Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.mft
File:                     QS0Z-aThegTQm63JAqsLCQgk6tc.mft (raw, json)
Hash identifier:          vXvsxzlxtKpqGK3DW9bV0EKHPece7yclizbM9IWSxj4=
Subject key identifier:   72:FA:F2:AF:BB:1B:5E:B8:1F:30:5B:36:97:32:08:51:6C:EE:98:F3
Authority key identifier: 41:2D:19:F9:A4:E1:7A:04:D0:9B:AD:C9:02:AB:0B:09:08:24:EA:D7
Certificate issuer:       /CN=F36FFD1EAF/serialNumber=412D19F9A4E17A04D09BADC902AB0B090824EAD7
Certificate serial:       0FB4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QS0Z-aThegTQm63JAqsLCQgk6tc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.mft
Manifest number:          0FB2
Signing time:             Thu 07 May 2026 00:52:46 +0000
Manifest this update:     Thu 07 May 2026 00:52:46 +0000
Manifest next update:     Sat 09 May 2026 00:52:46 +0000
Files and hashes:         1: QS0Z-aThegTQm63JAqsLCQgk6tc.crl (hash: niR+h3XJd7UfnwJpCzJbUF9fvA810PmyEkrnYhIVmAM=)
                          2: 353655B83FCC11F1922821BFCE1D38B0.roa (hash: IRSZKYkm7LcuUToOhHCRKBS+q6X69O13ur9lhLNv9xs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/QS0Z-aThegTQm63JAqsLCQgk6tc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 09 May 2026 00:07:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4020 (0xfb4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FFD1EAF, serialNumber=412D19F9A4E17A04D09BADC902AB0B090824EAD7
        Validity
            Not Before: May  7 00:52:46 2026 GMT
            Not After : May  9 00:52:46 2026 GMT
        Subject: CN=69fbe25e-8d57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:0e:57:b7:3c:87:7f:f6:2b:a6:85:72:58:5e:
                    9f:81:4a:b7:20:51:f0:32:38:7b:b8:de:4c:30:00:
                    9a:84:fe:48:3c:89:df:31:3b:25:99:9f:4e:9d:6d:
                    ce:7e:a6:6c:17:c4:19:ce:dc:43:07:cd:52:8e:75:
                    88:63:0b:cb:25:0f:2e:2c:ea:93:7d:b9:97:64:4c:
                    7f:ea:cd:56:8f:a3:02:c3:18:59:3a:b4:a7:d5:2b:
                    13:07:cb:e0:b8:b4:71:d5:53:c2:04:b7:3b:34:fa:
                    d6:67:20:0c:ee:3e:fb:13:ea:5f:3b:76:4b:0c:17:
                    d7:0d:42:5d:df:94:69:3e:2e:e5:2c:97:55:67:37:
                    20:6f:cb:5e:3c:e8:83:c4:98:7c:87:ab:89:70:c8:
                    6e:53:a8:74:6f:ab:11:8b:d7:48:e8:25:6f:25:3e:
                    21:60:56:2e:82:28:5c:db:54:2d:80:ca:f2:ae:95:
                    4d:09:2b:59:42:a9:cc:d3:86:90:4c:c8:a2:e2:ee:
                    eb:ac:47:65:e9:ab:25:12:da:84:fc:65:dc:01:d8:
                    2c:c7:b2:c8:c6:04:08:a9:09:9a:4b:b3:90:2f:7d:
                    8d:f6:7a:51:68:3b:4a:b5:bc:ff:eb:53:7a:ed:fc:
                    b7:23:66:65:f6:ef:74:41:f0:ce:1f:6e:2f:2c:0d:
                    02:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:FA:F2:AF:BB:1B:5E:B8:1F:30:5B:36:97:32:08:51:6C:EE:98:F3
            X509v3 Authority Key Identifier:
                keyid:41:2D:19:F9:A4:E1:7A:04:D0:9B:AD:C9:02:AB:0B:09:08:24:EA:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QS0Z-aThegTQm63JAqsLCQgk6tc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:9a:17:f5:45:5a:fc:2a:9e:ab:6e:67:42:ae:18:e0:5e:aa:
         34:9e:6a:cd:e1:2a:69:77:82:1a:03:df:7c:53:a9:b5:86:4f:
         4b:18:a1:47:59:f3:33:ea:cc:b4:15:a8:1d:f4:3a:18:33:c7:
         f6:09:14:80:4c:6c:5f:90:a4:1a:55:e7:27:1d:ff:52:4a:df:
         55:c9:bb:e9:4d:d6:54:c9:54:c7:7c:2c:fe:36:0d:d2:30:a6:
         a3:a4:b4:94:e4:15:66:ec:f9:60:6e:cd:da:71:cb:73:24:1f:
         c0:b1:cb:47:68:14:f1:ec:7a:4f:c6:36:77:20:51:a3:30:40:
         e9:bf:d0:6c:36:4d:4f:70:34:d6:b4:8c:b3:22:95:55:bd:b8:
         1c:17:ac:f1:6e:08:da:2f:11:ae:02:7b:d9:28:51:0e:fc:5f:
         bd:9f:3c:b2:37:67:00:14:c1:8b:ff:8c:fc:2e:ed:cf:e1:d1:
         b5:51:f1:63:e2:2e:bb:a0:3c:83:28:a3:81:87:46:b3:1e:37:
         19:46:80:54:00:87:fc:7d:75:66:82:c0:2e:18:b7:a7:d9:74:
         3d:a2:92:9e:9a:2c:53:7f:72:b4:24:da:03:44:8a:8f:63:a3:
         9c:61:ce:38:ec:64:75:3e:49:90:b2:a1:38:1e:02:31:7a:fb:
         ff:1d:69:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 21:38:21 2026 by rpki-client