Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D104B/6977A4BA9BD511ED9F8809CCF1222468/8N_7--IrTkOYavhggOjb0m5nNXs.mft
File:                     8N_7--IrTkOYavhggOjb0m5nNXs.mft (raw, json)
Hash identifier:          onRhAVQpmU2pHKjrVEsWjbigUWCb4WRvAmYh81fxOhk=
Subject key identifier:   8F:40:F0:CD:2B:0F:69:F4:62:5E:73:20:08:73:22:32:8F:A8:20:97
Authority key identifier: F0:DF:FB:FB:E2:2B:4E:43:98:6A:F8:60:80:E8:DB:D2:6E:67:35:7B
Certificate issuer:       /CN=F36D104BAF/serialNumber=F0DFFBFBE22B4E43986AF86080E8DBD26E67357B
Certificate serial:       04CA
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/8N_7--IrTkOYavhggOjb0m5nNXs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D104B/6977A4BA9BD511ED9F8809CCF1222468/8N_7--IrTkOYavhggOjb0m5nNXs.mft
Manifest number:          04C9
Signing time:             Mon 27 Apr 2026 03:12:34 +0000
Manifest this update:     Mon 27 Apr 2026 03:12:33 +0000
Manifest next update:     Wed 29 Apr 2026 03:12:33 +0000
Files and hashes:         1: 8N_7--IrTkOYavhggOjb0m5nNXs.crl (hash: yDpcmJpr7JHgoqSC9Bl8gAXnlIaM6acHvM2M5JQbs9Y=)
                          2: 788B31649BD611ED8E8A06CFF1222468.roa (hash: /DoapaGd3eagMu4E2GG71poz4ouCwc0M0wO9yu8zX6c=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D104B/6977A4BA9BD511ED9F8809CCF1222468/8N_7--IrTkOYavhggOjb0m5nNXs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D104B/6977A4BA9BD511ED9F8809CCF1222468/8N_7--IrTkOYavhggOjb0m5nNXs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/8N_7--IrTkOYavhggOjb0m5nNXs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 29 Apr 2026 00:07:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1226 (0x4ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D104BAF, serialNumber=F0DFFBFBE22B4E43986AF86080E8DBD26E67357B
        Validity
            Not Before: Apr 27 03:12:33 2026 GMT
            Not After : Apr 29 03:12:33 2026 GMT
        Subject: CN=69eed422-3257
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:be:e1:93:aa:74:19:90:3e:23:d7:ba:c9:6b:
                    70:04:df:70:00:a4:80:3d:f5:99:7e:83:ba:78:90:
                    43:33:fa:32:17:83:2a:3d:56:a4:fd:6c:66:b0:df:
                    5e:86:a8:dc:81:58:4a:6d:b1:63:31:ce:ce:9e:9f:
                    80:27:20:80:79:77:80:a3:61:dd:b9:52:0e:ed:54:
                    71:c3:7e:1e:a1:44:85:db:8f:6a:9c:ae:f8:72:09:
                    9e:4b:7c:2e:88:a6:60:2f:d2:8a:84:d1:e6:c8:36:
                    4c:80:a4:61:b2:cc:0f:d8:9a:c5:c7:54:e4:ad:48:
                    db:4c:f2:4f:3e:4f:c2:eb:4e:29:63:3c:fd:f4:91:
                    58:1f:c5:15:60:7d:35:a3:3d:ea:8e:7d:35:91:ee:
                    5a:d0:95:b9:7d:64:9c:ab:21:23:d3:15:34:f6:30:
                    6c:96:76:8f:aa:c0:98:90:48:a7:39:40:93:c0:3c:
                    21:4f:26:c5:f7:2e:76:e7:0c:90:4d:70:6a:15:30:
                    f2:85:72:33:7f:7e:54:7d:64:93:6a:8a:12:01:7d:
                    a7:f3:f7:1d:0f:50:01:1d:21:e6:73:48:e8:17:e6:
                    8d:04:2f:22:96:85:31:46:42:6a:ef:e3:4b:0b:94:
                    9a:6a:b3:76:6a:c5:d5:5d:ea:9a:f1:8c:2a:2e:59:
                    02:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:40:F0:CD:2B:0F:69:F4:62:5E:73:20:08:73:22:32:8F:A8:20:97
            X509v3 Authority Key Identifier:
                keyid:F0:DF:FB:FB:E2:2B:4E:43:98:6A:F8:60:80:E8:DB:D2:6E:67:35:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D104B/6977A4BA9BD511ED9F8809CCF1222468/8N_7--IrTkOYavhggOjb0m5nNXs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/8N_7--IrTkOYavhggOjb0m5nNXs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D104B/6977A4BA9BD511ED9F8809CCF1222468/8N_7--IrTkOYavhggOjb0m5nNXs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:1c:b4:11:59:3a:fd:80:a4:36:28:3f:0d:50:7d:33:37:ab:
         da:e0:78:29:6a:23:a7:84:68:53:44:7b:40:e4:0f:e6:b4:30:
         c4:f0:69:d4:5d:f7:f4:cb:7f:36:b8:59:5b:a5:c7:7c:0c:e5:
         f4:45:df:54:b9:64:ea:e2:95:72:40:6d:d2:b3:83:93:00:20:
         03:97:12:84:42:c5:d7:7f:dc:4a:bb:cc:a4:b5:a4:48:b9:80:
         3f:19:8b:10:71:2b:06:eb:62:43:ab:7a:95:1f:b8:18:b1:ad:
         14:51:4c:41:9c:65:38:ce:e7:8d:b4:61:83:c9:eb:b3:25:dc:
         d4:87:8e:3d:03:3f:e2:ad:c6:cd:13:73:97:9b:50:3a:aa:f1:
         83:2f:a2:38:79:31:f8:42:7e:6c:bd:12:58:3b:48:a6:06:ce:
         94:7e:56:fc:7b:74:2d:86:99:07:02:8b:ae:95:d1:d9:22:2c:
         6e:52:da:a7:7b:ce:80:39:f6:ae:94:dc:a1:c1:cb:51:28:4e:
         76:53:ab:84:09:d7:36:f9:17:4f:28:db:5e:29:ce:fd:b3:b6:
         17:6e:17:56:b1:a5:5f:ec:5b:ff:e0:dd:86:99:d4:43:e5:d6:
         3d:69:a8:eb:c1:34:7a:01:f7:d2:ff:5f:24:eb:38:7a:21:f2:
         ed:ad:88:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 09:19:49 2026 by rpki-client