Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3615A48/460D3588043211EE9946265C4AD9E6FC/2GE7731yVWdaZKmo4qXSb98uXG4.mft
File:                     2GE7731yVWdaZKmo4qXSb98uXG4.mft (raw, json)
Hash identifier:          F+FtvIVwGpO+pjBTCMB5BeKd/fFYlVOWBA1ULmcEZN4=
Subject key identifier:   9C:01:57:15:F8:C6:EF:B4:FC:63:C6:57:CE:0C:7F:BF:B9:DC:C9:81
Authority key identifier: D8:61:3B:EF:7D:72:55:67:5A:64:A9:A8:E2:A5:D2:6F:DF:2E:5C:6E
Certificate issuer:       /CN=F3615A48AF/serialNumber=D8613BEF7D7255675A64A9A8E2A5D26FDF2E5C6E
Certificate serial:       0432
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/2GE7731yVWdaZKmo4qXSb98uXG4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3615A48/460D3588043211EE9946265C4AD9E6FC/2GE7731yVWdaZKmo4qXSb98uXG4.mft
Manifest number:          0431
Signing time:             Fri 17 Apr 2026 03:26:32 +0000
Manifest this update:     Fri 17 Apr 2026 03:26:31 +0000
Manifest next update:     Sun 19 Apr 2026 03:26:31 +0000
Files and hashes:         1: 2GE7731yVWdaZKmo4qXSb98uXG4.crl (hash: HsDUABmh7AVt4R384yvcJvx4RY3pCHBoCGqLFFfQzFQ=)
                          2: A4E38B880D4211EFBFAE0F6C017001B1.roa (hash: U373km8ThmQ4tEdHpVbSUiU0V187z85GTRJnfELwn7k=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3615A48/460D3588043211EE9946265C4AD9E6FC/2GE7731yVWdaZKmo4qXSb98uXG4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3615A48/460D3588043211EE9946265C4AD9E6FC/2GE7731yVWdaZKmo4qXSb98uXG4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/2GE7731yVWdaZKmo4qXSb98uXG4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1074 (0x432)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3615A48AF, serialNumber=D8613BEF7D7255675A64A9A8E2A5D26FDF2E5C6E
        Validity
            Not Before: Apr 17 03:26:31 2026 GMT
            Not After : Apr 19 03:26:31 2026 GMT
        Subject: CN=69e1a868-8460
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:83:6d:98:ae:1a:09:ef:76:53:ac:af:56:42:
                    34:31:68:83:02:77:47:50:07:34:59:ef:14:c5:be:
                    03:99:4c:4b:15:42:1e:26:33:62:69:55:77:d4:f1:
                    84:be:95:b3:95:db:5a:9d:fc:fc:36:bf:bc:17:f7:
                    18:64:78:a8:06:e6:b6:97:dd:0e:71:e5:1d:4f:a3:
                    c1:f2:35:f7:67:96:a3:5d:8a:21:a3:a0:ec:8f:fd:
                    00:ab:a7:db:56:40:34:9e:39:d0:43:6c:c6:95:08:
                    80:04:fb:9b:5c:61:b5:38:df:22:8d:6b:2c:45:ac:
                    43:30:75:af:6e:0c:8a:b1:e6:3f:1e:02:f1:e3:45:
                    50:7f:45:d2:23:4e:03:42:08:2a:d3:38:1b:57:07:
                    59:9a:3d:f8:73:25:a1:b3:91:e8:55:4f:fb:58:b4:
                    b0:40:72:31:b1:7c:46:9f:5a:69:ae:91:42:4a:8f:
                    59:6d:9a:85:8d:c3:40:4f:64:74:e0:be:e8:56:81:
                    87:e5:65:92:5f:ce:b1:70:fc:1d:94:30:d3:0e:f4:
                    9d:99:b3:5d:ab:5f:6e:1a:24:97:ca:d7:de:72:72:
                    f3:15:c1:5e:c4:01:c5:b1:19:7c:67:50:af:d0:c5:
                    61:8e:c3:06:a6:c0:ce:97:0a:06:a3:76:a6:65:ad:
                    3b:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:01:57:15:F8:C6:EF:B4:FC:63:C6:57:CE:0C:7F:BF:B9:DC:C9:81
            X509v3 Authority Key Identifier:
                keyid:D8:61:3B:EF:7D:72:55:67:5A:64:A9:A8:E2:A5:D2:6F:DF:2E:5C:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3615A48/460D3588043211EE9946265C4AD9E6FC/2GE7731yVWdaZKmo4qXSb98uXG4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2GE7731yVWdaZKmo4qXSb98uXG4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3615A48/460D3588043211EE9946265C4AD9E6FC/2GE7731yVWdaZKmo4qXSb98uXG4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:39:e7:a8:d2:d9:df:49:4c:10:29:3c:67:d2:1a:10:ec:68:
         37:cc:fb:e6:ab:52:77:58:be:5c:ad:f6:99:b3:ea:67:83:01:
         2a:bb:77:82:df:c3:dc:c1:62:53:bd:f4:71:2e:58:65:e2:3d:
         65:84:41:15:a5:37:48:47:4c:9c:5d:d5:67:04:41:05:83:d9:
         82:98:5c:21:41:58:bc:46:70:5f:8d:43:93:c0:1f:64:21:8a:
         ef:d5:fd:5e:39:87:f4:38:93:44:d0:77:6a:97:b7:90:6f:6f:
         9e:c4:59:b3:25:12:0b:f8:60:59:df:ed:c1:91:1e:8d:c2:f7:
         71:70:eb:54:15:39:f0:01:5b:01:5d:56:33:d7:4a:26:04:c4:
         7c:9f:40:31:0c:e4:70:da:5e:2a:6b:c8:7c:09:b2:57:ba:78:
         c9:6d:c1:ec:4f:cf:04:ab:e2:d5:92:34:0b:5e:e3:36:6b:6e:
         da:8f:2d:93:44:5e:91:d4:b2:06:8b:05:95:71:b5:d1:f5:17:
         bc:bf:6b:a7:25:67:9f:b3:41:d1:d3:74:c4:0b:09:74:d6:b4:
         51:d4:c0:05:85:e1:14:e5:2c:cf:dc:67:91:d1:2f:00:4d:93:
         36:fd:68:21:1e:1f:9e:90:96:17:ed:e2:d2:89:9a:54:96:3f:
         52:fa:37:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:21:39 2026 by rpki-client