Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B8D1/561E2FDC21F011EEACFC01104AD9E6FC/L9OdkqzapRN7zkgavmyN8dzNDvY.mft
File:                     L9OdkqzapRN7zkgavmyN8dzNDvY.mft (raw, json)
Hash identifier:          /Z8U37g4KObPUWUVnnf5V9DvUBkqXkKABqvO8yVrDbs=
Subject key identifier:   74:DB:84:FA:54:E3:74:DF:8D:6F:20:FE:9C:DE:7A:E7:F1:2B:72:5C
Authority key identifier: 2F:D3:9D:92:AC:DA:A5:13:7B:CE:48:1A:BE:6C:8D:F1:DC:CD:0E:F6
Certificate issuer:       /CN=F367B8D1AF/serialNumber=2FD39D92ACDAA5137BCE481ABE6C8DF1DCCD0EF6
Certificate serial:       042A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/L9OdkqzapRN7zkgavmyN8dzNDvY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/561E2FDC21F011EEACFC01104AD9E6FC/L9OdkqzapRN7zkgavmyN8dzNDvY.mft
Manifest number:          0422
Signing time:             Mon 27 Apr 2026 03:35:35 +0000
Manifest this update:     Mon 27 Apr 2026 03:35:34 +0000
Manifest next update:     Wed 29 Apr 2026 03:35:34 +0000
Files and hashes:         1: L9OdkqzapRN7zkgavmyN8dzNDvY.crl (hash: hnnQ6Q88WMJ8ss9B4ppHPyZAcbUO++kE+5Ot871JGEA=)
                          2: 2CF3A3EEF23111F08DE709CADAE4EC9C.roa (hash: E/G6AxJRTy6BWkfQETWJC1LpmEof5Nqv6ggmyx/krZg=)
                          3: 82D2D66E261811EE84FCC57F4AD9E6FC.roa (hash: 8DOR79YopZBDIjmiAAaaEool8LnL3u27308SxIQ3uSY=)
                          4: E1F87CC6261711EE9112117E4AD9E6FC.roa (hash: L/3Ed8SgC2Eem41w8cHehrxxaShVOqXifUiGhdxr7zk=)
                          5: DBC4D84EF19F11F0BB0D92C4DAE4EC9C.roa (hash: 0w11dAl0ZHuL4r3C+H0Cy861F6dvJBOgzONU1ELikMM=)
                          6: 3333CFFEF22C11F0B7B687ABDAE4EC9C.roa (hash: n9BHCAIHciXSckg0OkYupto8mNVTVrnQREgeCL2seHc=)
                          7: 7977DC10F13E11F08E43847CDAE4EC9C.roa (hash: S6SqyKuMuszdFgWYXKbiOJ/eUFMOthzgeUjko1wpZeI=)
                          8: 857C6338F13811F08947FFD6DAE4EC9C.roa (hash: EQjufZY+Ld4Nc6rRRR5Pa+LhyHbL3SiAVgHsy5rcUII=)
                          9: 2BBF61F4261711EEBF1F207C4AD9E6FC.roa (hash: uweMPd3tzGkzK5NAwH3tY1Gjy+sA5uAC5mjmqHriOro=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/561E2FDC21F011EEACFC01104AD9E6FC/L9OdkqzapRN7zkgavmyN8dzNDvY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/561E2FDC21F011EEACFC01104AD9E6FC/L9OdkqzapRN7zkgavmyN8dzNDvY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/L9OdkqzapRN7zkgavmyN8dzNDvY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 29 Apr 2026 00:07:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1066 (0x42a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367B8D1AF, serialNumber=2FD39D92ACDAA5137BCE481ABE6C8DF1DCCD0EF6
        Validity
            Not Before: Apr 27 03:35:34 2026 GMT
            Not After : Apr 29 03:35:34 2026 GMT
