Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3664815/F675B6D0F1D711F0B0265CB1DAE4EC9C/NoqlwYM32LEA43kHcgA1BOIR25U.mft
File:                     NoqlwYM32LEA43kHcgA1BOIR25U.mft (raw, json)
Hash identifier:          HMrq3ERHEMgBGta/FOUcgV2e4WQcPkXHcuksjWsvd5o=
Subject key identifier:   4B:D0:8F:2C:56:70:E8:93:6B:E3:1A:F4:B3:D4:50:C8:B9:3D:F9:F4
Authority key identifier: 36:8A:A5:C1:83:37:D8:B1:00:E3:79:07:72:00:35:04:E2:11:DB:95
Certificate issuer:       /CN=F3664815AF/serialNumber=368AA5C18337D8B100E3790772003504E211DB95
Certificate serial:       73
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/NoqlwYM32LEA43kHcgA1BOIR25U.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3664815/F675B6D0F1D711F0B0265CB1DAE4EC9C/NoqlwYM32LEA43kHcgA1BOIR25U.mft
Manifest number:          72
Signing time:             Thu 07 May 2026 05:22:57 +0000
Manifest this update:     Thu 07 May 2026 05:22:56 +0000
Manifest next update:     Sat 09 May 2026 05:22:56 +0000
Files and hashes:         1: NoqlwYM32LEA43kHcgA1BOIR25U.crl (hash: xXfMO/TQwZ5iUIHDZIn7RsbrLnK3HqrPEIWWtbLxhjA=)
                          2: 728FCC2EF1D811F0A90A06B4DAE4EC9C.roa (hash: 6RL/4V6ZWEbg7BN3QUTvLxt/VnmJ1eoKO54see9w44I=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3664815/F675B6D0F1D711F0B0265CB1DAE4EC9C/NoqlwYM32LEA43kHcgA1BOIR25U.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3664815/F675B6D0F1D711F0B0265CB1DAE4EC9C/NoqlwYM32LEA43kHcgA1BOIR25U.mft
                          rsync://rpki.afrinic.net/repository/afrinic/NoqlwYM32LEA43kHcgA1BOIR25U.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 09 May 2026 00:07:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 115 (0x73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3664815AF, serialNumber=368AA5C18337D8B100E3790772003504E211DB95
        Validity
            Not Before: May  7 05:22:56 2026 GMT
            Not After : May  9 05:22:56 2026 GMT
        Subject: CN=69fc21b1-8a98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:25:15:f5:38:ab:97:bf:29:11:f5:6e:f7:d6:
                    4f:8f:d3:db:1c:4c:9b:ca:a3:3c:07:d7:18:46:dd:
                    28:6e:56:22:79:3e:71:03:24:36:77:21:72:42:d0:
                    49:3d:03:c7:d5:c0:0e:53:38:26:8f:c1:60:d0:5c:
                    7e:4d:d4:fc:0d:3a:6b:36:ca:96:8e:0a:32:bd:eb:
                    95:66:3d:b2:f7:34:f7:4b:ad:7b:a9:68:03:fe:4a:
                    ef:28:bf:5f:38:54:5c:ce:7f:ec:b4:43:98:6e:b2:
                    83:af:ca:1a:82:af:df:e2:73:fc:81:8e:2c:f2:49:
                    48:c8:50:e7:d3:3c:81:4f:80:8a:c1:00:7e:5e:4f:
                    19:43:1f:7d:d1:17:d2:e5:51:f8:b7:2d:92:90:98:
                    d4:ef:1e:4c:9b:31:e4:c2:33:3a:0e:c7:0c:ed:9f:
                    93:6b:5b:0c:6b:15:3a:2d:ee:e4:63:ac:fb:d6:d0:
                    bb:e7:8c:c9:ee:b4:b3:69:fe:51:cf:66:56:26:32:
                    d2:a2:23:21:a0:93:b2:05:88:16:7c:9e:d8:b6:b6:
                    6c:a5:c8:c3:be:45:33:c6:aa:d3:51:ad:4c:8a:82:
                    f4:d8:cb:cc:2c:d9:81:67:34:5b:70:4a:6f:e3:8d:
                    61:21:fa:f5:ea:58:4a:bc:da:48:43:2f:d7:19:cf:
                    4d:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:D0:8F:2C:56:70:E8:93:6B:E3:1A:F4:B3:D4:50:C8:B9:3D:F9:F4
            X509v3 Authority Key Identifier:
                keyid:36:8A:A5:C1:83:37:D8:B1:00:E3:79:07:72:00:35:04:E2:11:DB:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3664815/F675B6D0F1D711F0B0265CB1DAE4EC9C/NoqlwYM32LEA43kHcgA1BOIR25U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/NoqlwYM32LEA43kHcgA1BOIR25U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3664815/F675B6D0F1D711F0B0265CB1DAE4EC9C/NoqlwYM32LEA43kHcgA1BOIR25U.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:24:95:87:b2:63:6d:22:c1:4f:92:64:7b:2f:de:a0:5a:ff:
         b3:87:2a:f3:91:0c:29:dc:2a:e5:01:5e:1b:b7:27:d4:1b:35:
         1c:19:08:b2:0c:c8:fa:12:a5:ad:7d:1d:e7:fc:ad:d1:4e:05:
         a1:a9:5f:79:dc:90:00:6c:fc:76:3c:4a:fe:0f:db:1b:be:21:
         05:81:ed:f2:8b:c5:d9:76:ce:69:d8:ab:ea:65:b9:45:1d:50:
         78:06:f3:eb:0b:26:45:5c:2c:8d:71:89:ba:79:9c:03:5c:4c:
         13:eb:23:8b:40:05:47:85:08:c5:ef:db:3f:e9:cd:66:59:bd:
         f4:c7:31:60:a3:52:10:da:b8:83:23:75:6b:30:9b:f9:01:e0:
         82:b7:a1:84:34:f1:74:25:32:8d:a3:5d:03:35:83:ff:0e:ae:
         7c:b4:96:c8:bf:c2:1f:91:78:58:4d:40:c3:25:d3:74:72:f9:
         95:bf:18:a0:11:0c:00:5f:c4:9b:e3:c8:03:e5:91:90:82:8f:
         42:60:86:96:31:08:62:3e:c8:d9:87:d6:de:4c:14:b8:86:3a:
         74:d8:ca:4a:e5:22:ab:c9:7b:66:cd:32:52:65:f5:12:65:1f:
         c2:c6:15:b3:97:e1:ab:3b:69:b2:1b:c2:24:04:ea:65:7a:77:
         fd:39:91:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 21:36:33 2026 by rpki-client