Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C5799/0CA10C04331C11F18D401AB9CE1D38B0/Mh-BR7LBGZaoFo69bpeb7goWDSg.mft
File:                     Mh-BR7LBGZaoFo69bpeb7goWDSg.mft (raw, json)
Hash identifier:          B9Jrzp/JLNWL3UYa2mnUt3G1f6qmDqp90vlHOCoGiHU=
Subject key identifier:   7F:4E:72:23:2F:75:43:9B:01:9D:24:88:0C:8A:11:8D:D9:13:F1:D9
Authority key identifier: 32:1F:81:47:B2:C1:19:96:A8:16:8E:BD:6E:97:9B:EE:0A:16:0D:28
Certificate issuer:       /CN=F36C5799AF/serialNumber=321F8147B2C11996A8168EBD6E979BEE0A160D28
Certificate serial:       21
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Mh-BR7LBGZaoFo69bpeb7goWDSg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C5799/0CA10C04331C11F18D401AB9CE1D38B0/Mh-BR7LBGZaoFo69bpeb7goWDSg.mft
Manifest number:          20
Signing time:             Thu 07 May 2026 05:31:57 +0000
Manifest this update:     Thu 07 May 2026 05:31:57 +0000
Manifest next update:     Sat 09 May 2026 05:31:57 +0000
Files and hashes:         1: Mh-BR7LBGZaoFo69bpeb7goWDSg.crl (hash: Us2T3zqByE5kU1yuv1KJ5lY3Wp1X2+AuDk729bqZ/iU=)
                          2: 6EB787A833E211F19A2B66F0CE1D38B0.roa (hash: khl45c9kCg+cPXJc6/8UvAcq1OtRKhjfiq9hfCULuv0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C5799/0CA10C04331C11F18D401AB9CE1D38B0/Mh-BR7LBGZaoFo69bpeb7goWDSg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C5799/0CA10C04331C11F18D401AB9CE1D38B0/Mh-BR7LBGZaoFo69bpeb7goWDSg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Mh-BR7LBGZaoFo69bpeb7goWDSg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 09 May 2026 00:07:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 33 (0x21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C5799AF, serialNumber=321F8147B2C11996A8168EBD6E979BEE0A160D28
        Validity
            Not Before: May  7 05:31:57 2026 GMT
            Not After : May  9 05:31:57 2026 GMT
        Subject: CN=69fc23cd-cc91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f6:7a:43:40:a0:9a:0d:15:66:40:9a:c9:bd:
                    7b:f6:0d:53:43:f4:bc:07:2c:ff:2a:c4:80:f5:ed:
                    18:21:48:17:cd:f8:97:fa:1a:96:0b:de:7e:14:57:
                    44:a9:c4:7a:3a:93:dd:c5:df:35:8e:02:af:3c:68:
                    f7:db:82:a7:45:01:37:2d:84:a2:b4:90:6f:1c:01:
                    21:f3:50:ce:11:e0:2b:a9:7f:9e:b1:02:5f:4d:b8:
                    f2:d9:b5:dc:2d:93:e5:ab:72:a8:16:d1:fc:49:5c:
                    73:eb:af:e9:63:ce:48:f9:62:4c:89:26:ed:51:7c:
                    ff:59:29:65:61:40:c1:14:08:ae:20:57:8e:4d:cf:
                    65:24:5b:7a:d3:30:82:3b:2c:3e:18:e3:48:2d:30:
                    13:ee:db:53:f6:91:57:ea:08:b3:23:a6:74:c4:12:
                    3c:30:66:20:f3:e3:d6:54:be:06:21:3c:18:b6:2f:
                    ad:f0:e0:39:ce:15:87:99:97:9a:26:83:74:93:39:
                    56:39:21:4d:33:08:29:5a:ed:02:9a:7b:83:af:7c:
                    29:01:f6:4a:85:45:0a:e9:e4:ed:40:eb:c9:b8:6c:
                    08:d1:fa:3b:24:be:ee:1c:b8:ac:cf:27:f8:8d:bd:
                    79:35:a8:77:c6:8c:f5:88:c4:5f:c5:ce:59:42:81:
                    39:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:4E:72:23:2F:75:43:9B:01:9D:24:88:0C:8A:11:8D:D9:13:F1:D9
            X509v3 Authority Key Identifier:
                keyid:32:1F:81:47:B2:C1:19:96:A8:16:8E:BD:6E:97:9B:EE:0A:16:0D:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C5799/0CA10C04331C11F18D401AB9CE1D38B0/Mh-BR7LBGZaoFo69bpeb7goWDSg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Mh-BR7LBGZaoFo69bpeb7goWDSg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C5799/0CA10C04331C11F18D401AB9CE1D38B0/Mh-BR7LBGZaoFo69bpeb7goWDSg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:dc:a3:b6:81:74:de:2a:64:af:2a:dc:52:68:38:b9:67:83:
         27:45:ac:60:40:8b:63:be:4c:f2:1a:c4:f5:87:83:a7:eb:7e:
         d8:e6:ba:db:75:59:2f:1f:74:d4:b1:70:34:74:e8:48:12:8c:
         a6:5d:f4:48:bc:8d:eb:0e:ae:51:77:6c:d9:39:01:fa:80:d7:
         62:db:b4:85:ed:e9:78:a2:d2:23:70:19:39:ce:2b:90:29:e8:
         1f:1d:71:9f:d5:1b:58:99:91:42:f3:6b:20:96:71:fd:35:db:
         06:33:e8:51:29:8b:df:f7:77:52:32:80:15:d7:96:ce:61:68:
         9b:34:59:fe:9b:1e:30:71:df:59:10:5f:a0:19:55:d7:4a:e0:
         8d:47:9b:d5:13:8c:56:13:3d:a7:5b:1d:3c:4f:63:49:c1:eb:
         23:43:56:6f:95:df:82:34:5c:e1:96:89:04:3e:ad:ca:29:f1:
         f2:e7:22:d6:8c:13:23:a0:d0:96:d8:6b:ff:e2:9f:1e:88:cf:
         13:0d:5c:c7:b3:be:d1:40:b6:2c:7c:0a:19:c9:30:c6:1e:4b:
         d9:4c:88:d4:a5:e4:ae:8d:38:a6:99:1d:d9:4f:34:4c:4b:35:
         bf:3b:2a:80:a3:7d:8b:cf:7b:90:c4:5f:b9:76:ca:23:d8:32:
         87:68:7d:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 21:32:18 2026 by rpki-client