Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3642A06/5A984604FC6011F0A9A7EDC7DAE4EC9C/U-hK8pdaGMGaOWVSP_CxvITmAj0.mft
File:                     U-hK8pdaGMGaOWVSP_CxvITmAj0.mft (raw, json)
Hash identifier:          EYhCoTvFhvYnk90nEp2VHvILjs1HcAx6Ro1HMyKUHVA=
Subject key identifier:   A7:84:CE:A1:85:E6:1C:B8:AB:C7:E1:7A:D2:46:04:35:2A:E1:3E:F1
Authority key identifier: 53:E8:4A:F2:97:5A:18:C1:9A:39:65:52:3F:F0:B1:BC:84:E6:02:3D
Certificate issuer:       /CN=F3642A06AF/serialNumber=53E84AF2975A18C19A3965523FF0B1BC84E6023D
Certificate serial:       67
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/U-hK8pdaGMGaOWVSP_CxvITmAj0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3642A06/5A984604FC6011F0A9A7EDC7DAE4EC9C/U-hK8pdaGMGaOWVSP_CxvITmAj0.mft
Manifest number:          66
Signing time:             Thu 07 May 2026 05:24:56 +0000
Manifest this update:     Thu 07 May 2026 05:24:56 +0000
Manifest next update:     Sat 09 May 2026 05:24:56 +0000
Files and hashes:         1: U-hK8pdaGMGaOWVSP_CxvITmAj0.crl (hash: XqNjevQoP/VCKrquzNWu60DBFeWMMkUBBDm8K1d01qE=)
                          2: 30AAB082FC6211F0840064D0DAE4EC9C.roa (hash: FTL97fxTl1eE12YVO6r15mzp9MJrM8fqutIMlkKBkag=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3642A06/5A984604FC6011F0A9A7EDC7DAE4EC9C/U-hK8pdaGMGaOWVSP_CxvITmAj0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3642A06/5A984604FC6011F0A9A7EDC7DAE4EC9C/U-hK8pdaGMGaOWVSP_CxvITmAj0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/U-hK8pdaGMGaOWVSP_CxvITmAj0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 09 May 2026 00:07:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103 (0x67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3642A06AF, serialNumber=53E84AF2975A18C19A3965523FF0B1BC84E6023D
        Validity
            Not Before: May  7 05:24:56 2026 GMT
            Not After : May  9 05:24:56 2026 GMT
        Subject: CN=69fc2228-861b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:eb:dd:dc:f2:c3:b8:8d:1c:7f:20:7b:bf:d1:
                    06:5f:56:68:77:d3:67:d1:5b:8e:4e:a4:43:83:1c:
                    d7:23:dc:9b:9e:2a:14:e0:a8:73:a7:39:0e:9c:16:
                    3c:62:2d:88:c6:9a:98:79:2c:fe:b6:e6:93:27:e5:
                    86:94:a8:70:5b:f5:08:b9:4a:c4:33:c2:01:88:3e:
                    33:fb:af:29:fd:40:de:00:5e:e9:80:be:db:77:ec:
                    ba:04:99:12:f3:85:df:64:8d:f9:38:72:3a:b4:8b:
                    a7:bc:99:df:03:18:e1:06:78:5e:b2:04:43:00:97:
                    1c:ac:cb:39:fd:91:e5:c4:a1:25:22:01:f6:b7:25:
                    99:f3:2f:5e:9c:2b:99:74:fe:b7:a0:dd:84:c8:9a:
                    4e:75:e4:88:2b:31:1a:00:59:d8:89:35:dc:41:46:
                    aa:fd:6a:bc:65:5c:07:d5:19:93:86:7d:b7:db:c5:
                    ec:76:0c:ce:48:f6:90:b0:72:5c:8f:8e:ed:2a:7a:
                    09:74:6f:69:7a:66:1c:a6:05:0d:c5:dc:f0:de:fd:
                    01:92:94:a8:7f:58:e1:d7:51:f5:ae:aa:23:9a:30:
                    ad:39:84:c4:b0:1f:5d:b9:53:a6:18:62:5e:3c:2f:
                    d1:dd:12:8f:28:00:96:27:4c:d9:c3:98:b8:20:32:
                    88:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:84:CE:A1:85:E6:1C:B8:AB:C7:E1:7A:D2:46:04:35:2A:E1:3E:F1
