18:6c:21:9d:91:a1:26:1e:b6:09:99:f5:8b:
         78:7f:9b:e5:47:54:6c:f5:39:38:1a:5e:6f:43:a0:f5:7d:c8:
         f7:2d:e2:ff:b3:96:82:12:a6:c4:7a:e2:23:92:c8:87:2b:4b:
         7c:38:c8:5a:78:c6:9f:78:60:66:4f:f5:23:77:65:a9:90:e8:
         05:65:b5:47:05:e5:bb:c0:0e:4f:74:0b:13:e9:00:f5:bb:92:
         12:2f:75:73:30:1c:85:89:75:ee:0c:92:6f:73:af:df:4b:ab:
         e1:02:fc:20:77:14:18:40:92:40:43:d5:00:89:dc:14:a3:c0:
         a5:fa:57:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 21:39:22 2026 by rpki-client