Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3656B95/62412AC0CA2611ED92E9C98FF1222468/rhKLIvUdxljVXiFW669z1satdio.mft
File:                     rhKLIvUdxljVXiFW669z1satdio.mft (raw, json)
Hash identifier:          SrDl2FlLxELhllJwadEJ1nK1/CeM5d4ZXbVJpf67wpo=
Subject key identifier:   0C:50:67:63:65:E6:90:A9:71:D6:D9:83:2F:4C:94:50:5B:97:20:7D
Authority key identifier: AE:12:8B:22:F5:1D:C6:58:D5:5E:21:56:EB:AF:73:D6:C6:AD:76:2A
Certificate issuer:       /CN=F3656B95AF/serialNumber=AE128B22F51DC658D55E2156EBAF73D6C6AD762A
Certificate serial:       0495
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rhKLIvUdxljVXiFW669z1satdio.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3656B95/62412AC0CA2611ED92E9C98FF1222468/rhKLIvUdxljVXiFW669z1satdio.mft
Manifest number:          0495
Signing time:             Thu 07 May 2026 03:19:50 +0000
Manifest this update:     Thu 07 May 2026 03:19:49 +0000
Manifest next update:     Sat 09 May 2026 03:19:49 +0000
Files and hashes:         1: rhKLIvUdxljVXiFW669z1satdio.crl (hash: i/AaD8lV6grNfLxNVOjSIOOZrNK3K3JmW/zB5dMAYbw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3656B95/62412AC0CA2611ED92E9C98FF1222468/rhKLIvUdxljVXiFW669z1satdio.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3656B95/62412AC0CA2611ED92E9C98FF1222468/rhKLIvUdxljVXiFW669z1satdio.mft
                          rsync://rpki.afrinic.net/repository/afrinic/rhKLIvUdxljVXiFW669z1satdio.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 09 May 2026 00:07:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1173 (0x495)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3656B95AF, serialNumber=AE128B22F51DC658D55E2156EBAF73D6C6AD762A
        Validity
            Not Before: May  7 03:19:49 2026 GMT
            Not After : May  9 03:19:49 2026 GMT
        Subject: CN=69fc04d6-c8b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:39:24:98:60:6a:2e:73:2f:de:9b:49:32:e0:
                    42:fd:f8:69:c7:98:f4:be:ae:7c:1b:7e:a8:c1:a5:
                    39:be:23:0b:84:b2:15:dd:15:19:5a:50:9d:17:9d:
                    c5:e8:b5:e5:2a:40:e7:a6:83:24:72:1f:e0:6c:7d:
                    a9:ac:b1:52:95:f2:41:37:b1:0e:be:9c:4b:0c:b2:
                    6b:6a:59:b0:e6:14:82:c9:d1:78:a6:ba:f8:54:02:
                    3e:cd:e3:ba:94:ae:03:af:ec:20:6e:17:4c:6a:a1:
                    dc:34:05:64:32:27:3a:ca:54:d9:84:a7:c5:d2:61:
                    11:96:2a:89:5a:e9:5e:71:6c:74:40:fb:d2:5e:7c:
                    7f:05:86:e1:01:50:6b:1c:45:69:36:cc:61:7a:fe:
                    3e:f4:f6:39:9f:73:23:1c:f2:ae:d1:7d:92:71:5d:
                    21:a8:af:eb:2d:1b:8a:b4:37:f0:40:12:d2:5d:7d:
                    a2:a9:69:ba:43:5a:e9:cc:ae:c9:de:0a:c1:99:2e:
                    0a:58:af:b0:84:59:76:75:f9:63:79:c8:da:f4:2f:
                    df:da:2a:ff:39:cd:12:13:9c:c6:0f:93:89:a1:87:
                    4d:08:f9:ee:f8:a4:f0:0f:35:7e:1d:16:99:8b:54:
                    04:8f:e3:af:b6:5f:28:85:5b:ea:8a:de:c3:84:f9:
                    a3:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:50:67:63:65:E6:90:A9:71:D6:D9:83:2F:4C:94:50:5B:97:20:7D
            X509v3 Authority Key Identifier:
                keyid:AE:12:8B:22:F5:1D:C6:58:D5:5E:21:56:EB:AF:73:D6:C6:AD:76:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3656B95/62412AC0CA2611ED92E9C98FF1222468/rhKLIvUdxljVXiFW669z1satdio.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rhKLIvUdxljVXiFW669z1satdio.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3656B95/62412AC0CA2611ED92E9C98FF1222468/rhKLIvUdxljVXiFW669z1satdio.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:7d:79:dc:46:2f:a9:2a:79:80:de:a2:22:fe:47:ae:26:25:
         91:23:af:23:34:49:5a:e4:cd:48:ba:d2:75:2e:e0:33:d9:6d:
         78:a3:14:3b:91:e9:a2:81:86:e9:bf:e8:c6:b4:88:64:45:14:
         26:cd:ea:44:ab:39:3e:25:4c:4f:62:1b:89:34:ef:c2:bc:ca:
         ee:73:d0:23:0a:4e:6d:51:cb:8d:69:a7:27:bd:c2:50:14:d9:
         c4:60:4e:02:3b:3e:18:d0:81:d1:1b:10:0e:9a:9e:00:4b:2b:
         6b:83:0c:82:3a:d9:44:e5:26:14:09:b6:1c:3b:d4:84:2a:c8:
         a5:d7:eb:1f:a3:0f:af:37:b9:78:b8:5d:28:b8:e8:8e:4f:f2:
         c0:87:8d:53:b9:38:93:c1:c9:27:b0:f0:70:71:1f:df:3f:0c:
         8c:8f:b7:25:60:b3:a1:cf:49:f6:9c:04:e4:bd:9b:41:79:50:
         e5:20:28:58:a9:3a:cb:b3:d4:78:3d:b3:b7:09:79:77:b8:77:
         8c:a0:0f:bc:80:dc:ea:4b:2d:fb:05:aa:2d:a3:27:b6:eb:e0:
         e1:9d:2b:69:bc:6c:8e:a7:a9:09:9e:c8:50:f2:b0:d1:1e:dd:
         09:dc:3c:f2:df:be:c3:b7:68:46:19:47:33:0f:31:d6:f7:7e:
         ed:56:bf:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 21:35:26 2026 by rpki-client