Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363A48B/103FED46574711F0BA585979DAE4EC9C/4-0KKxQeZZxFITmco8yPgYx19x0.mft
File:                     4-0KKxQeZZxFITmco8yPgYx19x0.mft (raw, json)
Hash identifier:          FQXAew2qIA4TLyyu5dykHaBfqFTczFdOQhEYVrURMUg=
Subject key identifier:   E0:12:34:50:32:6A:A4:F2:04:ED:7D:00:5E:87:43:33:12:2F:58:33
Authority key identifier: E3:ED:0A:2B:14:1E:65:9C:45:21:39:9C:A3:CC:8F:81:8C:75:F7:1D
Certificate issuer:       /CN=F363A48BAF/serialNumber=E3ED0A2B141E659C4521399CA3CC8F818C75F71D
Certificate serial:       013C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/4-0KKxQeZZxFITmco8yPgYx19x0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363A48B/103FED46574711F0BA585979DAE4EC9C/4-0KKxQeZZxFITmco8yPgYx19x0.mft
Manifest number:          013B
Signing time:             Thu 07 May 2026 04:58:25 +0000
Manifest this update:     Thu 07 May 2026 04:58:25 +0000
Manifest next update:     Sat 09 May 2026 04:58:25 +0000
Files and hashes:         1: 4-0KKxQeZZxFITmco8yPgYx19x0.crl (hash: ipYsENwmr86lt5fW23u9voy9QgcInBNsOzX9YxOe2oY=)
                          2: 075271E4574811F0A7DC6D7EDAE4EC9C.roa (hash: zOGSgi/1KJ9xQcEdBGnV40++jUsJYV1/+BcJ8fXP1w8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363A48B/103FED46574711F0BA585979DAE4EC9C/4-0KKxQeZZxFITmco8yPgYx19x0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363A48B/103FED46574711F0BA585979DAE4EC9C/4-0KKxQeZZxFITmco8yPgYx19x0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/4-0KKxQeZZxFITmco8yPgYx19x0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 09 May 2026 00:07:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 316 (0x13c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363A48BAF, serialNumber=E3ED0A2B141E659C4521399CA3CC8F818C75F71D
        Validity
            Not Before: May  7 04:58:25 2026 GMT
            Not After : May  9 04:58:25 2026 GMT
        Subject: CN=69fc1bf1-9a96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:62:f5:b0:bf:d8:a1:58:0b:aa:99:12:1c:3b:
                    1f:6a:f4:aa:c8:37:a2:e6:3e:6d:17:37:a1:e2:ed:
                    0e:df:28:58:51:47:f2:b3:a1:b1:f2:7b:45:3a:6e:
                    ff:6a:0e:5a:e8:21:cb:a3:44:1e:90:fc:08:e0:0b:
                    6e:48:41:1b:de:57:4b:c5:51:e3:15:9e:80:8f:10:
                    54:71:40:05:52:30:42:4d:d9:77:c7:de:2a:c3:ac:
                    96:f0:53:d4:49:82:37:6e:21:6f:84:71:f4:37:5c:
                    6b:b0:40:26:88:a0:37:99:08:e2:c6:d8:5e:e2:b1:
                    8b:48:d3:8d:b7:bb:ea:ba:40:d6:a3:4d:21:2e:a0:
                    7e:d5:2b:26:cc:91:8c:f7:fc:f5:90:b3:fd:52:9f:
                    48:e7:8d:34:e2:73:46:f8:24:a2:30:63:94:64:56:
                    e2:64:ad:78:9c:1e:51:a3:a6:1b:6f:aa:b6:8b:b1:
                    77:33:9d:f3:c8:78:91:d4:d8:82:6b:13:55:bf:b6:
                    b7:a4:fd:ff:00:9a:3a:4d:fa:97:cc:6d:e2:e8:15:
                    ca:0d:b4:2b:9f:4b:72:26:c6:b8:4a:2b:48:4d:b8:
                    95:2a:7a:db:1d:1f:f5:ce:a3:0e:af:a8:43:f2:38:
                    50:ed:67:c9:2d:fe:19:30:a9:9a:e4:8b:29:17:01:
