Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B3F2/04BA50F009CE11EA8313CC5AF8AEA228/0CXaySkNvUCEbGSPrcyfxnGGtjI.mft
File:                     0CXaySkNvUCEbGSPrcyfxnGGtjI.mft (raw, json)
Hash identifier:          NxdODsd0fUfAM4lEH9FV6d9+iuqiTJooNrbC/qJKB38=
Subject key identifier:   93:A4:39:0A:E5:6A:43:54:48:50:92:C6:94:8D:67:07:02:B9:AB:8D
Authority key identifier: D0:25:DA:C9:29:0D:BD:40:84:6C:64:8F:AD:CC:9F:C6:71:86:B6:32
Certificate issuer:       /CN=F367B3F2AF/serialNumber=D025DAC9290DBD40846C648FADCC9FC67186B632
Certificate serial:       0976
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/0CXaySkNvUCEbGSPrcyfxnGGtjI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367B3F2/04BA50F009CE11EA8313CC5AF8AEA228/0CXaySkNvUCEbGSPrcyfxnGGtjI.mft
Manifest number:          0975
Signing time:             Thu 07 May 2026 01:39:30 +0000
Manifest this update:     Thu 07 May 2026 01:39:29 +0000
Manifest next update:     Sat 09 May 2026 01:39:29 +0000
Files and hashes:         1: 0CXaySkNvUCEbGSPrcyfxnGGtjI.crl (hash: MSZ0VP47WluN8JU8jUpTMzIRdoJYjxqGKsP50eSP43U=)
                          2: C0B60E1809D611EA8CC3F860F8AEA228.roa (hash: 90ECyuBdPNmxRJAqpaW1o3jdvLDow9bMz084syJod/o=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367B3F2/04BA50F009CE11EA8313CC5AF8AEA228/0CXaySkNvUCEbGSPrcyfxnGGtjI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367B3F2/04BA50F009CE11EA8313CC5AF8AEA228/0CXaySkNvUCEbGSPrcyfxnGGtjI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/0CXaySkNvUCEbGSPrcyfxnGGtjI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 09 May 2026 00:07:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2422 (0x976)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367B3F2AF, serialNumber=D025DAC9290DBD40846C648FADCC9FC67186B632
        Validity
            Not Before: May  7 01:39:29 2026 GMT
            Not After : May  9 01:39:29 2026 GMT
        Subject: CN=69fbed52-089b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:dc:b3:ca:e8:e2:84:75:5b:30:d1:dc:10:65:
                    15:92:64:e1:1d:23:4c:94:72:b3:ea:e7:03:58:41:
                    23:63:e8:5b:83:4f:ee:b0:61:02:16:36:dc:48:80:
                    b6:30:7c:3b:90:ea:ec:a4:35:8a:08:19:82:9d:2d:
                    16:77:dd:1c:fa:6f:cc:a7:2e:8a:7c:04:e0:5a:79:
                    0a:72:bf:12:aa:de:a1:21:5c:bf:4c:6f:f6:1e:cc:
                    67:9e:1c:c7:b1:8a:69:a9:5d:a1:54:65:07:3a:3e:
                    d5:46:50:26:18:54:dd:d2:4c:cd:52:08:8a:23:b0:
                    17:2d:e3:6c:60:5e:86:3d:02:20:b0:4f:04:a2:3b:
                    24:e4:e5:6c:f2:78:27:6e:d2:73:c0:39:60:96:f8:
                    34:41:63:55:7e:85:15:37:07:0d:0b:c3:60:b6:3d:
                    92:bd:f8:b9:77:9a:d9:b7:9b:d5:6a:6f:75:09:1f:
                    8b:8a:3e:f7:2e:6c:14:eb:cf:4f:6a:cd:fc:c0:89:
                    92:53:b3:55:18:97:a6:30:02:d2:46:ce:09:66:24:
                    f1:08:6e:0b:0a:08:a6:83:0b:f9:ee:7a:8c:78:c1:
                    3c:af:84:33:5d:f6:e2:cb:2d:99:c2:6d:05:8b:0b:
                    34:6c:df:90:75:de:35:c8:f0:8b:c1:34:25:dc:e2:
