Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FE55F/D7FDE0CA3FB011F199FA2A19CF1D38B0/4-72W1UWm_HGaNKpYbla8vKIf90.mft
File:                     4-72W1UWm_HGaNKpYbla8vKIf90.mft (raw, json)
Hash identifier:          w+JCvzkHgT8AAiWTu/yoUYFNFYANPU3XJNosF2qWZ/8=
Subject key identifier:   DF:8C:71:C6:B2:12:A6:16:BD:F0:44:41:16:0B:9E:F9:59:89:9F:98
Authority key identifier: E3:EE:F6:5B:55:16:9B:F1:C6:68:D2:A9:61:B9:5A:F2:F2:88:7F:DD
Certificate issuer:       /CN=F36FE55FAF/serialNumber=E3EEF65B55169BF1C668D2A961B95AF2F2887FDD
Certificate serial:       0E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/4-72W1UWm_HGaNKpYbla8vKIf90.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FE55F/D7FDE0CA3FB011F199FA2A19CF1D38B0/4-72W1UWm_HGaNKpYbla8vKIf90.mft
Manifest number:          0E
Signing time:             Thu 07 May 2026 05:35:57 +0000
Manifest this update:     Thu 07 May 2026 05:35:56 +0000
Manifest next update:     Sat 09 May 2026 05:35:56 +0000
Files and hashes:         1: 4-72W1UWm_HGaNKpYbla8vKIf90.crl (hash: kw2p5o5IZJLeMXHzCtzfvt1tltzY0D8sRPYnkV96x4Q=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FE55F/D7FDE0CA3FB011F199FA2A19CF1D38B0/4-72W1UWm_HGaNKpYbla8vKIf90.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FE55F/D7FDE0CA3FB011F199FA2A19CF1D38B0/4-72W1UWm_HGaNKpYbla8vKIf90.mft
                          rsync://rpki.afrinic.net/repository/afrinic/4-72W1UWm_HGaNKpYbla8vKIf90.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 09 May 2026 00:07:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14 (0xe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FE55FAF, serialNumber=E3EEF65B55169BF1C668D2A961B95AF2F2887FDD
        Validity
            Not Before: May  7 05:35:56 2026 GMT
            Not After : May  9 05:35:56 2026 GMT
        Subject: CN=69fc24bd-1802
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:79:ed:19:0a:96:91:c8:7b:94:4d:99:7e:99:
                    44:7d:8c:5c:5f:5e:90:33:3d:fc:64:52:45:03:a4:
                    fd:8b:b6:39:e6:da:fe:5b:ac:55:d5:81:64:56:3e:
                    c1:21:9b:f2:06:80:67:6f:dc:f3:76:35:d8:fb:95:
                    7b:4b:00:c3:b5:52:05:3f:39:20:b4:5c:65:e0:46:
                    16:2e:92:cb:89:6d:38:c6:95:55:cd:ba:0f:3a:3c:
                    ae:17:d6:c9:eb:14:e3:4b:1a:b9:bd:e8:40:a0:2f:
                    fa:84:fe:97:31:80:11:f2:3c:dd:3e:12:b4:90:8f:
                    4b:fd:01:f7:28:c6:32:a0:80:64:6b:f7:90:95:c9:
                    e9:e6:27:a6:da:b4:9a:d4:55:92:7c:b5:db:26:c0:
                    2e:3a:47:af:d0:05:46:51:00:59:a4:da:4e:4b:81:
                    70:5b:b7:8c:05:c6:3f:a7:f1:04:d4:0a:6c:c8:ae:
                    f4:93:5f:29:ca:9f:fa:f5:bf:46:5f:20:8b:25:4a:
                    99:60:3f:db:d6:0c:af:1b:37:80:f3:e8:2b:02:5a:
                    ad:e6:e5:e9:dd:7e:76:d9:66:99:2e:b7:18:04:24:
                    15:50:f9:5d:dd:19:39:af:f7:14:6d:d4:a6:88:f3:
                    2a:15:86:1f:40:88:8e:98:66:fb:20:f3:70:1c:f7:
                    2e:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:8C:71:C6:B2:12:A6:16:BD:F0:44:41:16:0B:9E:F9:59:89:9F:98
