Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36ABB63/E08FB58213F311E5A8E5AE44F8AEA228/41870XBX5RmmOBSWl-AwgOrYdys.mft
File:                     41870XBX5RmmOBSWl-AwgOrYdys.mft (raw, json)
Hash identifier:          fvY4HsZt330XWoJgAdDcfyfXbPVSroiB1hEF4lJtCX0=
Subject key identifier:   37:EB:28:7F:1A:42:FE:CA:07:B0:CF:2F:FD:F4:06:BC:C6:E0:49:72
Authority key identifier: E3:5F:3B:D1:70:57:E5:19:A6:38:14:96:97:E0:30:80:EA:D8:77:2B
Certificate issuer:       /CN=F36ABB63AF/serialNumber=E35F3BD17057E519A638149697E03080EAD8772B
Certificate serial:       0FDB
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/41870XBX5RmmOBSWl-AwgOrYdys.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36ABB63/E08FB58213F311E5A8E5AE44F8AEA228/41870XBX5RmmOBSWl-AwgOrYdys.mft
Manifest number:          0FD9
Signing time:             Thu 07 May 2026 00:51:26 +0000
Manifest this update:     Thu 07 May 2026 00:51:25 +0000
Manifest next update:     Sat 09 May 2026 00:51:25 +0000
Files and hashes:         1: 41870XBX5RmmOBSWl-AwgOrYdys.crl (hash: JDoaqL3QYP2srOqteWntLkuei2bQy733vPbqx7ji4jw=)
                          2: 752DB50C461511E99A25B144F8AEA228.roa (hash: k0Rhsuh/b99q9kDn1FoP+OO8bsw50UMZoPySxuOGhI8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36ABB63/E08FB58213F311E5A8E5AE44F8AEA228/41870XBX5RmmOBSWl-AwgOrYdys.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36ABB63/E08FB58213F311E5A8E5AE44F8AEA228/41870XBX5RmmOBSWl-AwgOrYdys.mft
                          rsync://rpki.afrinic.net/repository/afrinic/41870XBX5RmmOBSWl-AwgOrYdys.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 09 May 2026 00:07:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4059 (0xfdb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36ABB63AF, serialNumber=E35F3BD17057E519A638149697E03080EAD8772B
        Validity
            Not Before: May  7 00:51:25 2026 GMT
            Not After : May  9 00:51:25 2026 GMT
        Subject: CN=69fbe20e-a041
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:02:55:07:da:a4:ae:93:d7:34:1e:1c:24:6b:
                    a3:dd:72:a4:cb:36:69:c1:33:00:a4:f1:6d:f0:f3:
                    60:b7:80:4b:2a:08:68:c6:1c:c2:f9:7a:35:2c:1d:
                    9a:29:fa:00:82:df:0b:ac:bd:d5:13:f9:d5:7f:52:
                    db:8b:f1:c7:57:3b:c9:50:ea:5e:3e:ca:ce:f0:7d:
                    a7:1b:eb:83:4f:fa:41:ac:3a:2a:18:64:46:ab:a0:
                    26:40:ce:1c:a1:d6:77:74:55:51:c4:31:4a:70:a3:
                    c1:bd:72:65:01:1c:2b:36:04:75:9a:39:82:96:2d:
                    64:06:c7:61:dc:54:90:c9:9d:e0:e4:8a:67:d7:47:
                    2d:4c:45:9a:18:a5:e6:5b:65:90:1c:c2:10:c0:81:
                    10:dd:69:19:ec:57:94:69:85:11:b4:2c:cc:2c:1d:
                    fc:ac:cb:4b:bc:20:a9:a2:03:3e:da:5a:bd:fc:68:
                    d3:50:66:d9:11:d4:82:93:bf:87:b5:0c:71:cd:cf:
                    30:28:96:3d:a6:a1:f5:92:b5:a0:2b:77:96:b5:32:
                    a8:0e:14:19:8f:09:f6:4b:f0:1c:db:9d:bd:87:ac:
                    3d:1e:d2:a9:ca:c1:16:ac:db:c3:04:a0:c4:60:59:
                    3e:3f:24:00:b7:a1:2b:21:a9:bc:11:d3:29:32:f0:
                    15:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:EB:28:7F:1A:42:FE:CA:07:B0:CF:2F:FD:F4:06:BC:C6:E0:49:72
            X509v3 Authority Key Identifier:
                keyid:E3:5F:3B:D1:70:57:E5:19:A6:38:14:96:97:E0:30:80:EA:D8:77:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36ABB63/E08FB58213F311E5A8E5AE44F8AEA228/41870XBX5RmmOBSWl-AwgOrYdys.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/41870XBX5RmmOBSWl-AwgOrYdys.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36ABB63/E08FB58213F311E5A8E5AE44F8AEA228/41870XBX5RmmOBSWl-AwgOrYdys.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:a6:b8:26:7f:12:3c:65:7e:4b:6d:5f:eb:71:3b:6d:ed:79:
         9d:9c:7d:69:02:6f:d7:63:df:66:fc:42:0c:e4:3e:ea:6f:b8:
         ae:4c:26:bf:9a:93:ac:c0:ad:de:ee:47:f7:eb:b5:21:06:db:
         e6:98:8f:6a:ce:f5:ab:5c:4e:d3:e7:77:8c:d6:8c:dd:6d:13:
         66:fc:52:5d:65:19:44:a4:1b:6e:1b:99:74:8e:66:92:f4:33:
         c1:f5:f1:04:97:dc:8d:79:ce:97:2c:80:73:1a:ea:52:33:61:
         f5:59:f4:f1:d5:ab:6e:0c:7b:11:59:3f:30:68:6f:22:33:16:
         f0:2a:49:41:16:c2:8d:d4:b3:a0:00:b6:a9:53:9f:43:7c:b0:
         64:43:ea:c2:c4:1e:bf:27:83:90:7f:eb:2b:f7:b7:cd:51:3a:
         b5:22:9f:68:46:81:0a:b3:43:62:a2:66:8e:a2:50:a9:e8:38:
         92:dd:5c:44:60:18:93:ec:0b:be:b1:3e:cf:e6:66:5a:85:e6:
         ed:85:29:ea:f3:fd:89:d1:93:2d:e4:fe:dc:03:8d:f1:8b:e6:
         2b:eb:56:eb:51:65:ae:9d:d3:e6:d1:8b:14:be:7c:49:86:11:
         00:8c:c2:1c:5d:e9:bc:12:ec:68:30:8b:b6:10:04:1d:6c:67:
         aa:85:e8:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 21:38:12 2026 by rpki-client