Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/A_5dcm806TzhqV2UUY4SI3rD4sY.mft
File:                     A_5dcm806TzhqV2UUY4SI3rD4sY.mft (raw, json)
Hash identifier:          DNR5kDVFETrvDK0BdTamqDuopQj2bqyrwHoOUY9xe0k=
Subject key identifier:   3C:A3:A0:91:21:A1:68:04:3B:BE:E9:2F:E5:58:1D:CC:33:A5:24:5B
Authority key identifier: 03:FE:5D:72:6F:34:E9:3C:E1:A9:5D:94:51:8E:12:23:7A:C3:E2:C6
Certificate issuer:       /CN=F36B3234AF/serialNumber=03FE5D726F34E93CE1A95D94518E12237AC3E2C6
Certificate serial:       076A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/A_5dcm806TzhqV2UUY4SI3rD4sY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/A_5dcm806TzhqV2UUY4SI3rD4sY.mft
Manifest number:          072F
Signing time:             Thu 07 May 2026 02:27:19 +0000
Manifest this update:     Thu 07 May 2026 02:27:18 +0000
Manifest next update:     Sat 09 May 2026 02:27:18 +0000
Files and hashes:         1: A_5dcm806TzhqV2UUY4SI3rD4sY.crl (hash: x+a3JFRKhhPU5c52xvgmUeTN2KsmuEVy3mFY7gUCUVQ=)
                          2: F073103AED8511F098246590DAE4EC9C.roa (hash: 7/OBPMvHgaBhBjcdfmAskDW47LM3Vtw//UfK9zD6ZTM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/A_5dcm806TzhqV2UUY4SI3rD4sY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/A_5dcm806TzhqV2UUY4SI3rD4sY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/A_5dcm806TzhqV2UUY4SI3rD4sY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 09 May 2026 00:07:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1898 (0x76a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B3234AF, serialNumber=03FE5D726F34E93CE1A95D94518E12237AC3E2C6
        Validity
            Not Before: May  7 02:27:18 2026 GMT
            Not After : May  9 02:27:18 2026 GMT
        Subject: CN=69fbf887-b147
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:32:c8:00:20:5b:99:01:9d:7e:23:3d:6c:c8:
                    6f:a9:bb:13:5d:23:53:16:9e:fc:ae:b0:14:b7:a3:
                    40:7f:c3:41:38:13:b0:81:a3:a3:f0:ca:18:6f:0a:
                    33:99:b8:99:03:60:08:63:3b:40:36:9a:64:40:fd:
                    12:f7:a5:ce:72:99:2d:a1:16:f3:ef:89:53:ea:68:
                    e6:9d:74:a9:46:91:f7:0b:8a:b0:82:c7:0d:e0:ab:
                    99:37:6a:c1:6e:cd:69:39:aa:6c:ef:e8:7c:df:4a:
                    64:d3:66:77:ca:a3:70:55:cf:ff:02:d8:30:4e:0c:
                    68:ff:67:c0:8b:7c:f4:96:ee:05:2f:c5:04:5f:25:
                    3c:bb:03:7b:6d:66:a9:25:9b:6a:bb:40:75:64:27:
                    f2:66:a5:b7:ec:f6:c8:40:80:04:90:1b:3a:0c:a4:
                    87:04:22:64:53:aa:5e:3e:64:4f:dd:f7:aa:ad:d9:
                    54:d8:c0:db:08:79:2b:c6:5b:70:8d:15:46:48:d3:
                    8e:73:89:17:df:1a:47:27:e2:59:b5:12:81:7b:04:
                    b3:15:e7:06:e3:fa:16:7e:71:61:be:70:a5:b8:60:
                    fa:c5:5c:c3:aa:cb:52:a6:b7:15:ce:90:8d:40:33:
                    15:9b:e1:18:17:a0:56:da:31:2a:75:ac:ae:d1:7d:
                    fd:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:A3:A0:91:21:A1:68:04:3B:BE:E9:2F:E5:58:1D:CC:33:A5:24:5B
            X509v3 Authority Key Identifier:
                keyid:03:FE:5D:72:6F:34:E9:3C:E1:A9:5D:94:51:8E:12:23:7A:C3:E2:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/A_5dcm806TzhqV2UUY4SI3rD4sY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/A_5dcm806TzhqV2UUY4SI3rD4sY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/A_5dcm806TzhqV2UUY4SI3rD4sY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:6d:60:4d:10:39:02:a5:78:fa:2d:6f:b9:a8:7f:cc:10:f3:
         8d:04:02:f7:cc:13:df:06:6f:ed:25:ba:35:3e:61:b9:3b:d5:
         1c:80:ea:ab:27:8a:f4:a6:5b:3a:20:88:58:cb:3d:6f:22:38:
         57:c2:d9:3c:fe:8a:d9:eb:35:84:5b:ff:ef:df:e3:0e:df:6c:
         5e:ac:ed:c9:5c:70:c1:71:cc:60:7f:ee:ce:d6:5d:03:ff:49:
         1e:54:7b:6c:5b:e6:18:1d:36:66:d2:5e:ed:7d:af:c1:30:a1:
         fb:97:40:0b:30:54:e8:f7:97:75:17:1d:2f:6a:ea:4b:03:e7:
         e8:18:0c:7a:ce:6d:49:28:51:76:af:ab:a4:0a:4f:ad:cb:db:
         7d:0b:76:75:a0:76:0e:e0:2c:bc:c7:f9:bd:74:fc:fc:25:95:
         73:db:77:d8:80:e5:86:a3:a0:5c:05:87:c8:6a:5e:3d:dc:9e:
         35:fc:1d:af:14:a3:7a:f5:c8:a9:d5:d2:f3:e6:d1:87:dd:75:
         f5:bd:05:6e:b6:40:45:eb:38:2c:b4:fa:96:5d:ef:9a:be:27:
         56:22:1e:ea:4b:11:b2:37:b5:0d:f1:f5:b6:f0:59:6e:87:0c:
         3f:74:08:5b:fd:ff:57:5b:99:16:38:17:2a:64:79:3d:15:86:
         49:cc:c4:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 21:37:08 2026 by rpki-client