Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3633396/FC567508067711EC9D163D5AD8A014CE/NSunHRHXakg8nsebSWRvi0XYOLo.mft
File:                     NSunHRHXakg8nsebSWRvi0XYOLo.mft (raw, json)
Hash identifier:          INo1uiFFQT406SppADnHXhILU6jmC2fkqcBv0cSgpCo=
Subject key identifier:   7E:F3:CB:5A:9C:DE:04:53:CA:07:B0:99:B0:DC:F5:52:1B:7A:2B:6D
Authority key identifier: 35:2B:A7:1D:11:D7:6A:48:3C:9E:C7:9B:49:64:6F:8B:45:D8:38:BA
Certificate issuer:       /CN=F3633396AF/serialNumber=352BA71D11D76A483C9EC79B49646F8B45D838BA
Certificate serial:       06E3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/NSunHRHXakg8nsebSWRvi0XYOLo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3633396/FC567508067711EC9D163D5AD8A014CE/NSunHRHXakg8nsebSWRvi0XYOLo.mft
Manifest number:          06E1
Signing time:             Thu 07 May 2026 02:21:45 +0000
Manifest this update:     Thu 07 May 2026 02:21:44 +0000
Manifest next update:     Sat 09 May 2026 02:21:44 +0000
Files and hashes:         1: NSunHRHXakg8nsebSWRvi0XYOLo.crl (hash: DbuLSPm49eKT5h8wc6kWf4HCA4AP9pxl0hVmiq9YhWE=)
                          2: B83520CE3C5411F0B678C6A7DAE4EC9C.roa (hash: G6iOOYX+72GS+UQO3yIOd7hEz/TAFLzGnnM38j3t3+w=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3633396/FC567508067711EC9D163D5AD8A014CE/NSunHRHXakg8nsebSWRvi0XYOLo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3633396/FC567508067711EC9D163D5AD8A014CE/NSunHRHXakg8nsebSWRvi0XYOLo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/NSunHRHXakg8nsebSWRvi0XYOLo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 09 May 2026 00:07:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1763 (0x6e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3633396AF, serialNumber=352BA71D11D76A483C9EC79B49646F8B45D838BA
        Validity
            Not Before: May  7 02:21:44 2026 GMT
            Not After : May  9 02:21:44 2026 GMT
        Subject: CN=69fbf739-787a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:3b:6e:92:cc:68:88:0e:00:3c:ac:66:d6:55:
                    d2:fa:a3:8e:d3:c2:d4:97:e7:7b:44:6c:e2:3e:d4:
                    c7:fd:af:74:cc:37:b8:f3:b2:d0:14:60:b2:41:c1:
                    88:9a:b7:a5:64:99:ec:35:93:0b:b2:38:5b:f2:dc:
                    3a:16:16:ad:b8:c1:7c:8d:9a:ad:ca:c6:20:5f:77:
                    f4:61:87:29:3f:36:e5:c3:0d:50:01:d3:f8:31:5b:
                    d2:37:86:cd:34:64:fe:d9:dd:46:7c:07:3d:50:44:
                    c7:2a:0f:49:e5:5c:94:9b:fd:84:9b:12:8c:fb:7e:
                    71:d7:28:64:86:7c:e4:bf:e7:02:c6:6c:c0:03:75:
                    b4:98:f1:60:3e:fa:ce:a0:2f:cf:b1:49:60:98:10:
                    5c:0e:4f:fc:34:68:0c:4b:d2:22:74:a1:6a:88:b0:
                    2d:67:0c:27:6b:94:46:35:02:bb:fd:d2:a2:3f:23:
                    bd:fa:be:25:8e:68:68:93:67:6b:6f:60:1c:80:17:
                    92:ec:8f:ea:ef:0c:28:95:b4:45:57:4c:cc:d7:98:
                    63:67:89:af:d0:e4:cb:e2:62:b7:d7:55:55:47:ba:
                    00:00:80:f6:82:7e:e6:ed:32:48:a8:3b:f6:97:97:
                    c8:b1:55:dd:6c:eb:24:29:4d:06:56:9b:a3:11:2a:
                    a5:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:F3:CB:5A:9C:DE:04:53:CA:07:B0:99:B0:DC:F5:52:1B:7A:2B:6D
            X509v3 Authority Key Identifier:
                keyid:35:2B:A7:1D:11:D7:6A:48:3C:9E:C7:9B:49:64:6F:8B:45:D8:38:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3633396/FC567508067711EC9D163D5AD8A014CE/NSunHRHXakg8nsebSWRvi0XYOLo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/NSunHRHXakg8nsebSWRvi0XYOLo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3633396/FC567508067711EC9D163D5AD8A014CE/NSunHRHXakg8nsebSWRvi0XYOLo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:e4:07:6d:32:69:32:33:e0:9f:50:c2:56:1f:79:4d:9f:f9:
         37:2e:3a:a4:4b:da:26:92:22:75:d0:48:db:6a:93:47:ea:99:
         d8:df:c7:10:4c:d2:93:83:b4:ce:d3:0d:a9:93:6f:ce:c2:f6:
         de:a5:e1:b9:e9:8d:53:7e:ac:3e:0b:fe:2d:7b:d2:1f:d8:ff:
         7b:8b:48:09:5d:37:f8:92:b5:9e:f1:f4:86:cc:a5:0f:4e:dd:
         23:49:c6:0b:52:e2:54:a2:37:69:2c:0b:aa:c7:65:60:4c:c4:
         a9:4e:e8:ad:bf:32:be:42:aa:04:fd:b9:28:2a:24:f4:07:b5:
         0f:30:c3:03:f2:79:7e:89:f4:df:f7:6f:ec:41:ce:f6:42:b2:
         7e:15:6e:8c:6d:91:79:e9:5a:09:90:86:7a:7c:42:ba:95:34:
         b5:99:75:be:14:89:16:96:73:30:90:4d:17:0d:a8:65:31:e4:
         78:d1:39:fa:26:59:5f:90:70:c8:31:6e:69:be:db:d0:53:cf:
         28:5c:10:e1:84:2d:3b:e2:e9:f7:de:84:80:a0:b0:5b:71:43:
         b9:f3:06:47:07:11:07:c0:d8:14:94:4f:5b:8b:fa:ef:45:d4:
         a9:30:4d:21:c3:26:b4:33:aa:91:b5:6f:57:8a:40:57:c4:e0:
         b6:4b:b5:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 21:38:02 2026 by rpki-client