Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EE763/28352262F05411F092BE6EDCDAE4EC9C/XulhNES2heRACvJQMvMjaKxzhgo.mft
File:                     XulhNES2heRACvJQMvMjaKxzhgo.mft (raw, json)
Hash identifier:          OvIynw+fQuenlgo+86OwtIjTg7y0tiTAQ7bH6C+aJQE=
Subject key identifier:   61:FE:6A:47:BB:36:41:D5:4A:8B:5D:12:47:03:34:26:47:CD:2D:B9
Authority key identifier: 5E:E9:61:34:44:B6:85:E4:40:0A:F2:50:32:F3:23:68:AC:73:86:0A
Certificate issuer:       /CN=F36EE763AF/serialNumber=5EE9613444B685E4400AF25032F32368AC73860A
Certificate serial:       76
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/XulhNES2heRACvJQMvMjaKxzhgo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EE763/28352262F05411F092BE6EDCDAE4EC9C/XulhNES2heRACvJQMvMjaKxzhgo.mft
Manifest number:          75
Signing time:             Thu 07 May 2026 05:22:21 +0000
Manifest this update:     Thu 07 May 2026 05:22:21 +0000
Manifest next update:     Sat 09 May 2026 05:22:21 +0000
Files and hashes:         1: XulhNES2heRACvJQMvMjaKxzhgo.crl (hash: 5MfC4b0j6LUeF9iqAzPMYiWdVzyAoq6ULp3946fBkRc=)
                          2: 8CF50C7EF09C11F09220C691DAE4EC9C.roa (hash: RBXfrMLemnAtHw5865OVdIO7wWh6V9X2nw9Mms9JBjU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EE763/28352262F05411F092BE6EDCDAE4EC9C/XulhNES2heRACvJQMvMjaKxzhgo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EE763/28352262F05411F092BE6EDCDAE4EC9C/XulhNES2heRACvJQMvMjaKxzhgo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/XulhNES2heRACvJQMvMjaKxzhgo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 09 May 2026 00:07:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118 (0x76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EE763AF, serialNumber=5EE9613444B685E4400AF25032F32368AC73860A
        Validity
            Not Before: May  7 05:22:21 2026 GMT
            Not After : May  9 05:22:21 2026 GMT
        Subject: CN=69fc218d-ada8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:af:92:e3:5b:42:6f:6d:f6:8b:a3:9a:0d:a7:
                    df:2a:32:ef:8f:e8:58:bf:22:9f:df:c4:99:db:66:
                    3e:eb:f6:bb:30:d9:ae:82:d0:60:fc:5d:31:20:77:
                    1b:25:3c:52:7a:28:33:d7:0c:bd:23:8a:64:36:98:
                    c1:e9:a5:ab:1c:fd:37:9d:f8:4b:c0:ed:11:88:33:
                    61:8e:49:da:f9:5e:7a:e2:fa:54:99:25:0e:ee:01:
                    a9:e7:99:79:54:ab:9a:d2:a9:ac:78:d9:0e:4a:47:
                    54:b3:4a:06:4a:0a:9f:06:5a:30:0a:84:be:2f:8f:
                    cf:8d:dc:df:6b:67:e8:4e:df:71:b5:5d:9a:0c:cd:
                    b4:bb:61:28:e9:0c:7d:db:85:19:28:b7:41:fc:be:
                    06:93:56:24:be:8f:5f:44:d7:cd:b1:0a:74:b0:ba:
                    75:1d:17:62:28:7c:04:02:82:dc:e1:72:5b:18:f0:
                    29:54:10:12:07:d0:2c:04:4f:69:25:7f:ff:dd:34:
                    a9:89:55:0a:22:65:f2:94:35:fd:b1:19:b3:ad:b1:
                    45:4a:d2:0f:5b:89:d2:b5:52:8f:13:8b:5c:78:e2:
                    a9:2f:3a:54:f5:8c:50:c5:a3:ed:1e:e4:54:65:05:
                    91:35:1c:6c:22:0c:bd:60:c9:84:68:03:99:f1:c4:
                    48:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:FE:6A:47:BB:36:41:D5:4A:8B:5D:12:47:03:34:26:47:CD:2D:B9
            X509v3 Authority Key Identifier:
                keyid:5E:E9:61:34:44:B6:85:E4:40:0A:F2:50:32:F3:23:68:AC:73:86:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EE763/28352262F05411F092BE6EDCDAE4EC9C/XulhNES2heRACvJQMvMjaKxzhgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XulhNES2heRACvJQMvMjaKxzhgo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EE763/28352262F05411F092BE6EDCDAE4EC9C/XulhNES2heRACvJQMvMjaKxzhgo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:79:3d:07:66:87:dd:1f:b6:7f:86:a8:c7:a1:0d:cb:ca:f4:
         33:a5:bb:54:94:7e:80:96:46:d5:1a:66:00:6c:3f:53:ca:06:
         e3:84:97:80:54:5c:39:31:e9:76:c4:51:c3:e0:39:c1:a0:7a:
         39:42:d3:e9:20:76:02:3d:91:36:f5:94:3a:62:33:d1:2d:c9:
         f6:98:05:b9:63:a5:f0:7b:43:29:0c:b0:c4:fb:50:44:73:93:
         9d:bf:f7:92:8e:d6:0d:07:bc:91:6b:f7:a8:a1:b7:e1:1f:12:
         17:31:57:c5:d9:3f:44:29:c9:a8:91:d7:35:5a:3e:98:88:ab:
         cd:6a:61:b7:c6:86:d8:8b:57:4d:30:99:34:ac:2e:7a:f0:3e:
         17:ba:39:d9:72:8c:88:34:f1:24:88:81:23:c1:9a:25:34:80:
         55:a6:da:12:d5:aa:e1:e5:70:fb:68:50:b8:64:7a:d6:24:83:
         bc:c8:c3:d5:f3:94:d6:10:5d:49:3e:92:55:cb:bd:08:72:0d:
         cc:fe:c6:5d:fa:67:c3:c9:55:7e:f0:66:8d:c5:d1:fb:ec:2a:
         47:72:a4:51:d6:69:36:2a:12:d4:20:4d:a9:e5:82:0c:10:8c:
         c0:44:31:8b:65:5f:c0:43:e7:e9:51:f6:9d:75:35:c4:91:ba:
         9a:0f:ee:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 21:34:00 2026 by rpki-client