Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C6D54/F46D1186227411F0A0FDF27EDAE4EC9C/QIlYiBuU41aB7cHR3whZ93E2oKU.mft
File:                     QIlYiBuU41aB7cHR3whZ93E2oKU.mft (raw, json)
Hash identifier:          e88GqfO/mzcTOavHRpVr4eumX6f7H0pRKj0lhhWPy68=
Subject key identifier:   20:D6:7E:92:8A:7E:4D:EB:74:A8:B9:0E:D0:8F:83:E1:97:BA:B7:09
Authority key identifier: 40:89:58:88:1B:94:E3:56:81:ED:C1:D1:DF:08:59:F7:71:36:A0:A5
Certificate issuer:       /CN=F36C6D54AF/serialNumber=408958881B94E35681EDC1D1DF0859F77136A0A5
Certificate serial:       01A6
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QIlYiBuU41aB7cHR3whZ93E2oKU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C6D54/F46D1186227411F0A0FDF27EDAE4EC9C/QIlYiBuU41aB7cHR3whZ93E2oKU.mft
Manifest number:          0198
Signing time:             Thu 07 May 2026 04:50:55 +0000
Manifest this update:     Thu 07 May 2026 04:50:54 +0000
Manifest next update:     Sat 09 May 2026 04:50:54 +0000
Files and hashes:         1: QIlYiBuU41aB7cHR3whZ93E2oKU.crl (hash: Ce1eecNqq/OSoGgtkCW2qn8fInSsoPPioPbulGq4xIA=)
                          2: 30431538000B11F18F4171DDDAE4EC9C.roa (hash: RLtS+wWIR8gEqeuO+MmanfE6qhBdbtQYH4ovUi4VvUw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C6D54/F46D1186227411F0A0FDF27EDAE4EC9C/QIlYiBuU41aB7cHR3whZ93E2oKU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C6D54/F46D1186227411F0A0FDF27EDAE4EC9C/QIlYiBuU41aB7cHR3whZ93E2oKU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/QIlYiBuU41aB7cHR3whZ93E2oKU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 09 May 2026 00:07:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 422 (0x1a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C6D54AF, serialNumber=408958881B94E35681EDC1D1DF0859F77136A0A5
        Validity
            Not Before: May  7 04:50:54 2026 GMT
            Not After : May  9 04:50:54 2026 GMT
        Subject: CN=69fc1a2f-0228
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:00:d7:d3:d6:46:0f:ee:3b:e3:26:dd:8f:11:
                    33:2f:62:8a:ca:8c:a9:b5:f3:74:71:2a:3d:85:53:
                    46:12:95:67:48:9a:35:6a:b5:9e:16:84:60:ff:09:
                    03:45:33:6b:c3:65:3f:de:d6:eb:c3:71:7f:09:65:
                    d5:61:0c:ad:7d:94:fe:c5:7c:70:59:b8:dd:26:2e:
                    58:29:63:77:1d:b1:66:09:df:ee:f3:8f:d0:c9:fc:
                    6f:58:f8:c9:b0:11:e5:be:d4:d0:89:15:c2:86:7a:
                    47:44:7f:38:5c:60:a4:f5:43:b3:83:68:b7:38:8a:
                    8f:3f:86:cc:18:c9:1e:8d:8e:bf:db:d7:c0:dc:d0:
                    bd:84:73:82:be:67:ad:29:56:ce:93:cc:0b:9d:84:
                    55:a6:ff:90:5e:ff:ba:70:45:2e:db:bb:ac:d8:61:
                    cf:a0:bd:46:f2:fe:64:18:07:24:03:3b:bb:df:26:
                    45:96:0d:8e:54:3f:51:2b:c2:99:0d:2c:1f:ff:af:
                    4a:a9:3a:33:bd:e6:f3:e8:40:9b:9e:0b:ef:4a:21:
                    0a:94:0b:1f:51:ee:4a:43:74:73:fe:4d:f9:75:22:
                    fa:d1:19:f6:2d:ba:87:87:87:e5:30:17:60:34:11:
                    c6:9b:58:19:0f:35:67:6f:34:5e:3c:a3:50:27:f3:
