Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DD00F/6CC833B2D66511ED8CA573B0F1222468/IMgTB9QVShV5wAQJACMAaCWVvTU.mft
File:                     IMgTB9QVShV5wAQJACMAaCWVvTU.mft (raw, json)
Hash identifier:          RFt1/4nPPqMEZ4peEGElQRnI3+ciBK0nXhtah7KAoYA=
Subject key identifier:   E2:11:5F:B5:95:5A:2D:72:FA:31:49:FA:FB:70:E7:5C:3F:81:52:96
Authority key identifier: 20:C8:13:07:D4:15:4A:15:79:C0:04:09:00:23:00:68:25:95:BD:35
Certificate issuer:       /CN=F36DD00FAF/serialNumber=20C81307D4154A1579C00409002300682595BD35
Certificate serial:       048B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/IMgTB9QVShV5wAQJACMAaCWVvTU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DD00F/6CC833B2D66511ED8CA573B0F1222468/IMgTB9QVShV5wAQJACMAaCWVvTU.mft
Manifest number:          0489
Signing time:             Thu 07 May 2026 03:21:50 +0000
Manifest this update:     Thu 07 May 2026 03:21:49 +0000
Manifest next update:     Sat 09 May 2026 03:21:49 +0000
Files and hashes:         1: IMgTB9QVShV5wAQJACMAaCWVvTU.crl (hash: cc1UXtOuBB+rMwovE+va5cjOx/xCjr4iyBWUXaWu9xY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DD00F/6CC833B2D66511ED8CA573B0F1222468/IMgTB9QVShV5wAQJACMAaCWVvTU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DD00F/6CC833B2D66511ED8CA573B0F1222468/IMgTB9QVShV5wAQJACMAaCWVvTU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/IMgTB9QVShV5wAQJACMAaCWVvTU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 09 May 2026 00:07:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1163 (0x48b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DD00FAF, serialNumber=20C81307D4154A1579C00409002300682595BD35
        Validity
            Not Before: May  7 03:21:49 2026 GMT
            Not After : May  9 03:21:49 2026 GMT
        Subject: CN=69fc054e-4327
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:18:18:c2:83:0a:c9:cd:a9:4f:fd:f6:95:c1:
                    6b:34:3e:22:53:a9:82:62:99:7d:e9:45:53:3f:3a:
                    70:ba:58:14:5e:f4:cd:b9:4c:21:8e:c1:44:c1:71:
                    d0:b2:3d:c3:5c:98:a7:45:32:f3:b0:d3:8e:72:d7:
                    2c:1c:35:8f:d6:51:ac:4d:ea:12:22:1c:fd:a6:7e:
                    1e:69:08:51:98:27:38:e2:fc:19:fd:0d:20:91:2d:
                    27:5a:d9:eb:23:4d:98:b1:98:f6:f1:a5:f6:2d:91:
                    90:8b:19:ef:b8:6c:4b:17:18:c3:40:5f:3c:a1:6a:
                    32:be:20:4d:e5:9a:ca:ba:8d:be:9c:94:7c:9e:bb:
                    77:cb:e6:d8:41:08:81:6d:c8:da:be:12:1c:4d:0b:
                    14:8b:9e:c3:8b:d6:99:73:95:88:be:dc:e2:e8:44:
                    d5:9d:2d:86:bb:cd:c1:10:ff:08:51:ac:2c:7e:b6:
                    74:bb:c5:54:65:f4:86:6d:a5:d5:4a:d5:ed:5d:9a:
                    d6:a5:ce:14:ea:8d:d4:5e:d3:34:07:b5:b4:a7:da:
                    2f:b6:50:36:51:cb:04:cf:6b:9b:1a:35:a7:cc:f9:
                    42:0c:fb:29:41:f7:c7:7c:7a:98:84:8a:e7:b7:47:
                    dc:30:b7:97:8b:2c:79:34:b0:9a:0a:60:dc:1f:a4:
                    9b:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:11:5F:B5:95:5A:2D:72:FA:31:49:FA:FB:70:E7:5C:3F:81:52:96