            X509v3 Authority Key Identifier:
                keyid:E3:EE:F6:5B:55:16:9B:F1:C6:68:D2:A9:61:B9:5A:F2:F2:88:7F:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FE55F/D7FDE0CA3FB011F199FA2A19CF1D38B0/4-72W1UWm_HGaNKpYbla8vKIf90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4-72W1UWm_HGaNKpYbla8vKIf90.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FE55F/D7FDE0CA3FB011F199FA2A19CF1D38B0/4-72W1UWm_HGaNKpYbla8vKIf90.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:ba:28:68:04:25:96:fc:d4:7f:f7:c6:34:74:b1:46:e8:85:
         58:94:85:d2:c0:9b:69:bd:1f:94:83:bc:d7:8c:e2:58:59:55:
         ea:3d:fe:7f:e8:de:cd:82:2a:ef:d4:8f:f3:9e:8a:b2:2b:65:
         cd:12:e7:2f:50:ab:6d:e1:e1:10:69:ac:fa:58:f4:09:c4:94:
         cc:d0:5d:2a:d2:e1:9f:2c:ad:dc:4f:96:6d:25:d0:dc:8a:cd:
         ac:dd:48:02:09:0f:57:60:67:f3:17:4a:5e:3d:df:25:f6:4c:
         1c:a3:64:5c:be:a2:2b:e1:50:30:9b:3a:0a:ab:46:f6:90:70:
         3d:ed:0e:03:31:cc:59:3a:c0:d6:67:e4:cb:0d:2c:4b:1c:e1:
         d1:c9:87:40:b6:f7:2e:c4:17:4d:12:12:46:67:be:0f:ad:cf:
         1a:79:6a:e1:5d:66:88:3e:f0:1f:fa:0c:95:ed:1c:63:ad:f9:
         43:3d:ab:d4:67:3e:bb:4e:26:c1:b6:c1:80:f5:d8:7b:a5:7c:
         25:07:a7:d3:15:5f:df:f9:5a:cd:24:71:99:f0:18:d4:83:30:
         93:ac:f5:aa:e7:fa:af:6b:fa:0b:91:2e:17:46:a3:aa:5f:dd:
         71:e6:fe:8f:d0:56:70:ea:bb:ea:09:fb:b0:17:f1:1e:b3:ab:
         2a:77:bb:ae
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIBDjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZG
RTU1RkFGMTEwLwYDVQQFEyhFM0VFRjY1QjU1MTY5QkYxQzY2OEQyQTk2MUI5NUFG
MkYyODg3RkREMB4XDTI2MDUwNzA1MzU1NloXDTI2MDUwOTA1MzU1NlowGDEWMBQG
A1UEAxMNNjlmYzI0YmQtMTgwMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAM557RkKlpHIe5RNmX6ZRH2MXF9ekDM9/GRSRQOk/Yu2Oeba/lusVdWBZFY+
wSGb8gaAZ2/c83Y12PuVe0sAw7VSBT85ILRcZeBGFi6Sy4ltOMaVVc26Dzo8rhfW
yesU40saub3oQKAv+oT+lzGAEfI83T4StJCPS/0B9yjGMqCAZGv3kJXJ6eYnptq0
mtRVkny12ybALjpHr9AFRlEAWaTaTkuBcFu3jAXGP6fxBNQKbMiu9JNfKcqf+vW/
Rl8giyVKmWA/29YMrxs3gPPoKwJarebl6d1+dtlmmS63GAQkFVD5Xd0ZOa/3FG3U
pojzKhWGH0CIjphm+yDzcBz3LlUCAwEAAaOCArgwggK0MB0GA1UdDgQWBBTfjHHG
shKmFr3wREEWC575WYmfmDAfBgNVHSMEGDAWgBTj7vZbVRab8cZo0qlhuVry8oh/
3TAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2RkU1NUYvRDdGREUwQ0EzRkIwMTFGMTk5RkEyQTE5Q0YxRDM4QjAvNC03Mlcx
VVdtX0hHYU5LcFlibGE4dktJZjkwLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvNC03MlcxVVdtX0hHYU5LcFlibGE4dktJZjkwLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUF
BzALhn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzZGRTU1Ri9EN0ZERTBDQTNGQjAxMUYxOTlGQTJBMTlDRjFE
MzhCMC80LTcyVzFVV21fSEdhTktwWWJsYTh2S0lmOTAubWZ0MDUGCCsGAQUFBzAN
hilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBAH66KGgEJZb81H/3xjR0sUbohViUhdLA
m2m9H5SDvNeM4lhZVeo9/n/o3s2CKu/Uj/OeirIrZc0S5y9Qq23h4RBprPpY9AnE
lMzQXSrS4Z8srdxPlm0l0NyKzazdSAIJD1dgZ/MXSl493yX2TByjZFy+oivhUDCb
OgqrRvaQcD3tDgMxzFk6wNZn5MsNLEsc4dHJh0C29y7EF00SEkZnvg+tzxp5auFd
Zog+8B/6DJXtHGOt+UM9q9RnPrtOJsG2wYD12HulfCUHp9MVX9/5Ws0kcZnwGNSD
MJOs9arn+q9r+guRLhdGo6pf3XHm/o/QVnDqu+oJ+7AX8R6zqyp3u64=
-----END CERTIFICATE-----
Generated at Thu May 7 21:32:17 2026 by rpki-client