Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366A8BF/DCA1C652A38D11EF92613781762E951A/27tnLt0H4F5FzAKFWwHIE75xXoE.mft
File:                     27tnLt0H4F5FzAKFWwHIE75xXoE.mft (raw, json)
Hash identifier:          BH487etGIIVL5lNkKiPGxPIfvOPCFwQYE2DlYi0UJ7w=
Subject key identifier:   E1:39:12:6B:FD:B2:2C:F6:E2:83:C2:DB:3B:F9:0E:BD:A7:B1:0E:62
Authority key identifier: DB:BB:67:2E:DD:07:E0:5E:45:CC:02:85:5B:01:C8:13:BE:71:5E:81
Certificate issuer:       /CN=F366A8BFAF/serialNumber=DBBB672EDD07E05E45CC02855B01C813BE715E81
Certificate serial:       0228
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/27tnLt0H4F5FzAKFWwHIE75xXoE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366A8BF/DCA1C652A38D11EF92613781762E951A/27tnLt0H4F5FzAKFWwHIE75xXoE.mft
Manifest number:          0227
Signing time:             Thu 07 May 2026 04:37:54 +0000
Manifest this update:     Thu 07 May 2026 04:37:53 +0000
Manifest next update:     Sat 09 May 2026 04:37:53 +0000
Files and hashes:         1: 27tnLt0H4F5FzAKFWwHIE75xXoE.crl (hash: WO0hRGMJGN9GthhpWIP2TIyDWS0NEpEQfOJlMnFvRoM=)
                          2: 0C2C5B02A38F11EF9EE69A89762E951A.roa (hash: ECtKxH32G5BPQeuP9KuP/2ILf6so8Vog6XvAyzLxNpo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366A8BF/DCA1C652A38D11EF92613781762E951A/27tnLt0H4F5FzAKFWwHIE75xXoE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366A8BF/DCA1C652A38D11EF92613781762E951A/27tnLt0H4F5FzAKFWwHIE75xXoE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/27tnLt0H4F5FzAKFWwHIE75xXoE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 09 May 2026 00:07:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 552 (0x228)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366A8BFAF, serialNumber=DBBB672EDD07E05E45CC02855B01C813BE715E81
        Validity
            Not Before: May  7 04:37:53 2026 GMT
            Not After : May  9 04:37:53 2026 GMT
        Subject: CN=69fc1722-ac4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:dc:50:1b:61:51:21:6a:7a:33:f3:43:24:2a:
                    53:28:74:59:41:09:83:04:58:45:73:24:c4:7f:d4:
                    73:d5:f3:31:5c:e8:2a:bb:ae:dd:d5:a1:99:3d:dd:
                    59:6b:33:31:f4:8a:4f:6c:19:23:0c:6e:84:c9:a3:
                    9b:df:2e:9d:2b:51:7e:40:ad:e0:c8:6b:d8:54:6a:
                    8b:23:8a:bb:0b:a0:7c:95:2d:4f:12:d6:ff:53:b4:
                    c5:47:c0:b6:41:74:52:a2:a5:d0:be:f3:64:75:21:
                    c4:f4:14:84:a6:6a:0a:d8:f0:13:60:1d:c0:c7:88:
                    a4:80:2b:45:26:aa:94:25:f8:31:79:33:ba:1e:57:
                    f3:08:02:8c:6c:33:77:08:31:4f:76:bc:74:5d:df:
                    1c:61:cb:8e:6d:7e:76:c8:86:0d:f9:90:d5:34:e4:
                    c0:c9:03:1b:48:77:76:5e:ab:74:04:8c:a9:5c:48:
                    08:e4:1e:b3:81:4a:b5:ca:fe:10:bd:44:5a:13:71:
                    ab:7b:83:86:6e:b4:f3:5f:a3:0a:86:86:14:cb:57:
                    22:9e:01:d2:fc:77:4c:ab:aa:5e:10:f8:3c:77:6e:
                    bb:43:45:9c:9d:3c:e4:0b:9b:6c:98:63:27:ae:ba:
                    f4:75:98:1e:d9:4b:93:59:b4:6b:d1:6c:6b:8c:e9:
                    89:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:39:12:6B:FD:B2:2C:F6:E2:83:C2:DB:3B:F9:0E:BD:A7:B1:0E:62
            X509v3 Authority Key Identifier:
                keyid:DB:BB:67:2E:DD:07:E0:5E:45:CC:02:85:5B:01:C8:13:BE:71:5E:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366A8BF/DCA1C652A38D11EF92613781762E951A/27tnLt0H4F5FzAKFWwHIE75xXoE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/27tnLt0H4F5FzAKFWwHIE75xXoE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366A8BF/DCA1C652A38D11EF92613781762E951A/27tnLt0H4F5FzAKFWwHIE75xXoE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:58:14:81:00:4e:6b:76:00:09:68:88:6a:30:78:28:c6:e1:
         4f:ca:6b:6a:21:78:62:cb:e6:c6:f2:8e:07:d7:6c:45:39:8d:
         20:87:09:b8:90:65:81:c8:e5:31:7c:c3:14:1c:50:c7:1e:2f:
         5f:34:79:09:42:a5:4e:de:7f:aa:19:ef:96:85:40:e5:89:f8:
         90:e0:2c:34:21:28:12:c2:26:05:90:89:34:63:79:7d:5d:8c:
         8b:bc:d6:89:ea:dc:b6:c8:74:b5:53:3b:24:2a:58:09:e1:c8:
         d2:a6:c0:98:c4:7d:ba:46:7a:85:59:a5:a6:31:59:1b:c7:34:
         a2:2d:cd:0d:45:45:81:cf:5f:f9:11:2f:38:9e:60:12:08:ab:
         3c:d6:f9:52:aa:17:27:aa:34:99:28:ac:b3:32:db:dc:4e:cc:
         e9:f4:c7:6f:fd:24:4c:63:ca:d2:5a:69:3a:71:fe:c9:82:38:
         11:1f:07:cf:6b:e5:94:8c:51:b1:92:54:44:3b:fc:9c:f4:82:
         ff:ac:e7:d5:cc:cb:f8:99:36:86:3a:3d:99:c9:f8:a2:14:7c:
         47:48:79:d9:14:74:eb:c8:7a:ff:ba:aa:5f:fd:f9:0c:16:97:
         61:0a:10:6b:51:dd:d5:04:21:5c:89:61:30:37:39:16:c1:e1:
         40:b0:fe:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 21:39:22 2026 by rpki-client