            X509v3 Authority Key Identifier:
                keyid:20:C8:13:07:D4:15:4A:15:79:C0:04:09:00:23:00:68:25:95:BD:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DD00F/6CC833B2D66511ED8CA573B0F1222468/IMgTB9QVShV5wAQJACMAaCWVvTU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/IMgTB9QVShV5wAQJACMAaCWVvTU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DD00F/6CC833B2D66511ED8CA573B0F1222468/IMgTB9QVShV5wAQJACMAaCWVvTU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:81:ef:74:1f:76:c9:ec:34:a6:6d:2e:ac:01:87:19:2e:5a:
         07:0e:ca:c1:67:6b:c3:57:57:64:98:e1:b5:d2:45:41:be:e5:
         e4:46:0d:d8:5d:c3:b4:f8:6c:b9:52:d5:c2:71:1b:a0:50:fc:
         f5:30:fd:35:0f:2d:e6:80:34:84:87:0b:96:78:a2:4a:cf:c6:
         78:63:00:17:89:a2:98:f5:63:20:37:35:b1:c1:0b:6a:ee:77:
         ab:8a:3d:ed:96:a2:c7:cb:64:81:8a:6d:f7:f4:93:3f:3b:b5:
         7e:af:f7:2e:08:ec:91:42:3c:4f:60:e8:61:15:32:a0:d0:3b:
         5c:9b:b0:2b:8d:bf:4f:c3:ee:6e:fb:f2:6a:18:09:ca:af:8e:
         44:4f:48:ff:2e:34:56:fe:46:a1:3f:a3:05:37:54:1b:6a:29:
         0e:d1:52:de:8e:b2:a5:b1:5e:40:8c:3b:b3:1c:f9:8d:5f:a2:
         ef:ff:17:7c:ff:59:7b:2c:4a:6e:03:87:b1:b8:df:7d:51:d7:
         50:1f:47:d2:11:b2:97:ad:f0:33:04:2a:9e:7f:b8:63:77:cd:
         1e:e7:b9:cd:68:51:5e:28:a5:17:f5:47:e6:38:19:e5:a3:aa:
         99:1d:30:f9:ca:1a:56:85:ae:35:1a:af:8e:ad:85:cd:a8:33:
         2a:fe:52:55
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBIswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
REQwMEZBRjExMC8GA1UEBRMoMjBDODEzMDdENDE1NEExNTc5QzAwNDA5MDAyMzAw
NjgyNTk1QkQzNTAeFw0yNjA1MDcwMzIxNDlaFw0yNjA1MDkwMzIxNDlaMBgxFjAU
BgNVBAMTDTY5ZmMwNTRlLTQzMjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDUGBjCgwrJzalP/faVwWs0PiJTqYJimX3pRVM/OnC6WBRe9M25TCGOwUTB
cdCyPcNcmKdFMvOw045y1ywcNY/WUaxN6hIiHP2mfh5pCFGYJzji/Bn9DSCRLSda
2esjTZixmPbxpfYtkZCLGe+4bEsXGMNAXzyhajK+IE3lmsq6jb6clHyeu3fL5thB
CIFtyNq+EhxNCxSLnsOL1plzlYi+3OLoRNWdLYa7zcEQ/whRrCx+tnS7xVRl9IZt
pdVK1e1dmtalzhTqjdRe0zQHtbSn2i+2UDZRywTPa5saNafM+UIM+ylB98d8epiE
iue3R9wwt5eLLHk0sJoKYNwfpJvvAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU4hFf
tZVaLXL6MUn6+3DnXD+BUpYwHwYDVR0jBBgwFoAUIMgTB9QVShV5wAQJACMAaCWV
vTUwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkREMDBGLzZDQzgzM0IyRDY2NTExRUQ4Q0E1NzNCMEYxMjIyNDY4L0lNZ1RC
OVFWU2hWNXdBUUpBQ01BYUNXVnZUVS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0lNZ1RCOVFWU2hWNXdBUUpBQ01BYUNXVnZUVS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2REQwMEYvNkNDODMzQjJENjY1MTFFRDhDQTU3M0IwRjEy
MjI0NjgvSU1nVEI5UVZTaFY1d0FRSkFDTUFhQ1dWdlRVLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCNge90H3bJ7DSmbS6sAYcZLloHDsrB
Z2vDV1dkmOG10kVBvuXkRg3YXcO0+Gy5UtXCcRugUPz1MP01Dy3mgDSEhwuWeKJK
z8Z4YwAXiaKY9WMgNzWxwQtq7nerij3tlqLHy2SBim339JM/O7V+r/cuCOyRQjxP
YOhhFTKg0Dtcm7Arjb9Pw+5u+/JqGAnKr45ET0j/LjRW/kahP6MFN1QbaikO0VLe
jrKlsV5AjDuzHPmNX6Lv/xd8/1l7LEpuA4exuN99UddQH0fSEbKXrfAzBCqef7hj
d80e57nNaFFeKKUX9UfmOBnlo6qZHTD5yhpWha41Gq+OrYXNqDMq/lJV
-----END CERTIFICATE-----
Generated at Thu May 7 21:34:01 2026 by rpki-client