Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36882A1/AA75582CC7C411EBB520A668F8AEA228/cfbjXgELx4fYmgtLqTPZlvrU2tI.mft
File:                     cfbjXgELx4fYmgtLqTPZlvrU2tI.mft (raw, json)
Hash identifier:          X4QbGH4Ny9xXOx1ws2AfNksEenRQj/EyCUkKHwPy9q8=
Subject key identifier:   90:A7:69:31:67:D1:9E:4D:6F:C9:85:A6:68:4D:B2:A6:0E:FF:21:1E
Authority key identifier: 71:F6:E3:5E:01:0B:C7:87:D8:9A:0B:4B:A9:33:D9:96:FA:D4:DA:D2
Certificate issuer:       /CN=F36882A1AF/serialNumber=71F6E35E010BC787D89A0B4BA933D996FAD4DAD2
Certificate serial:       0735
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/cfbjXgELx4fYmgtLqTPZlvrU2tI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36882A1/AA75582CC7C411EBB520A668F8AEA228/cfbjXgELx4fYmgtLqTPZlvrU2tI.mft
Manifest number:          0735
Signing time:             Thu 07 May 2026 02:12:42 +0000
Manifest this update:     Thu 07 May 2026 02:12:41 +0000
Manifest next update:     Sat 09 May 2026 02:12:41 +0000
Files and hashes:         1: cfbjXgELx4fYmgtLqTPZlvrU2tI.crl (hash: aGdDkn+UWPIHaGrL3G31JkU4a8J7z/hVF5bIZrhoeNk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36882A1/AA75582CC7C411EBB520A668F8AEA228/cfbjXgELx4fYmgtLqTPZlvrU2tI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36882A1/AA75582CC7C411EBB520A668F8AEA228/cfbjXgELx4fYmgtLqTPZlvrU2tI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/cfbjXgELx4fYmgtLqTPZlvrU2tI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 09 May 2026 00:07:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1845 (0x735)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36882A1AF, serialNumber=71F6E35E010BC787D89A0B4BA933D996FAD4DAD2
        Validity
            Not Before: May  7 02:12:41 2026 GMT
            Not After : May  9 02:12:41 2026 GMT
        Subject: CN=69fbf51a-549c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d0:3c:01:00:98:6a:86:78:1d:53:3c:8a:00:
                    ba:9b:81:ac:b1:e0:6f:81:72:cf:48:7b:89:2d:fd:
                    c1:9f:ca:76:d6:46:d8:20:68:97:50:a5:9f:3d:05:
                    17:38:76:84:6b:47:39:94:59:92:0d:cf:2a:ec:fd:
                    1d:55:5e:b6:11:ab:36:18:f0:b1:61:00:f9:37:4c:
                    10:4d:4b:34:17:ae:5c:eb:fb:a1:34:d8:02:cb:67:
                    6e:a3:d9:c1:dd:bf:a9:1c:05:c4:00:96:b9:a2:77:
                    e1:9a:44:ac:22:b2:08:f7:4d:5d:f0:b7:3e:8f:26:
                    ad:52:3d:ae:b9:d5:a9:b3:ac:b4:59:ed:8b:a0:4c:
                    63:49:9f:f1:fa:6c:b8:07:fb:54:d5:77:6b:aa:62:
                    e8:bd:a7:a3:8b:f8:08:81:5a:f6:ff:93:5e:8d:da:
                    69:93:94:47:18:3e:ea:18:a9:fb:4a:9d:c1:d1:82:
                    fc:35:d3:8d:76:ea:da:7c:48:83:68:d1:e1:91:ff:
                    e3:dd:cf:9d:8d:f2:36:d9:9a:0e:00:07:2f:22:8a:
                    ce:9d:fd:3a:0c:fd:2f:b5:fe:dd:29:16:1d:d8:ce:
                    fe:7e:f8:05:e3:d8:3a:6f:a6:68:32:17:1a:23:06:
                    a5:0f:8a:a7:70:03:5f:f3:f6:e2:0e:1c:06:61:82:
                    7b:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:A7:69:31:67:D1:9E:4D:6F:C9:85:A6:68:4D:B2:A6:0E:FF:21:1E
            X509v3 Authority Key Identifier:
                keyid:71:F6:E3:5E:01:0B:C7:87:D8:9A:0B:4B:A9:33:D9:96:FA:D4:DA:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36882A1/AA75582CC7C411EBB520A668F8AEA228/cfbjXgELx4fYmgtLqTPZlvrU2tI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/cfbjXgELx4fYmgtLqTPZlvrU2tI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36882A1/AA75582CC7C411EBB520A668F8AEA228/cfbjXgELx4fYmgtLqTPZlvrU2tI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:82:c7:08:48:14:58:53:1c:d9:28:e6:ac:44:2c:fe:af:70:
         b4:24:2f:04:2b:97:ff:69:36:65:90:1c:c7:41:b8:b8:2f:c4:
         61:fe:b6:24:d0:a2:94:6a:63:76:0e:87:40:01:9a:55:f9:3c:
         fe:dc:26:c5:01:88:36:16:2b:4d:85:5d:b3:5d:70:99:81:89:
         c8:27:86:f5:4e:04:07:47:8f:5a:96:7a:f0:9c:30:64:a5:a9:
         cd:b1:d4:a9:f4:b6:af:ab:3e:e2:52:01:9c:4b:09:40:e7:34:
         00:79:eb:70:6a:30:20:3a:67:a3:f7:fd:9d:f3:46:de:bf:74:
         ce:0a:83:41:d2:0e:c6:16:b8:d7:e3:0d:42:48:de:c5:ca:d7:
         36:81:ae:8a:3b:98:c3:2d:34:65:4f:87:ea:8a:c3:ba:07:9b:
         ec:f1:b4:4b:9e:23:12:51:05:05:83:51:2c:46:d1:f0:85:7f:
         9e:82:3f:72:a9:31:8c:8b:08:77:fa:4b:76:27:b4:62:8a:1f:
         a4:e3:c7:20:79:fd:0e:ef:c1:5a:17:aa:9a:6c:51:7f:05:61:
         91:be:2e:dc:5a:29:5d:3b:ca:7f:0a:6f:18:0c:4b:8f:a3:8a:
         b1:db:14:cb:d7:a8:3b:ed:c3:de:ad:43:a8:8e:38:20:4b:31:
         5f:67:85:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 21:38:19 2026 by rpki-client