Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369B304/B98A352CEC1211F0ABA757A0DAE4EC9C/XY4nZDYESZrfo7elNFeDrRLbr_M.mft
File:                     XY4nZDYESZrfo7elNFeDrRLbr_M.mft (raw, json)
Hash identifier:          4fHigYYcsDzAITTP0aI8uYYAXfRpNSEjevyissjOgR8=
Subject key identifier:   55:9D:1E:CB:1E:21:6E:25:98:60:68:09:B0:20:68:A3:22:92:86:99
Authority key identifier: 5D:8E:27:64:36:04:49:9A:DF:A3:B7:A5:34:57:83:AD:12:DB:AF:F3
Certificate issuer:       /CN=F369B304AF/serialNumber=5D8E27643604499ADFA3B7A5345783AD12DBAFF3
Certificate serial:       7A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/XY4nZDYESZrfo7elNFeDrRLbr_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369B304/B98A352CEC1211F0ABA757A0DAE4EC9C/XY4nZDYESZrfo7elNFeDrRLbr_M.mft
Manifest number:          7A
Signing time:             Thu 07 May 2026 05:21:09 +0000
Manifest this update:     Thu 07 May 2026 05:21:09 +0000
Manifest next update:     Sat 09 May 2026 05:21:09 +0000
Files and hashes:         1: XY4nZDYESZrfo7elNFeDrRLbr_M.crl (hash: M5/PX4w6z3VFT14nQ6pphPo3LupYNODwx0Phe4igieI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369B304/B98A352CEC1211F0ABA757A0DAE4EC9C/XY4nZDYESZrfo7elNFeDrRLbr_M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369B304/B98A352CEC1211F0ABA757A0DAE4EC9C/XY4nZDYESZrfo7elNFeDrRLbr_M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/XY4nZDYESZrfo7elNFeDrRLbr_M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 09 May 2026 00:07:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122 (0x7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369B304AF, serialNumber=5D8E27643604499ADFA3B7A5345783AD12DBAFF3
        Validity
            Not Before: May  7 05:21:09 2026 GMT
            Not After : May  9 05:21:09 2026 GMT
        Subject: CN=69fc2145-a2df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:1c:5f:06:66:1e:ba:e6:c6:4f:84:6e:4c:df:
                    c7:1c:1d:c8:32:b1:9b:64:a1:77:4e:83:9d:93:d3:
                    ea:ab:0f:54:79:ea:3e:38:83:70:b7:76:c7:d2:32:
                    b8:fb:d1:01:90:ef:91:8b:67:a9:0f:c0:c4:5f:ba:
                    5e:7d:ae:97:68:80:63:d8:e7:04:76:9f:78:03:d8:
                    ad:a2:99:41:12:5c:65:98:99:b2:01:24:77:5f:ff:
                    36:f0:1f:a2:ca:30:21:92:28:ad:c5:db:8f:92:b1:
                    9e:07:f3:ff:79:89:32:f3:f7:47:b7:63:a8:df:45:
                    c7:ec:03:f0:f9:07:d5:bb:48:e3:5c:b8:ab:d2:d9:
                    8d:96:c9:e0:79:1a:49:e9:bb:fd:52:24:60:31:31:
                    c5:19:13:97:4d:59:59:23:13:5e:50:e3:2a:db:c5:
                    4f:46:c9:d7:d1:80:a5:b5:ac:b5:ce:11:7c:57:91:
                    2f:1f:9b:a5:6a:91:d0:e0:93:57:63:6f:dd:87:e2:
                    34:25:a3:24:2c:cf:e4:fa:c1:5b:1e:64:6d:65:01:
                    14:59:aa:db:4c:c1:1c:ea:be:c3:8e:f9:0c:82:0b:
                    75:f7:a5:95:cb:de:7d:0d:da:27:94:78:38:79:a6:
                    85:79:71:24:69:3f:f8:b0:f9:19:07:54:e6:91:1e:
                    bb:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:9D:1E:CB:1E:21:6E:25:98:60:68:09:B0:20:68:A3:22:92:86:99
            X509v3 Authority Key Identifier:
                keyid:5D:8E:27:64:36:04:49:9A:DF:A3:B7:A5:34:57:83:AD:12:DB:AF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369B304/B98A352CEC1211F0ABA757A0DAE4EC9C/XY4nZDYESZrfo7elNFeDrRLbr_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XY4nZDYESZrfo7elNFeDrRLbr_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369B304/B98A352CEC1211F0ABA757A0DAE4EC9C/XY4nZDYESZrfo7elNFeDrRLbr_M.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:12:61:c3:49:75:24:27:fa:31:7a:d3:ba:65:5b:48:3b:38:
         32:3c:95:38:4e:ed:cc:74:0d:94:dc:c0:07:0e:3e:25:66:08:
         ab:4d:8d:b5:35:3f:21:1b:73:46:2a:1c:ae:13:d5:c2:93:27:
         9a:a6:cd:70:19:4a:73:db:4a:f2:01:c0:68:50:61:be:13:60:
         a4:d0:bb:bf:29:19:f9:03:bc:d6:6b:55:ca:71:21:67:0f:3a:
         ac:64:86:27:34:dd:b7:39:d6:6f:8f:69:c5:4f:27:63:ed:49:
         13:e5:1b:5d:ac:cc:93:07:65:79:4c:09:2a:0e:84:bc:fb:bc:
         73:f5:be:b3:da:b0:0d:9c:62:cc:33:5b:d4:d9:8a:7a:1e:12:
         cd:3c:ea:10:5c:6c:22:f1:bb:f6:e9:52:27:4a:ad:24:e7:a4:
         e6:6b:75:ed:ef:bd:bf:28:b0:cb:ad:b5:d4:3a:9d:78:d4:2a:
         50:31:dc:fd:6e:66:2c:bb:45:67:67:e7:ec:6d:26:3f:32:fb:
         2a:97:6e:c6:d9:4c:10:61:3e:b9:88:83:6d:ee:43:f4:cd:64:
         b8:b4:09:3b:10:13:1e:28:fb:57:23:8a:7f:91:37:cf:1b:9a:
         b4:a9:cf:4b:25:80:2b:86:19:7d:56:68:f5:46:de:8e:95:3f:
         7e:03:c7:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 21:36:32 2026 by rpki-client