Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E1A95/28A3BF58EFA811F0A6B991B8DAE4EC9C/zgfVJCGaKb9NDax9tiqIO3WsSUA.mft
File:                     zgfVJCGaKb9NDax9tiqIO3WsSUA.mft (raw, json)
Hash identifier:          5jfPUlR48mGC1R/B1Yy4+gT57V/PbFXzuoYGMIit0oo=
Subject key identifier:   37:BA:D1:3C:49:2A:E8:E3:7D:E0:4D:B0:7B:1B:E5:43:70:B3:9D:65
Authority key identifier: CE:07:D5:24:21:9A:29:BF:4D:0D:AC:7D:B6:2A:88:3B:75:AC:49:40
Certificate issuer:       /CN=F36E1A95AF/serialNumber=CE07D524219A29BF4D0DAC7DB62A883B75AC4940
Certificate serial:       78
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/zgfVJCGaKb9NDax9tiqIO3WsSUA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E1A95/28A3BF58EFA811F0A6B991B8DAE4EC9C/zgfVJCGaKb9NDax9tiqIO3WsSUA.mft
Manifest number:          77
Signing time:             Thu 07 May 2026 05:21:57 +0000
Manifest this update:     Thu 07 May 2026 05:21:56 +0000
Manifest next update:     Sat 09 May 2026 05:21:56 +0000
Files and hashes:         1: zgfVJCGaKb9NDax9tiqIO3WsSUA.crl (hash: 3NJjo/o9hpBWoqBlK4TJoymP30aeAvL58hrwfHIOSts=)
                          2: 0836D574EFA911F0AD3786BEDAE4EC9C.roa (hash: s34q98p+j1656mmnmZ5OjzaYIjMbFPtO6WF3YwxXSiA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E1A95/28A3BF58EFA811F0A6B991B8DAE4EC9C/zgfVJCGaKb9NDax9tiqIO3WsSUA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E1A95/28A3BF58EFA811F0A6B991B8DAE4EC9C/zgfVJCGaKb9NDax9tiqIO3WsSUA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/zgfVJCGaKb9NDax9tiqIO3WsSUA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 09 May 2026 00:07:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120 (0x78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E1A95AF, serialNumber=CE07D524219A29BF4D0DAC7DB62A883B75AC4940
        Validity
            Not Before: May  7 05:21:56 2026 GMT
            Not After : May  9 05:21:56 2026 GMT
        Subject: CN=69fc2175-bb65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:40:89:1b:42:2c:33:d0:99:2e:03:9a:f9:1e:
                    b3:13:ed:d3:30:dc:25:f2:32:6f:cf:72:35:90:44:
                    1d:47:9b:6b:08:42:84:82:c8:8f:cd:fd:ec:1d:53:
                    1f:3f:91:9a:d9:b0:32:28:d4:b3:12:8b:19:84:36:
                    c0:21:d1:e5:0c:dd:1e:0b:c1:a4:2b:50:02:50:e0:
                    9e:a6:54:d5:0d:a6:86:03:65:75:46:70:45:81:e1:
                    2b:11:04:2b:0a:d7:d5:53:e1:c0:ca:92:07:8b:26:
                    b3:94:5e:68:69:20:f6:99:f7:70:16:39:d5:39:85:
                    0e:7a:e1:fb:de:f0:33:7d:18:75:f1:86:89:d6:c9:
                    49:27:e4:3c:85:55:3c:17:20:a6:5f:80:43:5b:0e:
                    9c:53:d6:ea:c1:e2:fd:2c:26:fc:58:fe:37:23:12:
                    56:03:ea:1e:cf:fe:66:8a:c8:59:b4:1c:ec:10:5e:
                    97:55:75:58:d7:39:4e:4c:f6:9d:70:be:bb:c0:d7:
                    47:ff:69:72:44:62:e0:fa:dd:d0:b2:bd:20:73:3a:
                    79:af:bf:0e:d2:e6:6f:6f:9e:b7:05:49:26:c0:67:
                    03:3b:33:46:f0:43:66:8f:fb:f6:32:82:95:8c:82:
                    ed:fa:93:28:25:e4:d2:a2:b9:66:2c:8f:cf:5d:75:
                    2a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:BA:D1:3C:49:2A:E8:E3:7D:E0:4D:B0:7B:1B:E5:43:70:B3:9D:65
            X509v3 Authority Key Identifier:
                keyid:CE:07:D5:24:21:9A:29:BF:4D:0D:AC:7D:B6:2A:88:3B:75:AC:49:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E1A95/28A3BF58EFA811F0A6B991B8DAE4EC9C/zgfVJCGaKb9NDax9tiqIO3WsSUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zgfVJCGaKb9NDax9tiqIO3WsSUA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E1A95/28A3BF58EFA811F0A6B991B8DAE4EC9C/zgfVJCGaKb9NDax9tiqIO3WsSUA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:af:28:9a:80:8b:8d:ad:dd:51:ae:5b:0f:fc:55:17:7f:20:
         28:55:29:3f:27:45:24:a1:0b:9f:6c:01:3c:cc:06:70:1c:36:
         4f:d1:8f:7b:6f:8e:12:e5:cf:d0:ec:ed:d9:1e:99:28:23:5a:
         35:b3:e5:07:8c:e3:3b:45:cf:6f:21:8e:59:c1:e3:b6:57:be:
         da:2a:6c:5b:5e:f3:e0:9d:9d:77:4a:30:91:26:46:0f:92:18:
         bd:40:f8:6c:80:4a:58:79:fe:60:09:f5:e4:13:02:35:fd:ae:
         2a:fd:31:eb:8f:69:2e:10:c5:b9:80:b4:7e:fe:13:fc:d1:38:
         f6:19:ed:61:52:87:f4:dc:4d:80:5b:68:c0:3c:dd:98:7c:a0:
         2b:db:fb:1b:e1:c8:85:b5:47:df:a2:31:6e:b7:ef:46:6b:ce:
         5d:33:fb:d2:a6:f5:bb:08:9f:87:f9:6f:fb:03:bd:f8:08:46:
         b7:20:9f:af:50:5c:de:70:da:08:d2:45:25:4d:c7:03:76:07:
         86:f7:91:bf:33:fc:ac:85:c0:90:e0:de:98:d0:8e:08:a6:b7:
         d6:79:2c:38:6a:66:ad:01:58:4d:ae:cc:32:58:53:e4:91:1a:
         ec:55:26:3f:84:3b:77:5b:26:63:aa:fd:17:8d:28:7f:09:13:
         83:55:f4:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 21:37:01 2026 by rpki-client