Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36795C4/D603990491ED11E9841D5A7DF8AEA228/lUq4iuSUipt1F33uZX-rTm4MV4o.mft
File:                     lUq4iuSUipt1F33uZX-rTm4MV4o.mft (raw, json)
Hash identifier:          0h2cd2tQaK8Fw6/Qf2Xy/yK8FV92zdP+LDIuxzYDsIQ=
Subject key identifier:   0D:80:1A:08:88:A2:7E:EB:D1:D9:A2:A7:40:EB:6C:70:8F:E3:BE:05
Authority key identifier: 95:4A:B8:8A:E4:94:8A:9B:75:17:7D:EE:65:7F:AB:4E:6E:0C:57:8A
Certificate issuer:       /CN=F36795C4AF/serialNumber=954AB88AE4948A9B75177DEE657FAB4E6E0C578A
Certificate serial:       0A18
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/lUq4iuSUipt1F33uZX-rTm4MV4o.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36795C4/D603990491ED11E9841D5A7DF8AEA228/lUq4iuSUipt1F33uZX-rTm4MV4o.mft
Manifest number:          0A14
Signing time:             Tue 05 May 2026 01:29:30 +0000
Manifest this update:     Tue 05 May 2026 01:29:30 +0000
Manifest next update:     Thu 07 May 2026 01:29:30 +0000
Files and hashes:         1: lUq4iuSUipt1F33uZX-rTm4MV4o.crl (hash: IpeG77WnjdZjEAnSM5MdcaDARTPq6dcGyyKiib5k8zo=)
                          2: F9B4B74223E211EBB3370E5EF8AEA228.roa (hash: iAjclVjr18rb8UzFlzEG7HCKjOKSh2vSHYxUqjnpsFA=)
                          3: BABCAEFE91EF11E9B165E57EF8AEA228.roa (hash: hVKNt8SGYWt1U+/taZzhJep5equgMI82UyG7GvrNAnA=)
                          4: 9D413B06934311E9A21F097CF8AEA228.roa (hash: 6TisgPXDxDhUciEz6ugq9eMaF0xfY5KK7JgLSnZtkTk=)
                          5: 3A036A0023E311EBA7E4515EF8AEA228.roa (hash: 8IUYdHouL/KgAyYJ5ZHIEJY8Ka7R1x0U8rxHyMR+85A=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36795C4/D603990491ED11E9841D5A7DF8AEA228/lUq4iuSUipt1F33uZX-rTm4MV4o.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36795C4/D603990491ED11E9841D5A7DF8AEA228/lUq4iuSUipt1F33uZX-rTm4MV4o.mft
                          rsync://rpki.afrinic.net/repository/afrinic/lUq4iuSUipt1F33uZX-rTm4MV4o.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 07 May 2026 00:07:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2584 (0xa18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36795C4AF, serialNumber=954AB88AE4948A9B75177DEE657FAB4E6E0C578A
        Validity
            Not Before: May  5 01:29:30 2026 GMT
            Not After : May  7 01:29:30 2026 GMT
        Subject: CN=69f947fa-8832
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:85:f0:de:a7:bd:60:8a:c9:f9:bf:cc:dd:d9:
                    3a:bb:2e:1c:7a:00:93:e2:6b:ab:c0:66:4a:9e:95:
                    c5:96:51:61:9b:8a:6e:58:02:4b:f7:fd:b4:79:f3:
                    7b:66:08:c9:e6:27:1f:af:87:07:d4:96:22:78:6e:
                    4a:51:28:12:af:42:1c:c9:cf:98:41:42:c2:05:87:
                    8f:72:5e:c7:50:0e:c1:3e:55:20:b9:e6:c8:41:58:
                    42:d3:f3:02:f5:a6:9d:45:42:b8:38:da:f2:ce:e2:
                    4c:30:a2:46:7b:77:a6:ed:08:d2:d6:ad:5e:3e:b1:
                    3b:58:75:4c:7c:54:05:95:f6:65:2f:b1:3e:41:12:
                    ad:5d:35:fa:3d:ba:b4:57:7b:00:5c:28:a0:fb:da:
                    69:75:53:5c:f4:b5:37:e7:14:ec:b0:ba:c6:35:c4:
                    3d:09:ce:f8:17:46:f7:ca:3f:22:ac:b0:8a:eb:d6:
                    ef:d7:b0:76:e8:f3:d5:bb:bf:67:7c:d1:49:18:65:
                    95:4e:84:8d:60:e8:37:b0:8b:cc:2d:c0:37:7d:55:
                    f3:62:b5:70:73:33:1f:c9:15:b0:b5:df:7c:15:20:
                    8f:fb:a4:22:69:6c:3f:a2:99:68:0f:22:e6:8d:ff:
                    4c:5b:65:1a:7f:e3:a8:99:8c:38:1b:ab:5c:27:21:
                    f3:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:80:1A:08:88:A2:7E:EB:D1:D9:A2:A7:40:EB:6C:70:8F:E3:BE:05
            X509v3 Authority Key Identifier:
                keyid:95:4A:B8:8A:E4:94:8A:9B:75:17:7D:EE:65:7F:AB:4E:6E:0C:57:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36795C4/D603990491ED11E9841D5A7DF8AEA228/lUq4iuSUipt1F33uZX-rTm4MV4o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lUq4iuSUipt1F33uZX-rTm4MV4o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36795C4/D603990491ED11E9841D5A7DF8AEA228/lUq4iuSUipt1F33uZX-rTm4MV4o.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:9b:97:3d:81:8c:3e:d2:9c:40:b1:53:60:cd:66:cb:d5:2c:
         1e:9a:95:2e:64:64:8b:13:14:1a:94:ce:2a:cc:8b:56:5b:e5:
         92:7b:ba:90:0e:de:51:58:6e:af:05:b5:35:e7:81:82:89:3d:
         59:ab:64:9c:49:fa:6d:4c:49:e5:a8:08:81:02:30:76:2c:6e:
         70:d4:c0:e1:96:a4:30:03:83:dd:70:7e:32:ac:c5:dc:77:09:
         b5:1d:88:1d:a8:22:5f:a3:9c:6e:71:9e:ad:37:49:af:af:2c:
         35:b1:ca:c7:d5:4a:c6:ee:18:1d:a2:13:de:43:40:e0:c9:8a:
         07:8a:64:f8:ff:98:1d:46:96:d6:87:d0:b8:e7:f1:c9:56:11:
         47:48:94:17:a9:7c:10:69:cf:11:32:93:a2:64:40:f6:b6:b3:
         70:3e:50:7e:fd:af:73:a5:cf:35:27:09:a9:eb:6f:48:17:31:
         0a:67:0c:3b:6b:31:11:61:81:6c:89:cb:fb:b5:87:bd:2d:80:
         f5:5c:82:8f:d2:1a:6e:06:0e:ef:63:61:86:17:b9:75:37:06:
         88:3e:0a:96:ef:b1:af:d7:55:23:6c:09:4d:89:2f:50:f1:86:
         a7:96:d0:bd:5d:e1:b1:db:bc:50:5b:12:cb:46:cb:99:74:01:
         e4:f8:87:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 02:01:25 2026 by rpki-client