Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3671BB4/02E646F8061D11EABC386256F8AEA228/9yrHa7B-RN3HrGDmYx8c0u3wNd0.mft
File:                     9yrHa7B-RN3HrGDmYx8c0u3wNd0.mft (raw, json)
Hash identifier:          9KH/mKSGFsL8syEayUEnZaCbJTKUenLRFqaXO0PZYS4=
Subject key identifier:   68:5A:2F:2F:F6:9C:92:A1:96:26:DA:1A:FB:37:41:98:88:21:12:48
Authority key identifier: F7:2A:C7:6B:B0:7E:44:DD:C7:AC:60:E6:63:1F:1C:D2:ED:F0:35:DD
Certificate issuer:       /CN=F3671BB4AF/serialNumber=F72AC76BB07E44DDC7AC60E6631F1CD2EDF035DD
Certificate serial:       0982
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/9yrHa7B-RN3HrGDmYx8c0u3wNd0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3671BB4/02E646F8061D11EABC386256F8AEA228/9yrHa7B-RN3HrGDmYx8c0u3wNd0.mft
Manifest number:          097D
Signing time:             Thu 07 May 2026 01:38:52 +0000
Manifest this update:     Thu 07 May 2026 01:38:52 +0000
Manifest next update:     Sat 09 May 2026 01:38:51 +0000
Files and hashes:         1: 9yrHa7B-RN3HrGDmYx8c0u3wNd0.crl (hash: zUZboDyCtblh2IJJMAyAq8BfoNPehLEX6aXfLbg5TY0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3671BB4/02E646F8061D11EABC386256F8AEA228/9yrHa7B-RN3HrGDmYx8c0u3wNd0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3671BB4/02E646F8061D11EABC386256F8AEA228/9yrHa7B-RN3HrGDmYx8c0u3wNd0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/9yrHa7B-RN3HrGDmYx8c0u3wNd0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 09 May 2026 00:07:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2434 (0x982)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3671BB4AF, serialNumber=F72AC76BB07E44DDC7AC60E6631F1CD2EDF035DD
        Validity
            Not Before: May  7 01:38:52 2026 GMT
            Not After : May  9 01:38:51 2026 GMT
        Subject: CN=69fbed2c-2175
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:aa:22:ad:bc:17:76:c3:45:d0:0b:d3:f3:ed:
                    c0:ee:5e:d0:96:31:1d:7e:a4:eb:74:18:e1:43:6f:
                    a4:49:17:6f:00:0e:e6:f8:5e:70:46:68:77:1c:2e:
                    f8:3a:0c:8f:4b:9b:92:37:98:a0:52:bc:4c:ca:35:
                    9f:9a:ac:8e:60:95:54:27:2c:fd:e1:c9:40:91:d7:
                    d6:a7:5c:a0:06:45:eb:4a:26:27:80:e9:1d:76:2e:
                    c2:33:12:43:d3:b5:12:2d:07:b9:80:10:9b:fd:ab:
                    f2:5f:77:8b:e7:c4:9a:d4:33:65:e1:c4:a3:0c:51:
                    ff:99:fa:70:16:df:9b:b8:f0:8d:cb:91:66:3a:e0:
                    aa:ea:a3:a2:44:5a:7e:ed:a9:a0:ed:5c:00:dd:7e:
                    9a:24:89:d2:69:03:0d:8a:7d:97:ea:7f:ac:ed:5d:
                    2c:a8:51:35:f7:1e:77:8d:4d:ad:83:41:e9:4e:e2:
                    b1:10:3b:4a:ee:79:c3:78:ba:5f:f5:3e:80:ee:b1:
                    ee:80:6b:b0:0a:48:e1:4e:48:5f:4f:8d:3b:88:ab:
                    3e:15:2f:cb:85:a3:77:6f:07:bf:45:e9:d3:37:3e:
                    08:c1:63:8e:27:70:09:05:35:c2:84:5f:0b:1c:f6:
                    68:2b:5d:4a:4d:4a:d2:bc:f8:d7:ef:a6:e5:41:46:
                    44:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:5A:2F:2F:F6:9C:92:A1:96:26:DA:1A:FB:37:41:98:88:21:12:48
            X509v3 Authority Key Identifier:
                keyid:F7:2A:C7:6B:B0:7E:44:DD:C7:AC:60:E6:63:1F:1C:D2:ED:F0:35:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3671BB4/02E646F8061D11EABC386256F8AEA228/9yrHa7B-RN3HrGDmYx8c0u3wNd0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9yrHa7B-RN3HrGDmYx8c0u3wNd0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3671BB4/02E646F8061D11EABC386256F8AEA228/9yrHa7B-RN3HrGDmYx8c0u3wNd0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:5c:a4:79:72:19:3f:ec:c3:e9:5c:ff:7d:7f:83:3e:cf:ca:
         f7:bc:18:c7:8b:46:76:57:f7:59:5d:57:9a:25:4a:1d:ee:74:
         60:43:bb:51:89:31:3f:48:00:96:3d:84:d3:a8:c7:c9:aa:d4:
         f1:5e:f0:6b:f4:11:83:e8:29:64:83:c1:9a:06:f1:d1:be:38:
         d8:43:8b:10:6b:cb:66:8c:d8:a2:45:36:4b:b5:b5:c2:57:5c:
         a6:04:ac:d5:b5:73:47:b6:bb:64:0e:0a:81:d6:bf:b6:18:7a:
         7a:c5:76:5e:0b:78:f0:57:62:7e:ba:8b:40:2f:ef:4f:9b:f0:
         4a:c5:74:11:9d:7f:85:f7:4c:66:e3:79:2d:31:df:7c:c5:f5:
         be:bc:9d:4c:c2:ca:05:37:45:95:45:d9:4c:26:e3:62:47:86:
         51:6a:67:73:d0:eb:7b:c4:cb:3a:a0:91:07:7a:e0:ea:50:81:
         af:df:fc:d3:c9:d5:ab:40:56:db:0d:4f:91:4d:11:48:dd:e9:
         b9:14:fa:b4:b2:c4:5a:3a:88:7e:1b:50:08:74:87:b5:55:2f:
         22:89:37:d5:bf:f1:dd:3b:79:47:0a:9d:2d:dd:11:27:be:bc:
         cb:9a:35:3f:83:93:6f:90:a1:d6:24:4f:e2:c3:42:f9:00:22:
         32:31:70:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 21:39:22 2026 by rpki-client