Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F8F86/43159886192911EFA70CC06E017001B1/sbo9fH2OzVEf2kvw7Cn2qZssMbs.mft
File:                     sbo9fH2OzVEf2kvw7Cn2qZssMbs.mft (raw, json)
Hash identifier:          HymYALs8IsVGFl4eE72AaVS8RvuTrqOdm8PKdojzLC8=
Subject key identifier:   CB:F4:04:11:68:63:AA:91:4B:8C:06:74:8F:31:29:67:A7:B4:4A:65
Authority key identifier: B1:BA:3D:7C:7D:8E:CD:51:1F:DA:4B:F0:EC:29:F6:A9:9B:2C:31:BB
Certificate issuer:       /CN=F36F8F86AF/serialNumber=B1BA3D7C7D8ECD511FDA4BF0EC29F6A99B2C31BB
Certificate serial:       02E9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/sbo9fH2OzVEf2kvw7Cn2qZssMbs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F8F86/43159886192911EFA70CC06E017001B1/sbo9fH2OzVEf2kvw7Cn2qZssMbs.mft
Manifest number:          02E3
Signing time:             Thu 07 May 2026 04:10:51 +0000
Manifest this update:     Thu 07 May 2026 04:10:50 +0000
Manifest next update:     Sat 09 May 2026 04:10:50 +0000
Files and hashes:         1: sbo9fH2OzVEf2kvw7Cn2qZssMbs.crl (hash: DoImMUY5SEeRhvS8iC2Ctj+WAPCLER3EvTCRikLXIZA=)
                          2: 0EB2B67C8FAE11EFB0C6F19A762E951A.roa (hash: dRhtvM/2t47z2JwA9sfqbVs7olYpopo1AghyJCkiJnU=)
                          3: A3E369B88FAD11EF84E8C298762E951A.roa (hash: KHj93NQJWTZ8oMi0gw+QEnklPoZI/vRnCOYhgqAuDO0=)
                          4: 7017818A912B11EFA858BC80762E951A.roa (hash: 8BIH5JeOynzixiDGrMvrW3MY/Y2dPuOtFBanjsebARk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F8F86/43159886192911EFA70CC06E017001B1/sbo9fH2OzVEf2kvw7Cn2qZssMbs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F8F86/43159886192911EFA70CC06E017001B1/sbo9fH2OzVEf2kvw7Cn2qZssMbs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/sbo9fH2OzVEf2kvw7Cn2qZssMbs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 09 May 2026 00:07:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 745 (0x2e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F8F86AF, serialNumber=B1BA3D7C7D8ECD511FDA4BF0EC29F6A99B2C31BB
        Validity
            Not Before: May  7 04:10:50 2026 GMT
            Not After : May  9 04:10:50 2026 GMT
        Subject: CN=69fc10cb-97f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:03:64:09:75:37:03:94:58:01:61:0a:ed:cd:
                    9a:f0:58:f0:cf:b2:9c:2d:6c:8f:52:3a:1d:b9:8f:
                    cf:2d:28:58:17:30:34:18:d2:45:61:d0:b6:8e:21:
                    d2:19:ab:91:18:3c:cd:7c:30:6f:54:bf:e8:1a:25:
                    da:f7:ca:4e:1f:94:fc:4d:00:28:78:ca:bd:ab:91:
                    8f:79:f6:0a:31:29:45:f0:ed:17:e7:ea:4f:a3:b0:
                    05:1d:db:1e:fb:a9:d0:7f:9e:f8:46:f2:2f:ef:fd:
                    16:09:cd:6d:51:be:0f:de:a8:dc:03:66:6d:0c:6b:
                    92:62:5f:c1:c5:7a:85:c1:a7:32:79:52:dd:68:15:
                    4f:9a:9e:87:76:c7:2b:5b:1b:63:b1:92:4e:02:e3:
                    e2:b0:2a:53:a0:c6:c6:95:23:3b:a6:b9:ee:74:c9:
                    68:73:f2:d7:35:8e:21:c9:c8:bc:2f:05:f1:f2:0d:
                    99:6a:57:2b:5c:c4:b8:8d:26:05:1b:be:62:96:0f:
                    fd:99:fb:d2:2d:02:7a:8f:c6:4e:6b:94:c8:95:f7:
                    96:d4:9a:9f:7c:db:35:65:eb:81:00:4f:c7:91:e4:
                    81:84:08:b1:a3:0b:29:5c:a0:bd:be:dd:83:97:ec:
