Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E3D54/10D7FDF8077C11F18A9EE389DAE4EC9C/nDG_Ybi28H3SmbmF5zKd-qo84qc.mft
File:                     nDG_Ybi28H3SmbmF5zKd-qo84qc.mft (raw, json)
Hash identifier:          ZlplMbotRCGwnYkf/ELB/vdh5InIJs91RF32IMkEXRY=
Subject key identifier:   5F:7C:33:7B:B9:87:94:B5:47:60:9E:47:D2:F4:DD:42:22:F2:E6:03
Authority key identifier: 9C:31:BF:61:B8:B6:F0:7D:D2:99:B9:85:E7:32:9D:FA:AA:3C:E2:A7
Certificate issuer:       /CN=F36E3D54AF/serialNumber=9C31BF61B8B6F07DD299B985E7329DFAAA3CE2A7
Certificate serial:       5B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/nDG_Ybi28H3SmbmF5zKd-qo84qc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E3D54/10D7FDF8077C11F18A9EE389DAE4EC9C/nDG_Ybi28H3SmbmF5zKd-qo84qc.mft
Manifest number:          59
Signing time:             Thu 07 May 2026 05:26:56 +0000
Manifest this update:     Thu 07 May 2026 05:26:55 +0000
Manifest next update:     Sat 09 May 2026 05:26:55 +0000
Files and hashes:         1: nDG_Ybi28H3SmbmF5zKd-qo84qc.crl (hash: EQs0gM6b3xKkTij/4XWnDewenzvd0UurT4HkzigpMbk=)
                          2: FCE69F10077C11F1B6D7578EDAE4EC9C.roa (hash: l9w1XT16v5pOs6ZmyalOJI7UHw3oAkl12LArNgvLDY8=)
                          3: D03272A4077D11F1B2E27D92DAE4EC9C.roa (hash: MNGXrpINz1Q16hHZ2N8QvRAzr2kMre4hq/Y0Tbq6HLY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E3D54/10D7FDF8077C11F18A9EE389DAE4EC9C/nDG_Ybi28H3SmbmF5zKd-qo84qc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E3D54/10D7FDF8077C11F18A9EE389DAE4EC9C/nDG_Ybi28H3SmbmF5zKd-qo84qc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/nDG_Ybi28H3SmbmF5zKd-qo84qc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 09 May 2026 00:07:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 91 (0x5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E3D54AF, serialNumber=9C31BF61B8B6F07DD299B985E7329DFAAA3CE2A7
        Validity
            Not Before: May  7 05:26:55 2026 GMT
            Not After : May  9 05:26:55 2026 GMT
        Subject: CN=69fc22a0-e0ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:8e:28:6b:ff:e6:47:bb:b6:32:93:05:9e:b2:
                    e0:67:4d:80:72:1c:60:db:b8:5b:92:a4:0c:e9:26:
                    73:e0:08:69:16:91:35:bb:c1:5d:3d:1e:59:45:e3:
                    39:e6:a7:f0:c6:06:58:80:2a:03:b4:af:9a:11:c0:
                    a3:b2:d9:c8:21:b5:25:a6:7e:ec:3e:c3:8f:38:23:
                    64:ab:58:63:8a:5c:24:a2:23:eb:c9:1f:dd:29:dd:
                    56:b7:e8:8c:eb:1c:11:56:05:4b:a1:f5:d3:ac:59:
                    78:37:4b:d3:04:85:c6:c1:5b:67:3e:21:83:9d:3e:
                    cb:54:51:93:ca:e8:d2:0e:38:6e:4c:70:bb:50:e7:
                    f8:1d:7b:d9:61:93:84:24:97:18:dd:f0:f4:83:93:
                    f2:9b:5e:9c:4d:f6:40:0a:50:3e:f1:c2:fe:20:85:
                    34:09:14:7b:5d:7c:04:ac:52:72:f9:ed:20:2e:05:
                    c3:05:38:bb:b6:35:4b:33:0e:e7:2b:fd:43:79:55:
                    8d:3a:9a:47:c6:b3:b4:c5:57:d8:aa:58:84:26:31:
                    7b:5f:bc:4d:a9:1b:e4:c2:a0:7f:d6:23:25:29:bb:
                    1d:87:7f:66:cc:7d:88:2b:7d:3e:f1:d9:af:0e:75:
                    18:b9:80:33:d9:b7:86:7e:80:5f:1c:8e:2a:78:4b:
