Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36836B1/450D8348404211EF9B82A592762E951A/dR0QfwWZOGZDhKNweOOFl5C6KNQ.mft
File:                     dR0QfwWZOGZDhKNweOOFl5C6KNQ.mft (raw, json)
Hash identifier:          IUC3rJ0RTlFmpTfLPC7UGfHAs+GiiviApxtUPU0rcSw=
Subject key identifier:   38:D4:A2:4B:3D:E1:28:2F:4D:AD:76:79:1E:92:DA:4A:DA:52:D3:CE
Authority key identifier: 75:1D:10:7F:05:99:38:66:43:84:A3:70:78:E3:85:97:90:BA:28:D4
Certificate issuer:       /CN=F36836B1AF/serialNumber=751D107F059938664384A37078E3859790BA28D4
Certificate serial:       02A8
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/dR0QfwWZOGZDhKNweOOFl5C6KNQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36836B1/450D8348404211EF9B82A592762E951A/dR0QfwWZOGZDhKNweOOFl5C6KNQ.mft
Manifest number:          02A7
Signing time:             Thu 07 May 2026 04:19:14 +0000
Manifest this update:     Thu 07 May 2026 04:19:13 +0000
Manifest next update:     Sat 09 May 2026 04:19:13 +0000
Files and hashes:         1: dR0QfwWZOGZDhKNweOOFl5C6KNQ.crl (hash: Z2HS12eMT7GWQK/NhDfWG+c633id4qz4CuBwGjk2I/U=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36836B1/450D8348404211EF9B82A592762E951A/dR0QfwWZOGZDhKNweOOFl5C6KNQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36836B1/450D8348404211EF9B82A592762E951A/dR0QfwWZOGZDhKNweOOFl5C6KNQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/dR0QfwWZOGZDhKNweOOFl5C6KNQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 09 May 2026 00:07:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 680 (0x2a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36836B1AF, serialNumber=751D107F059938664384A37078E3859790BA28D4
        Validity
            Not Before: May  7 04:19:13 2026 GMT
            Not After : May  9 04:19:13 2026 GMT
        Subject: CN=69fc12c2-c825
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e2:cf:a3:31:aa:d3:9b:70:a3:70:de:8d:33:
                    b0:ee:4e:b6:c2:60:53:46:c3:34:59:e2:50:30:46:
                    91:4c:f0:e0:33:d8:df:6e:d1:82:76:ba:68:d7:2c:
                    6c:f8:14:57:a1:f4:34:d1:3f:72:9f:a0:73:04:a5:
                    7a:23:46:b1:fb:54:9e:f0:aa:9c:93:9e:7d:d1:a4:
                    c7:a1:05:6e:f3:44:fa:22:cc:b7:03:ad:28:89:e1:
                    22:03:b8:2d:2d:c6:33:e3:22:0a:b0:b5:11:51:6c:
                    7a:77:52:d1:ab:09:83:6a:80:76:50:a3:04:41:0e:
                    fe:5d:55:5e:bf:d4:5b:30:96:76:dc:fb:6c:40:ae:
                    65:61:61:0e:aa:36:29:6b:6e:55:1e:4a:f4:ff:3f:
                    84:80:cc:1c:b2:11:8b:3c:6c:b8:25:3e:be:c4:b1:
                    51:68:6d:81:05:59:99:67:c9:fd:10:2c:f4:fd:e7:
                    ee:76:a5:77:3d:e8:69:f8:d6:da:96:71:03:23:05:
                    34:d4:06:71:06:f7:af:6f:b5:2b:6b:3b:1f:d3:ba:
                    78:4f:4e:bc:8b:07:c2:99:0e:85:0a:68:92:3e:82:
                    5a:34:60:42:e1:86:3c:7f:c5:3d:7a:fb:4f:52:10:
                    05:e3:fe:ec:8c:8a:df:e6:f8:4a:63:77:c7:36:9d:
                    3f:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:D4:A2:4B:3D:E1:28:2F:4D:AD:76:79:1E:92:DA:4A:DA:52:D3:CE
            X509v3 Authority Key Identifier:
                keyid:75:1D:10:7F:05:99:38:66:43:84:A3:70:78:E3:85:97:90:BA:28:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36836B1/450D8348404211EF9B82A592762E951A/dR0QfwWZOGZDhKNweOOFl5C6KNQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/dR0QfwWZOGZDhKNweOOFl5C6KNQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36836B1/450D8348404211EF9B82A592762E951A/dR0QfwWZOGZDhKNweOOFl5C6KNQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:8f:18:5e:5c:b4:82:8d:27:8c:4f:55:67:83:6d:4c:7f:17:
         70:b8:f5:21:3a:9d:91:37:46:46:56:00:cf:c5:00:75:96:34:
         e6:66:6d:87:a5:4a:0b:96:bf:67:e3:b3:76:d4:8c:3f:a0:88:
         a2:ad:d3:8b:5f:92:0a:2d:21:4e:c4:66:33:c6:04:09:58:8e:
         29:d0:45:bf:4e:e1:2c:65:ca:14:6f:75:bc:ba:6b:12:61:ca:
         63:a7:92:3e:72:3d:6f:49:c1:4a:4a:96:f0:c0:1c:9d:28:6c:
         9c:fa:35:94:b1:14:b3:26:79:1d:dd:42:af:95:79:c3:8c:6f:
         81:ed:4e:90:00:51:3d:22:1f:d7:48:6b:fe:12:fa:c7:f3:57:
         2c:c6:a1:96:84:8a:58:f2:02:7b:e3:ce:29:fd:2e:54:ad:db:
         59:82:9f:8e:36:8d:91:dc:d8:e5:e0:68:d7:94:8b:b3:c8:9c:
         df:45:02:bc:15:6c:8f:75:de:9c:1c:65:59:92:00:94:1a:1f:
         e4:8d:56:1b:15:04:78:f3:26:88:0b:b1:96:c0:93:e1:fa:6b:
         11:b2:1b:f9:f6:00:39:8a:f2:c8:d3:43:6e:d2:76:21:b3:53:
         25:d3:b4:c1:56:3a:45:66:fc:ad:94:16:3a:b8:1e:7b:e5:c2:
         46:30:60:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 21:38:02 2026 by rpki-client