Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E6802/F6AA6EE8653D11EF844B268E762E951A/aL00PB2fcEbGL5VfhnMZ2FKxShA.mft
File:                     aL00PB2fcEbGL5VfhnMZ2FKxShA.mft (raw, json)
Hash identifier:          WQ/48bn1q9lfa+tiyILwWtf8Zv5mSspvP8/oloTulhk=
Subject key identifier:   DF:05:53:C9:04:2C:EC:42:06:C1:D2:05:18:CD:ED:07:56:55:58:C5
Authority key identifier: 68:BD:34:3C:1D:9F:70:46:C6:2F:95:5F:86:73:19:D8:52:B1:4A:10
Certificate issuer:       /CN=F36E6802AF/serialNumber=68BD343C1D9F7046C62F955F867319D852B14A10
Certificate serial:       0279
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/aL00PB2fcEbGL5VfhnMZ2FKxShA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E6802/F6AA6EE8653D11EF844B268E762E951A/aL00PB2fcEbGL5VfhnMZ2FKxShA.mft
Manifest number:          0278
Signing time:             Thu 07 May 2026 04:26:43 +0000
Manifest this update:     Thu 07 May 2026 04:26:43 +0000
Manifest next update:     Sat 09 May 2026 04:26:43 +0000
Files and hashes:         1: aL00PB2fcEbGL5VfhnMZ2FKxShA.crl (hash: ac8kd0yzCQxldwUdBCBd4Y3TpS+2CJFAAH1EbfoOpsg=)
                          2: 10CA293E653F11EF8C440393762E951A.roa (hash: nhNLmRsBHLhK6LTWVHLzqZimVfw7FMGqSN9TfNAWHoE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E6802/F6AA6EE8653D11EF844B268E762E951A/aL00PB2fcEbGL5VfhnMZ2FKxShA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E6802/F6AA6EE8653D11EF844B268E762E951A/aL00PB2fcEbGL5VfhnMZ2FKxShA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/aL00PB2fcEbGL5VfhnMZ2FKxShA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 09 May 2026 00:07:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 633 (0x279)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E6802AF, serialNumber=68BD343C1D9F7046C62F955F867319D852B14A10
        Validity
            Not Before: May  7 04:26:43 2026 GMT
            Not After : May  9 04:26:43 2026 GMT
        Subject: CN=69fc1483-b91d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:a2:27:03:8a:91:ac:01:c3:28:ea:ed:7f:5e:
                    ee:ae:b8:9a:59:de:5d:8b:6d:85:d4:7a:e8:ed:c9:
                    e9:62:1c:5a:1e:f5:98:61:c7:4c:52:cc:17:0f:bc:
                    ab:37:c2:cf:f9:7e:99:38:33:7a:fc:bd:ab:11:53:
                    b2:9e:f9:be:11:88:e7:3b:ca:39:9b:e1:64:46:eb:
                    d8:14:49:42:2e:7a:ad:d2:62:17:67:6e:3e:61:78:
                    56:60:fe:84:37:ad:42:7a:2a:65:b2:cd:49:1b:14:
                    40:5f:ba:bd:ec:e8:5f:16:52:43:af:8d:d1:f3:6a:
                    d0:72:4c:71:8e:ba:7d:0e:a0:ca:2b:47:8d:41:3c:
                    0e:db:36:ba:10:dc:39:52:f9:0c:41:3a:50:78:b0:
                    cd:dc:4f:00:9b:26:ef:62:b0:31:e9:fd:23:1b:52:
                    c3:a7:7b:3c:f9:ee:33:6d:66:18:12:95:59:57:52:
                    2d:2c:b6:89:69:18:37:f2:7b:94:fe:ff:0b:c2:d2:
                    db:ef:d5:ab:e2:63:ce:0f:90:47:22:7d:52:a1:65:
                    14:21:26:f5:f9:f7:00:a1:88:b5:97:05:38:93:5d:
                    fb:9c:e8:1d:45:7d:86:f6:06:db:15:32:0c:36:2e:
                    5a:d6:11:a0:c6:92:40:b3:0d:af:25:25:c5:5d:e5:
                    73:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:05:53:C9:04:2C:EC:42:06:C1:D2:05:18:CD:ED:07:56:55:58:C5
            X509v3 Authority Key Identifier:
                keyid:68:BD:34:3C:1D:9F:70:46:C6:2F:95:5F:86:73:19:D8:52:B1:4A:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E6802/F6AA6EE8653D11EF844B268E762E951A/aL00PB2fcEbGL5VfhnMZ2FKxShA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/aL00PB2fcEbGL5VfhnMZ2FKxShA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E6802/F6AA6EE8653D11EF844B268E762E951A/aL00PB2fcEbGL5VfhnMZ2FKxShA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:f9:37:4e:20:27:45:23:72:ad:4d:9f:74:a3:a4:09:ff:63:
         ea:1c:7a:fa:31:af:c9:ce:6f:cc:fd:39:c6:af:1c:84:f2:d6:
         39:5c:e3:4a:95:8e:26:89:d4:4e:09:c6:fc:fe:00:6c:46:8d:
         c2:6f:22:56:fd:72:d1:81:cc:77:79:6c:8d:73:e3:82:48:d8:
         63:6d:ea:f7:9f:9a:b4:b1:03:93:9c:bb:e6:ab:09:65:8b:26:
         55:81:16:2b:9b:fb:0a:30:a8:8f:8e:a4:e5:83:c0:d6:d8:b9:
         38:5f:7b:f8:47:dd:cc:37:2a:3d:22:d8:99:b1:fb:25:8f:36:
         fd:af:84:fa:67:d3:5c:3d:d5:8f:8c:86:db:bf:57:5c:19:39:
         c2:0e:95:c8:f4:01:37:d5:2a:f0:ea:9a:a5:59:98:7f:22:20:
         1d:e3:15:1e:ee:ca:31:35:6d:d7:77:cc:45:49:80:b5:0e:6f:
         29:b2:44:ea:eb:39:37:fd:d5:3f:26:dd:53:e0:5a:f9:69:fe:
         c8:0c:94:c0:ec:8a:8f:a6:ed:c6:67:37:4f:a7:5c:92:69:5c:
         7e:1e:91:4f:da:fd:71:ca:40:ee:34:95:ec:d5:45:a4:cc:4e:
         ed:4b:e0:fd:96:78:3c:61:90:d4:08:8a:ca:71:1b:44:7d:6e:
         97:de:c0:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 21:34:00 2026 by rpki-client