                    77:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:7C:33:7B:B9:87:94:B5:47:60:9E:47:D2:F4:DD:42:22:F2:E6:03
            X509v3 Authority Key Identifier:
                keyid:9C:31:BF:61:B8:B6:F0:7D:D2:99:B9:85:E7:32:9D:FA:AA:3C:E2:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E3D54/10D7FDF8077C11F18A9EE389DAE4EC9C/nDG_Ybi28H3SmbmF5zKd-qo84qc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/nDG_Ybi28H3SmbmF5zKd-qo84qc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E3D54/10D7FDF8077C11F18A9EE389DAE4EC9C/nDG_Ybi28H3SmbmF5zKd-qo84qc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:d1:43:03:82:37:62:95:f3:7c:e9:9b:c4:c7:19:12:4d:7e:
         b6:5f:b5:5b:79:ac:3c:33:7c:eb:88:b6:f9:70:49:13:2b:d1:
         33:61:1f:2f:75:08:9f:78:8c:e2:e1:49:aa:82:a6:1e:0c:28:
         73:70:eb:68:af:2d:5a:c1:79:a8:95:4b:58:2e:93:9d:dd:98:
         48:6a:ed:35:b8:21:cc:e1:4d:e1:52:43:55:23:1f:c3:b0:bf:
         d2:29:1a:24:ab:fa:1e:13:9c:28:e3:46:88:a5:25:d6:90:cd:
         77:78:2a:a7:86:87:73:02:08:82:13:26:ef:cd:b1:60:34:c9:
         9f:fd:23:0a:d9:11:4a:08:99:59:17:9f:2a:a0:7c:f8:40:aa:
         51:f9:3b:e0:ee:7d:ea:54:b0:62:91:2e:39:85:1c:64:e1:c6:
         a7:aa:74:34:2b:75:58:bd:22:88:51:05:fd:2c:3c:17:32:8f:
         88:ec:bc:f5:6f:cc:9f:97:b2:28:af:d8:01:f0:49:ae:4a:f0:
         e3:82:f7:88:de:7e:c7:ca:cd:85:3d:91:8b:45:03:52:b1:9a:
         5f:74:e4:93:37:3c:06:ef:80:f5:5a:b3:39:07:84:e6:af:5e:
         2d:7c:f8:f2:ff:23:43:2f:7e:6e:fd:e9:ba:54:5c:7f:da:51:
         10:3d:e8:8d
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIBWzANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZF
M0Q1NEFGMTEwLwYDVQQFEyg5QzMxQkY2MUI4QjZGMDdERDI5OUI5ODVFNzMyOURG
QUFBM0NFMkE3MB4XDTI2MDUwNzA1MjY1NVoXDTI2MDUwOTA1MjY1NVowGDEWMBQG
A1UEAxMNNjlmYzIyYTAtZTBlYzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANKOKGv/5ke7tjKTBZ6y4GdNgHIcYNu4W5KkDOkmc+AIaRaRNbvBXT0eWUXj
Oean8MYGWIAqA7SvmhHAo7LZyCG1JaZ+7D7DjzgjZKtYY4pcJKIj68kf3SndVrfo
jOscEVYFS6H106xZeDdL0wSFxsFbZz4hg50+y1RRk8ro0g44bkxwu1Dn+B172WGT
hCSXGN3w9IOT8ptenE32QApQPvHC/iCFNAkUe118BKxScvntIC4FwwU4u7Y1SzMO
5yv9Q3lVjTqaR8aztMVX2KpYhCYxe1+8Takb5MKgf9YjJSm7HYd/Zsx9iCt9PvHZ
rw51GLmAM9m3hn6AXxyOKnhLdxcCAwEAAaOCArgwggK0MB0GA1UdDgQWBBRffDN7
uYeUtUdgnkfS9N1CIvLmAzAfBgNVHSMEGDAWgBScMb9huLbwfdKZuYXnMp36qjzi
pzAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2RTNENTQvMTBEN0ZERjgwNzdDMTFGMThBOUVFMzg5REFFNEVDOUMvbkRHX1li
aTI4SDNTbWJtRjV6S2QtcW84NHFjLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvbkRHX1liaTI4SDNTbWJtRjV6S2QtcW84NHFjLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUF
BzALhn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzZFM0Q1NC8xMEQ3RkRGODA3N0MxMUYxOEE5RUUzODlEQUU0
RUM5Qy9uREdfWWJpMjhIM1NtYm1GNXpLZC1xbzg0cWMubWZ0MDUGCCsGAQUFBzAN
hilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBAAzRQwOCN2KV83zpm8THGRJNfrZftVt5
rDwzfOuItvlwSRMr0TNhHy91CJ94jOLhSaqCph4MKHNw62ivLVrBeaiVS1guk53d
mEhq7TW4IczhTeFSQ1UjH8Owv9IpGiSr+h4TnCjjRoilJdaQzXd4KqeGh3MCCIIT
Ju/NsWA0yZ/9IwrZEUoImVkXnyqgfPhAqlH5O+DufepUsGKRLjmFHGThxqeqdDQr
dVi9IohRBf0sPBcyj4jsvPVvzJ+Xsiiv2AHwSa5K8OOC94jefsfKzYU9kYtFA1Kx
ml905JM3PAbvgPVaszkHhOavXi18+PL/I0Mvfm796bpUXH/aURA96I0=
-----END CERTIFICATE-----
Generated at Thu May 7 21:37:03 2026 by rpki-client