Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3639B67/79267BC0095D11EEAEC04B594AD9E6FC/IU5T_WAV277wRT3vRAdy_7AU3Yo.mft
File:                     IU5T_WAV277wRT3vRAdy_7AU3Yo.mft (raw, json)
Hash identifier:          rKlsPGV444Gy0rtZcmS4/Xsb61eJKJqfcm3XV7TzHLo=
Subject key identifier:   A9:8B:8A:1E:44:F0:43:0F:9D:D5:EA:9D:12:1A:E5:49:59:39:15:81
Authority key identifier: 21:4E:53:FD:60:15:DB:BE:F0:45:3D:EF:44:07:72:FF:B0:14:DD:8A
Certificate issuer:       /CN=F3639B67AF/serialNumber=214E53FD6015DBBEF0453DEF440772FFB014DD8A
Certificate serial:       0445
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/IU5T_WAV277wRT3vRAdy_7AU3Yo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3639B67/79267BC0095D11EEAEC04B594AD9E6FC/IU5T_WAV277wRT3vRAdy_7AU3Yo.mft
Manifest number:          0443
Signing time:             Thu 07 May 2026 03:28:02 +0000
Manifest this update:     Thu 07 May 2026 03:28:01 +0000
Manifest next update:     Sat 09 May 2026 03:28:01 +0000
Files and hashes:         1: IU5T_WAV277wRT3vRAdy_7AU3Yo.crl (hash: 4z5kM8UAP+9E3Zm1hDHCG3ZnTxN2ivKKnwxy9IhDkGc=)
                          2: 20752E50271A11EFB295582D7DDC24C2.roa (hash: vJwAgE4GViNLt6DStSXnSiz5VQ5wiyhctReG5qMVaz0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3639B67/79267BC0095D11EEAEC04B594AD9E6FC/IU5T_WAV277wRT3vRAdy_7AU3Yo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3639B67/79267BC0095D11EEAEC04B594AD9E6FC/IU5T_WAV277wRT3vRAdy_7AU3Yo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/IU5T_WAV277wRT3vRAdy_7AU3Yo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 09 May 2026 00:07:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1093 (0x445)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3639B67AF, serialNumber=214E53FD6015DBBEF0453DEF440772FFB014DD8A
        Validity
            Not Before: May  7 03:28:01 2026 GMT
            Not After : May  9 03:28:01 2026 GMT
        Subject: CN=69fc06c2-14f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:66:c1:56:8f:80:1f:3d:d4:2a:57:9a:0d:d8:
                    01:60:31:b2:9a:7a:41:44:7d:99:95:d2:cd:cf:53:
                    94:71:8b:6e:f0:5c:73:b7:f1:11:8b:bd:bb:f0:19:
                    d2:b9:18:ed:00:9f:cd:f4:40:25:06:09:0d:2b:33:
                    31:65:8c:07:ef:95:8d:44:65:52:60:56:38:bd:0c:
                    f0:cd:9a:d4:43:d7:f1:99:a8:f3:ba:70:23:e3:2e:
                    ed:81:73:dd:52:89:70:db:54:bd:8d:d6:2a:ca:07:
                    30:54:19:52:61:7e:c2:66:a0:de:eb:5e:95:79:c0:
                    35:f4:ef:75:a0:a9:1c:eb:65:ed:66:97:b4:fa:59:
                    3b:e7:4e:8c:19:b6:50:00:ae:25:01:78:83:0c:8f:
                    87:05:c5:9c:a9:ba:04:21:e2:b4:fd:64:ba:41:d9:
                    44:a2:87:56:c4:9e:eb:dc:ca:bf:a7:59:ad:67:e1:
                    cf:d3:3c:ba:35:f5:84:a3:b6:9d:7b:0b:33:fa:45:
                    ab:64:ac:2a:75:4a:8e:51:ba:dc:08:7e:6d:47:c3:
                    98:20:e3:45:a7:c4:78:ce:d6:aa:f4:fc:47:15:9c:
                    b7:d0:cb:6d:ef:7a:9b:4b:31:57:2c:92:fd:b4:5e:
                    87:d0:68:8b:58:61:82:e0:4d:b1:5f:1d:c3:8d:89:
                    e3:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:8B:8A:1E:44:F0:43:0F:9D:D5:EA:9D:12:1A:E5:49:59:39:15:81
            X509v3 Authority Key Identifier:
                keyid:21:4E:53:FD:60:15:DB:BE:F0:45:3D:EF:44:07:72:FF:B0:14:DD:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3639B67/79267BC0095D11EEAEC04B594AD9E6FC/IU5T_WAV277wRT3vRAdy_7AU3Yo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/IU5T_WAV277wRT3vRAdy_7AU3Yo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3639B67/79267BC0095D11EEAEC04B594AD9E6FC/IU5T_WAV277wRT3vRAdy_7AU3Yo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:c5:c8:42:96:27:ca:dc:be:ab:de:35:85:92:38:d0:f3:54:
         7b:41:98:a8:5d:26:a6:cb:73:19:7d:05:19:21:df:9e:63:ce:
         9f:9b:4e:81:74:ec:60:e3:bf:71:f5:ae:84:ce:20:3d:a7:30:
         cd:d3:0b:a5:37:52:1e:4a:d7:07:fd:a8:73:4f:d8:10:5c:5b:
         50:da:de:57:76:fd:b5:8f:65:d6:ff:8c:dc:01:73:b9:a3:f0:
         92:96:22:1e:c8:fd:e2:ee:bd:8e:d0:69:31:b4:7a:67:7c:60:
         72:eb:a7:8d:a7:5e:16:8e:d2:99:ae:84:fa:af:db:1c:73:53:
         c5:8c:5f:bb:2c:25:7f:86:96:a7:5b:2c:2e:ae:2c:07:91:61:
         f9:27:7a:c3:14:6f:e8:9c:b8:c3:66:fd:b3:62:99:ac:56:9d:
         0a:03:c8:28:66:8b:9c:d2:26:fc:27:a0:49:f4:97:e9:1b:48:
         05:a4:04:53:57:24:ee:4d:59:c5:d9:05:fc:cf:02:d0:ae:34:
         62:ff:8f:98:f3:62:17:a4:df:2a:1f:f9:13:6b:1c:83:6c:fb:
         b3:08:93:ac:14:7b:67:dd:21:24:19:1c:0f:5d:aa:26:86:d5:
         51:81:cc:94:98:40:da:b6:70:4d:cb:84:3a:b8:97:09:c4:33:
         1d:22:09:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 21:34:01 2026 by rpki-client