Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3678967/4AA442F478D911EA9A80955CF8AEA228/XKqYLAMXkyYzLWt3CljoeVy4RZ8.mft
File:                     XKqYLAMXkyYzLWt3CljoeVy4RZ8.mft (raw, json)
Hash identifier:          btpsfcdFiCyuXDNmX33ecG4aIyWMlejM1eqg7LlZSuw=
Subject key identifier:   A9:51:3C:09:4E:8C:5C:EA:32:1C:D8:5A:6B:10:8D:CA:82:00:D3:BD
Authority key identifier: 5C:AA:98:2C:03:17:93:26:33:2D:6B:77:0A:58:E8:79:5C:B8:45:9F
Certificate issuer:       /CN=F3678967AF/serialNumber=5CAA982C03179326332D6B770A58E8795CB8459F
Certificate serial:       08F2
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/XKqYLAMXkyYzLWt3CljoeVy4RZ8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3678967/4AA442F478D911EA9A80955CF8AEA228/XKqYLAMXkyYzLWt3CljoeVy4RZ8.mft
Manifest number:          08ED
Signing time:             Thu 07 May 2026 01:45:21 +0000
Manifest this update:     Thu 07 May 2026 01:45:21 +0000
Manifest next update:     Sat 09 May 2026 01:45:21 +0000
Files and hashes:         1: XKqYLAMXkyYzLWt3CljoeVy4RZ8.crl (hash: MXokowofhm26jjf0dXYapdYCFCUhBXYtaJu6tE3zxnY=)
                          2: 420B22A27D0111F0BA56A0A5DAE4EC9C.roa (hash: FgbgmTnolN1lRJKNhlZr9zZr69rYAV0zr0aJY9PwsCo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3678967/4AA442F478D911EA9A80955CF8AEA228/XKqYLAMXkyYzLWt3CljoeVy4RZ8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3678967/4AA442F478D911EA9A80955CF8AEA228/XKqYLAMXkyYzLWt3CljoeVy4RZ8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/XKqYLAMXkyYzLWt3CljoeVy4RZ8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 09 May 2026 00:07:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2290 (0x8f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3678967AF, serialNumber=5CAA982C03179326332D6B770A58E8795CB8459F
        Validity
            Not Before: May  7 01:45:21 2026 GMT
            Not After : May  9 01:45:21 2026 GMT
        Subject: CN=69fbeeb1-0e54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:d4:2b:13:44:d4:64:e6:b3:13:97:81:5a:48:
                    d4:bd:7b:c9:96:08:8b:d7:ac:01:43:94:22:fc:a7:
                    33:b2:94:cb:53:2b:56:2d:d5:43:f6:7c:ce:61:9a:
                    86:74:83:6e:74:5f:30:55:4c:c7:33:79:a2:4b:da:
                    9b:28:20:0e:a9:19:cf:cf:81:70:3e:8e:1c:c9:79:
                    55:d6:e8:ad:6e:9e:8d:f6:8c:98:8c:4e:80:11:aa:
                    50:ac:e2:f2:43:68:32:27:65:02:d4:68:cd:e2:6f:
                    4a:17:9f:ab:b7:a0:36:0f:17:cb:32:2e:c9:d1:e2:
                    c8:d9:3b:f5:fa:13:24:e7:97:69:18:2b:b4:7c:de:
                    24:fd:4d:18:39:4b:25:d4:21:bf:a1:ac:21:c2:74:
                    11:09:e6:2a:74:d3:0e:8a:14:a5:96:6d:a5:b8:67:
                    e5:1d:3c:bb:9f:d4:4d:e6:a9:16:57:a3:41:73:24:
                    d7:df:74:b6:25:0b:fd:ed:65:e2:43:c0:3f:4b:1e:
                    44:da:cd:dd:d6:c1:5c:cc:3b:c6:52:e8:aa:00:31:
                    bc:1c:54:94:38:4e:f7:d5:10:1f:74:84:d6:11:c7:
                    a0:b1:dc:87:67:f8:b1:11:e5:ea:a2:2e:3a:3c:89:
                    45:47:f7:4b:97:4f:63:ff:5e:79:2d:38:e8:0b:5e:
                    83:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:51:3C:09:4E:8C:5C:EA:32:1C:D8:5A:6B:10:8D:CA:82:00:D3:BD
            X509v3 Authority Key Identifier:
                keyid:5C:AA:98:2C:03:17:93:26:33:2D:6B:77:0A:58:E8:79:5C:B8:45:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3678967/4AA442F478D911EA9A80955CF8AEA228/XKqYLAMXkyYzLWt3CljoeVy4RZ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XKqYLAMXkyYzLWt3CljoeVy4RZ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3678967/4AA442F478D911EA9A80955CF8AEA228/XKqYLAMXkyYzLWt3CljoeVy4RZ8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:26:fe:e1:b4:5a:69:a2:0f:3c:4f:4f:21:e7:99:1c:94:41:
         7b:52:86:c7:9c:af:6c:31:cf:7b:85:9a:3b:9b:a0:05:a8:e6:
         6d:4c:bc:38:2d:7b:e3:72:a9:bb:21:82:a6:c8:3b:0d:6c:a4:
         c5:05:ca:c5:1a:85:d0:6d:6f:01:e8:21:7b:a5:a1:90:ab:97:
         53:28:06:97:01:04:0a:93:3a:aa:fa:30:36:fe:95:dd:a4:c5:
         b7:80:7e:2f:c1:81:bc:30:fc:79:66:a2:52:62:46:e8:cc:25:
         c7:ab:b2:21:18:e1:50:ab:95:20:7f:a5:9c:ee:4a:37:36:d5:
         3c:39:55:38:da:c4:6e:91:5e:84:63:d2:4b:44:95:81:80:b0:
         82:74:5b:53:7d:73:95:6f:c1:84:f9:21:7c:91:46:f9:bc:d9:
         bb:c5:b7:bd:1b:2d:e0:a5:5e:ea:eb:cf:8b:42:c9:78:80:99:
         fd:4e:94:02:28:45:8d:3f:2e:36:b9:50:ed:7f:54:db:9a:87:
         71:4b:80:89:dd:59:65:ef:b0:a0:64:d7:f6:bd:97:f8:78:65:
         aa:a3:e9:01:6f:c8:2e:3b:b4:da:cf:cd:1f:0c:a6:27:1a:91:
         68:23:5a:30:43:cf:6d:f3:34:2c:53:64:63:c1:9b:20:c6:76:
         fb:b4:78:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 21:39:38 2026 by rpki-client