Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3679680/67101F50E29111EEBC9A7258775412E6/ui_9XON8AcbtlPuVw1jXCimNyXQ.mft
File:                     ui_9XON8AcbtlPuVw1jXCimNyXQ.mft (raw, json)
Hash identifier:          RgMrJqZt8UHXf12YR+tag9YmY+IL/HQ5O4uW5QQ5JAw=
Subject key identifier:   AB:DE:CC:A3:D3:8A:5C:55:D8:D4:BE:04:33:0E:34:AA:A1:79:C9:60
Authority key identifier: BA:2F:FD:5C:E3:7C:01:C6:ED:94:FB:95:C3:58:D7:0A:29:8D:C9:74
Certificate issuer:       /CN=F3679680AF/serialNumber=BA2FFD5CE37C01C6ED94FB95C358D70A298DC974
Certificate serial:       0325
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ui_9XON8AcbtlPuVw1jXCimNyXQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3679680/67101F50E29111EEBC9A7258775412E6/ui_9XON8AcbtlPuVw1jXCimNyXQ.mft
Manifest number:          0323
Signing time:             Thu 07 May 2026 04:04:38 +0000
Manifest this update:     Thu 07 May 2026 04:04:37 +0000
Manifest next update:     Sat 09 May 2026 04:04:37 +0000
Files and hashes:         1: ui_9XON8AcbtlPuVw1jXCimNyXQ.crl (hash: IccRIQv6RcpRrUStXjWto51U1mfQ1FEjLkDmGDHmj1c=)
                          2: 2CB11612097C11F0B1B609AC762E951A.roa (hash: Kwmd09ofIif31S12hSjzL7BsuLgXOAF7knYqTDHIeU8=)
                          3: 2F6023ECE29211EEB2E4FA5C775412E6.roa (hash: q7jNd1y1Y6KLB0N5MRMBr1m0H8I9Vdkf0cqM9mEbDLA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3679680/67101F50E29111EEBC9A7258775412E6/ui_9XON8AcbtlPuVw1jXCimNyXQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3679680/67101F50E29111EEBC9A7258775412E6/ui_9XON8AcbtlPuVw1jXCimNyXQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ui_9XON8AcbtlPuVw1jXCimNyXQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 09 May 2026 00:07:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 805 (0x325)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3679680AF, serialNumber=BA2FFD5CE37C01C6ED94FB95C358D70A298DC974
        Validity
            Not Before: May  7 04:04:37 2026 GMT
            Not After : May  9 04:04:37 2026 GMT
        Subject: CN=69fc0f56-ad6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:63:15:16:7e:1e:a6:08:31:3e:e6:4e:7a:b6:
                    6f:65:a3:f3:4c:da:00:7b:56:0c:d4:bb:fc:0f:18:
                    52:01:76:3d:19:9c:7b:1d:f4:38:d3:c9:34:80:4d:
                    4c:b6:c9:b6:61:cf:d4:68:c8:84:4b:92:98:0f:01:
                    50:11:34:db:23:fd:45:10:7a:66:0f:84:d3:11:74:
                    ea:f2:74:5d:73:e4:7e:ad:7d:b3:35:7c:48:a1:2a:
                    9b:03:5b:2f:fb:1a:82:ed:58:08:10:dc:93:df:2f:
                    63:c1:e1:40:3b:1c:db:ce:ba:7f:76:07:d3:21:ab:
                    ab:9a:0d:20:e8:03:51:73:31:0e:51:a1:c1:b1:96:
                    83:45:e3:f9:87:05:17:b0:15:ac:1b:4c:59:6f:f7:
                    25:0b:32:22:f0:8e:23:d4:03:21:71:1c:d4:a7:a2:
                    f3:37:27:9f:7e:6b:f9:ab:8b:dc:b2:f2:5b:5f:99:
                    fd:5e:65:ea:cb:16:87:68:0d:21:80:24:84:e4:e5:
                    3e:41:df:3f:e9:d3:16:3b:1c:9e:38:a1:0d:4e:d9:
                    67:b9:5b:34:63:7c:68:c2:ae:0d:92:bf:d4:54:56:
                    56:a1:e3:48:5e:0e:d7:52:e0:0f:ec:ad:37:db:78:
                    b1:97:8a:2a:4e:9e:99:3c:c7:2b:d8:60:e0:73:4d:
                    88:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:DE:CC:A3:D3:8A:5C:55:D8:D4:BE:04:33:0E:34:AA:A1:79:C9:60
            X509v3 Authority Key Identifier:
                keyid:BA:2F:FD:5C:E3:7C:01:C6:ED:94:FB:95:C3:58:D7:0A:29:8D:C9:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3679680/67101F50E29111EEBC9A7258775412E6/ui_9XON8AcbtlPuVw1jXCimNyXQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ui_9XON8AcbtlPuVw1jXCimNyXQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3679680/67101F50E29111EEBC9A7258775412E6/ui_9XON8AcbtlPuVw1jXCimNyXQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:09:d0:ab:75:63:c9:66:9e:68:74:86:e4:6f:5c:bf:1b:a8:
         dd:4d:94:e6:09:80:c0:d4:a8:08:3a:61:c8:5b:4a:ca:2d:c8:
         36:54:c9:52:f4:90:a0:86:d1:29:1d:35:6f:23:63:99:cd:22:
         21:04:4d:b2:88:3b:eb:f2:e7:d1:80:59:b3:52:51:19:61:e9:
         c4:a7:80:a3:4d:95:de:ac:a6:ff:de:be:93:6f:72:d9:71:83:
         31:68:96:66:ab:5e:7f:fc:b9:78:a6:29:f9:cb:1a:4b:78:e9:
         42:5e:2b:77:51:cc:3e:34:46:61:4b:c6:29:d2:02:f9:7c:db:
         d1:92:5d:5a:69:fb:10:79:bf:b5:f9:79:2a:2d:d2:73:89:b2:
         a4:df:dc:49:bb:37:91:23:58:a3:61:20:03:5f:12:7f:ca:3b:
         cc:2e:8f:de:47:74:59:d7:58:7c:17:db:3b:ed:26:d6:7c:02:
         3e:f8:85:1b:25:da:f1:06:b0:14:f1:f6:ce:b6:d3:bf:11:69:
         cb:66:3b:9e:8a:ca:09:aa:27:9f:91:8d:3c:ae:fe:a4:92:0a:
         e8:8b:7e:39:c3:e4:fb:13:26:e2:58:12:20:d0:9a:a7:c0:97:
         16:37:b9:d4:df:e9:ef:c3:55:71:d2:fa:82:a1:11:70:e4:4c:
         90:ec:03:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 21:38:02 2026 by rpki-client