Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3690C51/AE080A8CA67F11EF97375182762E951A/M9k2dXxyMpyzVJDsNDXRPytwToI.mft
File:                     M9k2dXxyMpyzVJDsNDXRPytwToI.mft (raw, json)
Hash identifier:          qLusyi2aOn2VAMl0nMit/lvTDpwr+44Nxl0h0fEXEeA=
Subject key identifier:   73:6B:BD:D1:F7:15:F2:F9:2F:AC:F8:6D:3D:60:65:8D:93:7C:1B:A6
Authority key identifier: 33:D9:36:75:7C:72:32:9C:B3:54:90:EC:34:35:D1:3F:2B:70:4E:82
Certificate issuer:       /CN=F3690C51AF/serialNumber=33D936757C72329CB35490EC3435D13F2B704E82
Certificate serial:       0236
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/M9k2dXxyMpyzVJDsNDXRPytwToI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3690C51/AE080A8CA67F11EF97375182762E951A/M9k2dXxyMpyzVJDsNDXRPytwToI.mft
Manifest number:          0235
Signing time:             Tue 26 May 2026 04:38:57 +0000
Manifest this update:     Tue 26 May 2026 04:38:56 +0000
Manifest next update:     Thu 28 May 2026 04:38:56 +0000
Files and hashes:         1: M9k2dXxyMpyzVJDsNDXRPytwToI.crl (hash: 41kbDsHiv9w5mS9u7VQOvC+LE3VL67SVZvHqNEr01xw=)
                          2: 2E2B725AEEF411EFBCFA6F43762E951A.roa (hash: pbm0HU0V1QcdM+FCx6QyJP3O4fULzd1SgmZHd7KGnyo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3690C51/AE080A8CA67F11EF97375182762E951A/M9k2dXxyMpyzVJDsNDXRPytwToI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3690C51/AE080A8CA67F11EF97375182762E951A/M9k2dXxyMpyzVJDsNDXRPytwToI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/M9k2dXxyMpyzVJDsNDXRPytwToI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 28 May 2026 00:07:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 566 (0x236)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3690C51AF, serialNumber=33D936757C72329CB35490EC3435D13F2B704E82
        Validity
            Not Before: May 26 04:38:56 2026 GMT
            Not After : May 28 04:38:56 2026 GMT
        Subject: CN=6a1523e1-1233
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:7a:69:ae:53:71:54:21:e2:b7:86:7b:fc:93:
                    23:62:28:c7:b5:e6:07:79:03:1a:c6:5e:b5:ae:eb:
                    af:c8:8d:33:f3:69:77:d7:7a:b2:a8:74:ca:b1:60:
                    d0:00:6e:9e:ad:67:f8:b2:22:dc:a0:31:9d:fd:75:
                    fb:33:04:96:f8:86:65:8d:ff:92:1c:7b:a5:19:ae:
                    58:60:0b:2e:a8:86:9b:8b:2d:2a:b4:55:3f:9a:fb:
                    20:61:8f:40:76:e9:51:27:f1:62:31:63:d0:6d:84:
                    a3:d7:3c:f0:09:4d:db:c9:0f:7b:b5:8c:dd:b8:32:
                    f6:16:08:0f:99:2e:81:7a:aa:16:9e:04:58:a8:9e:
                    ea:4d:fd:00:2c:f7:7e:29:43:56:95:d8:de:54:ac:
                    23:fe:30:4a:4d:54:ab:a0:ec:26:d8:cd:a6:45:a9:
                    09:6b:39:2b:6e:86:23:a8:07:b2:eb:f6:10:a4:45:
                    0e:3f:cf:82:4c:a1:12:63:22:af:d8:a7:4c:8b:51:
                    10:19:8f:fb:64:0b:5b:7e:85:30:25:98:2d:94:33:
                    45:cb:3f:0e:e4:ee:f5:78:87:ec:ed:bd:e5:62:c1:
                    d3:0b:f4:d0:62:ae:e0:f7:a9:81:a0:3d:37:f6:a2:
                    03:56:41:1b:28:99:db:74:bf:bc:b8:4e:bb:fd:51:
                    b8:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:6B:BD:D1:F7:15:F2:F9:2F:AC:F8:6D:3D:60:65:8D:93:7C:1B:A6
            X509v3 Authority Key Identifier:
                keyid:33:D9:36:75:7C:72:32:9C:B3:54:90:EC:34:35:D1:3F:2B:70:4E:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3690C51/AE080A8CA67F11EF97375182762E951A/M9k2dXxyMpyzVJDsNDXRPytwToI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/M9k2dXxyMpyzVJDsNDXRPytwToI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3690C51/AE080A8CA67F11EF97375182762E951A/M9k2dXxyMpyzVJDsNDXRPytwToI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:96:00:f7:33:cc:db:dd:5f:25:c0:2d:69:f3:0f:9b:f6:6f:
         19:71:a5:50:cd:66:7d:09:18:54:ce:d1:51:eb:8a:6f:94:db:
         58:a2:7d:c5:d5:f5:74:37:ca:0d:78:aa:9d:82:bd:64:b7:c2:
         a8:c6:7d:36:09:7f:0b:35:c4:76:41:b2:71:69:3d:98:ca:fd:
         e9:8c:27:01:94:7b:de:0d:9b:86:92:1b:b4:20:e1:37:f9:b6:
         24:a9:aa:2a:c1:7f:80:7a:b9:1d:fd:62:6c:6c:81:09:db:06:
         b6:e1:43:61:dd:59:ac:37:aa:30:dd:ed:0b:92:25:b7:e5:d5:
         ea:c5:9b:9f:d0:46:7c:96:d9:80:ae:84:21:2c:15:2e:cf:a6:
         39:cf:0f:bb:85:3b:ca:88:c0:7d:fb:80:9b:16:2f:b1:23:49:
         42:9f:d5:91:88:59:cd:3f:6e:2c:46:26:6e:53:b5:ba:c3:ab:
         71:52:35:f1:56:40:dc:20:5c:c9:b5:ca:a1:e0:b0:9b:5c:65:
         f2:92:57:a9:41:bd:55:04:5e:8e:93:5c:da:44:36:97:5f:28:
         b2:dc:8b:cd:b0:a9:1e:08:6d:89:c5:28:e8:e9:bc:9c:56:17:
         1a:a5:e2:34:3d:b8:0f:83:6f:6b:81:be:e5:45:52:ea:a5:c3:
         97:cc:ba:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 26 07:46:35 2026 by rpki-client