Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3654E24/A318A10892FB11ECA71411895A40D577/2pwGSilziJ8Q063Z_fEqiDYTZL8.mft
File:                     2pwGSilziJ8Q063Z_fEqiDYTZL8.mft (raw, json)
Hash identifier:          isDl2KbCGmlVrTRgPRF9mxAhV3rX8KElJ6f8XDas21s=
Subject key identifier:   74:51:9D:CE:5F:FB:EA:CE:37:EF:94:E1:03:29:EA:31:FD:EF:C4:23
Authority key identifier: DA:9C:06:4A:29:73:88:9F:10:D3:AD:D9:FD:F1:2A:88:36:13:64:BF
Certificate issuer:       /CN=F3654E24AF/serialNumber=DA9C064A2973889F10D3ADD9FDF12A88361364BF
Certificate serial:       062A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/2pwGSilziJ8Q063Z_fEqiDYTZL8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3654E24/A318A10892FB11ECA71411895A40D577/2pwGSilziJ8Q063Z_fEqiDYTZL8.mft
Manifest number:          0629
Signing time:             Thu 07 May 2026 02:37:18 +0000
Manifest this update:     Thu 07 May 2026 02:37:17 +0000
Manifest next update:     Sat 09 May 2026 02:37:17 +0000
Files and hashes:         1: 2pwGSilziJ8Q063Z_fEqiDYTZL8.crl (hash: cILdbGh4kte6PtChe/01boan/wISnk2EUoB7d/ciNQg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3654E24/A318A10892FB11ECA71411895A40D577/2pwGSilziJ8Q063Z_fEqiDYTZL8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3654E24/A318A10892FB11ECA71411895A40D577/2pwGSilziJ8Q063Z_fEqiDYTZL8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/2pwGSilziJ8Q063Z_fEqiDYTZL8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 09 May 2026 00:07:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1578 (0x62a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3654E24AF, serialNumber=DA9C064A2973889F10D3ADD9FDF12A88361364BF
        Validity
            Not Before: May  7 02:37:17 2026 GMT
            Not After : May  9 02:37:17 2026 GMT
        Subject: CN=69fbfade-48de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a9:ed:ca:5d:fd:4b:d6:26:49:bc:2e:0c:8a:
                    63:f0:58:51:7c:5d:68:fd:43:f5:18:55:4f:69:fb:
                    3c:ec:4a:1e:30:68:51:a2:fa:18:05:d9:1a:21:58:
                    71:05:3b:3d:dc:be:71:57:34:ee:53:af:90:05:5e:
                    f0:d6:3d:34:4d:32:cb:f5:1f:4f:8c:e7:88:97:f2:
                    70:e7:25:cc:51:fd:2b:36:a5:c8:3e:f0:9c:88:b9:
                    aa:c8:46:b1:be:0a:f3:94:59:38:7b:2f:ef:fc:3f:
                    b3:8b:66:d6:c5:a4:57:3e:71:5f:c4:7b:c8:11:e8:
                    14:25:5b:48:81:0f:07:45:1b:34:b2:51:b2:e3:e8:
                    2c:67:77:a3:67:3d:24:ff:f8:ec:56:f9:53:83:40:
                    8e:19:1c:d8:99:4b:26:f5:12:da:29:c9:f1:fa:53:
                    30:ad:5d:ab:8c:db:fd:3b:d5:7a:7f:12:1d:96:39:
                    1a:5c:e9:13:f8:2e:70:72:a9:bf:33:d8:41:88:e5:
                    bd:e7:88:16:79:61:d7:15:4a:ab:59:ff:c4:84:1f:
                    dd:a2:43:91:f6:cc:ad:80:2a:60:85:68:ba:d7:3e:
                    d9:aa:c0:e9:93:28:89:d9:03:b6:9a:4f:17:fc:81:
                    3e:66:35:f6:55:73:2e:cc:53:44:31:f7:e1:02:d7:
                    1a:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:51:9D:CE:5F:FB:EA:CE:37:EF:94:E1:03:29:EA:31:FD:EF:C4:23
