Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B2CCC/62285B28A35311EF9929879A762E951A/IPoazDHazMuDL9LUtfzXWC-kIsk.mft
File:                     IPoazDHazMuDL9LUtfzXWC-kIsk.mft (raw, json)
Hash identifier:          pY01/bm7f5uwJ/kFETMC8Q3k8wL597tiLqvxy7j9Iws=
Subject key identifier:   30:D8:68:C1:85:6A:06:2E:45:13:3E:45:DC:90:FF:27:18:FB:31:AB
Authority key identifier: 20:FA:1A:CC:31:DA:CC:CB:83:2F:D2:D4:B5:FC:D7:58:2F:A4:22:C9
Certificate issuer:       /CN=F36B2CCCAF/serialNumber=20FA1ACC31DACCCB832FD2D4B5FCD7582FA422C9
Certificate serial:       0228
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/IPoazDHazMuDL9LUtfzXWC-kIsk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B2CCC/62285B28A35311EF9929879A762E951A/IPoazDHazMuDL9LUtfzXWC-kIsk.mft
Manifest number:          0227
Signing time:             Thu 07 May 2026 04:37:42 +0000
Manifest this update:     Thu 07 May 2026 04:37:41 +0000
Manifest next update:     Sat 09 May 2026 04:37:41 +0000
Files and hashes:         1: IPoazDHazMuDL9LUtfzXWC-kIsk.crl (hash: QJZrNWyb9UBfv70CT+ARxZHAWIFeRMlFXW2v5Zx0Kfk=)
                          2: 8327C434A35411EF974E14A1762E951A.roa (hash: TgV6J8OnLK9ODPkaOzrwonQ7ArSo3b7jgatmRvGo6BI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B2CCC/62285B28A35311EF9929879A762E951A/IPoazDHazMuDL9LUtfzXWC-kIsk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B2CCC/62285B28A35311EF9929879A762E951A/IPoazDHazMuDL9LUtfzXWC-kIsk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/IPoazDHazMuDL9LUtfzXWC-kIsk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 09 May 2026 00:07:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 552 (0x228)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B2CCCAF, serialNumber=20FA1ACC31DACCCB832FD2D4B5FCD7582FA422C9
        Validity
            Not Before: May  7 04:37:41 2026 GMT
            Not After : May  9 04:37:41 2026 GMT
        Subject: CN=69fc1716-fc7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:ed:0f:47:08:cb:65:d7:21:56:72:28:8a:f3:
                    d6:79:f9:91:ad:c6:98:d5:f4:6b:de:bf:f3:23:c0:
                    d2:04:25:77:47:8c:ac:60:20:b6:e1:b1:0c:8b:93:
                    46:cd:9f:68:c5:dc:63:26:d3:e0:62:e9:a9:5a:14:
                    27:96:f8:51:9a:96:f8:92:1f:3f:b0:68:ed:4f:be:
                    59:a7:b4:62:9b:df:e0:ed:dd:5a:3a:4e:73:11:ce:
                    6a:6f:7e:b8:ff:72:ab:f7:0c:5c:26:f5:72:44:68:
                    ea:65:29:65:22:d0:ea:a8:a3:b2:63:44:08:5e:c7:
                    11:09:fe:15:20:44:a7:25:02:1b:80:57:9c:c6:4b:
                    3b:21:dc:ec:64:52:3e:fd:88:b8:62:76:70:b1:3d:
                    64:e0:44:2f:01:ad:51:76:08:bc:29:db:05:bc:38:
                    ce:d4:8b:79:70:af:ad:d7:b2:0a:b2:12:e5:83:4e:
                    3a:0e:e4:47:94:4b:d4:3a:b4:61:8a:db:4d:ff:84:
                    9f:58:55:4b:34:a0:fc:09:67:1b:ac:a7:b7:fd:86:
                    8a:42:66:68:f4:83:31:ba:51:08:fc:d3:5c:f8:96:
                    50:5d:c4:45:ac:85:d2:19:5f:53:33:d0:fd:cd:9b:
                    3b:35:e3:dc:69:da:80:8f:32:ef:17:d7:50:e6:7c:
                    75:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:D8:68:C1:85:6A:06:2E:45:13:3E:45:DC:90:FF:27:18:FB:31:AB
            X509v3 Authority Key Identifier:
                keyid:20:FA:1A:CC:31:DA:CC:CB:83:2F:D2:D4:B5:FC:D7:58:2F:A4:22:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B2CCC/62285B28A35311EF9929879A762E951A/IPoazDHazMuDL9LUtfzXWC-kIsk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/IPoazDHazMuDL9LUtfzXWC-kIsk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B2CCC/62285B28A35311EF9929879A762E951A/IPoazDHazMuDL9LUtfzXWC-kIsk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:73:72:27:7a:e4:c9:0d:54:4f:f2:54:14:ba:0d:c5:6b:8f:
         33:cd:30:1a:56:c3:f2:c3:06:47:3a:d3:24:a6:40:a5:24:19:
         10:b2:5c:0b:2e:14:76:fb:78:38:64:a9:9a:dc:0d:b5:f8:5f:
         66:be:e8:19:fb:6c:83:85:a3:29:41:6a:06:04:84:51:91:42:
         f2:d9:c7:55:94:30:5b:8b:39:86:ef:71:30:04:f0:41:c8:7d:
         8e:61:20:86:99:bc:f0:ab:78:6a:36:e6:77:63:a9:dd:d0:23:
         8e:35:76:11:ff:06:1c:e0:de:bc:4c:85:ac:60:19:3d:67:58:
         0f:13:46:ec:f5:c8:11:ed:70:b1:98:6d:ed:fa:17:c5:e3:3c:
         1c:99:7c:ae:11:e5:4c:42:54:8c:14:91:39:0c:db:9b:c4:3e:
         34:02:2b:1a:1f:ca:09:96:bc:e0:bd:2f:1d:09:a9:b2:c4:66:
         56:31:fe:80:ee:84:2b:be:db:65:21:e5:59:16:53:b0:d1:fc:
         fe:4b:6a:31:36:59:dd:f9:fc:73:8d:ed:dd:ee:cb:a5:db:a6:
         e2:15:ac:6f:c3:c5:a4:b6:c0:0d:75:57:c0:af:33:4b:0d:17:
         66:b0:38:7b:0a:a0:58:8d:22:f3:ae:15:39:5a:d4:38:c2:f5:
         f2:69:9f:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 21:33:17 2026 by rpki-client