Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A41A0/F063CE320A9711EEB9B425234AD9E6FC/XyKMRr7ytMupTLKfEMNoDuKIPbM.mft
File:                     XyKMRr7ytMupTLKfEMNoDuKIPbM.mft (raw, json)
Hash identifier:          n80hoFC5zq7GuLqLTCtB2x74lqqKzymrEQyHgtOurJ0=
Subject key identifier:   6E:63:EF:E0:D8:A3:AF:5A:AB:10:92:6E:31:A3:AA:A7:75:A9:53:52
Authority key identifier: 5F:22:8C:46:BE:F2:B4:CB:A9:4C:B2:9F:10:C3:68:0E:E2:88:3D:B3
Certificate issuer:       /CN=F36A41A0AF/serialNumber=5F228C46BEF2B4CBA94CB29F10C3680EE2883DB3
Certificate serial:       0459
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/XyKMRr7ytMupTLKfEMNoDuKIPbM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A41A0/F063CE320A9711EEB9B425234AD9E6FC/XyKMRr7ytMupTLKfEMNoDuKIPbM.mft
Manifest number:          044F
Signing time:             Thu 07 May 2026 03:28:26 +0000
Manifest this update:     Thu 07 May 2026 03:28:25 +0000
Manifest next update:     Sat 09 May 2026 03:28:25 +0000
Files and hashes:         1: XyKMRr7ytMupTLKfEMNoDuKIPbM.crl (hash: 5IJMKRZbayam0OLUWnnVyhKfmnl+Yod+MKNR07Odbd4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A41A0/F063CE320A9711EEB9B425234AD9E6FC/XyKMRr7ytMupTLKfEMNoDuKIPbM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A41A0/F063CE320A9711EEB9B425234AD9E6FC/XyKMRr7ytMupTLKfEMNoDuKIPbM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/XyKMRr7ytMupTLKfEMNoDuKIPbM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 09 May 2026 00:07:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1113 (0x459)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A41A0AF, serialNumber=5F228C46BEF2B4CBA94CB29F10C3680EE2883DB3
        Validity
            Not Before: May  7 03:28:25 2026 GMT
            Not After : May  9 03:28:25 2026 GMT
        Subject: CN=69fc06da-7f67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:8e:0f:c3:55:12:41:2b:a6:ad:2d:03:38:9a:
                    54:7d:a7:c7:f0:f7:3a:d6:ae:46:1a:a4:50:f4:4e:
                    e4:46:71:46:20:41:ef:40:2c:83:d9:c9:b9:aa:2f:
                    c9:0f:43:65:2f:62:e5:1d:8f:03:f7:21:84:42:da:
                    4c:67:66:e6:89:53:f4:00:cf:3a:c8:17:8c:42:43:
                    b6:75:a6:4b:66:5d:27:28:73:a9:98:81:d7:9b:81:
                    69:46:dc:92:43:80:79:c9:6d:fb:d9:82:0d:3c:22:
                    3b:9b:fb:51:5d:47:e5:2a:79:4d:33:3b:fb:e8:6a:
                    86:10:b5:c7:f8:5c:3f:1b:41:bf:7e:8d:3d:9d:3e:
                    57:15:5e:6e:22:cc:e8:98:48:9d:e1:77:7c:05:e9:
                    2e:87:6f:6e:85:5e:f4:3c:4d:70:b2:0a:18:93:be:
                    11:f6:3a:c3:cc:40:64:72:e0:f3:a1:a4:8c:f4:76:
                    c3:19:a4:f7:95:45:39:7c:7e:9d:13:52:c3:9a:c8:
                    68:7d:20:e3:47:e0:89:c8:bb:0e:35:68:a6:5f:71:
                    32:6b:cd:fa:42:e5:dc:9a:05:94:86:9d:db:27:f0:
                    db:a7:f7:d6:23:0f:1b:b2:69:96:a8:4f:d0:85:d2:
                    e8:85:10:f6:1a:dc:4f:ff:96:93:8f:0c:3e:34:46:
                    ad:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:63:EF:E0:D8:A3:AF:5A:AB:10:92:6E:31:A3:AA:A7:75:A9:53:52
            X509v3 Authority Key Identifier:
                keyid:5F:22:8C:46:BE:F2:B4:CB:A9:4C:B2:9F:10:C3:68:0E:E2:88:3D:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A41A0/F063CE320A9711EEB9B425234AD9E6FC/XyKMRr7ytMupTLKfEMNoDuKIPbM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XyKMRr7ytMupTLKfEMNoDuKIPbM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A41A0/F063CE320A9711EEB9B425234AD9E6FC/XyKMRr7ytMupTLKfEMNoDuKIPbM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:84:35:c7:99:65:a5:40:4a:36:f5:92:3e:e1:bb:97:e4:51:
         d6:87:01:e0:d1:7d:f6:c4:12:8e:fa:a4:52:21:71:b9:8d:25:
         fa:84:af:a9:f3:bb:67:65:00:c5:06:ee:33:f8:61:31:2d:8e:
         2b:79:47:d6:b6:70:3b:a3:18:e7:6e:98:15:80:ad:01:88:3b:
         31:04:e5:40:33:e3:ca:df:67:63:32:48:06:b5:0e:98:34:89:
         d7:0a:13:0f:fa:b9:57:cf:d0:a6:7a:e1:3d:1d:83:8b:a8:ee:
         33:4f:be:0b:32:46:7f:27:90:c0:ce:4e:99:67:4d:03:c1:c2:
         e8:8a:44:e4:c1:14:74:59:95:53:ba:9b:23:e7:e1:fa:48:fc:
         b3:b1:2e:c0:77:40:a3:fa:58:3d:22:93:99:e1:57:34:63:ba:
         78:e1:57:e5:47:f2:f2:5a:0c:66:26:d1:7c:73:3a:0c:8d:ed:
         61:91:2d:5c:9b:77:ce:bf:ce:08:b6:39:b7:8a:76:e8:9c:76:
         8f:be:3a:27:a8:09:fd:ae:81:79:09:a5:dc:a1:30:65:c3:d2:
         16:85:82:11:02:0b:92:5e:58:07:14:7e:a0:6f:79:04:c5:d2:
         5d:44:32:90:61:44:8d:9b:b3:da:3c:f8:bc:72:87:f1:ae:b9:
         62:13:a4:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 21:35:19 2026 by rpki-client