            X509v3 Authority Key Identifier:
                keyid:DA:9C:06:4A:29:73:88:9F:10:D3:AD:D9:FD:F1:2A:88:36:13:64:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3654E24/A318A10892FB11ECA71411895A40D577/2pwGSilziJ8Q063Z_fEqiDYTZL8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2pwGSilziJ8Q063Z_fEqiDYTZL8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3654E24/A318A10892FB11ECA71411895A40D577/2pwGSilziJ8Q063Z_fEqiDYTZL8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:34:25:74:d7:c4:bb:4c:bf:ff:8c:ef:02:b6:a5:4b:41:a4:
         39:a5:ec:1a:7b:ae:01:75:43:1a:e0:59:90:e6:b5:e4:a1:4e:
         1f:6f:c1:9c:e6:f2:d9:f7:a4:30:28:bb:1c:c7:35:f6:ee:0c:
         cd:a0:dc:52:b9:99:ac:f6:83:7e:0c:77:4e:fc:85:dc:80:92:
         53:4f:16:89:72:91:55:c4:2b:56:5b:e6:58:e2:b6:1d:9c:1b:
         ca:53:03:ae:93:30:9d:ab:15:79:b5:43:97:7d:94:6d:d0:97:
         4a:08:ac:b3:79:0e:b5:31:8d:7b:36:db:9a:a9:8a:cb:f6:00:
         0e:4f:61:25:44:b9:85:d8:da:2e:9f:7e:d8:dd:a5:53:ad:1e:
         fd:de:e1:5d:b8:44:09:f2:a0:61:cf:f4:c4:03:37:df:7d:02:
         a4:92:32:6e:fa:64:27:40:a7:ee:6c:1d:9e:07:8b:27:15:b3:
         aa:06:c5:b0:20:f3:e1:ea:6b:33:39:bc:87:78:4d:bb:5b:63:
         76:71:55:47:48:a2:8a:42:b7:5b:86:98:79:8f:59:64:6f:d5:
         a0:f2:7f:d0:62:c1:9a:6d:f9:08:0b:c9:3f:b7:2c:93:78:4c:
         62:56:95:77:38:8c:37:25:8e:43:4e:dd:82:97:f4:d1:f8:5c:
         5f:e3:db:98
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBiowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NTRFMjRBRjExMC8GA1UEBRMoREE5QzA2NEEyOTczODg5RjEwRDNBREQ5RkRGMTJB
ODgzNjEzNjRCRjAeFw0yNjA1MDcwMjM3MTdaFw0yNjA1MDkwMjM3MTdaMBgxFjAU
BgNVBAMTDTY5ZmJmYWRlLTQ4ZGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCjqe3KXf1L1iZJvC4MimPwWFF8XWj9Q/UYVU9p+zzsSh4waFGi+hgF2Roh
WHEFOz3cvnFXNO5Tr5AFXvDWPTRNMsv1H0+M54iX8nDnJcxR/Ss2pcg+8JyIuarI
RrG+CvOUWTh7L+/8P7OLZtbFpFc+cV/Ee8gR6BQlW0iBDwdFGzSyUbLj6Cxnd6Nn
PST/+OxW+VODQI4ZHNiZSyb1EtopyfH6UzCtXauM2/071Xp/Eh2WORpc6RP4LnBy
qb8z2EGI5b3niBZ5YdcVSqtZ/8SEH92iQ5H2zK2AKmCFaLrXPtmqwOmTKInZA7aa
Txf8gT5mNfZVcy7MU0Qx9+EC1xpxAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUdFGd
zl/76s4375ThAynqMf3vxCMwHwYDVR0jBBgwFoAU2pwGSilziJ8Q063Z/fEqiDYT
ZL8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjU0RTI0L0EzMThBMTA4OTJGQjExRUNBNzE0MTE4OTVBNDBENTc3LzJwd0dT
aWx6aUo4UTA2M1pfZkVxaURZVFpMOC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzJwd0dTaWx6aUo4UTA2M1pfZkVxaURZVFpMOC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NTRFMjQvQTMxOEExMDg5MkZCMTFFQ0E3MTQxMTg5NUE0
MEQ1NzcvMnB3R1NpbHppSjhRMDYzWl9mRXFpRFlUWkw4Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCNNCV018S7TL//jO8CtqVLQaQ5pewa
e64BdUMa4FmQ5rXkoU4fb8Gc5vLZ96QwKLscxzX27gzNoNxSuZms9oN+DHdO/IXc
gJJTTxaJcpFVxCtWW+ZY4rYdnBvKUwOukzCdqxV5tUOXfZRt0JdKCKyzeQ61MY17
NtuaqYrL9gAOT2ElRLmF2Noun37Y3aVTrR793uFduEQJ8qBhz/TEAzfffQKkkjJu
+mQnQKfubB2eB4snFbOqBsWwIPPh6mszObyHeE27W2N2cVVHSKKKQrdbhph5j1lk
b9Wg8n/QYsGabfkIC8k/tyyTeExiVpV3OIw3JY5DTt2Cl/TR+Fxf49uY
-----END CERTIFICATE-----
Generated at Thu May 7 21:37:51 2026 by rpki-client