Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B5768/D4281494258911F0A52BC8A1DAE4EC9C/nNVhTPkNpR4nc7Xrl72Jk3xQWGE.mft
File:                     nNVhTPkNpR4nc7Xrl72Jk3xQWGE.mft (raw, json)
Hash identifier:          tJRHeO6aX6kiQ3M4EhghLnGoQkSxpsguXcYBGsyfbS0=
Subject key identifier:   E1:54:D4:A1:C7:FE:72:EA:90:40:5D:A5:2A:C4:FA:3A:8D:E6:6B:3F
Authority key identifier: 9C:D5:61:4C:F9:0D:A5:1E:27:73:B5:EB:97:BD:89:93:7C:50:58:61
Certificate issuer:       /CN=F36B5768AF/serialNumber=9CD5614CF90DA51E2773B5EB97BD89937C505861
Certificate serial:       017C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/nNVhTPkNpR4nc7Xrl72Jk3xQWGE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B5768/D4281494258911F0A52BC8A1DAE4EC9C/nNVhTPkNpR4nc7Xrl72Jk3xQWGE.mft
Manifest number:          017B
Signing time:             Thu 07 May 2026 04:51:38 +0000
Manifest this update:     Thu 07 May 2026 04:51:37 +0000
Manifest next update:     Sat 09 May 2026 04:51:37 +0000
Files and hashes:         1: nNVhTPkNpR4nc7Xrl72Jk3xQWGE.crl (hash: +NZxuRIHTYUQsUiLmEO7lmSNNza+eEuW0DMq3msR7fo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B5768/D4281494258911F0A52BC8A1DAE4EC9C/nNVhTPkNpR4nc7Xrl72Jk3xQWGE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B5768/D4281494258911F0A52BC8A1DAE4EC9C/nNVhTPkNpR4nc7Xrl72Jk3xQWGE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/nNVhTPkNpR4nc7Xrl72Jk3xQWGE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 09 May 2026 00:07:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 380 (0x17c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B5768AF, serialNumber=9CD5614CF90DA51E2773B5EB97BD89937C505861
        Validity
            Not Before: May  7 04:51:37 2026 GMT
            Not After : May  9 04:51:37 2026 GMT
        Subject: CN=69fc1a5a-15fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5d:0d:cc:66:c5:82:7f:09:3a:51:e4:70:64:
                    a8:95:25:e7:12:ba:f2:bc:04:f2:ee:7c:55:29:67:
                    e7:8d:70:ca:d3:d2:87:73:67:ad:41:24:5d:55:5b:
                    26:dd:62:fd:00:de:68:22:ba:f3:81:de:3c:84:8a:
                    e2:a3:a6:1c:e4:2c:48:49:26:3a:60:16:19:4f:7b:
                    a0:ec:12:d2:53:6e:53:80:c4:7d:e6:20:ae:e8:e3:
                    0a:97:1a:d8:b0:22:b3:1f:cd:e8:4f:36:96:4c:b7:
                    13:fb:cb:38:33:3a:f1:d6:03:da:98:68:57:08:64:
                    ca:c5:e9:c7:29:0f:f4:27:63:40:c3:89:f1:dd:5a:
                    b5:60:5d:78:46:f8:4d:cd:c5:7d:70:11:5a:a0:7a:
                    6f:52:9d:a5:8c:67:49:39:d8:c7:fb:b8:ef:ad:25:
                    3a:15:da:be:a2:bb:a2:f7:c2:f1:db:26:28:62:50:
                    c4:a5:18:b2:cd:f9:34:17:f5:12:76:d4:4b:da:b7:
                    b9:02:f0:a5:b3:1d:8d:71:0b:0d:44:00:e1:4a:81:
                    86:eb:a3:ff:a1:bd:73:79:34:2b:8f:b3:99:1a:17:
                    e2:d6:f1:23:43:0b:42:ff:9f:f1:9e:ce:f7:c0:e2:
                    62:6c:37:92:1d:82:dd:f8:99:2e:4e:3e:85:5b:13:
                    89:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:54:D4:A1:C7:FE:72:EA:90:40:5D:A5:2A:C4:FA:3A:8D:E6:6B:3F
            X509v3 Authority Key Identifier:
                keyid:9C:D5:61:4C:F9:0D:A5:1E:27:73:B5:EB:97:BD:89:93:7C:50:58:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B5768/D4281494258911F0A52BC8A1DAE4EC9C/nNVhTPkNpR4nc7Xrl72Jk3xQWGE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/nNVhTPkNpR4nc7Xrl72Jk3xQWGE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B5768/D4281494258911F0A52BC8A1DAE4EC9C/nNVhTPkNpR4nc7Xrl72Jk3xQWGE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:fa:d4:50:8f:a1:45:65:0e:8e:55:ad:11:2c:36:22:d0:9a:
         04:eb:34:32:06:bd:3c:ce:bf:0b:a8:db:83:e1:3d:03:03:7e:
         a5:b3:26:36:a1:25:bd:5d:0d:f0:61:f5:2a:b4:ca:58:8d:e0:
         eb:ce:17:35:0d:c3:a7:66:fe:28:05:f0:a7:4f:e7:07:30:3b:
         c6:b3:e6:5c:aa:9d:34:c9:18:3c:40:c6:95:25:af:27:b8:a3:
         ae:b5:fa:4e:9e:59:84:5c:18:35:0f:0f:69:56:78:f9:bb:d8:
         d0:a5:7f:6b:3e:3f:0c:63:ff:1b:56:e1:d0:93:80:59:48:45:
         c6:5c:75:ba:85:fb:96:ab:42:82:2a:df:22:1d:5c:a9:31:21:
         e9:73:16:3b:e6:29:07:5f:ca:5b:d4:3a:03:8b:35:37:2b:bf:
         66:5f:70:3a:ce:ad:34:52:3d:9a:6e:b6:21:9e:0a:dd:9a:d5:
         e4:17:67:f9:1a:c0:fa:b0:61:d6:b6:ab:9f:c1:e2:c9:70:f4:
         48:f9:0f:6c:81:3c:c8:c1:05:48:a1:78:f9:5e:65:7d:c3:d2:
         4f:4e:0c:65:db:23:1f:15:2a:69:48:83:76:0e:24:7d:47:91:
         01:65:9b:56:65:ab:21:fd:fd:51:88:6e:14:b7:fa:ff:df:1e:
         b2:58:64:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 21:38:13 2026 by rpki-client