Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36390A9/31A3DDA286E211EFBB3D6C96762E951A/x0I-0nr8wQ1ZgpqAsXlxYrZG_90.mft
File:                     x0I-0nr8wQ1ZgpqAsXlxYrZG_90.mft (raw, json)
Hash identifier:          aERowDkjY5+hgH1ZGbWcMC6E7u2rAQH0FhOgRTFQDDc=
Subject key identifier:   F3:F5:8E:3A:AC:78:48:1E:D3:0E:25:E0:AD:C0:18:02:54:87:54:02
Authority key identifier: C7:42:3E:D2:7A:FC:C1:0D:59:82:9A:80:B1:79:71:62:B6:46:FF:DD
Certificate issuer:       /CN=F36390A9AF/serialNumber=C7423ED27AFCC10D59829A80B1797162B646FFDD
Certificate serial:       0243
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/x0I-0nr8wQ1ZgpqAsXlxYrZG_90.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36390A9/31A3DDA286E211EFBB3D6C96762E951A/x0I-0nr8wQ1ZgpqAsXlxYrZG_90.mft
Manifest number:          0242
Signing time:             Mon 27 Apr 2026 04:36:25 +0000
Manifest this update:     Mon 27 Apr 2026 04:36:24 +0000
Manifest next update:     Wed 29 Apr 2026 04:36:24 +0000
Files and hashes:         1: x0I-0nr8wQ1ZgpqAsXlxYrZG_90.crl (hash: pDVP7SM6x2tJXnrIlVQegnoUJ+eYErBMxcUyxu74z0U=)
                          2: 2043601A871311EFAA833C47762E951A.roa (hash: 7V2EXwaz5iXOD12PTDbUdoIOuqdno8tko8fgycVsw+8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36390A9/31A3DDA286E211EFBB3D6C96762E951A/x0I-0nr8wQ1ZgpqAsXlxYrZG_90.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36390A9/31A3DDA286E211EFBB3D6C96762E951A/x0I-0nr8wQ1ZgpqAsXlxYrZG_90.mft
                          rsync://rpki.afrinic.net/repository/afrinic/x0I-0nr8wQ1ZgpqAsXlxYrZG_90.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 29 Apr 2026 00:07:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 579 (0x243)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36390A9AF, serialNumber=C7423ED27AFCC10D59829A80B1797162B646FFDD
        Validity
            Not Before: Apr 27 04:36:24 2026 GMT
            Not After : Apr 29 04:36:24 2026 GMT
        Subject: CN=69eee7c9-cd5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:42:f5:27:1e:b6:46:48:ef:e7:ba:a2:06:07:
                    83:12:44:2f:ba:25:ac:e1:af:6f:04:4b:70:77:b8:
                    b0:25:cd:36:c3:0b:ee:32:03:f6:17:69:2a:1e:84:
                    1b:82:6f:5c:be:77:2e:0e:7f:3e:c5:3f:50:f8:a6:
                    a3:45:62:8e:ec:ab:aa:80:4c:2b:ea:13:33:c9:28:
                    7c:92:9a:f5:14:ab:fe:46:52:72:a1:b0:66:41:62:
                    22:2c:45:11:31:03:1f:bf:45:99:bc:a3:fc:06:7a:
                    8f:bd:c7:72:39:94:c4:63:4a:a1:ae:b2:94:dd:da:
                    44:5e:26:b9:92:17:1e:2d:75:85:ae:21:e3:79:40:
                    01:07:45:72:72:1f:9d:8b:c9:30:a9:d5:ae:16:7d:
                    53:65:b5:36:f1:f6:dc:c7:67:fd:60:0e:99:54:38:
                    cf:7e:db:ed:34:47:85:92:b5:df:c2:08:f7:3e:8e:
                    40:d8:22:e0:6e:71:20:d9:07:b3:cb:99:70:4a:ec:
                    b4:5e:38:5d:30:76:f2:f6:53:40:0d:4b:bf:f5:82:
                    dc:84:90:af:a1:09:07:d5:0d:09:ce:e2:44:14:22:
                    ea:8a:11:3c:19:f6:d2:9c:36:72:f6:d6:52:b3:23:
                    01:7d:fa:0c:f5:23:76:23:94:e2:71:f8:9d:6f:22:
                    42:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:F5:8E:3A:AC:78:48:1E:D3:0E:25:E0:AD:C0:18:02:54:87:54:02
            X509v3 Authority Key Identifier:
                keyid:C7:42:3E:D2:7A:FC:C1:0D:59:82:9A:80:B1:79:71:62:B6:46:FF:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36390A9/31A3DDA286E211EFBB3D6C96762E951A/x0I-0nr8wQ1ZgpqAsXlxYrZG_90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/x0I-0nr8wQ1ZgpqAsXlxYrZG_90.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36390A9/31A3DDA286E211EFBB3D6C96762E951A/x0I-0nr8wQ1ZgpqAsXlxYrZG_90.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:8b:b7:25:fb:5c:d2:70:3a:2a:3f:df:fa:e8:aa:ef:5a:cb:
         e7:d4:6a:3e:44:03:83:27:e1:21:6b:76:1f:ce:1f:41:b9:0b:
         e1:22:45:a6:71:a8:f4:b9:f1:d9:e4:bd:dc:0c:18:ee:7a:dd:
         33:88:d1:08:b3:f5:f3:af:87:64:3e:25:c8:5d:2c:38:30:37:
         58:48:37:ad:03:22:fc:f0:61:be:1c:e9:a6:2e:a6:69:d4:ae:
         c4:a0:fd:6d:71:5b:4d:63:48:35:c5:60:c3:e1:1d:2c:8d:70:
         12:61:f8:d0:37:ad:ab:f5:9d:9f:cb:cc:21:c5:8b:64:a7:9f:
         62:4c:ea:01:bf:7e:d7:15:69:9b:86:49:ba:6d:b0:d5:9b:91:
         0f:91:b4:be:24:2f:92:0b:df:5a:62:38:d6:a5:dc:bf:65:b7:
         d9:de:18:b4:7f:44:72:d3:3a:67:96:12:2a:96:04:56:ee:af:
         71:ae:0b:1c:5b:31:2c:e9:bb:52:4e:61:ff:f4:a8:fc:dd:eb:
         d1:90:f0:04:d5:d0:88:b8:4e:0b:76:7b:ec:04:09:6f:8d:99:
         00:79:a5:51:c0:0f:e1:c2:89:bb:92:27:16:79:b5:9c:d4:fc:
         ee:1b:6c:48:e5:46:80:4a:1e:6d:c3:1b:3a:63:86:b2:3e:1b:
         3b:e5:41:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 16:54:31 2026 by rpki-client