Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3697E68/5B325B264A6011EF8601828E762E951A/zh7NpPBWlnC1huLNNSvXIG_YeAQ.mft
File:                     zh7NpPBWlnC1huLNNSvXIG_YeAQ.mft (raw, json)
Hash identifier:          vxLANwdb/K69Cf0euwR6ATg8VrcXAdYHet5Ly34LO1c=
Subject key identifier:   5E:E3:39:3A:2A:CF:E3:04:89:D1:31:ED:64:DE:A9:4F:55:6C:D2:28
Authority key identifier: CE:1E:CD:A4:F0:56:96:70:B5:86:E2:CD:35:2B:D7:20:6F:D8:78:04
Certificate issuer:       /CN=F3697E68AF/serialNumber=CE1ECDA4F0569670B586E2CD352BD7206FD87804
Certificate serial:       02A5
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/zh7NpPBWlnC1huLNNSvXIG_YeAQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3697E68/5B325B264A6011EF8601828E762E951A/zh7NpPBWlnC1huLNNSvXIG_YeAQ.mft
Manifest number:          02A1
Signing time:             Thu 07 May 2026 04:21:13 +0000
Manifest this update:     Thu 07 May 2026 04:21:12 +0000
Manifest next update:     Sat 09 May 2026 04:21:12 +0000
Files and hashes:         1: zh7NpPBWlnC1huLNNSvXIG_YeAQ.crl (hash: QM0BMBCNVg6JiC+sEb5Hju7KUqHVBDZO79uh2FDGcdA=)
                          2: 7A18E53AE3A511EFB1E8E756762E951A.roa (hash: 2LPC2UkkLzMGcbYCbFGtnfKTTqIGsxGXV0s+CLhea/M=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3697E68/5B325B264A6011EF8601828E762E951A/zh7NpPBWlnC1huLNNSvXIG_YeAQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3697E68/5B325B264A6011EF8601828E762E951A/zh7NpPBWlnC1huLNNSvXIG_YeAQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/zh7NpPBWlnC1huLNNSvXIG_YeAQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 09 May 2026 00:07:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 677 (0x2a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3697E68AF, serialNumber=CE1ECDA4F0569670B586E2CD352BD7206FD87804
        Validity
            Not Before: May  7 04:21:12 2026 GMT
            Not After : May  9 04:21:12 2026 GMT
        Subject: CN=69fc1339-52c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:7a:de:2e:ff:f6:5c:5c:b6:67:03:e8:c8:a7:
                    e1:18:3c:0a:78:3d:ea:d8:e8:54:63:be:16:cf:1a:
                    4d:66:47:b0:25:f9:36:52:64:92:62:5e:ad:d1:6f:
                    f0:2a:28:c2:74:fc:73:be:26:cb:11:5a:59:48:fe:
                    50:dc:9d:31:48:db:63:85:2c:d0:7c:91:84:8e:a5:
                    6c:64:8e:b9:ff:c7:91:f4:6d:82:46:a0:1c:10:2e:
                    3e:81:10:dc:fd:77:2e:c0:ec:2e:db:78:b5:91:be:
                    ff:68:c8:0f:a4:c0:53:5e:bf:74:47:d1:40:82:91:
                    c3:bd:2d:99:6d:42:9b:21:e8:ae:14:f4:38:34:63:
                    e2:5b:4d:47:da:da:f8:88:05:ea:04:09:92:f2:21:
                    37:4a:aa:6e:a4:59:08:85:dc:b3:f0:70:af:ca:c6:
                    b5:31:e4:b3:af:4c:6b:71:60:f9:c7:16:12:f7:eb:
                    96:95:0d:35:7b:59:4a:46:56:fd:c7:be:35:32:15:
                    4c:72:ea:5b:f5:2f:fe:aa:20:83:87:a6:d9:c1:5e:
                    22:9b:94:6d:a7:00:f4:ce:ab:ab:31:6c:f4:df:df:
                    39:ae:1d:3d:0d:a4:f6:86:90:fc:72:d0:f0:57:b3:
                    2e:1d:6a:dd:e3:23:da:4e:c1:1f:c2:cd:86:43:71:
                    ae:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:E3:39:3A:2A:CF:E3:04:89:D1:31:ED:64:DE:A9:4F:55:6C:D2:28
            X509v3 Authority Key Identifier:
                keyid:CE:1E:CD:A4:F0:56:96:70:B5:86:E2:CD:35:2B:D7:20:6F:D8:78:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3697E68/5B325B264A6011EF8601828E762E951A/zh7NpPBWlnC1huLNNSvXIG_YeAQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zh7NpPBWlnC1huLNNSvXIG_YeAQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3697E68/5B325B264A6011EF8601828E762E951A/zh7NpPBWlnC1huLNNSvXIG_YeAQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:03:44:57:76:38:60:e6:ea:b4:90:61:f6:fc:91:e3:a2:c9:
         75:8d:fe:65:2b:04:b2:87:3f:73:b1:00:20:27:6a:66:e9:95:
         68:ae:66:6f:90:cf:eb:58:9f:24:d1:2e:d3:65:77:0e:5c:34:
         8e:f3:e7:f2:36:6b:f2:7c:de:4a:f0:b6:7d:76:49:fe:d5:b9:
         ba:8c:32:af:d7:9b:77:7e:90:37:6e:e4:ec:05:cb:5b:df:75:
         19:67:c3:36:d7:f3:5b:c1:99:87:cf:24:41:c4:e6:a9:bd:78:
         68:75:08:44:3c:49:ce:5d:a1:c6:82:94:0d:5d:dd:9a:d2:c9:
         a0:fb:d3:f8:55:8d:51:f5:d0:6f:ce:0d:0c:ff:df:be:e5:b3:
         54:ad:f4:00:53:6f:69:09:77:28:06:f9:93:16:d6:9b:2e:04:
         47:76:4f:d8:4b:0f:2c:b5:ea:db:30:55:44:dc:0c:ec:6c:36:
         c4:49:40:ae:48:3f:6c:b4:ae:6a:7b:b1:2a:b3:9e:e2:56:59:
         cc:5a:80:ff:02:93:c1:37:be:e3:8b:fd:b4:6f:78:da:39:f7:
         bc:0c:41:e9:39:3e:6a:47:5f:0e:b7:30:da:d2:48:0d:19:50:
         9b:db:21:4e:13:2c:a0:fa:4d:2a:22:7b:bd:c2:d9:f8:7c:56:
         96:4f:8b:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 21:39:36 2026 by rpki-client