Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3650F65/F43C863A498311EFA2F45FB4762E951A/wMDnGZy4QKJJjB47pWdvngwGKGg.mft
File:                     wMDnGZy4QKJJjB47pWdvngwGKGg.mft (raw, json)
Hash identifier:          L8DRR7KG5NIdHDXUfBKMAPK4H1Kh526M84TMfRiWdGk=
Subject key identifier:   9A:03:6F:6F:89:7F:B8:AC:FA:66:54:D1:05:C4:54:92:64:E3:32:B0
Authority key identifier: C0:C0:E7:19:9C:B8:40:A2:49:8C:1E:3B:A5:67:6F:9E:0C:06:28:68
Certificate issuer:       /CN=F3650F65AF/serialNumber=C0C0E7199CB840A2498C1E3BA5676F9E0C062868
Certificate serial:       02A2
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/wMDnGZy4QKJJjB47pWdvngwGKGg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3650F65/F43C863A498311EFA2F45FB4762E951A/wMDnGZy4QKJJjB47pWdvngwGKGg.mft
Manifest number:          029D
Signing time:             Mon 27 Apr 2026 04:21:33 +0000
Manifest this update:     Mon 27 Apr 2026 04:21:32 +0000
Manifest next update:     Wed 29 Apr 2026 04:21:32 +0000
Files and hashes:         1: wMDnGZy4QKJJjB47pWdvngwGKGg.crl (hash: HDYFYVwZmhg91QxbR1Hu+QFIxq7FN6jTa+CaY+Pvtxw=)
                          2: 9005CECEAE5411F0853AF8CFDAE4EC9C.roa (hash: YWZz4QWlH0Bj3OOamSSjFcO7qun04dQhqkzbk6gKKqQ=)
                          3: D2876104AE5411F0AC152FD4DAE4EC9C.roa (hash: kpP94D+u8/tcFFiU+q6BH1AoYrF/Io2l+lqQI9CxNX4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3650F65/F43C863A498311EFA2F45FB4762E951A/wMDnGZy4QKJJjB47pWdvngwGKGg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3650F65/F43C863A498311EFA2F45FB4762E951A/wMDnGZy4QKJJjB47pWdvngwGKGg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/wMDnGZy4QKJJjB47pWdvngwGKGg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 29 Apr 2026 00:07:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 674 (0x2a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3650F65AF, serialNumber=C0C0E7199CB840A2498C1E3BA5676F9E0C062868
        Validity
            Not Before: Apr 27 04:21:32 2026 GMT
            Not After : Apr 29 04:21:32 2026 GMT
        Subject: CN=69eee44d-4057
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ac:a4:f2:7a:f7:d1:40:5d:db:72:b1:c4:ad:
                    c9:ce:4e:4d:40:77:e0:92:35:e0:ed:2a:d5:69:f0:
                    b1:b9:d2:fb:5d:b4:98:72:c5:f5:c0:31:99:98:b5:
                    40:3e:d1:48:02:40:dd:1e:5d:49:78:b2:ac:df:7c:
                    a4:ec:fc:a7:49:5e:94:c3:c9:dc:69:16:5c:20:de:
                    01:d6:d1:94:7d:5e:ee:1f:a3:50:28:06:7d:f8:28:
                    b2:f4:6e:8b:10:2e:f0:3d:63:a5:3a:66:5b:16:00:
                    59:cb:5c:58:42:d1:c0:2b:de:5f:27:24:f4:c1:ca:
                    db:86:0a:47:52:e4:45:eb:85:96:6a:cd:cf:ad:11:
                    1c:a0:95:39:ed:fc:a1:ac:a0:9e:fb:73:d1:e9:3c:
                    56:8a:9a:23:18:74:9d:c0:c0:5a:83:01:f5:42:75:
                    b9:24:d7:90:e2:8d:ec:81:29:9d:e9:08:d8:34:30:
                    c0:b8:63:71:8e:84:ea:03:c6:5a:2e:3c:47:60:b7:
                    a6:e4:2c:c3:52:36:8e:a0:77:8d:48:af:5b:1c:b3:
                    09:85:d7:53:31:28:75:52:4c:44:e1:f1:51:f8:2c:
                    b7:7d:5a:c3:8a:4e:8b:01:56:a6:c1:5f:00:06:9b:
                    26:76:2f:8f:c4:f5:e2:6c:df:fc:b1:12:e3:51:51:
                    c0:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:03:6F:6F:89:7F:B8:AC:FA:66:54:D1:05:C4:54:92:64:E3:32:B0
            X509v3 Authority Key Identifier:
                keyid:C0:C0:E7:19:9C:B8:40:A2:49:8C:1E:3B:A5:67:6F:9E:0C:06:28:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3650F65/F43C863A498311EFA2F45FB4762E951A/wMDnGZy4QKJJjB47pWdvngwGKGg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wMDnGZy4QKJJjB47pWdvngwGKGg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3650F65/F43C863A498311EFA2F45FB4762E951A/wMDnGZy4QKJJjB47pWdvngwGKGg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:12:5e:91:b5:9c:9f:d2:b2:2a:9c:df:02:70:68:7d:35:b4:
         8b:95:f0:6c:98:f7:1b:09:63:b9:43:e6:bc:6d:4e:47:6e:fa:
         60:68:6e:ee:7e:6e:1a:39:66:42:58:33:ba:60:2d:95:98:89:
         7a:6d:6f:b0:3b:24:df:b1:23:6a:b1:b9:92:51:d7:71:fb:9e:
         ba:5b:50:3e:ee:c6:c7:25:c8:d0:bf:d0:5d:22:e1:3e:ff:80:
         46:5f:9f:ca:b4:58:34:68:70:dc:97:a7:2e:95:44:56:0c:27:
         3f:03:f7:99:66:0f:ba:e1:69:41:5d:c4:c6:03:f2:58:7a:9a:
         d9:e3:4b:ab:5c:f8:f6:2c:8f:3f:c8:84:6e:c7:ea:89:64:b1:
         b1:8a:e2:1b:04:5e:24:5e:f9:91:0b:61:cd:de:2a:3c:d0:d9:
         12:03:94:a1:0a:c7:ce:0a:3a:3e:e1:5d:d1:2e:24:41:5e:1c:
         34:f7:9b:18:5e:db:1b:c6:ab:c8:f1:b3:38:b2:dd:5c:45:84:
         08:be:a0:41:ff:a6:fc:9d:69:54:3b:9f:b2:07:b9:9d:b1:c6:
         4e:d1:f1:e3:5a:7f:3e:07:dc:b9:84:1a:a6:d4:23:88:b1:53:
         76:53:e7:1a:c3:36:e8:22:63:29:83:9e:54:2b:5d:c9:58:d0:
         cb:47:43:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 17:09:21 2026 by rpki-client