Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E94D7/42D42708D28511EC92ED97AFF1222468/b4DAoZB2gNl5AN9FHNVU1_rbzGY.mft
File:                     b4DAoZB2gNl5AN9FHNVU1_rbzGY.mft (raw, json)
Hash identifier:          Zgfjzqc8r/JFTmTfuNc53NJtEClsBby+kCkNOc0/pmk=
Subject key identifier:   D2:BD:28:BB:C0:B7:54:DD:67:CF:E2:25:95:8E:9D:0F:2C:43:D3:77
Authority key identifier: 6F:80:C0:A1:90:76:80:D9:79:00:DF:45:1C:D5:54:D7:FA:DB:CC:66
Certificate issuer:       /CN=F36E94D7AF/serialNumber=6F80C0A1907680D97900DF451CD554D7FADBCC66
Certificate serial:       05DE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/b4DAoZB2gNl5AN9FHNVU1_rbzGY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E94D7/42D42708D28511EC92ED97AFF1222468/b4DAoZB2gNl5AN9FHNVU1_rbzGY.mft
Manifest number:          05DB
Signing time:             Thu 07 May 2026 02:43:32 +0000
Manifest this update:     Thu 07 May 2026 02:43:31 +0000
Manifest next update:     Sat 09 May 2026 02:43:31 +0000
Files and hashes:         1: b4DAoZB2gNl5AN9FHNVU1_rbzGY.crl (hash: +F4aEpvf4eBUZBbZlbUAt2zXkPbvdoU0mfHW1gSpi3M=)
                          2: B1A16132D28A11EC8F270DC0F1222468.roa (hash: 4TQRBmeOxAbF3KLeP0SF+V9s9RzwKR9Ie0C7o3vk0Oo=)
                          3: E3D5D52AD28A11ECB4D0B0C0F1222468.roa (hash: MgA7cMYgIRFHAgD+dSaQaOo5eOVm+neEzUW6GLOT448=)
                          4: 784AE4BCD28A11EC81ED62BFF1222468.roa (hash: CkuoR2/+F6JKHq8BKZH5DTfRvZh+LqHD0UlmcfmPCMw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E94D7/42D42708D28511EC92ED97AFF1222468/b4DAoZB2gNl5AN9FHNVU1_rbzGY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E94D7/42D42708D28511EC92ED97AFF1222468/b4DAoZB2gNl5AN9FHNVU1_rbzGY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/b4DAoZB2gNl5AN9FHNVU1_rbzGY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 09 May 2026 00:07:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1502 (0x5de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E94D7AF, serialNumber=6F80C0A1907680D97900DF451CD554D7FADBCC66
        Validity
            Not Before: May  7 02:43:31 2026 GMT
            Not After : May  9 02:43:31 2026 GMT
        Subject: CN=69fbfc54-55fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b1:43:5c:f9:d8:d5:ee:93:75:83:b9:08:db:
                    c6:64:6b:ee:14:b7:22:7e:e8:b2:c2:fe:80:c0:84:
                    a0:92:72:b6:05:6c:fc:a6:dd:0c:90:f4:92:8d:0e:
                    33:55:63:e3:34:3f:db:90:30:65:ce:cc:6b:34:06:
                    9d:26:62:14:1a:f6:14:b4:77:36:7b:87:a8:2b:33:
                    ec:ee:22:10:ed:c5:9e:65:30:56:ed:97:f5:39:d8:
                    aa:2c:81:34:d9:d2:e9:1a:c5:b9:99:99:22:cf:b6:
                    58:2f:0c:00:4e:d5:50:f9:0b:68:b2:46:95:60:6a:
                    3f:29:ed:f8:cf:35:6f:d4:fd:5e:5f:a9:39:bf:89:
                    8c:06:91:af:d8:60:39:08:b8:40:aa:44:43:67:11:
                    2d:f0:d3:e1:c5:f7:05:83:da:54:c2:e0:b9:1c:ff:
                    a4:14:f1:d3:5d:d9:7c:bf:86:07:87:86:6b:54:a8:
                    77:bc:c9:73:c6:9d:b0:dc:27:38:16:ff:75:76:be:
                    4b:a6:18:fe:72:2e:96:63:bf:38:38:19:e2:f9:37:
                    46:f2:00:33:ff:be:f8:f5:84:b5:7b:01:7a:84:88:
                    37:e9:a2:9c:ed:f7:b6:fc:d3:7a:35:7f:d3:38:d6:
                    79:dd:3c:ae:5b:3f:47:88:b7:b9:f1:22:ef:59:f1:
                    fa:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:BD:28:BB:C0:B7:54:DD:67:CF:E2:25:95:8E:9D:0F:2C:43:D3:77
            X509v3 Authority Key Identifier:
                keyid:6F:80:C0:A1:90:76:80:D9:79:00:DF:45:1C:D5:54:D7:FA:DB:CC:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E94D7/42D42708D28511EC92ED97AFF1222468/b4DAoZB2gNl5AN9FHNVU1_rbzGY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/b4DAoZB2gNl5AN9FHNVU1_rbzGY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E94D7/42D42708D28511EC92ED97AFF1222468/b4DAoZB2gNl5AN9FHNVU1_rbzGY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:f0:1e:dc:9e:84:7a:03:69:f9:22:10:72:61:b6:b7:ca:b4:
         21:54:d3:7d:27:6d:13:b7:73:bd:7b:5d:74:a0:55:bb:50:a8:
         db:7f:92:dd:c0:f1:9f:3e:cc:32:16:df:1f:af:f7:f9:c2:bf:
         69:78:f0:12:96:05:60:81:4c:1f:5f:bd:5d:4a:1b:4c:89:74:
         69:a1:1a:f9:fe:0a:c3:c8:c8:cb:6e:1a:d2:b4:a4:ce:1e:fd:
         44:ac:95:da:82:1e:da:7d:cd:7b:2e:7a:f3:27:60:d6:0b:6a:
         af:07:7f:94:a3:4c:87:f2:e1:50:5e:09:cc:70:e4:fb:b8:43:
         a5:dc:36:b5:16:ff:91:dc:5f:b0:fb:19:f1:f8:8c:bf:3c:f8:
         f2:b0:01:1c:fe:75:96:66:06:14:58:26:df:a7:5f:7a:4c:da:
         ad:2b:e9:b2:d3:b3:b7:2b:05:83:53:ac:a3:22:21:e2:ab:73:
         41:55:0d:98:fc:5b:7c:8d:d0:ea:64:d8:51:90:61:59:e8:8c:
         80:30:8e:29:5c:c4:b7:b7:c4:a2:a1:8b:70:bb:a4:07:25:83:
         6b:3b:a6:4d:6e:7f:38:35:3f:68:74:ff:dc:f1:b9:9b:7a:ac:
         2d:7a:8f:57:38:ab:38:c7:e7:74:5f:63:52:03:61:1b:41:bf:
         c2:52:a9:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 21:38:48 2026 by rpki-client