Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FC4AA/43A969D46DFC11F08A39DCC1DAE4EC9C/dUkJrgeKY-ifABHj0kq7f951hnc.mft
File:                     dUkJrgeKY-ifABHj0kq7f951hnc.mft (raw, json)
Hash identifier:          iajef588iGMLkdQ1xp4PWkSQ6t0ymKKgA5+o28ciIAI=
Subject key identifier:   9B:D1:51:15:CF:54:AA:47:E6:F7:2F:A0:0C:AE:1D:76:41:FC:01:F6
Authority key identifier: 75:49:09:AE:07:8A:63:E8:9F:00:11:E3:D2:4A:BB:7F:DE:75:86:77
Certificate issuer:       /CN=F36FC4AAAF/serialNumber=754909AE078A63E89F0011E3D24ABB7FDE758677
Certificate serial:       0121
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/dUkJrgeKY-ifABHj0kq7f951hnc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FC4AA/43A969D46DFC11F08A39DCC1DAE4EC9C/dUkJrgeKY-ifABHj0kq7f951hnc.mft
Manifest number:          0120
Signing time:             Sat 09 May 2026 05:03:27 +0000
Manifest this update:     Sat 09 May 2026 05:03:26 +0000
Manifest next update:     Mon 11 May 2026 05:03:26 +0000
Files and hashes:         1: dUkJrgeKY-ifABHj0kq7f951hnc.crl (hash: ylCvDGU4KMu+MSl0IkaUSud1yxHxse3zB8bxw3n/Ju0=)
                          2: 433EBDCA6DFF11F0AA2AADD3DAE4EC9C.roa (hash: A3nkp4rPy53u0Z5Ms+sfzKlD65yMF9PSrDUFPQ1Fzco=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FC4AA/43A969D46DFC11F08A39DCC1DAE4EC9C/dUkJrgeKY-ifABHj0kq7f951hnc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FC4AA/43A969D46DFC11F08A39DCC1DAE4EC9C/dUkJrgeKY-ifABHj0kq7f951hnc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/dUkJrgeKY-ifABHj0kq7f951hnc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 11 May 2026 00:07:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 289 (0x121)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FC4AAAF, serialNumber=754909AE078A63E89F0011E3D24ABB7FDE758677
        Validity
            Not Before: May  9 05:03:26 2026 GMT
            Not After : May 11 05:03:26 2026 GMT
        Subject: CN=69fec01f-7edb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:af:94:01:52:56:2c:dd:52:ef:70:ac:ca:69:
                    90:6b:62:1f:19:93:eb:1e:03:0a:f4:bc:ea:b9:8b:
                    74:13:3a:7d:46:1e:1d:c7:a8:9e:d0:aa:1e:8c:18:
                    97:3c:13:a1:73:83:17:ba:76:38:22:60:3f:42:f7:
                    a8:55:04:1b:bc:07:63:e7:2f:96:a2:9e:da:94:e5:
                    9a:ee:ac:83:86:84:ed:31:b4:aa:2d:42:36:e2:b6:
                    f6:29:87:a5:4f:41:da:95:2a:b9:b4:f8:2d:57:84:
                    b8:ea:78:47:a1:49:ae:25:d1:67:85:9f:c4:3b:4c:
                    62:d8:8a:8e:d3:01:30:75:59:b3:0f:86:7d:45:85:
                    46:b1:ba:04:00:df:17:b7:50:d4:d5:03:5c:99:c1:
                    bd:6f:25:40:84:b2:48:19:d0:cd:76:29:73:32:2b:
                    27:b1:b7:bd:51:f2:df:23:20:66:6e:7c:eb:2a:ee:
                    56:b7:9c:87:f4:d3:30:e1:6a:45:c7:03:96:00:93:
                    36:35:fd:b4:0f:7a:c6:48:07:93:7d:db:41:c5:3c:
                    98:7f:17:dd:13:f4:67:e1:35:aa:74:c7:8a:8b:22:
                    f0:63:36:47:92:12:8a:ac:69:12:08:14:c5:0b:76:
                    3c:f6:45:16:c9:cb:c5:ec:39:2e:53:ae:8d:d5:63:
                    de:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:D1:51:15:CF:54:AA:47:E6:F7:2F:A0:0C:AE:1D:76:41:FC:01:F6
            X509v3 Authority Key Identifier:
                keyid:75:49:09:AE:07:8A:63:E8:9F:00:11:E3:D2:4A:BB:7F:DE:75:86:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FC4AA/43A969D46DFC11F08A39DCC1DAE4EC9C/dUkJrgeKY-ifABHj0kq7f951hnc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/dUkJrgeKY-ifABHj0kq7f951hnc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FC4AA/43A969D46DFC11F08A39DCC1DAE4EC9C/dUkJrgeKY-ifABHj0kq7f951hnc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:d9:f6:1a:5d:9e:56:d6:2e:14:2a:b0:9f:31:59:1a:61:12:
         40:50:51:65:53:e9:d5:4f:dc:c3:80:55:93:b0:4c:e4:d8:04:
         2e:05:ac:fb:96:94:57:15:d2:0c:fc:e4:a9:a3:04:30:0f:3a:
         68:89:70:33:b8:02:61:38:67:a3:5f:1d:30:87:c7:b9:12:15:
         70:6f:3a:f5:f0:86:a8:4e:51:f7:59:bc:30:66:9b:bf:83:a2:
         53:d3:65:a1:c8:7a:d6:bb:88:0c:1f:04:3a:1b:1c:f5:61:8e:
         43:62:78:18:84:07:55:d9:a0:91:d0:ec:32:c4:b3:81:ee:17:
         67:04:bc:39:7f:4b:ed:78:3c:a1:80:f2:f7:ea:7b:34:a7:2f:
         67:c9:15:c2:4d:b3:42:cb:3d:34:64:54:21:b8:c0:8e:3e:55:
         cb:57:74:18:6e:56:24:e9:b5:3d:57:61:fb:ec:11:da:0c:9d:
         99:d4:64:9c:b5:70:0d:aa:2d:66:46:64:e3:af:7d:f6:47:48:
         bd:7f:18:77:c3:11:e5:68:22:82:eb:57:50:ae:96:b0:2a:9c:
         12:ac:92:11:f5:e0:2e:ba:0f:df:47:80:25:54:05:81:b1:43:
         f3:4d:80:54:ff:a3:8e:cb:c8:69:fa:a8:0a:26:d3:2e:14:6f:
         d6:1c:52:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 13:25:10 2026 by rpki-client