Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364DD25/F30273FA529D11F095582EAADAE4EC9C/BNbKwjsUW2btaL7Wfywdh2Zc9bI.mft
File:                     BNbKwjsUW2btaL7Wfywdh2Zc9bI.mft (raw, json)
Hash identifier:          lIg0O+5JGfXuo8uFUouQWMDOHC67GfkDbXQRHEnNdjU=
Subject key identifier:   3F:BD:53:C6:04:8D:FC:37:CD:4E:88:B7:BB:8C:1C:BD:E5:B4:3E:0A
Authority key identifier: 04:D6:CA:C2:3B:14:5B:66:ED:68:BE:D6:7F:2C:1D:87:66:5C:F5:B2
Certificate issuer:       /CN=F364DD25AF/serialNumber=04D6CAC23B145B66ED68BED67F2C1D87665CF5B2
Certificate serial:       0144
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/BNbKwjsUW2btaL7Wfywdh2Zc9bI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364DD25/F30273FA529D11F095582EAADAE4EC9C/BNbKwjsUW2btaL7Wfywdh2Zc9bI.mft
Manifest number:          0142
Signing time:             Thu 07 May 2026 04:56:36 +0000
Manifest this update:     Thu 07 May 2026 04:56:36 +0000
Manifest next update:     Sat 09 May 2026 04:56:36 +0000
Files and hashes:         1: BNbKwjsUW2btaL7Wfywdh2Zc9bI.crl (hash: dH4SqPzepDJxPnvcNJdd72RkXoq/rt3FI2Bc8SXPGjE=)
                          2: D0193846529E11F0BBC03EB2DAE4EC9C.roa (hash: RPEdKIAKBSzqVLXcECrRATliI7vLtXP88nKKeklWY7A=)
                          3: 09F47684529F11F0AC9FA6B2DAE4EC9C.roa (hash: MdGJ3CUnVttvPq+a7aB4/HqidShiV81Q3YLvvUB2hgE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364DD25/F30273FA529D11F095582EAADAE4EC9C/BNbKwjsUW2btaL7Wfywdh2Zc9bI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364DD25/F30273FA529D11F095582EAADAE4EC9C/BNbKwjsUW2btaL7Wfywdh2Zc9bI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/BNbKwjsUW2btaL7Wfywdh2Zc9bI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 09 May 2026 00:07:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 324 (0x144)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364DD25AF, serialNumber=04D6CAC23B145B66ED68BED67F2C1D87665CF5B2
        Validity
            Not Before: May  7 04:56:36 2026 GMT
            Not After : May  9 04:56:36 2026 GMT
        Subject: CN=69fc1b84-599d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:4b:c9:86:03:1f:d3:42:a2:a1:d7:cf:ac:9e:
                    eb:13:cc:59:0e:8a:dd:f6:92:cd:d5:86:31:4e:dd:
                    be:46:8d:08:8f:ce:9b:25:87:b2:6b:0e:49:5d:9c:
                    ea:83:db:d0:26:c7:6c:77:f6:6c:2a:f8:18:d8:b9:
                    29:44:46:a7:37:8e:37:28:d5:0b:77:ea:15:03:41:
                    d4:8d:70:77:58:84:5f:f5:05:47:ea:62:35:3f:dc:
                    35:9a:b3:1d:54:9d:aa:4d:c7:9c:f2:8b:31:b7:f9:
                    36:cf:a9:99:7a:6f:74:69:17:82:66:a9:71:5b:89:
                    8d:74:6b:47:40:ca:de:97:85:b9:d5:f6:05:cd:e5:
                    19:59:0c:a1:c1:67:c9:69:ac:af:fe:48:78:75:00:
                    46:ad:e8:20:f9:de:7c:ef:4a:cb:e4:92:fe:a7:6f:
                    f3:35:b3:12:42:23:54:9a:05:fa:c2:a5:23:da:ed:
                    6a:e1:df:0b:5c:59:d0:cd:13:39:cf:1e:62:06:87:
                    75:24:f6:f9:bd:b7:23:e9:a5:25:70:56:8b:7a:f7:
                    54:2c:82:2a:43:1c:d2:ee:21:39:7f:69:5b:fa:c2:
                    46:f1:98:ef:ea:b9:25:ad:b5:7c:8b:bd:69:02:d8:
                    16:0d:b0:65:c2:2a:16:e7:62:df:84:88:d7:a7:9b:
                    ad:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:BD:53:C6:04:8D:FC:37:CD:4E:88:B7:BB:8C:1C:BD:E5:B4:3E:0A
            X509v3 Authority Key Identifier:
                keyid:04:D6:CA:C2:3B:14:5B:66:ED:68:BE:D6:7F:2C:1D:87:66:5C:F5:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364DD25/F30273FA529D11F095582EAADAE4EC9C/BNbKwjsUW2btaL7Wfywdh2Zc9bI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/BNbKwjsUW2btaL7Wfywdh2Zc9bI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364DD25/F30273FA529D11F095582EAADAE4EC9C/BNbKwjsUW2btaL7Wfywdh2Zc9bI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:de:8c:e4:6b:fe:f6:e4:3a:bd:e7:fe:06:4d:92:2e:2d:5e:
         ee:ce:4b:57:7e:4e:d5:af:1f:e6:5c:6a:d1:ee:ad:de:83:52:
         d2:44:96:25:d8:5a:ac:bf:d1:9f:4e:6c:7f:fc:1f:24:74:d6:
         76:e2:d0:0b:37:1b:41:2a:cf:61:9e:71:ba:67:8a:02:4c:ee:
         39:10:75:6c:3e:ba:35:6e:26:77:61:7c:bc:c2:a3:01:7a:9d:
         6d:6e:f2:d0:83:64:72:00:2b:71:77:a9:30:97:72:30:aa:1d:
         3c:91:05:90:88:c2:87:6a:8e:59:9b:bd:47:20:44:27:da:bd:
         d2:f6:0d:f3:9b:cb:d3:51:81:02:cf:02:ab:20:eb:98:e1:0d:
         df:7a:1c:7f:5a:b6:ec:5d:e6:d8:9a:ad:88:38:49:83:93:7e:
         66:59:3e:a1:3e:4d:16:8c:1e:3a:d9:b1:fe:bd:80:82:8f:a8:
         6f:40:4d:e0:8d:ee:81:53:75:68:7f:79:50:f3:e0:b9:67:c8:
         ed:f7:53:60:0b:eb:38:5a:fd:6f:ab:65:72:47:62:f8:b0:c4:
         94:93:9f:26:64:0c:47:dd:4a:08:be:eb:b7:c7:68:22:e1:39:
         50:65:18:9b:b5:f3:25:59:40:a4:e5:81:23:2a:16:f0:3d:2a:
         86:92:5c:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 21:36:22 2026 by rpki-client