                    ed:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:A4:39:0A:E5:6A:43:54:48:50:92:C6:94:8D:67:07:02:B9:AB:8D
            X509v3 Authority Key Identifier:
                keyid:D0:25:DA:C9:29:0D:BD:40:84:6C:64:8F:AD:CC:9F:C6:71:86:B6:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367B3F2/04BA50F009CE11EA8313CC5AF8AEA228/0CXaySkNvUCEbGSPrcyfxnGGtjI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0CXaySkNvUCEbGSPrcyfxnGGtjI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B3F2/04BA50F009CE11EA8313CC5AF8AEA228/0CXaySkNvUCEbGSPrcyfxnGGtjI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:36:6c:09:34:e4:0b:72:b9:3b:09:5c:32:01:e0:ef:1b:50:
         3f:6f:bd:67:be:c1:67:0d:21:97:a6:fd:92:d9:fb:fb:d4:b2:
         63:0b:9c:aa:73:4e:78:f8:e6:20:d9:36:5f:ad:9d:89:ab:51:
         83:03:26:68:86:40:f5:f2:9f:32:e5:ef:fd:d0:0c:93:a9:8a:
         4c:72:67:6f:90:21:35:bc:7d:d2:26:c0:2c:a8:21:98:53:7f:
         25:0a:ac:80:ee:bc:0d:45:76:2b:cf:25:11:75:32:2a:59:da:
         36:56:70:a8:42:0c:35:65:48:e7:de:90:6d:88:c1:28:b6:2e:
         9e:53:d4:b5:1a:ef:4f:69:8b:18:4e:08:28:6f:77:db:c7:af:
         54:93:80:40:9e:2d:68:64:b9:8b:04:a0:02:39:07:69:66:a9:
         13:53:5d:03:55:57:3f:fc:81:a5:18:da:cf:4d:32:74:8b:e9:
         f1:96:b6:fb:e9:cb:81:c8:bd:e4:fc:9c:ad:a4:a6:79:09:ab:
         dc:21:30:a4:c6:dd:4d:5c:7c:8c:27:1a:ec:0f:f1:a2:c6:93:
         10:08:e8:e4:1e:f3:54:30:16:89:27:65:26:03:9f:e9:bf:86:
         32:74:a8:fa:9d:ab:ef:6a:d4:2c:37:8e:68:29:dc:df:e6:f0:
         c8:18:fc:4b
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCXYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
N0IzRjJBRjExMC8GA1UEBRMoRDAyNURBQzkyOTBEQkQ0MDg0NkM2NDhGQURDQzlG
QzY3MTg2QjYzMjAeFw0yNjA1MDcwMTM5MjlaFw0yNjA1MDkwMTM5MjlaMBgxFjAU
BgNVBAMTDTY5ZmJlZDUyLTA4OWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC43LPK6OKEdVsw0dwQZRWSZOEdI0yUcrPq5wNYQSNj6FuDT+6wYQIWNtxI
gLYwfDuQ6uykNYoIGYKdLRZ33Rz6b8ynLop8BOBaeQpyvxKq3qEhXL9Mb/YezGee
HMeximmpXaFUZQc6PtVGUCYYVN3STM1SCIojsBct42xgXoY9AiCwTwSiOyTk5Wzy
eCdu0nPAOWCW+DRBY1V+hRU3Bw0Lw2C2PZK9+Ll3mtm3m9Vqb3UJH4uKPvcubBTr
z09qzfzAiZJTs1UYl6YwAtJGzglmJPEIbgsKCKaDC/nueox4wTyvhDNd9uLLLZnC
bQWLCzRs35B13jXI8IvBNCXc4u1PAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUk6Q5
CuVqQ1RIUJLGlI1nBwK5q40wHwYDVR0jBBgwFoAU0CXaySkNvUCEbGSPrcyfxnGG
tjIwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjdCM0YyLzA0QkE1MEYwMDlDRTExRUE4MzEzQ0M1QUY4QUVBMjI4LzBDWGF5
U2tOdlVDRWJHU1ByY3lmeG5HR3RqSS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzBDWGF5U2tOdlVDRWJHU1ByY3lmeG5HR3RqSS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2N0IzRjIvMDRCQTUwRjAwOUNFMTFFQTgzMTNDQzVBRjhB
RUEyMjgvMENYYXlTa052VUNFYkdTUHJjeWZ4bkdHdGpJLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDPNmwJNOQLcrk7CVwyAeDvG1A/b71n
vsFnDSGXpv2S2fv71LJjC5yqc054+OYg2TZfrZ2Jq1GDAyZohkD18p8y5e/90AyT
qYpMcmdvkCE1vH3SJsAsqCGYU38lCqyA7rwNRXYrzyURdTIqWdo2VnCoQgw1ZUjn
3pBtiMEoti6eU9S1Gu9PaYsYTggob3fbx69Uk4BAni1oZLmLBKACOQdpZqkTU10D
VVc//IGlGNrPTTJ0i+nxlrb76cuByL3k/JytpKZ5CavcITCkxt1NXHyMJxrsD/Gi
xpMQCOjkHvNUMBaJJ2UmA5/pv4YydKj6navvatQsN45oKdzf5vDIGPxL
-----END CERTIFICATE-----
Generated at Thu May 7 21:34:08 2026 by rpki-client