Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FB628/2535C52034C011E7BDE4355EF8AEA228/DmdFN0vlZOXm1eI_aockyL53qVI.mft
File:                     DmdFN0vlZOXm1eI_aockyL53qVI.mft (raw, json)
Hash identifier:          pyUVehb+LJaXyRPaQDK5ZY9dCO1uifnoPP0wCU1XXjk=
Subject key identifier:   F3:D0:8D:14:AD:8B:D0:FF:CF:34:85:EE:6A:7B:AB:1F:C0:3F:FD:AC
Authority key identifier: 0E:67:45:37:4B:E5:64:E5:E6:D5:E2:3F:6A:87:24:C8:BE:77:A9:52
Certificate issuer:       /CN=F36FB628AF/serialNumber=0E6745374BE564E5E6D5E23F6A8724C8BE77A952
Certificate serial:       0D1B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/DmdFN0vlZOXm1eI_aockyL53qVI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FB628/2535C52034C011E7BDE4355EF8AEA228/DmdFN0vlZOXm1eI_aockyL53qVI.mft
Manifest number:          0D1A
Signing time:             Thu 07 May 2026 01:08:48 +0000
Manifest this update:     Thu 07 May 2026 01:08:48 +0000
Manifest next update:     Sat 09 May 2026 01:08:48 +0000
Files and hashes:         1: DmdFN0vlZOXm1eI_aockyL53qVI.crl (hash: Jv9YlyqXE+7RU/QfgL7o3AStjR+V9U44W8c3nkb2un8=)
                          2: D550D09C037F11EDA40460C2F1222468.roa (hash: 9wZBqedJVTgdGdUQ5S31jykjUra1rcqD+ULApifCF68=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FB628/2535C52034C011E7BDE4355EF8AEA228/DmdFN0vlZOXm1eI_aockyL53qVI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FB628/2535C52034C011E7BDE4355EF8AEA228/DmdFN0vlZOXm1eI_aockyL53qVI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/DmdFN0vlZOXm1eI_aockyL53qVI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 09 May 2026 00:07:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3355 (0xd1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FB628AF, serialNumber=0E6745374BE564E5E6D5E23F6A8724C8BE77A952
        Validity
            Not Before: May  7 01:08:48 2026 GMT
            Not After : May  9 01:08:48 2026 GMT
        Subject: CN=69fbe620-6a5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:6c:31:6a:60:18:6c:59:bb:a4:c5:59:fe:58:
                    a8:95:3f:33:bf:c9:8d:c4:39:04:5d:4e:79:77:ba:
                    bb:27:44:cb:9b:b6:d6:30:c4:0c:c8:68:3c:cc:ba:
                    d7:aa:62:41:2d:f5:f3:6f:76:43:9a:64:e4:74:79:
                    88:b7:4d:52:44:65:b4:88:71:5b:9a:41:70:39:e8:
                    17:e5:69:00:a0:82:9e:8d:af:af:47:ea:ab:a9:42:
                    be:a6:e2:f3:d8:a0:87:45:0d:10:fa:34:1b:08:18:
                    9c:ca:9d:56:35:f9:c0:21:12:b3:af:98:ed:de:e6:
                    9a:ae:25:17:de:6a:17:7b:72:d1:74:e3:56:2f:50:
                    c7:72:9e:06:e2:01:e3:0a:39:c3:f2:a7:eb:82:de:
                    d4:0a:52:4c:ec:e1:a5:54:26:cb:bb:ea:fa:eb:e7:
                    a4:f7:6e:63:e9:dc:a3:58:cf:2c:43:82:e8:1b:7f:
                    69:d0:87:38:2f:f8:85:e6:e1:19:5c:06:f0:0c:db:
                    e1:7f:26:ee:42:47:b9:59:f8:52:fc:f5:2b:bd:61:
                    e9:98:d1:c8:1c:bc:c1:f1:27:d3:66:d3:f9:f0:41:
                    08:36:cf:e4:60:e3:d4:8f:6f:f4:39:20:f5:16:10:
                    21:a8:8d:75:c2:84:3d:33:d8:86:1c:81:af:68:3f:
                    66:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:D0:8D:14:AD:8B:D0:FF:CF:34:85:EE:6A:7B:AB:1F:C0:3F:FD:AC
            X509v3 Authority Key Identifier:
                keyid:0E:67:45:37:4B:E5:64:E5:E6:D5:E2:3F:6A:87:24:C8:BE:77:A9:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FB628/2535C52034C011E7BDE4355EF8AEA228/DmdFN0vlZOXm1eI_aockyL53qVI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DmdFN0vlZOXm1eI_aockyL53qVI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FB628/2535C52034C011E7BDE4355EF8AEA228/DmdFN0vlZOXm1eI_aockyL53qVI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:86:fa:00:95:e3:e3:25:0c:05:ee:7b:8b:03:e9:ba:02:3d:
         d7:cc:8b:22:e5:9a:e2:c0:96:72:68:80:fe:58:84:7f:3e:c4:
         1e:e3:a6:08:1f:0e:b6:78:c3:68:55:4d:10:15:51:9f:a8:18:
         30:6b:83:d4:fd:7a:04:9d:9c:0d:9e:a4:b7:73:fd:1a:f6:7f:
         c9:f9:fd:e8:e8:d6:26:7d:d0:55:5a:27:18:3a:f1:f8:d2:2f:
         20:4d:ad:ce:cb:46:10:d3:6b:b7:ec:9c:c3:0a:5c:65:6e:4b:
         e3:00:30:e9:1c:8d:b9:e0:00:36:ad:c8:cf:73:61:3c:48:76:
         19:b9:92:2f:b0:e9:3b:33:f6:e4:c5:38:13:64:b3:2e:11:8e:
         73:e5:68:14:69:00:bb:00:79:18:9d:25:3c:01:78:9c:5c:d3:
         b9:d8:10:95:a1:58:02:72:ad:85:f5:4d:d1:4f:df:2b:36:6a:
         41:a6:98:0a:72:cd:26:d0:cb:da:04:55:64:d4:fa:b6:91:1e:
         b1:0a:35:5e:00:dd:d7:f6:92:d3:79:2d:38:be:ef:96:25:24:
         a1:39:59:62:3d:f2:a3:90:4e:b2:c0:76:c0:ca:6a:39:3e:b8:
         ca:70:5e:12:e5:f2:62:cd:b7:53:41:7c:61:06:0c:bb:1b:ae:
         83:a6:d1:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 21:37:02 2026 by rpki-client