Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3610F96/5233202E10D611EE975DEC154AD9E6FC/OUFjT32VZbVrGXoQ7DTFCqlHNVk.mft
File:                     OUFjT32VZbVrGXoQ7DTFCqlHNVk.mft (raw, json)
Hash identifier:          wgx7fFFvU+QKn10WxkZsKXPnDB5MjBParemcLYSiBO4=
Subject key identifier:   4E:C2:24:32:78:B7:8E:39:DB:72:C2:ED:C4:F6:9D:59:8A:46:94:92
Authority key identifier: 39:41:63:4F:7D:95:65:B5:6B:19:7A:10:EC:34:C5:0A:A9:47:35:59
Certificate issuer:       /CN=F3610F96AF/serialNumber=3941634F7D9565B56B197A10EC34C50AA9473559
Certificate serial:       042E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/OUFjT32VZbVrGXoQ7DTFCqlHNVk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3610F96/5233202E10D611EE975DEC154AD9E6FC/OUFjT32VZbVrGXoQ7DTFCqlHNVk.mft
Manifest number:          0429
Signing time:             Fri 17 Apr 2026 03:31:32 +0000
Manifest this update:     Fri 17 Apr 2026 03:31:31 +0000
Manifest next update:     Sun 19 Apr 2026 03:31:31 +0000
Files and hashes:         1: OUFjT32VZbVrGXoQ7DTFCqlHNVk.crl (hash: g4ca5ea1e0KIEvPN/DsXANHE6McjTnHD34Qf8a1xIIM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3610F96/5233202E10D611EE975DEC154AD9E6FC/OUFjT32VZbVrGXoQ7DTFCqlHNVk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3610F96/5233202E10D611EE975DEC154AD9E6FC/OUFjT32VZbVrGXoQ7DTFCqlHNVk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/OUFjT32VZbVrGXoQ7DTFCqlHNVk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1070 (0x42e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3610F96AF, serialNumber=3941634F7D9565B56B197A10EC34C50AA9473559
        Validity
            Not Before: Apr 17 03:31:31 2026 GMT
            Not After : Apr 19 03:31:31 2026 GMT
        Subject: CN=69e1a994-109e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:de:da:ca:d7:51:c6:65:f0:ad:24:f1:ea:f8:
                    f1:99:61:bc:64:93:5d:3a:7e:84:f1:22:2a:19:96:
                    fd:56:60:ef:6d:be:37:ed:a2:31:7f:c9:5c:9a:64:
                    57:c6:57:e1:0b:c4:db:2f:43:1a:99:ea:90:5c:8f:
                    c3:63:02:f7:87:82:17:8d:8a:b7:00:f5:32:14:b1:
                    79:6f:11:83:59:04:7a:bf:36:64:eb:5d:7e:21:cd:
                    0a:05:6f:00:a3:7c:be:c8:fa:bd:ea:56:9a:9c:30:
                    1c:80:73:ee:d8:52:13:db:ac:b6:ee:79:da:cd:89:
                    cf:4e:84:6d:3b:cb:78:fe:e9:06:92:f0:d8:d5:66:
                    de:c0:55:13:4d:22:ec:2e:3a:73:95:22:22:d5:e9:
                    f8:04:5b:91:03:ac:65:2c:d9:e2:c2:2b:bd:c7:c5:
                    96:28:0b:89:f7:1f:96:8b:8b:5d:3a:88:ad:a3:1e:
                    f2:fc:2c:b8:7b:c7:4d:19:c7:00:c5:f2:56:c1:c8:
                    c4:2b:98:c3:b9:1f:c5:c8:d7:47:29:9c:63:08:a0:
                    1b:a6:4d:d0:0c:7e:90:cc:fb:d2:32:a1:53:c4:42:
                    63:9c:d1:94:f1:cd:2f:0c:b4:90:88:91:e6:84:30:
                    f7:2f:a4:b2:a9:79:d9:20:cd:d4:5b:ad:e5:bf:06:
                    5b:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:C2:24:32:78:B7:8E:39:DB:72:C2:ED:C4:F6:9D:59:8A:46:94:92
            X509v3 Authority Key Identifier:
                keyid:39:41:63:4F:7D:95:65:B5:6B:19:7A:10:EC:34:C5:0A:A9:47:35:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3610F96/5233202E10D611EE975DEC154AD9E6FC/OUFjT32VZbVrGXoQ7DTFCqlHNVk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OUFjT32VZbVrGXoQ7DTFCqlHNVk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3610F96/5233202E10D611EE975DEC154AD9E6FC/OUFjT32VZbVrGXoQ7DTFCqlHNVk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:e3:f1:5b:40:3c:0c:b5:89:33:e7:37:44:0b:50:08:62:34:
         5a:bd:ea:2b:f6:5d:fa:11:fc:27:ac:09:69:8d:a7:ea:46:03:
         39:82:09:20:e0:64:53:85:7c:f6:6d:a1:0a:f7:da:5c:a1:11:
         69:8d:26:d5:66:99:49:85:22:79:36:f0:1d:cd:b0:4f:c1:d8:
         3f:5b:a1:5a:90:d6:05:c5:15:63:7f:f5:87:05:50:14:7d:c0:
         69:69:13:4f:c0:03:1d:52:8d:86:ac:94:24:a6:78:5d:09:60:
         99:93:0a:73:52:0d:e8:d9:02:8f:cc:0d:fd:b9:2f:68:4c:fc:
         79:06:99:af:7a:4b:1b:b0:5e:d6:48:b6:8f:eb:a6:59:b0:82:
         33:97:95:ac:f9:9c:1b:2d:26:97:f4:26:38:4e:ac:1d:6b:90:
         19:78:4b:03:3b:7f:05:b9:c2:6f:ea:96:13:d2:46:4f:f5:f7:
         cf:37:a9:67:ae:1e:6e:50:3b:9e:d1:5b:91:0a:97:8c:19:cf:
         88:05:0d:ee:91:5f:bf:59:f9:32:dc:04:05:28:01:3e:9c:b2:
         86:4d:d7:46:25:a9:78:55:b3:59:54:83:ab:e1:62:21:8e:1a:
         58:50:1a:c4:32:f4:87:35:c0:d4:63:72:cc:9b:5f:8d:1b:f4:
         46:c9:cf:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:55:53 2026 by rpki-client