Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C684F/C401133ED48311E98A92991CF8AEA228/qq2zeUNQh6CU8n12Cd-4YvxcxGU.mft
File:                     qq2zeUNQh6CU8n12Cd-4YvxcxGU.mft (raw, json)
Hash identifier:          /8TjawgbdDyE7KMhlqpeIRmdUIe2NrU7TVpvacp9fYc=
Subject key identifier:   7F:0A:02:AC:2A:79:A8:4B:EB:AA:81:63:65:89:72:1E:45:7F:3F:F5
Authority key identifier: AA:AD:B3:79:43:50:87:A0:94:F2:7D:76:09:DF:B8:62:FC:5C:C4:65
Certificate issuer:       /CN=F36C684FRI/serialNumber=AAADB379435087A094F27D7609DFB862FC5CC465
Certificate serial:       09AD
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/qq2zeUNQh6CU8n12Cd-4YvxcxGU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C684F/C401133ED48311E98A92991CF8AEA228/qq2zeUNQh6CU8n12Cd-4YvxcxGU.mft
Manifest number:          09AD
Signing time:             Mon 27 Apr 2026 01:35:42 +0000
Manifest this update:     Mon 27 Apr 2026 01:35:41 +0000
Manifest next update:     Wed 29 Apr 2026 01:35:41 +0000
Files and hashes:         1: qq2zeUNQh6CU8n12Cd-4YvxcxGU.crl (hash: XH9pWQcG9Afvf0sdTQSITNxPUjW0+EyKtYJCaqO3TSk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C684F/C401133ED48311E98A92991CF8AEA228/qq2zeUNQh6CU8n12Cd-4YvxcxGU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C684F/C401133ED48311E98A92991CF8AEA228/qq2zeUNQh6CU8n12Cd-4YvxcxGU.mft
                          rsync://rpki.afrinic.net/repository/ripe/qq2zeUNQh6CU8n12Cd-4YvxcxGU.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 29 Apr 2026 00:45:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2477 (0x9ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C684FRI, serialNumber=AAADB379435087A094F27D7609DFB862FC5CC465
        Validity
            Not Before: Apr 27 01:35:41 2026 GMT
            Not After : Apr 29 01:35:41 2026 GMT
        Subject: CN=69eebd6d-fc42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:03:43:e5:64:a1:ce:58:2c:c9:ea:2e:56:c9:
                    f1:ba:84:0b:ee:6a:b2:ae:eb:fa:bf:95:21:7b:64:
                    65:a4:f2:9b:81:13:c7:cd:b0:17:07:19:97:09:d5:
                    57:15:be:e8:1e:e2:1f:fb:42:47:b0:da:7e:aa:6b:
                    65:00:8d:9a:95:f1:68:40:52:9e:3b:0b:17:9c:bc:
                    7a:e7:ac:69:2f:12:3e:ee:be:33:3c:84:26:99:49:
                    62:11:5f:a2:21:0c:ab:8f:21:74:c4:6b:07:29:a8:
                    47:94:94:f8:af:4d:d3:02:50:9b:52:d2:72:46:65:
                    13:b3:3b:7e:7d:ce:4b:93:d0:b5:50:6c:81:96:13:
                    b0:c2:00:72:14:60:46:78:9e:41:91:dc:2e:9f:ce:
                    c5:f1:3a:4b:ff:f0:58:74:70:59:e5:27:e6:5b:85:
                    28:8b:17:86:a9:86:12:e3:09:aa:a2:7b:2a:09:ca:
                    1e:74:b1:46:56:e9:58:2f:28:96:3d:d0:7c:d3:23:
                    7b:13:a4:d6:31:80:b8:89:25:f7:24:7a:37:47:d1:
                    58:b6:0b:8a:c4:35:f1:bf:d9:6d:52:a7:2d:e5:42:
                    bc:22:ab:13:12:4d:a2:d0:9b:77:88:d6:75:c4:07:
                    04:be:7e:8d:d1:f3:ac:4e:43:73:61:be:28:e6:eb:
                    1a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:0A:02:AC:2A:79:A8:4B:EB:AA:81:63:65:89:72:1E:45:7F:3F:F5
            X509v3 Authority Key Identifier:
                keyid:AA:AD:B3:79:43:50:87:A0:94:F2:7D:76:09:DF:B8:62:FC:5C:C4:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C684F/C401133ED48311E98A92991CF8AEA228/qq2zeUNQh6CU8n12Cd-4YvxcxGU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/qq2zeUNQh6CU8n12Cd-4YvxcxGU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C684F/C401133ED48311E98A92991CF8AEA228/qq2zeUNQh6CU8n12Cd-4YvxcxGU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:77:c1:61:2d:3e:03:99:e1:b5:ca:14:e0:1d:c7:f1:ad:99:
         14:27:82:31:3c:44:e2:5e:7f:c0:ff:21:13:23:97:3b:c0:9b:
         df:29:cb:58:2c:1e:a4:e2:cb:a6:9f:8a:8d:b4:01:df:72:a1:
         aa:2b:bc:27:c7:d6:5f:40:e5:d8:ea:5a:b4:19:2b:92:f8:59:
         de:c1:fd:fe:ed:9c:e5:3f:33:84:ac:07:43:76:6c:4a:0d:1f:
         e7:44:d2:96:c2:94:8e:c8:07:9b:93:68:23:92:ed:0f:ce:71:
         81:bf:67:9f:97:ae:2c:8b:63:6c:f1:ef:2e:6e:ba:40:99:f9:
         ff:fa:ea:f1:d6:0f:77:fb:db:c1:9f:86:d9:c2:2e:4d:43:12:
         0d:1b:dd:c3:b7:7d:db:b5:97:ae:d5:a4:12:69:cc:a0:bb:ee:
         79:c2:0d:09:71:d0:c6:4f:87:25:cc:57:90:4e:6f:63:5c:9f:
         1e:3f:bf:b6:6a:ab:f2:1c:e6:1d:30:94:b4:b4:86:15:f4:39:
         fe:ae:b1:26:3b:d2:e1:cf:3d:72:07:27:2e:67:5b:3e:8f:65:
         6f:41:9d:96:4a:2a:3e:d7:76:bc:52:17:e4:50:45:fc:07:a0:
         27:7b:75:70:47:14:f9:cf:e5:dd:73:4f:88:f8:5c:ad:1c:53:
         a6:d0:8f:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 11:59:33 2026 by rpki-client