                    fb:ce:7e:cc:cd:08:d6:da:ca:99:5d:fd:d4:e0:59:
                    28:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:F4:04:11:68:63:AA:91:4B:8C:06:74:8F:31:29:67:A7:B4:4A:65
            X509v3 Authority Key Identifier:
                keyid:B1:BA:3D:7C:7D:8E:CD:51:1F:DA:4B:F0:EC:29:F6:A9:9B:2C:31:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8F86/43159886192911EFA70CC06E017001B1/sbo9fH2OzVEf2kvw7Cn2qZssMbs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/sbo9fH2OzVEf2kvw7Cn2qZssMbs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8F86/43159886192911EFA70CC06E017001B1/sbo9fH2OzVEf2kvw7Cn2qZssMbs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:d3:f7:bf:7f:dd:aa:2d:d5:f3:36:c9:81:2b:95:f0:ec:dd:
         38:e4:54:93:b2:aa:2f:b0:2b:6c:8a:c1:5f:e7:87:e6:8d:14:
         72:5a:ec:46:5d:7a:e9:ae:27:a4:33:96:58:e7:0b:39:8e:88:
         5a:57:0b:ff:78:63:e7:f8:92:14:6c:42:c1:21:ce:54:f1:94:
         ea:1c:aa:df:e8:49:d7:b7:30:87:a3:43:49:00:c7:48:ba:82:
         b4:8c:4f:3a:36:c1:25:24:59:ce:9b:31:42:40:72:4f:9c:b4:
         c9:c4:a2:0d:d0:c8:26:93:7c:f6:b8:89:ac:7e:e9:45:11:b1:
         eb:45:b2:b2:f4:d8:bd:6e:f5:92:38:ae:49:65:71:23:81:7c:
         65:31:ca:56:6d:93:b2:16:be:28:1a:cd:95:45:a3:e1:c6:37:
         f1:a8:fe:bc:9c:60:b5:1d:e1:fd:bc:c9:6f:05:c7:e2:ef:96:
         6e:d1:88:7d:f3:44:d4:01:fd:9d:ba:29:4a:fe:76:fa:5a:8e:
         ad:42:76:85:be:bc:df:b9:4b:a3:1c:74:db:cc:2d:80:28:8a:
         ed:0c:8e:fd:0e:72:71:c1:02:6d:f9:15:98:ec:5a:01:05:1f:
         88:d2:eb:ef:b6:0f:dc:e8:60:d3:13:f4:7e:14:f5:f0:71:7c:
         a6:45:cf:a1
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAukwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RjhGODZBRjExMC8GA1UEBRMoQjFCQTNEN0M3RDhFQ0Q1MTFGREE0QkYwRUMyOUY2
QTk5QjJDMzFCQjAeFw0yNjA1MDcwNDEwNTBaFw0yNjA1MDkwNDEwNTBaMBgxFjAU
BgNVBAMTDTY5ZmMxMGNiLTk3ZjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC3A2QJdTcDlFgBYQrtzZrwWPDPspwtbI9SOh25j88tKFgXMDQY0kVh0LaO
IdIZq5EYPM18MG9Uv+gaJdr3yk4flPxNACh4yr2rkY959goxKUXw7Rfn6k+jsAUd
2x77qdB/nvhG8i/v/RYJzW1Rvg/eqNwDZm0Ma5JiX8HFeoXBpzJ5Ut1oFU+anod2
xytbG2Oxkk4C4+KwKlOgxsaVIzumue50yWhz8tc1jiHJyLwvBfHyDZlqVytcxLiN
JgUbvmKWD/2Z+9ItAnqPxk5rlMiV95bUmp982zVl64EAT8eR5IGECLGjCylcoL2+
3YOX7PvOfszNCNbaypld/dTgWSgDAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUy/QE
EWhjqpFLjAZ0jzEpZ6e0SmUwHwYDVR0jBBgwFoAUsbo9fH2OzVEf2kvw7Cn2qZss
MbswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkY4Rjg2LzQzMTU5ODg2MTkyOTExRUZBNzBDQzA2RTAxNzAwMUIxL3Nibzlm
SDJPelZFZjJrdnc3Q24ycVpzc01icy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3NibzlmSDJPelZFZjJrdnc3Q24ycVpzc01icy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RjhGODYvNDMxNTk4ODYxOTI5MTFFRkE3MENDMDZFMDE3
MDAxQjEvc2JvOWZIMk96VkVmMmt2dzdDbjJxWnNzTWJzLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAv0/e/f92qLdXzNsmBK5Xw7N045FST
sqovsCtsisFf54fmjRRyWuxGXXrpriekM5ZY5ws5johaVwv/eGPn+JIUbELBIc5U
8ZTqHKrf6EnXtzCHo0NJAMdIuoK0jE86NsElJFnOmzFCQHJPnLTJxKIN0Mgmk3z2
uImsfulFEbHrRbKy9Ni9bvWSOK5JZXEjgXxlMcpWbZOyFr4oGs2VRaPhxjfxqP68
nGC1HeH9vMlvBcfi75Zu0Yh980TUAf2duilK/nb6Wo6tQnaFvrzfuUujHHTbzC2A
KIrtDI79DnJxwQJt+RWY7FoBBR+I0uvvtg/c6GDTE/R+FPXwcXymRc+h
-----END CERTIFICATE-----
Generated at Thu May 7 21:37:07 2026 by rpki-client