Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft
File:                     l8kOJSEtiHz54d5v3fVRuoEvoTk.mft (raw, json)
Hash identifier:          M/CZBf5TaIwaOcdjmMasps7ciSPBx9dV6sHC/1fCZpQ=
Subject key identifier:   03:F9:EE:A7:6E:62:E8:9D:A7:3E:1E:45:DE:B9:08:D7:B3:15:E3:2E
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Certificate issuer:       /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial:       0956
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft
Manifest number:          0866
Signing time:             Tue 28 Apr 2026 02:09:52 +0000
Manifest this update:     Tue 28 Apr 2026 02:09:51 +0000
Manifest next update:     Thu 30 Apr 2026 02:09:51 +0000
Files and hashes:         1: l8kOJSEtiHz54d5v3fVRuoEvoTk.crl (hash: 3gO+g8zT3y4pgjDK7TUqtQcXHVrWiy1evuEe+1njFxw=)
                          2: DBA98D145B2211F0A20E2EA0DAE4EC9C.roa (hash: baX/jyqbDDRWJ52IpaUoPLaTxEVM5KXNaJC/ks++xuQ=)
                          3: D555ACF47ED111F08EE5E58BDAE4EC9C.roa (hash: 47vFvhPfYF8MRZPiu19cy9fhXJPFVZu9WXQ1eMHjtak=)
                          4: 1310CD3A237811F1BCBD5FA0DAE4EC9C.roa (hash: qF3hG1/6g8gsTprcC6hzsx2uNOQ7cvqSo6+AiuAa4B0=)
                          5: 31AC1B067F2B11F0A2FC2DE1DAE4EC9C.roa (hash: pJmfeAp3o89ojiARZABIHNF+5KqQANGXnVyfWK3JWAo=)
                          6: EE4BCA50C51611F0882C7A79DAE4EC9C.roa (hash: QORpqLPUnemyJVfwyKiR9rBTSjXXBwPxprwBhq4ORos=)
                          7: 8F66F9F2625011F093EF34AEDAE4EC9C.roa (hash: azeXExxPadQBtZQAbA3QmCVU3GUpPn3GgN81W/kzNws=)
                          8: FA516C08336911F193F8F304CF1D38B0.roa (hash: qJhkiw1CuPJJ+LZ9IaRPga96c1/QTalcB8pp7a4aKYw=)
                          9: DE2FE726163011F1829CE9EADAE4EC9C.roa (hash: TMIMgwsogkJNyAx0X77xxGocwvE2m5HEfSTcrhrwoyI=)
                          10: 37683106C51711F0831FC779DAE4EC9C.roa (hash: X7+3tEI76PBXlAAcgP4WQPX2ONBme8iwLb9ftSScgDo=)
                          11: C36E5120609611F0AB6F15F2DAE4EC9C.roa (hash: Fk+IfFMpvi36aQyLQYlmv26xnAUJjv0obfvmLZs4rLU=)
                          12: 4B0FAD8C2AB711F1A5261CD8DAE4EC9C.roa (hash: iDwntjXc0TkUcKq7YPpoYX8y6uqRkFD/EWhYMmqZVT4=)
                          13: 3171D6FA336A11F1B77A1305CF1D38B0.roa (hash: SO6Wp4o9Lqro3hf0yqRN3gu5Vrnerw41tCpfvIRuAok=)
                          14: 5D5EDDF8336A11F1BF6C1A07CF1D38B0.roa (hash: pg0dcr/HSGlKsbLa1Bl4yzQXpMLUvgiXVQYI14pcKdk=)
                          15: FC053F5CAF7A11F09C68E3B1DAE4EC9C.roa (hash: ovkEHwqKLlju8yGU3yNPqm9jMYWfqRxIBEHgStiUby0=)
                          16: CEA072D8776A11EEA49F007D4AD9E6FC.roa (hash: oG1ErKkSbYpP5X6eq2VOONQIy8u5lFGEO9d6IZTGw04=)
                          17: 2C26647A3B1E11F1AA6B1905CF1D38B0.roa (hash: ycO5FfdJse1udo/+/wcj0J+HceiCojhi9x719nX45+c=)
                          18: 1DA0B1A4502C11F08AB1C8C2DAE4EC9C.roa (hash: O39HvXcGM8vCDm9DfWvAXNTa9fV5PX5xkVsjsSq21p8=)
                          19: 027058FC3B1E11F1B9C4CA04CF1D38B0.roa (hash: yAzuBHkU7s692TGtw+E9KTPOk7e3I+1Mfs0exSB8f4M=)
                          20: 7F1FE00E336A11F18F012B07CF1D38B0.roa (hash: p2rjK7x2+nj3cw5ovg8Nf6ZNwZpMtYEbRA5CpuFQGeY=)
                          21: 3AE05628237811F1966164A0DAE4EC9C.roa (hash: 24Q/iN3IITD01IOkQTNwboLkZsMjqiYfwPg+zgtpD/4=)
                          22: CD47C9C2336A11F192162D09CF1D38B0.roa (hash: YmVO0EyKzEqe+dLK8ipWG+xdRrEJzyfF4LQ1DdIZz3Y=)
                          23: 14DBDD40397F11F18F7D251BCF1D38B0.roa (hash: 7JorfiIlTDbNmduHmYrQZFBXPxFlQKaOmXJt1ogKFiw=)
                          24: 38C38ECA336B11F1B251460BCF1D38B0.roa (hash: QR5cqLad2UQRwqF4H2kT1Rbb4KoMbERq0mDkLOVLQsI=)
                          25: 1BF4F8CC187E11F1BA032D93DAE4EC9C.roa (hash: zXtWle/yOTpKwLGIe5XmsNFjkXiS/vvqgdWG5YsQ/bE=)
