Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C06DF/3600B3AA856811EF8C875646762E951A/i_RKORmwHdVFpRN9yW2Ih8FElMQ.mft
File:                     i_RKORmwHdVFpRN9yW2Ih8FElMQ.mft (raw, json)
Hash identifier:          FyIF/FVMtVULwc+K5cAFZBlv1ln93U+ix5oTZvIzVJ4=
Subject key identifier:   18:FD:C0:D3:FA:CE:8C:BF:ED:5A:81:98:84:1C:C2:30:AA:5E:04:77
Authority key identifier: 8B:F4:4A:39:19:B0:1D:D5:45:A5:13:7D:C9:6D:88:87:C1:44:94:C4
Certificate issuer:       /CN=F36C06DFAF/serialNumber=8BF44A3919B01DD545A5137DC96D8887C14494C4
Certificate serial:       0258
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/i_RKORmwHdVFpRN9yW2Ih8FElMQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C06DF/3600B3AA856811EF8C875646762E951A/i_RKORmwHdVFpRN9yW2Ih8FElMQ.mft
Manifest number:          0254
Signing time:             Thu 07 May 2026 04:33:56 +0000
Manifest this update:     Thu 07 May 2026 04:33:55 +0000
Manifest next update:     Sat 09 May 2026 04:33:55 +0000
Files and hashes:         1: i_RKORmwHdVFpRN9yW2Ih8FElMQ.crl (hash: 5REq5vHdmOt85UpUeOeNCP1SXopLlhQ0MGFT5tDf2cw=)
                          2: A50DEF3A8A1B11EF86B3879F762E951A.roa (hash: 6S2eWQOAsB1C05yblXJP2r9a9WQgQ6FEOxOlJb4U21M=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C06DF/3600B3AA856811EF8C875646762E951A/i_RKORmwHdVFpRN9yW2Ih8FElMQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C06DF/3600B3AA856811EF8C875646762E951A/i_RKORmwHdVFpRN9yW2Ih8FElMQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/i_RKORmwHdVFpRN9yW2Ih8FElMQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 09 May 2026 00:07:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 600 (0x258)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C06DFAF, serialNumber=8BF44A3919B01DD545A5137DC96D8887C14494C4
        Validity
            Not Before: May  7 04:33:55 2026 GMT
            Not After : May  9 04:33:55 2026 GMT
        Subject: CN=69fc1634-d0bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:9e:95:e8:07:1d:21:b5:37:fb:a1:ee:3a:1f:
                    e1:4a:34:b4:16:10:90:ab:95:fb:3f:f5:ca:13:81:
                    8c:a1:c1:1a:23:97:d0:f3:46:5f:98:32:dc:e8:01:
                    08:de:59:49:88:4f:3e:e9:64:85:f9:12:1a:29:41:
                    3e:95:74:09:52:f1:2e:a0:0b:c2:d9:eb:49:e7:7f:
                    b1:23:fc:a9:50:20:32:37:3c:02:d3:6b:7a:a1:1e:
                    22:bb:68:e9:bb:97:c9:ec:63:f1:97:7b:0c:ac:4b:
                    96:01:06:f5:85:33:71:70:35:d1:a6:b2:9a:a4:31:
                    51:b1:c7:91:cb:46:5c:67:fc:1c:12:9c:3d:7f:44:
                    0d:98:56:da:69:29:67:61:e1:4f:03:c3:84:b7:0e:
                    97:68:4b:46:30:0a:d2:1d:d5:94:67:b8:ae:79:c0:
                    53:f0:b9:0a:07:49:05:fd:a7:51:c4:1d:65:ef:ea:
                    05:9c:98:93:ca:fd:be:83:a8:ca:98:2d:15:c8:88:
                    53:73:e3:7c:7f:68:e6:49:2d:1d:de:92:6b:f9:d1:
                    a3:ab:38:f4:c0:ff:59:4a:f2:bb:8d:13:30:4e:46:
                    38:f5:e7:2d:b6:60:dc:d8:d2:5c:f1:b8:51:cc:52:
                    bd:38:7a:3c:3b:73:05:98:28:59:22:3d:f0:6c:af:
                    2a:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:FD:C0:D3:FA:CE:8C:BF:ED:5A:81:98:84:1C:C2:30:AA:5E:04:77
            X509v3 Authority Key Identifier:
                keyid:8B:F4:4A:39:19:B0:1D:D5:45:A5:13:7D:C9:6D:88:87:C1:44:94:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C06DF/3600B3AA856811EF8C875646762E951A/i_RKORmwHdVFpRN9yW2Ih8FElMQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/i_RKORmwHdVFpRN9yW2Ih8FElMQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C06DF/3600B3AA856811EF8C875646762E951A/i_RKORmwHdVFpRN9yW2Ih8FElMQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:a0:7d:81:1d:11:dc:47:ca:8f:99:00:cc:30:02:cd:3d:28:
         d9:b4:f5:d9:d6:af:eb:f8:8d:97:54:b3:68:f9:74:44:b3:f8:
         cd:f0:92:e9:45:c6:fa:01:fd:e1:b8:08:6b:37:59:ba:f9:36:
         31:b4:b8:44:8f:6e:3f:b1:fa:6c:8a:6b:a8:f1:60:90:b9:bb:
         c2:e4:25:62:b3:52:01:66:7c:5d:2c:51:84:f9:0c:f5:82:d6:
         89:d4:7b:b6:a9:eb:27:0a:52:6d:76:48:c3:0c:7c:be:21:71:
         28:9c:fc:da:e6:5c:5a:4e:e2:68:d4:46:f3:41:bc:38:38:ce:
         02:2d:34:56:47:48:a1:b9:08:5f:bb:91:0e:ee:d2:1c:03:6f:
         0e:e8:7c:e9:a4:15:55:08:23:46:f6:c3:6e:07:67:14:8f:4f:
         88:a3:cc:c0:87:2b:2a:e4:f5:f0:1e:3f:b3:d6:2a:8f:57:d4:
         89:f2:6b:b8:84:d8:b8:e3:d5:c4:9f:dd:55:3a:69:00:98:82:
         31:da:d9:ef:aa:15:8e:48:72:09:ed:f7:6d:5d:07:54:0c:0e:
         a2:e1:2b:2f:75:e4:c1:0f:51:c9:e6:54:f6:31:e3:56:12:5a:
         72:18:fb:49:d9:cd:d3:8c:d7:6a:f4:e5:dd:b8:43:bc:0b:ae:
         9d:f1:03:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 21:35:00 2026 by rpki-client