        Subject: CN=69eed987-3f0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:b6:56:9e:85:63:30:dc:f3:cc:9c:a3:c2:cb:
                    27:22:16:7d:b1:cd:ec:de:da:98:7e:b9:77:94:36:
                    c8:85:c7:07:8e:7b:2f:f5:80:00:a5:2c:2b:5d:ad:
                    6e:73:90:61:16:d0:66:3c:77:00:62:91:82:08:94:
                    e8:d4:cd:19:db:27:a8:16:06:d6:9b:0e:85:43:33:
                    24:b6:60:9c:1d:f6:a4:36:b8:3e:12:be:3d:18:74:
                    19:94:50:80:6d:ed:12:98:2d:5a:8f:41:ba:2b:d8:
                    e2:9f:fa:90:71:3c:e2:69:37:10:13:0e:4f:80:1d:
                    dc:65:d7:11:9a:de:0f:2b:7b:32:68:5c:bf:cf:c1:
                    28:0c:14:e2:36:44:1e:e8:d8:9a:69:44:b9:0f:6f:
                    3f:65:1e:f0:e3:47:5d:b7:de:f1:ef:73:47:91:ff:
                    8c:98:45:b3:9a:70:2f:5f:f5:24:ec:10:e4:77:6c:
                    8d:3f:cd:b2:f8:51:17:d6:c1:92:41:77:12:b5:42:
                    4f:ba:af:9b:05:4a:f8:a0:62:28:c4:6b:0c:0c:59:
                    7c:82:92:ce:1b:ca:5a:91:a7:89:ed:1a:36:da:0a:
                    37:f4:ff:be:cc:01:66:d8:27:f4:2f:b9:a8:61:89:
                    7a:a4:16:05:e2:c8:33:73:67:86:86:86:23:9d:3f:
                    2e:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:DB:84:FA:54:E3:74:DF:8D:6F:20:FE:9C:DE:7A:E7:F1:2B:72:5C
            X509v3 Authority Key Identifier:
                keyid:2F:D3:9D:92:AC:DA:A5:13:7B:CE:48:1A:BE:6C:8D:F1:DC:CD:0E:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/561E2FDC21F011EEACFC01104AD9E6FC/L9OdkqzapRN7zkgavmyN8dzNDvY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/L9OdkqzapRN7zkgavmyN8dzNDvY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/561E2FDC21F011EEACFC01104AD9E6FC/L9OdkqzapRN7zkgavmyN8dzNDvY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:3e:19:e0:89:23:95:04:ed:6a:02:df:8e:48:af:58:d2:4f:
         9e:e8:13:d1:97:3f:64:b8:db:9e:dc:59:7a:3b:c2:76:89:37:
         e4:26:b9:93:e4:5f:c6:4b:c9:3c:b7:70:ad:89:7e:49:94:27:
         7d:4e:e3:6f:d9:b6:cb:ea:ec:41:dc:b3:88:dc:81:d2:9a:0f:
         53:c2:cb:73:4d:57:1e:60:19:fe:3a:21:dd:18:d8:ac:26:62:
         e9:f5:65:44:7a:aa:0f:bf:20:17:62:89:48:59:54:05:8d:bc:
         0e:99:50:6f:d0:f2:f1:ad:c0:73:25:26:46:0e:54:13:45:f5:
         36:3c:9b:0e:d5:d7:f6:ac:ea:68:9c:e6:b6:bc:a8:fd:55:8f:
         5a:d0:69:fa:d6:c8:ec:74:35:bf:af:10:fd:95:b2:42:69:84:
         63:8e:61:93:db:f8:fb:c7:7d:d7:e1:cf:28:51:fc:d1:dc:ba:
         ac:bb:72:bd:7b:2a:53:29:ee:5a:32:87:ea:13:34:de:b7:f4:
         2b:e7:60:0f:0f:69:44:a1:55:75:84:7c:ec:77:b0:f0:14:78:
         bb:3c:fb:c3:de:81:57:b1:50:ed:35:f8:55:32:2c:db:30:aa:
         64:fa:51:d1:bb:74:39:8f:33:e0:11:86:96:f8:b1:9a:34:a2:
         a3:f3:0c:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 16:53:42 2026 by rpki-client