                    0d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:12:34:50:32:6A:A4:F2:04:ED:7D:00:5E:87:43:33:12:2F:58:33
            X509v3 Authority Key Identifier:
                keyid:E3:ED:0A:2B:14:1E:65:9C:45:21:39:9C:A3:CC:8F:81:8C:75:F7:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363A48B/103FED46574711F0BA585979DAE4EC9C/4-0KKxQeZZxFITmco8yPgYx19x0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4-0KKxQeZZxFITmco8yPgYx19x0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363A48B/103FED46574711F0BA585979DAE4EC9C/4-0KKxQeZZxFITmco8yPgYx19x0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:56:44:28:a5:74:d0:20:d9:1c:cb:85:06:ae:51:d6:e2:8e:
         e3:db:14:89:85:76:dd:22:c4:09:3f:32:75:fa:8f:c7:e8:01:
         80:07:83:4f:1b:fa:90:9a:f9:37:46:ce:9e:47:53:e7:7f:b6:
         d9:6d:6d:5b:7c:22:c1:14:80:24:47:80:ce:ce:3d:75:37:73:
         b7:ac:d3:ca:92:df:18:09:bd:ec:af:83:23:e8:ca:48:53:fa:
         1d:d4:4a:7c:da:60:b5:4e:2a:23:97:3a:c8:fc:76:26:23:c2:
         42:84:d0:bf:75:39:90:fd:a4:07:4c:a2:35:19:d7:24:0e:96:
         06:f7:d8:d0:16:16:e2:a6:db:5e:a0:1a:1b:06:30:a4:09:dc:
         31:2f:b4:4a:db:9e:b4:4e:10:3e:12:84:63:a5:41:d2:4d:e9:
         71:0e:af:16:78:09:53:ce:64:ed:6a:b5:06:73:e5:48:42:b1:
         8a:85:65:0d:33:35:2f:9f:d2:78:84:52:d3:21:bd:26:dc:84:
         96:ba:3e:db:b4:97:c3:fc:1f:6b:be:6c:f3:f3:cb:f6:6f:7b:
         15:6e:05:ba:bd:28:19:32:8c:c7:de:b4:59:24:a4:bc:81:f3:
         3e:05:17:10:b5:3d:85:41:97:62:38:19:76:d2:b1:a8:95:fe:
         6b:02:b3:28
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICATwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0E0OEJBRjExMC8GA1UEBRMoRTNFRDBBMkIxNDFFNjU5QzQ1MjEzOTlDQTNDQzhG
ODE4Qzc1RjcxRDAeFw0yNjA1MDcwNDU4MjVaFw0yNjA1MDkwNDU4MjVaMBgxFjAU
BgNVBAMTDTY5ZmMxYmYxLTlhOTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDVYvWwv9ihWAuqmRIcOx9q9KrIN6LmPm0XN6Hi7Q7fKFhRR/KzobHye0U6
bv9qDlroIcujRB6Q/AjgC25IQRveV0vFUeMVnoCPEFRxQAVSMEJN2XfH3irDrJbw
U9RJgjduIW+EcfQ3XGuwQCaIoDeZCOLG2F7isYtI0423u+q6QNajTSEuoH7VKybM
kYz3/PWQs/1Sn0jnjTTic0b4JKIwY5RkVuJkrXicHlGjphtvqraLsXcznfPIeJHU
2IJrE1W/trek/f8AmjpN+pfMbeLoFcoNtCufS3ImxrhKK0hNuJUqetsdH/XOow6v
qEPyOFDtZ8kt/hkwqZrkiykXAQ0RAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU4BI0
UDJqpPIE7X0AXodDMxIvWDMwHwYDVR0jBBgwFoAU4+0KKxQeZZxFITmco8yPgYx1
9x0wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNBNDhCLzEwM0ZFRDQ2NTc0NzExRjBCQTU4NTk3OURBRTRFQzlDLzQtMEtL
eFFlWlp4RklUbWNvOHlQZ1l4MTl4MC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzQtMEtLeFFlWlp4RklUbWNvOHlQZ1l4MTl4MC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2M0E0OEIvMTAzRkVENDY1NzQ3MTFGMEJBNTg1OTc5REFF
NEVDOUMvNC0wS0t4UWVaWnhGSVRtY284eVBnWXgxOXgwLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBLVkQopXTQINkcy4UGrlHW4o7j2xSJ
hXbdIsQJPzJ1+o/H6AGAB4NPG/qQmvk3Rs6eR1Pnf7bZbW1bfCLBFIAkR4DOzj11
N3O3rNPKkt8YCb3sr4Mj6MpIU/od1Ep82mC1TiojlzrI/HYmI8JChNC/dTmQ/aQH
TKI1GdckDpYG99jQFhbiptteoBobBjCkCdwxL7RK2560ThA+EoRjpUHSTelxDq8W
eAlTzmTtarUGc+VIQrGKhWUNMzUvn9J4hFLTIb0m3ISWuj7btJfD/B9rvmzz88v2
b3sVbgW6vSgZMozH3rRZJKS8gfM+BRcQtT2FQZdiOBl20rGolf5rArMo
-----END CERTIFICATE-----
Generated at Thu May 7 21:35:58 2026 by rpki-client