            X509v3 Authority Key Identifier:
                keyid:53:E8:4A:F2:97:5A:18:C1:9A:39:65:52:3F:F0:B1:BC:84:E6:02:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3642A06/5A984604FC6011F0A9A7EDC7DAE4EC9C/U-hK8pdaGMGaOWVSP_CxvITmAj0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/U-hK8pdaGMGaOWVSP_CxvITmAj0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3642A06/5A984604FC6011F0A9A7EDC7DAE4EC9C/U-hK8pdaGMGaOWVSP_CxvITmAj0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:c8:4a:fc:e5:35:5a:86:e0:8b:10:d5:ee:cc:4d:1c:bf:a9:
         0e:cb:ad:18:73:e7:22:53:e1:f8:c5:e3:d1:d1:c5:f7:a9:95:
         31:ae:94:ea:72:d8:76:14:a0:53:6c:75:5c:ae:2b:b7:ba:0d:
         8f:b2:91:a2:41:90:9c:6a:a6:44:cb:1d:89:e2:25:48:59:7e:
         c5:b7:67:d5:0c:07:c1:30:b7:e2:af:51:8e:be:2f:d7:22:42:
         72:f7:fc:28:76:f2:fc:61:1e:ca:76:9b:26:56:7d:a0:25:b9:
         9a:5e:7c:58:4d:83:41:39:01:ba:b3:78:7a:3d:1f:9f:79:16:
         00:62:27:e8:0e:aa:1c:7f:f4:03:e8:d5:22:21:4d:11:89:78:
         c6:65:1e:b1:9a:3f:9e:e9:11:bf:45:90:8e:cd:08:a3:22:2c:
         97:08:70:21:84:ab:d5:11:9d:64:2f:cc:ec:98:fc:8a:c0:74:
         8b:13:f3:a4:cf:1e:86:1e:df:69:1c:7f:aa:bd:78:e4:a6:87:
         a4:4f:dd:9a:4a:bb:27:95:67:73:70:8a:fb:41:cd:12:c5:9f:
         7c:60:d2:0a:36:1f:b9:c3:c5:e0:73:6b:a4:ca:1e:17:23:f1:
         23:9b:33:b7:3a:d4:5a:ff:a8:0d:07:31:81:e7:c9:f7:26:7d:
         53:77:17:27
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIBZzANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY0
MkEwNkFGMTEwLwYDVQQFEyg1M0U4NEFGMjk3NUExOEMxOUEzOTY1NTIzRkYwQjFC
Qzg0RTYwMjNEMB4XDTI2MDUwNzA1MjQ1NloXDTI2MDUwOTA1MjQ1NlowGDEWMBQG
A1UEAxMNNjlmYzIyMjgtODYxYjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMHr3dzyw7iNHH8ge7/RBl9WaHfTZ9Fbjk6kQ4Mc1yPcm54qFOCoc6c5DpwW
PGItiMaamHks/rbmkyflhpSocFv1CLlKxDPCAYg+M/uvKf1A3gBe6YC+23fsugSZ
EvOF32SN+ThyOrSLp7yZ3wMY4QZ4XrIEQwCXHKzLOf2R5cShJSIB9rclmfMvXpwr
mXT+t6DdhMiaTnXkiCsxGgBZ2Ik13EFGqv1qvGVcB9UZk4Z9t9vF7HYMzkj2kLBy
XI+O7Sp6CXRvaXpmHKYFDcXc8N79AZKUqH9Y4ddR9a6qI5owrTmExLAfXblTphhi
Xjwv0d0SjygAlidM2cOYuCAyiO0CAwEAAaOCArgwggK0MB0GA1UdDgQWBBSnhM6h
heYcuKvH4XrSRgQ1KuE+8TAfBgNVHSMEGDAWgBRT6Eryl1oYwZo5ZVI/8LG8hOYC
PTAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NDJBMDYvNUE5ODQ2MDRGQzYwMTFGMEE5QTdFREM3REFFNEVDOUMvVS1oSzhw
ZGFHTUdhT1dWU1BfQ3h2SVRtQWowLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvVS1oSzhwZGFHTUdhT1dWU1BfQ3h2SVRtQWowLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUF
BzALhn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY0MkEwNi81QTk4NDYwNEZDNjAxMUYwQTlBN0VEQzdEQUU0
RUM5Qy9VLWhLOHBkYUdNR2FPV1ZTUF9DeHZJVG1BajAubWZ0MDUGCCsGAQUFBzAN
hilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBAITISvzlNVqG4IsQ1e7MTRy/qQ7LrRhz
5yJT4fjF49HRxfeplTGulOpy2HYUoFNsdVyuK7e6DY+ykaJBkJxqpkTLHYniJUhZ
fsW3Z9UMB8Ewt+KvUY6+L9ciQnL3/Ch28vxhHsp2myZWfaAluZpefFhNg0E5Abqz
eHo9H595FgBiJ+gOqhx/9APo1SIhTRGJeMZlHrGaP57pEb9FkI7NCKMiLJcIcCGE
q9URnWQvzOyY/IrAdIsT86TPHoYe32kcf6q9eOSmh6RP3ZpKuyeVZ3NwivtBzRLF
n3xg0go2H7nDxeBza6TKHhcj8SObM7c61Fr/qA0HMYHnyfcmfVN3Fyc=
-----END CERTIFICATE-----
Generated at Thu May 7 21:34:07 2026 by rpki-client