Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3697F9B/C6DEF4DCE24611EA8D16EF50F8AEA228/a-k9QjdfWHWi-MrSgJiFQWLSUEg.mft
File:                     a-k9QjdfWHWi-MrSgJiFQWLSUEg.mft (raw, json)
Hash identifier:          rXbp1kep2/I/Z3fVkCQVgMP2Xec8vy/yIgbssDL/7Kg=
Subject key identifier:   3B:8A:B2:45:FA:A4:FA:BD:97:81:9B:55:D3:D0:C8:7D:FF:14:7F:CB
Authority key identifier: 6B:E9:3D:42:37:5F:58:75:A2:F8:CA:D2:80:98:85:41:62:D2:50:48
Certificate issuer:       /CN=F3697F9BAF/serialNumber=6BE93D42375F5875A2F8CAD28098854162D25048
Certificate serial:       0850
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/a-k9QjdfWHWi-MrSgJiFQWLSUEg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3697F9B/C6DEF4DCE24611EA8D16EF50F8AEA228/a-k9QjdfWHWi-MrSgJiFQWLSUEg.mft
Manifest number:          084A
Signing time:             Sat 18 Apr 2026 01:52:55 +0000
Manifest this update:     Sat 18 Apr 2026 01:52:54 +0000
Manifest next update:     Mon 20 Apr 2026 01:52:54 +0000
Files and hashes:         1: a-k9QjdfWHWi-MrSgJiFQWLSUEg.crl (hash: llPQnwT35KFO6AB49mbDgopTouX5WTYaJValYxWe2ME=)
                          2: E24D05EEE25311EA92AD155EF8AEA228.roa (hash: NhNBSTEDSsS8nv1gPk35pYlSA/j54gCUeglNVOfp5Jk=)
                          3: 8B23E96CE25411EAABDED95EF8AEA228.roa (hash: G1N7VCX3quzWOxjZ6v2ZRD1s53UOL4I3nt3IbyrQuyg=)
                          4: 10D082ECE25411EAB7E7505EF8AEA228.roa (hash: HCeS+ur8bLRwVYC7j4CEZcmf2zW7Wq0HlwhQZaJebjk=)
                          5: 8DA134B6E25311EA83A9A55DF8AEA228.roa (hash: FZLhMJ//MfWJptrE3zcXjMsUeDRso3qHvO1+H5qU2Z0=)
                          6: B193AAD8E25411EAACEFFA5EF8AEA228.roa (hash: 6msQDGgz9SoLw2neOnUxuPHAYOAC1PdRzeLr4+FvrcI=)
                          7: 57CB6630E25411EA8C85A55EF8AEA228.roa (hash: zokPSNjx8r4IpsyxRDDLa5MvDTlpaKfogK8lEwUhKrg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3697F9B/C6DEF4DCE24611EA8D16EF50F8AEA228/a-k9QjdfWHWi-MrSgJiFQWLSUEg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3697F9B/C6DEF4DCE24611EA8D16EF50F8AEA228/a-k9QjdfWHWi-MrSgJiFQWLSUEg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/a-k9QjdfWHWi-MrSgJiFQWLSUEg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 20 Apr 2026 01:52:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2128 (0x850)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3697F9BAF, serialNumber=6BE93D42375F5875A2F8CAD28098854162D25048
        Validity
            Not Before: Apr 18 01:52:54 2026 GMT
            Not After : Apr 20 01:52:54 2026 GMT
        Subject: CN=69e2e3f6-c307
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a7:bf:72:8a:b7:45:10:8e:4f:d6:e8:1e:2b:
                    e6:26:f6:65:59:9e:2e:6d:3f:41:65:1f:00:e1:86:
                    e1:1a:f8:05:f5:e6:22:95:8c:6b:0a:0c:c7:8f:85:
                    a3:be:39:47:16:6f:bc:72:19:e2:6b:ad:4b:e4:b5:
                    f0:ca:9d:88:e1:93:75:35:dc:52:6a:f7:27:cc:fa:
                    c4:47:5b:a2:cd:54:4d:29:af:71:11:11:38:09:42:
                    ee:27:d9:17:71:e9:e8:02:60:29:c8:c3:c8:09:c8:
                    49:1f:ac:e4:ef:54:e9:3e:89:98:11:2d:62:d2:d9:
                    ce:6f:bd:88:48:14:82:a4:6b:d2:46:29:42:d0:e4:
                    9d:f6:0f:84:34:98:e8:fa:a1:c2:c2:e1:59:72:69:
                    35:0e:a8:40:e1:16:95:f7:3a:60:2b:02:81:ce:a8:
                    a1:25:87:d1:38:f0:51:ab:36:35:99:bb:4e:2b:00:
                    71:55:ae:8a:2e:b0:9d:e9:cb:da:e8:b7:15:ef:9b:
                    4b:5c:66:c4:c5:f5:15:ef:2a:ee:48:c0:d0:b3:31:
                    0f:36:39:ac:97:60:cf:21:a4:81:df:22:9e:6b:61:
                    95:60:6d:f2:19:01:36:f5:fd:17:be:bb:57:ae:71:
                    d4:88:bd:34:0d:00:a1:e6:1e:3b:b5:60:ce:c9:63:
                    29:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:8A:B2:45:FA:A4:FA:BD:97:81:9B:55:D3:D0:C8:7D:FF:14:7F:CB
            X509v3 Authority Key Identifier:
                keyid:6B:E9:3D:42:37:5F:58:75:A2:F8:CA:D2:80:98:85:41:62:D2:50:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3697F9B/C6DEF4DCE24611EA8D16EF50F8AEA228/a-k9QjdfWHWi-MrSgJiFQWLSUEg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/a-k9QjdfWHWi-MrSgJiFQWLSUEg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3697F9B/C6DEF4DCE24611EA8D16EF50F8AEA228/a-k9QjdfWHWi-MrSgJiFQWLSUEg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:fc:9b:b8:e1:96:08:3f:e2:cf:5c:42:89:91:f7:0a:59:3d:
         d8:be:4d:cf:25:3a:50:c6:54:ef:bc:da:29:6b:88:eb:a1:81:
         30:ff:9a:c3:6b:ba:cf:43:c2:c4:6c:1f:32:d2:2b:0e:c2:48:
         bb:d0:7a:87:dd:8c:d7:69:20:93:e3:89:41:39:1a:3a:15:0d:
         ad:6d:32:b7:00:3b:a3:69:ca:cb:b8:70:87:8f:ba:54:5e:f9:
         7d:d7:2e:d7:9d:ac:30:da:88:c3:dd:b1:b2:ed:7e:9a:73:f5:
         76:da:29:bd:8d:2d:bf:56:6d:5f:12:43:4b:e6:53:16:a9:72:
         bf:33:8e:14:b2:5d:08:fb:c0:0b:3a:71:d2:c3:49:d7:86:69:
         6f:39:eb:3b:16:af:77:3e:c8:9e:37:01:a6:fb:70:ca:da:c2:
         a2:a5:65:c2:30:4d:50:7f:b6:6c:33:ac:a4:46:00:3f:61:7c:
         33:b7:2f:6c:30:c2:12:48:08:76:48:91:52:77:bc:0c:e0:d6:
         1c:e8:94:98:66:84:b3:e9:40:a6:99:93:3a:17:8d:79:01:59:
         ff:e1:08:43:97:c9:03:7c:61:d4:d1:e4:54:f4:a3:e2:e0:3c:
         36:80:49:c5:59:ae:82:25:90:ed:3b:07:51:dc:17:6a:98:eb:
         b6:b9:d3:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 00:54:50 2026 by rpki-client