Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364789C/72EFAF4C910111EABD3F2473F8AEA228/0ffADvPrBuiBfP3B25YGBAfknA0.mft
File:                     0ffADvPrBuiBfP3B25YGBAfknA0.mft (raw, json)
Hash identifier:          VaozGey33XqsWQFrQlylIVrUflIHVw5EGtUim5FU89E=
Subject key identifier:   6D:26:86:8F:E8:B6:A9:A4:09:A7:44:E6:21:70:89:05:49:09:7B:BA
Authority key identifier: D1:F7:C0:0E:F3:EB:06:E8:81:7C:FD:C1:DB:96:06:04:07:E4:9C:0D
Certificate issuer:       /CN=F364789CAF/serialNumber=D1F7C00EF3EB06E8817CFDC1DB96060407E49C0D
Certificate serial:       08F0
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/0ffADvPrBuiBfP3B25YGBAfknA0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364789C/72EFAF4C910111EABD3F2473F8AEA228/0ffADvPrBuiBfP3B25YGBAfknA0.mft
Manifest number:          08DE
Signing time:             Thu 07 May 2026 01:48:21 +0000
Manifest this update:     Thu 07 May 2026 01:48:20 +0000
Manifest next update:     Sat 09 May 2026 01:48:20 +0000
Files and hashes:         1: 0ffADvPrBuiBfP3B25YGBAfknA0.crl (hash: UGZC3lyijxwAm7C2Rt4Pp6i/9WeC3W2NcqqDJiG4Ohk=)
                          2: 54D73B32D5AA11EE804D6FA3775412E6.roa (hash: oub8O6ESl+q+fLwREHJore+8A+bbiWh69N6JO+Ek91U=)
                          3: AE414C1EFDCA11EFB623BE90762E951A.roa (hash: Y5HeKaAGek99xysljagPwhZ+CgojdV1z+NsdhuzC9jQ=)
                          4: B77376ACD5AA11EEB33131A4775412E6.roa (hash: zxfvPEymIGP+/7cg1EGEyQR/t5Gie6/ZfCLSy+jKY0I=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364789C/72EFAF4C910111EABD3F2473F8AEA228/0ffADvPrBuiBfP3B25YGBAfknA0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364789C/72EFAF4C910111EABD3F2473F8AEA228/0ffADvPrBuiBfP3B25YGBAfknA0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/0ffADvPrBuiBfP3B25YGBAfknA0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 09 May 2026 00:07:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2288 (0x8f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364789CAF, serialNumber=D1F7C00EF3EB06E8817CFDC1DB96060407E49C0D
        Validity
            Not Before: May  7 01:48:20 2026 GMT
            Not After : May  9 01:48:20 2026 GMT
        Subject: CN=69fbef65-ae01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:35:3e:6d:40:aa:3c:1d:7f:87:d8:80:82:17:
                    94:a5:45:a1:ba:c2:e8:14:b8:8b:bc:da:c5:02:42:
                    19:c4:46:39:d3:59:1d:85:1c:b3:7e:81:93:eb:1e:
                    4b:01:d7:00:60:83:65:79:db:40:32:e5:64:66:1e:
                    d6:a6:36:e3:c1:b0:26:01:8c:38:76:c8:41:15:78:
                    56:35:e2:90:ee:59:49:09:c0:55:58:ff:e7:9a:46:
                    0f:05:d2:22:31:ac:b3:e1:89:45:65:7e:db:c1:12:
                    63:bc:36:89:60:98:bc:50:4c:65:a2:e9:b2:9e:99:
                    69:f0:88:69:46:6e:62:69:73:37:db:0d:7b:ff:29:
                    4a:d0:76:70:e4:da:18:ef:f2:af:d9:1e:7a:ad:90:
                    e4:ea:97:4b:50:5f:31:21:58:a9:9a:c8:50:6e:18:
                    ec:1e:df:0d:13:c9:73:28:9a:49:07:3f:df:47:d1:
                    7f:e1:f2:92:ae:93:46:d1:85:c8:89:6b:73:7d:a6:
                    e1:8d:2b:2a:09:0c:89:f8:c7:fc:0a:89:b6:72:4e:
                    7c:0b:17:2a:1d:91:c2:8c:ff:19:ee:59:75:02:7c:
                    37:5e:8e:63:32:52:a4:13:9b:27:5d:58:02:14:59:
                    90:ca:7e:d5:f7:14:d8:52:3e:ea:ee:0e:c7:40:4f:
                    a2:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:26:86:8F:E8:B6:A9:A4:09:A7:44:E6:21:70:89:05:49:09:7B:BA
            X509v3 Authority Key Identifier:
                keyid:D1:F7:C0:0E:F3:EB:06:E8:81:7C:FD:C1:DB:96:06:04:07:E4:9C:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364789C/72EFAF4C910111EABD3F2473F8AEA228/0ffADvPrBuiBfP3B25YGBAfknA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0ffADvPrBuiBfP3B25YGBAfknA0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364789C/72EFAF4C910111EABD3F2473F8AEA228/0ffADvPrBuiBfP3B25YGBAfknA0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:a3:5b:fc:b1:f4:78:1e:99:6a:9b:f5:6e:59:17:54:0f:b9:
         10:6a:60:93:f5:3f:ce:88:b8:ce:3e:aa:f5:e1:f2:4a:17:62:
         ff:4f:d8:70:13:b5:3d:9f:63:74:86:74:cd:90:7f:17:f5:33:
         59:18:3a:6f:18:88:b0:2a:37:cb:37:a1:08:9a:58:b5:6a:0e:
         2f:ec:2d:59:df:39:c7:70:70:72:15:09:6a:52:76:31:96:31:
         a2:cd:ae:ec:83:72:ef:66:30:77:72:da:a6:c0:d0:07:7e:28:
         c4:9f:4a:7a:70:c6:3a:18:53:db:d9:42:2b:aa:e7:ca:06:81:
         d6:a8:5e:1c:20:31:fe:23:86:6b:be:3d:8c:76:09:b7:3d:32:
         a7:23:65:4b:e7:69:95:ae:ec:f3:e3:c1:53:4c:c3:a2:9e:70:
         94:1a:a2:04:4e:4e:3c:be:98:55:18:ec:0d:05:64:6d:19:50:
         03:c8:41:c8:af:bb:6b:e3:a6:b5:e8:cb:43:c6:97:4d:1e:40:
         ef:bb:f9:50:48:fd:5a:59:e7:65:63:83:99:4a:c0:1e:1e:17:
         95:7c:b2:78:86:e6:81:64:fe:5d:c3:08:cb:7f:8e:8e:65:3c:
         4b:2e:b9:36:57:02:14:e4:73:93:56:c0:da:ea:3f:c5:4f:3c:
         cb:98:f4:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 21:34:07 2026 by rpki-client