                          26: 8C7A319A3B1D11F1B7560101CF1D38B0.roa (hash: T1rKMMJinFMAjlI/pQ90dAtWMN97b28AyrAC633r9XM=)
                          27: 8C4DBB74336B11F1AC054A0DCF1D38B0.roa (hash: ugMRQkYvi/0bT9sFT3i3iSYCY9UTu5TVQziA09sXpwQ=)
                          28: D3F7ECBE237711F1B5789F9EDAE4EC9C.roa (hash: m3i0l0lNUH6ltsGq6+F120+QsjNXJkq9PihsuoVPVvI=)
                          29: E8B4523C187D11F1A5DD0B93DAE4EC9C.roa (hash: N/GBo7sJ9sVz40T3E38ntjv4vl5jXnFQj2Tw1+btscU=)
                          30: 087B5DDA187F11F1B908269BDAE4EC9C.roa (hash: +iSgYQye2OWt8JVvNd+soAvL1h8eN44KQQOxfGUmU6o=)
                          31: 06EA9146625111F082ED08AFDAE4EC9C.roa (hash: DlQwSvTDJt//sym2C2UVKdfDULxPx2s6Ok+gJg27kxk=)
                          32: 991B77F8CE8811F08B0D7DCBDAE4EC9C.roa (hash: 4NDnlsPwnLQ0bvJwiU4jMN98KtaytJXKCjFbhCuymzw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 30 Apr 2026 02:09:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2390 (0x956)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367DFA4AF, serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
        Validity
            Not Before: Apr 28 02:09:51 2026 GMT
            Not After : Apr 30 02:09:51 2026 GMT
        Subject: CN=69f016f0-a518
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ca:87:53:c2:ac:e4:f5:f6:7a:80:45:f9:fd:
                    83:44:71:db:90:10:ec:22:6c:60:b4:d0:33:10:5f:
                    a1:ab:ad:74:49:6a:ae:96:a7:7b:71:97:a7:ea:51:
                    a5:ff:2a:59:b8:76:e8:cb:a3:e6:23:6b:23:6e:05:
                    98:09:1e:c0:45:9c:44:ff:2c:5e:25:16:f1:0f:1d:
                    0a:6b:ac:31:fa:cb:71:1b:70:5f:4b:44:79:98:91:
                    37:02:ef:93:5f:33:45:e0:8e:f2:95:c1:78:0a:3d:
                    df:2b:e0:51:4c:a3:6e:2a:45:a9:a4:5c:88:20:e8:
                    ad:ea:5b:f3:2e:62:bc:4d:7a:02:a4:1b:39:e4:54:
                    46:ac:58:8d:6d:1e:e1:73:4b:d2:37:ed:db:3b:5c:
                    c8:c2:e4:4c:b9:69:de:44:f6:a5:67:d2:ae:4d:ad:
                    d1:de:88:e5:92:b3:f6:71:62:ee:4c:f8:55:86:fe:
                    7e:25:a8:28:ba:97:23:50:16:22:3d:7e:f6:51:00:
                    24:85:27:31:45:df:a1:b2:99:fb:02:e4:2e:97:68:
                    4a:d9:d5:e7:72:b8:db:ec:69:e7:fa:ec:a6:aa:eb:
                    af:84:18:98:f6:84:d5:5b:84:39:6a:62:64:b6:c8:
                    16:0d:0a:da:22:32:5f:97:7d:40:46:53:da:cd:95:
                    55:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:F9:EE:A7:6E:62:E8:9D:A7:3E:1E:45:DE:B9:08:D7:B3:15:E3:2E
            X509v3 Authority Key Identifier:
                keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:46:a9:91:74:85:c6:d8:92:e2:b1:89:01:fb:85:d4:11:aa:
         7d:e9:c1:2d:f4:be:82:09:bc:92:4c:1e:92:19:a3:b4:cb:e5:
         c2:cc:f1:ac:cd:5a:c6:60:45:00:5b:a8:d8:19:b1:e5:eb:cf:
         be:4d:39:8b:4c:f6:ca:23:83:9a:64:1f:55:2b:32:2d:b2:7d:
         cf:d8:4c:a8:c0:9f:8f:38:65:f3:17:54:98:53:2f:76:43:76:
         d2:b6:3b:8d:f7:5c:17:14:e5:a2:ca:bf:e2:45:a9:05:f7:0f:
         8b:06:89:08:fe:cb:32:57:85:5e:33:43:21:e5:10:20:5c:5a:
         38:03:23:dc:21:0d:5e:65:82:dd:6a:ef:7c:9f:2b:ca:45:5a:
         29:e0:ae:f8:63:b4:21:0f:f5:d6:92:0a:6a:a9:de:c6:10:35:
         fe:e3:e9:0e:17:2e:21:34:85:6a:7a:f6:1d:9e:35:88:d7:9a:
         1f:e2:c4:ba:bb:e7:dc:33:aa:d7:74:2b:e4:88:12:b7:ea:9c:
         3f:10:ac:bd:03:60:08:b4:d7:4a:2b:c8:4e:fe:92:3d:dd:67:
         b7:6b:41:cc:8b:b4:b9:c8:c2:9b:44:bc:b7:66:4a:98:57:e7:
         d6:22:79:b0:9e:56:19:27:1f:9a:1d:29:91:49:29:20:1a:35:
         80:76:46:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 00:03:25 2026 by rpki-client