                    81:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:D6:7E:92:8A:7E:4D:EB:74:A8:B9:0E:D0:8F:83:E1:97:BA:B7:09
            X509v3 Authority Key Identifier:
                keyid:40:89:58:88:1B:94:E3:56:81:ED:C1:D1:DF:08:59:F7:71:36:A0:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6D54/F46D1186227411F0A0FDF27EDAE4EC9C/QIlYiBuU41aB7cHR3whZ93E2oKU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QIlYiBuU41aB7cHR3whZ93E2oKU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6D54/F46D1186227411F0A0FDF27EDAE4EC9C/QIlYiBuU41aB7cHR3whZ93E2oKU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:4b:ab:4b:d1:c2:1c:a7:74:76:f0:4a:68:c4:5e:e9:3e:4c:
         d6:fd:df:d4:ac:b3:8b:b8:3a:f0:bf:a1:57:70:5a:45:11:6d:
         49:9f:37:b1:0f:7b:f4:43:b1:e7:34:a6:74:22:66:33:fc:2f:
         0f:8f:bc:86:71:7e:40:ea:99:38:48:a8:8d:a4:2f:f2:89:38:
         9a:36:71:55:22:55:cf:3c:3c:3d:96:a2:d5:59:04:03:f1:7d:
         b6:ad:65:46:4a:84:46:10:9e:76:79:51:0b:f0:de:81:c2:d1:
         3b:13:0b:f6:37:aa:f9:1d:5a:18:66:64:2f:10:b4:02:78:c1:
         62:7e:77:a9:a2:5e:d8:4f:52:5e:bc:2b:35:c6:be:11:0e:c6:
         e7:ab:15:ec:fd:9e:54:c3:3f:2d:5f:35:03:73:be:3d:ac:f4:
         f3:dd:fc:ea:2d:80:e1:c0:9f:c2:75:ff:2d:90:da:57:53:62:
         27:de:b3:7d:21:9a:58:41:b6:4a:2b:c8:3d:e9:ba:54:43:02:
         3a:f8:a7:50:40:a5:6c:a0:26:42:67:99:ab:fa:fc:23:79:ec:
         d1:cc:98:7f:40:94:5a:9a:7a:6b:98:66:8f:5f:60:31:0e:ec:
         a7:55:16:a3:d3:9b:f0:5e:bf:e1:a7:e0:24:3f:48:20:a9:ae:
         b9:a5:33:c1
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAaYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzZENTRBRjExMC8GA1UEBRMoNDA4OTU4ODgxQjk0RTM1NjgxRURDMUQxREYwODU5
Rjc3MTM2QTBBNTAeFw0yNjA1MDcwNDUwNTRaFw0yNjA1MDkwNDUwNTRaMBgxFjAU
BgNVBAMTDTY5ZmMxYTJmLTAyMjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDBANfT1kYP7jvjJt2PETMvYorKjKm183RxKj2FU0YSlWdImjVqtZ4WhGD/
CQNFM2vDZT/e1uvDcX8JZdVhDK19lP7FfHBZuN0mLlgpY3cdsWYJ3+7zj9DJ/G9Y
+MmwEeW+1NCJFcKGekdEfzhcYKT1Q7ODaLc4io8/hswYyR6Njr/b18Dc0L2Ec4K+
Z60pVs6TzAudhFWm/5Be/7pwRS7bu6zYYc+gvUby/mQYByQDO7vfJkWWDY5UP1Er
wpkNLB//r0qpOjO95vPoQJueC+9KIQqUCx9R7kpDdHP+Tfl1IvrRGfYtuoeHh+Uw
F2A0EcabWBkPNWdvNF48o1An84FNAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUINZ+
kop+Tet0qLkO0I+D4Ze6twkwHwYDVR0jBBgwFoAUQIlYiBuU41aB7cHR3whZ93E2
oKUwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM2RDU0L0Y0NkQxMTg2MjI3NDExRjBBMEZERjI3RURBRTRFQzlDL1FJbFlp
QnVVNDFhQjdjSFIzd2haOTNFMm9LVS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1FJbFlpQnVVNDFhQjdjSFIzd2haOTNFMm9LVS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QzZENTQvRjQ2RDExODYyMjc0MTFGMEEwRkRGMjdFREFF
NEVDOUMvUUlsWWlCdVU0MWFCN2NIUjN3aFo5M0Uyb0tVLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAhS6tL0cIcp3R28EpoxF7pPkzW/d/U
rLOLuDrwv6FXcFpFEW1JnzexD3v0Q7HnNKZ0ImYz/C8Pj7yGcX5A6pk4SKiNpC/y
iTiaNnFVIlXPPDw9lqLVWQQD8X22rWVGSoRGEJ52eVEL8N6BwtE7Ewv2N6r5HVoY
ZmQvELQCeMFifnepol7YT1JevCs1xr4RDsbnqxXs/Z5Uwz8tXzUDc749rPTz3fzq
LYDhwJ/Cdf8tkNpXU2In3rN9IZpYQbZKK8g96bpUQwI6+KdQQKVsoCZCZ5mr+vwj
eezRzJh/QJRamnprmGaPX2AxDuynVRaj05vwXr/hp+AkP0ggqa65pTPB
-----END CERTIFICATE-----
Generated at Thu May 7 21:37:01 2026 by rpki-client