Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361610C/90D847F0B49A11EF9D6E0B60762E951A/1-l-xBu1iYDED-Sp42wBC8ABPTE.mft
File:                     1-l-xBu1iYDED-Sp42wBC8ABPTE.mft (raw, json)
Hash identifier:          U7lqLZzyl4LfmwT9OJR6IIBUwQ1CuriwKV2wwRgD9T0=
Subject key identifier:   0C:61:B2:E3:07:65:9B:87:F4:05:29:13:00:4A:FD:A9:42:A0:EA:6C
Authority key identifier: D7:E9:7E:C4:1B:B5:89:80:C4:0F:E4:A9:E3:6C:01:0B:C0:01:3D:31
Certificate issuer:       /CN=F361610CAF/serialNumber=D7E97EC41BB58980C40FE4A9E36C010BC0013D31
Certificate serial:       0202
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/1-l-xBu1iYDED-Sp42wBC8ABPTE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361610C/90D847F0B49A11EF9D6E0B60762E951A/1-l-xBu1iYDED-Sp42wBC8ABPTE.mft
Manifest number:          0200
Signing time:             Fri 17 Apr 2026 04:40:10 +0000
Manifest this update:     Fri 17 Apr 2026 04:40:09 +0000
Manifest next update:     Sun 19 Apr 2026 04:40:09 +0000
Files and hashes:         1: 1-l-xBu1iYDED-Sp42wBC8ABPTE.crl (hash: 3jYHFdF6dWMLZAI7XKiwSKeBccspzUE3idlOYWILfFs=)
                          2: 247867E4E27011EFA0A04798762E951A.roa (hash: +UBXwm2myeOTyr1l1PVQJ5MRdDqTlUZ0ucC+vd+kfcY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361610C/90D847F0B49A11EF9D6E0B60762E951A/1-l-xBu1iYDED-Sp42wBC8ABPTE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361610C/90D847F0B49A11EF9D6E0B60762E951A/1-l-xBu1iYDED-Sp42wBC8ABPTE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/1-l-xBu1iYDED-Sp42wBC8ABPTE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 04:40:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 514 (0x202)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361610CAF, serialNumber=D7E97EC41BB58980C40FE4A9E36C010BC0013D31
        Validity
            Not Before: Apr 17 04:40:09 2026 GMT
            Not After : Apr 19 04:40:09 2026 GMT
        Subject: CN=69e1b9aa-3ad3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:5c:3f:03:e5:b7:79:91:05:a6:e2:9a:2a:5a:
                    46:78:10:d3:a4:11:9f:48:80:0b:b9:5e:ca:c7:5b:
                    b2:f2:a4:4e:e4:64:96:19:81:5f:0c:a4:f1:be:bf:
                    62:b2:f8:d1:73:27:be:f9:d8:3b:15:a0:d9:61:57:
                    f7:19:9e:af:6a:10:47:22:ac:c4:12:27:fa:02:a0:
                    e3:e4:8e:3d:63:62:7a:9d:ff:82:50:56:96:fc:3f:
                    60:5e:76:54:b8:84:20:f2:ef:e4:25:38:13:8b:40:
                    6a:dc:4d:c5:2d:0e:9e:54:68:17:81:1e:4e:67:18:
                    db:f7:80:f5:b7:c9:5a:f7:f7:94:58:3a:ca:9a:e7:
                    0f:9c:e6:4d:5e:59:d7:c4:1f:52:61:80:28:d8:5d:
                    f3:78:b2:f9:e5:de:9f:f2:6a:33:6e:f2:76:d5:73:
                    d8:6f:f4:9e:3c:7b:13:bb:fc:5c:9f:8b:4c:8e:98:
                    1d:84:c6:b5:e1:8b:a9:0a:ec:4e:3d:59:b6:0f:42:
                    08:4e:6d:22:ba:40:b2:00:37:69:35:42:2e:e7:ea:
                    35:84:52:a7:ab:6c:5d:17:df:58:bc:64:59:72:a2:
                    af:a9:79:0b:44:22:34:cb:22:41:27:0d:88:26:e4:
                    82:f8:4a:bb:02:3c:e5:11:2d:4b:66:08:42:8a:3d:
                    b8:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:61:B2:E3:07:65:9B:87:F4:05:29:13:00:4A:FD:A9:42:A0:EA:6C
            X509v3 Authority Key Identifier:
                keyid:D7:E9:7E:C4:1B:B5:89:80:C4:0F:E4:A9:E3:6C:01:0B:C0:01:3D:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361610C/90D847F0B49A11EF9D6E0B60762E951A/1-l-xBu1iYDED-Sp42wBC8ABPTE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/1-l-xBu1iYDED-Sp42wBC8ABPTE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361610C/90D847F0B49A11EF9D6E0B60762E951A/1-l-xBu1iYDED-Sp42wBC8ABPTE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:6e:9c:24:29:b9:52:40:2c:62:c3:07:68:63:85:c5:93:55:
         80:e7:01:25:a7:d1:d1:05:09:0b:a9:31:8d:81:b1:f9:86:65:
         ee:89:4b:09:df:f1:db:db:a6:e5:c6:39:de:b8:91:a4:ee:f2:
         69:3b:af:24:ec:fa:3b:c2:6c:06:ec:2f:82:a7:b1:15:e8:1c:
         8b:0f:a4:ea:53:33:e2:fb:05:e3:57:75:a7:bc:33:eb:c2:a9:
         0e:7e:cb:09:1c:99:cf:b1:49:42:80:80:55:53:0e:1e:0e:0e:
         8c:1e:8b:45:8a:1a:52:76:c8:85:25:26:d4:cb:49:5f:b5:cd:
         ef:d5:15:1c:97:b4:99:0b:a9:85:a6:95:54:a9:18:22:4f:cb:
         2d:f4:34:71:e8:82:36:ee:c2:fe:f7:72:24:67:48:7b:3c:ac:
         d6:b3:a2:11:81:38:43:50:a5:d2:da:a1:a5:a0:25:c5:5d:7c:
         fa:bb:32:61:ac:ce:d9:25:f7:32:64:5f:ed:cf:a4:1b:1a:a4:
         48:76:8a:f9:99:cd:5b:e0:25:d7:8a:48:57:f0:98:f1:4f:b9:
         2e:e5:7b:b6:68:f0:82:c1:76:54:72:e9:d0:8a:dd:0d:47:85:
         91:f4:ae:ad:fc:10:3e:5d:2c:ea:df:db:3a:88:14:e5:18:2c:
         bb:1e:6d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:37:50 2026 by rpki-client