Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B1EE5/21831C1C4F1511EFB7A68685762E951A/l8yJP0_VIPZzaAb5eWJZm3eOG2M.mft
File:                     l8yJP0_VIPZzaAb5eWJZm3eOG2M.mft (raw, json)
Hash identifier:          kYok2cs5ibcu/OIP45i6hrRnuIwBOg8QtjRYUShEp8k=
Subject key identifier:   DB:D7:10:6B:A4:32:19:DE:98:E9:E3:92:89:16:34:D0:13:16:97:19
Authority key identifier: 97:CC:89:3F:4F:D5:20:F6:73:68:06:F9:79:62:59:9B:77:8E:1B:63
Certificate issuer:       /CN=F36B1EE5AF/serialNumber=97CC893F4FD520F6736806F97962599B778E1B63
Certificate serial:       029C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/l8yJP0_VIPZzaAb5eWJZm3eOG2M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B1EE5/21831C1C4F1511EFB7A68685762E951A/l8yJP0_VIPZzaAb5eWJZm3eOG2M.mft
Manifest number:          0299
Signing time:             Thu 07 May 2026 04:21:49 +0000
Manifest this update:     Thu 07 May 2026 04:21:48 +0000
Manifest next update:     Sat 09 May 2026 04:21:48 +0000
Files and hashes:         1: l8yJP0_VIPZzaAb5eWJZm3eOG2M.crl (hash: ywkGmlHVCN9OqvCbzN+qXhnjzdqBFZ/rv0sF8eitNEk=)
                          2: 15FF8A604F2E11EFBF7DAA5D762E951A.roa (hash: Ji+PkrLYVd8mg+kmjzLysu+cTidIjguKCtckW26wTJg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B1EE5/21831C1C4F1511EFB7A68685762E951A/l8yJP0_VIPZzaAb5eWJZm3eOG2M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B1EE5/21831C1C4F1511EFB7A68685762E951A/l8yJP0_VIPZzaAb5eWJZm3eOG2M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/l8yJP0_VIPZzaAb5eWJZm3eOG2M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 09 May 2026 00:07:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 668 (0x29c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B1EE5AF, serialNumber=97CC893F4FD520F6736806F97962599B778E1B63
        Validity
            Not Before: May  7 04:21:48 2026 GMT
            Not After : May  9 04:21:48 2026 GMT
        Subject: CN=69fc135d-8bc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:14:8b:b2:7f:1a:53:b6:14:81:6b:7d:fd:2e:
                    49:68:0e:c4:42:0e:c0:00:a3:86:1b:89:a5:c2:0e:
                    e7:61:f0:56:3b:e0:82:e8:d2:af:7b:5d:7f:88:99:
                    d8:62:26:59:cb:d9:1f:98:a1:27:f2:bb:f8:90:db:
                    d9:2c:f9:af:41:d0:c6:db:53:2b:df:bd:be:df:77:
                    c6:75:9c:74:60:29:ab:00:b9:25:7b:34:da:bc:28:
                    24:1b:61:9d:ea:24:58:b6:35:38:6e:8e:7d:ff:2d:
                    17:84:80:72:fd:ae:6f:d2:7d:f6:c5:48:46:16:de:
                    03:c9:7b:47:98:e7:20:f0:7c:75:a7:e6:b2:d2:64:
                    93:30:32:19:9f:3a:b1:dd:50:37:e1:83:11:ef:ed:
                    ec:b7:81:cd:99:f7:98:b3:9d:24:a6:0e:a3:66:e9:
                    ca:86:66:3f:f7:90:84:a9:a7:9c:66:8c:ad:5c:67:
                    e8:eb:6c:17:b1:fa:d5:d2:ce:67:82:4c:b1:ed:7c:
                    e0:22:0d:e0:ef:06:4b:cd:07:19:9f:0c:53:86:9c:
                    8a:13:35:17:97:8d:ea:dd:64:44:08:67:21:23:1f:
                    7a:e3:aa:3f:4c:ae:d3:0f:05:23:88:9d:76:34:3c:
                    53:0e:d9:b1:7e:d4:ac:50:29:d3:73:7f:c8:49:98:
                    0a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:D7:10:6B:A4:32:19:DE:98:E9:E3:92:89:16:34:D0:13:16:97:19
            X509v3 Authority Key Identifier:
                keyid:97:CC:89:3F:4F:D5:20:F6:73:68:06:F9:79:62:59:9B:77:8E:1B:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B1EE5/21831C1C4F1511EFB7A68685762E951A/l8yJP0_VIPZzaAb5eWJZm3eOG2M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8yJP0_VIPZzaAb5eWJZm3eOG2M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B1EE5/21831C1C4F1511EFB7A68685762E951A/l8yJP0_VIPZzaAb5eWJZm3eOG2M.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:54:4b:7d:36:b6:98:36:6c:f3:4d:fe:cf:7d:35:6b:3d:96:
         32:f5:88:94:0d:59:a1:e6:cc:d0:87:a4:cb:b9:53:eb:4a:79:
         3f:b9:8f:c3:53:d2:0e:11:6d:3d:af:04:42:71:e4:f5:4f:46:
         2c:f0:ca:7c:e8:aa:75:86:8a:6c:4a:cc:24:84:ec:86:1b:cd:
         89:1b:c8:04:9c:e6:26:63:0a:7d:6f:e6:b7:f8:05:6d:72:d5:
         07:ef:60:45:4f:a7:ff:82:8d:c6:92:4d:a0:35:e5:60:b7:08:
         21:e8:37:6b:96:12:59:e1:0c:2f:8b:98:a4:b2:00:f8:1b:a9:
         02:43:57:b5:e7:ce:4e:85:bf:ea:84:08:7e:19:d3:fe:0d:f2:
         ee:f7:e6:2e:3b:04:15:f9:5a:53:a2:b4:0b:9c:0d:6b:9e:e9:
         8e:0b:49:a9:5a:75:43:f3:eb:35:00:bb:4c:f6:fa:36:69:e0:
         48:34:6d:10:32:25:f8:e7:e9:37:70:ca:3e:c3:65:4d:e8:fa:
         bd:aa:23:a6:d4:c3:66:67:5f:30:e5:93:bd:58:53:23:1c:73:
         c0:fe:ef:c7:cf:52:18:fd:6b:46:2a:fd:cb:d3:25:ef:15:51:
         81:31:41:8a:b9:a2:0c:30:ce:4e:ec:ea:60:a4:c8:82:94:0f:
         a5:ca:b3:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 21:34:34 2026 by rpki-client