Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E70F4/69568416F05911EBAF56F43BD8A014CE/qUI_pMACbS5NqCEtEo2dJwfoHck.mft
File:                     qUI_pMACbS5NqCEtEo2dJwfoHck.mft (raw, json)
Hash identifier:          O+afpgzyOjdK+6HmBE4ZXwM59ggCOFsqRhTx5Wk0luA=
Subject key identifier:   DF:4B:71:9E:14:43:A5:59:5C:7A:C3:91:77:72:BE:A4:01:EB:16:F3
Authority key identifier: A9:42:3F:A4:C0:02:6D:2E:4D:A8:21:2D:12:8D:9D:27:07:E8:1D:C9
Certificate issuer:       /CN=F36E70F4AF/serialNumber=A9423FA4C0026D2E4DA8212D128D9D2707E81DC9
Certificate serial:       06FE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/qUI_pMACbS5NqCEtEo2dJwfoHck.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E70F4/69568416F05911EBAF56F43BD8A014CE/qUI_pMACbS5NqCEtEo2dJwfoHck.mft
Manifest number:          06FC
Signing time:             Thu 07 May 2026 02:18:17 +0000
Manifest this update:     Thu 07 May 2026 02:18:17 +0000
Manifest next update:     Sat 09 May 2026 02:18:17 +0000
Files and hashes:         1: qUI_pMACbS5NqCEtEo2dJwfoHck.crl (hash: wluBdMEjebSYYE/R0jwODvFXERhAbGZxIgc7z0aHbyc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E70F4/69568416F05911EBAF56F43BD8A014CE/qUI_pMACbS5NqCEtEo2dJwfoHck.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E70F4/69568416F05911EBAF56F43BD8A014CE/qUI_pMACbS5NqCEtEo2dJwfoHck.mft
                          rsync://rpki.afrinic.net/repository/afrinic/qUI_pMACbS5NqCEtEo2dJwfoHck.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 09 May 2026 00:07:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1790 (0x6fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E70F4AF, serialNumber=A9423FA4C0026D2E4DA8212D128D9D2707E81DC9
        Validity
            Not Before: May  7 02:18:17 2026 GMT
            Not After : May  9 02:18:17 2026 GMT
        Subject: CN=69fbf669-df1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e9:d6:e9:ee:0e:5b:df:81:42:63:2a:51:fa:
                    96:df:ed:c0:2e:42:b1:93:ea:78:23:27:8d:9f:d2:
                    df:1a:cd:f8:59:39:da:a3:4a:e5:bc:56:c8:6d:30:
                    0c:3d:e1:c8:a8:74:5e:4e:c0:bb:7b:d7:a5:4e:7b:
                    70:b6:da:5b:8e:0e:8a:8f:3e:4b:04:eb:af:9b:f2:
                    7f:10:d2:5d:60:9e:2c:7a:cd:d8:de:62:0b:83:8b:
                    be:a3:d2:d0:f6:19:9c:51:fb:d9:e7:85:3a:13:6b:
                    b1:3b:9e:35:0e:7d:65:70:1b:4d:61:13:e4:e5:b2:
                    6d:90:b3:8d:a2:58:4d:31:c9:4a:c6:11:94:41:39:
                    c6:5d:64:ac:1c:05:bc:54:b0:08:1e:5b:16:ab:6a:
                    48:c3:82:c3:9b:ea:51:ef:9a:8f:f8:71:ff:57:96:
                    45:8c:f1:1d:42:cd:08:01:ab:a8:75:31:4f:c5:97:
                    52:ac:d3:ef:38:4d:e6:11:bf:8c:b0:e9:a4:e2:53:
                    73:dd:65:b2:66:ee:95:fa:78:9c:6f:6e:93:b6:1f:
                    d2:1a:32:dd:f6:23:79:82:74:14:41:f9:b9:74:a1:
                    25:f1:de:3a:61:d0:23:2e:3e:47:82:ea:99:6d:f9:
                    a4:b7:79:ac:78:a2:65:14:d6:8f:e2:d9:41:d3:87:
                    2d:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:4B:71:9E:14:43:A5:59:5C:7A:C3:91:77:72:BE:A4:01:EB:16:F3
            X509v3 Authority Key Identifier:
                keyid:A9:42:3F:A4:C0:02:6D:2E:4D:A8:21:2D:12:8D:9D:27:07:E8:1D:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E70F4/69568416F05911EBAF56F43BD8A014CE/qUI_pMACbS5NqCEtEo2dJwfoHck.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/qUI_pMACbS5NqCEtEo2dJwfoHck.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E70F4/69568416F05911EBAF56F43BD8A014CE/qUI_pMACbS5NqCEtEo2dJwfoHck.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:da:c3:f9:2b:c5:fd:18:df:71:f3:55:ad:d9:5b:91:a0:ba:
         3c:f2:1d:ed:bb:03:11:0c:77:89:bc:75:9f:02:33:e1:98:b8:
         86:5f:7e:01:e0:bd:85:ac:78:08:bc:33:c8:12:00:47:f1:70:
         2b:f9:71:1d:a9:69:19:ee:3b:66:7b:05:c1:29:47:c3:41:bf:
         97:25:bb:6e:57:71:c6:ad:82:ee:75:00:ab:38:23:43:a0:1c:
         d5:b9:13:fa:c6:2e:77:d3:16:49:03:35:0a:64:d7:e9:09:a0:
         0d:a0:d7:2c:42:e6:f5:a6:9f:77:7f:97:c3:f7:6b:51:b9:22:
         1d:c4:9a:0a:12:d9:ad:a8:06:5c:d4:da:4a:37:8e:8e:af:15:
         4e:00:f9:c3:63:13:b5:e5:fe:23:13:cd:e0:a1:48:94:28:6e:
         24:94:c2:c6:54:9d:b9:04:d3:87:71:38:44:b1:12:ff:26:a0:
         4b:dc:2f:53:3a:20:f8:c0:8f:e4:e1:5d:ea:c3:f8:54:51:d4:
         0b:66:18:57:c9:c1:27:9b:3c:71:7d:f2:fe:a4:da:66:e7:52:
         ff:a5:0f:34:b0:dd:1e:00:f2:e3:ec:89:c1:5e:99:9f:96:a3:
         c5:87:70:7f:bb:24:80:c4:a2:b4:f7:8f:c9:8f:15:35:16:a6:
         86:20:73:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 21:34:35 2026 by rpki-client