Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36390A9/1B3A425486E211EFB4686096762E951A/8GzMRNUs-b4RXOx6TaaxMJukOaU.mft
File:                     8GzMRNUs-b4RXOx6TaaxMJukOaU.mft (raw, json)
Hash identifier:          79CE3tqTy8immyptUej2itdawLzFsCP2JOQ/zj9n4Gk=
Subject key identifier:   B0:97:AE:25:22:88:50:99:96:FE:B2:AB:2B:4E:40:C6:2C:2B:24:6E
Authority key identifier: F0:6C:CC:44:D5:2C:F9:BE:11:5C:EC:7A:4D:A6:B1:30:9B:A4:39:A5
Certificate issuer:       /CN=F36390A9RI/serialNumber=F06CCC44D52CF9BE115CEC7A4DA6B1309BA439A5
Certificate serial:       0243
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/8GzMRNUs-b4RXOx6TaaxMJukOaU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36390A9/1B3A425486E211EFB4686096762E951A/8GzMRNUs-b4RXOx6TaaxMJukOaU.mft
Manifest number:          0242
Signing time:             Mon 27 Apr 2026 04:36:13 +0000
Manifest this update:     Mon 27 Apr 2026 04:36:12 +0000
Manifest next update:     Wed 29 Apr 2026 04:36:12 +0000
Files and hashes:         1: 8GzMRNUs-b4RXOx6TaaxMJukOaU.crl (hash: MwPYsg7KvZDC+KCa5hfa/XIO/8m5uBAXmPqcOfsquvY=)
                          2: 7F1695F2871411EF981CC64F762E951A.roa (hash: y+9csfTO7VjobZ1q8Iv+RH3EIrHQat1B/mZ0hIosNpk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36390A9/1B3A425486E211EFB4686096762E951A/8GzMRNUs-b4RXOx6TaaxMJukOaU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36390A9/1B3A425486E211EFB4686096762E951A/8GzMRNUs-b4RXOx6TaaxMJukOaU.mft
                          rsync://rpki.afrinic.net/repository/ripe/8GzMRNUs-b4RXOx6TaaxMJukOaU.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 29 Apr 2026 00:45:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 579 (0x243)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36390A9RI, serialNumber=F06CCC44D52CF9BE115CEC7A4DA6B1309BA439A5
        Validity
            Not Before: Apr 27 04:36:12 2026 GMT
            Not After : Apr 29 04:36:12 2026 GMT
        Subject: CN=69eee7bd-fb55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:43:7b:4f:e0:2d:6d:90:25:2b:7d:13:41:81:
                    eb:65:ad:37:42:01:38:bf:5b:5e:04:fb:ec:fd:a1:
                    74:f0:09:d3:db:22:fa:2e:9b:47:8f:6a:7d:a0:79:
                    92:9c:21:6e:02:28:d7:e8:fb:4d:d2:4e:50:76:65:
                    27:48:a1:a8:4e:01:af:14:24:06:9c:84:a1:44:89:
                    08:6a:52:02:b3:ce:8d:09:03:39:8b:6d:ed:02:75:
                    01:74:2a:ae:1b:32:6a:6b:02:e4:28:06:23:0a:ac:
                    bb:71:3e:2a:16:7d:3f:87:96:bd:61:33:da:c8:fb:
                    99:9a:99:83:b8:15:01:af:9b:01:43:8c:5f:b9:24:
                    19:90:8f:50:e9:d1:ca:e8:65:b2:95:08:78:88:2d:
                    19:84:82:25:d3:10:d9:dd:c4:0f:41:ce:9d:2f:14:
                    bc:96:da:dc:9c:b9:36:4d:98:02:dc:9b:6a:76:d6:
                    1f:e4:18:e6:3c:00:52:8e:7f:a8:44:f8:48:c8:b8:
                    4a:70:25:a0:bd:16:3a:50:9f:c9:c3:ea:11:52:6b:
                    d3:14:97:25:c0:e9:9b:d8:36:61:4d:f0:6a:5d:eb:
                    16:b9:10:d9:00:1c:6e:5e:65:4f:a3:97:24:54:64:
                    30:7e:b3:9c:c5:00:79:07:ef:8b:df:fa:00:03:aa:
                    a8:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:97:AE:25:22:88:50:99:96:FE:B2:AB:2B:4E:40:C6:2C:2B:24:6E
            X509v3 Authority Key Identifier:
                keyid:F0:6C:CC:44:D5:2C:F9:BE:11:5C:EC:7A:4D:A6:B1:30:9B:A4:39:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36390A9/1B3A425486E211EFB4686096762E951A/8GzMRNUs-b4RXOx6TaaxMJukOaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/8GzMRNUs-b4RXOx6TaaxMJukOaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36390A9/1B3A425486E211EFB4686096762E951A/8GzMRNUs-b4RXOx6TaaxMJukOaU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:9f:d6:18:75:dc:c7:1e:ab:1a:b5:cd:4d:c0:6c:76:cb:c8:
         7c:df:d3:86:32:aa:ae:45:7b:9b:c2:3e:72:e7:ae:f6:5e:ed:
         0f:de:25:e3:4f:6b:69:27:b7:d8:10:f0:6a:93:77:ab:7e:d4:
         fd:f9:44:a8:25:12:5e:f5:b1:af:2d:6b:23:e8:fd:0d:de:9d:
         7c:97:89:92:d0:13:c4:bb:00:5c:1e:89:53:f9:fd:5f:69:eb:
         f1:5c:93:c6:64:04:64:5a:0d:ad:96:7a:00:42:40:4b:f3:46:
         9b:8e:35:62:2b:70:7f:fe:55:e6:f3:11:1a:e8:f4:ea:14:78:
         37:38:cf:51:9a:9e:c6:55:c1:92:13:2b:5e:bd:ed:73:9f:95:
         23:f0:35:4b:98:3b:e5:98:62:d7:9d:75:d5:4d:a9:95:ac:4a:
         64:b5:ab:e3:ff:9f:27:7d:76:c0:7f:bc:77:96:e8:c5:ce:59:
         a5:45:8e:0a:ee:ef:48:ed:9f:29:e8:eb:d2:3f:c7:21:8e:df:
         e4:62:e8:d9:75:08:ee:ba:9e:83:18:14:d0:7a:34:d9:57:0b:
         a8:53:48:8c:7d:1b:55:26:34:f0:b7:c2:a5:aa:cb:87:27:d6:
         e2:11:f4:f0:d3:10:b9:1a:ef:90:20:77:f4:38:17:49:44:b1:
         fb:96:4d:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 11:59:26 2026 by rpki-client