Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3616D6F/3799EC8493A211EAB92C0B6BF8AEA228/tjLcSuU6XipZtVv1qsfBSRDBTRY.mft
File:                     tjLcSuU6XipZtVv1qsfBSRDBTRY.mft (raw, json)
Hash identifier:          IzX+01FHy15ZwCA7p97voAmECBCbaGf4W95iJHKoj2s=
Subject key identifier:   C3:40:F2:2C:52:4F:81:96:A5:E0:4A:54:ED:24:B0:3B:85:64:DC:D2
Authority key identifier: B6:32:DC:4A:E5:3A:5E:2A:59:B5:5B:F5:AA:C7:C1:49:10:C1:4D:16
Certificate issuer:       /CN=F3616D6FAF/serialNumber=B632DC4AE53A5E2A59B55BF5AAC7C14910C14D16
Certificate serial:       08A8
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/tjLcSuU6XipZtVv1qsfBSRDBTRY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3616D6F/3799EC8493A211EAB92C0B6BF8AEA228/tjLcSuU6XipZtVv1qsfBSRDBTRY.mft
Manifest number:          08A8
Signing time:             Fri 17 Apr 2026 01:47:07 +0000
Manifest this update:     Fri 17 Apr 2026 01:47:06 +0000
Manifest next update:     Sun 19 Apr 2026 01:47:06 +0000
Files and hashes:         1: tjLcSuU6XipZtVv1qsfBSRDBTRY.crl (hash: EKoBfRVQaTz1gZmpvlvCoz9s+Gd/TA9JFNrETI48JmU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3616D6F/3799EC8493A211EAB92C0B6BF8AEA228/tjLcSuU6XipZtVv1qsfBSRDBTRY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3616D6F/3799EC8493A211EAB92C0B6BF8AEA228/tjLcSuU6XipZtVv1qsfBSRDBTRY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/tjLcSuU6XipZtVv1qsfBSRDBTRY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2216 (0x8a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3616D6FAF, serialNumber=B632DC4AE53A5E2A59B55BF5AAC7C14910C14D16
        Validity
            Not Before: Apr 17 01:47:06 2026 GMT
            Not After : Apr 19 01:47:06 2026 GMT
        Subject: CN=69e1911b-8c6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:5d:c7:bf:df:d8:ab:de:5e:5d:a8:ff:59:45:
                    48:4e:50:b7:af:ee:03:ca:13:86:f7:9d:8a:cf:dd:
                    ab:e9:ba:48:d7:d6:73:14:03:a3:71:70:41:8b:8d:
                    6e:f1:b2:09:4c:06:c5:b8:6b:dc:04:67:3c:b8:91:
                    d2:00:3b:d5:36:76:ec:00:62:3b:a9:dc:eb:30:ed:
                    b2:72:c0:b3:53:df:8f:28:3b:fc:a2:4b:e7:a8:30:
                    e1:78:67:e0:f9:ca:bd:78:af:82:e5:59:e0:5a:d2:
                    2d:a2:87:48:4e:44:4e:fa:89:2c:65:89:77:30:90:
                    97:4d:7b:0c:f1:8a:96:cf:61:29:f8:b6:c8:d6:d4:
                    d8:ae:93:fa:86:1f:0e:af:ee:13:b4:d1:22:ea:b5:
                    47:90:ec:25:78:0c:19:62:1a:25:5a:71:7a:93:72:
                    29:37:26:aa:2c:e7:ed:d9:db:35:b0:0b:1c:e6:db:
                    e5:04:19:f6:fb:8c:76:e7:db:86:27:ff:52:61:fd:
                    98:cd:bc:3e:ee:04:d5:ed:0d:c8:49:18:f0:38:9a:
                    d4:54:9e:fb:8a:49:5e:69:d5:a2:16:54:78:70:5b:
                    05:76:bb:08:8d:aa:c3:fc:af:2b:cb:a5:9d:80:17:
                    8d:9a:c5:c9:20:b7:c6:60:17:50:30:ec:07:0b:d7:
                    2c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:40:F2:2C:52:4F:81:96:A5:E0:4A:54:ED:24:B0:3B:85:64:DC:D2
            X509v3 Authority Key Identifier:
                keyid:B6:32:DC:4A:E5:3A:5E:2A:59:B5:5B:F5:AA:C7:C1:49:10:C1:4D:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3616D6F/3799EC8493A211EAB92C0B6BF8AEA228/tjLcSuU6XipZtVv1qsfBSRDBTRY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/tjLcSuU6XipZtVv1qsfBSRDBTRY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3616D6F/3799EC8493A211EAB92C0B6BF8AEA228/tjLcSuU6XipZtVv1qsfBSRDBTRY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:a4:9b:6f:d3:72:96:d0:8b:30:48:75:a1:ae:82:82:67:4b:
         86:83:81:58:85:b2:5f:a0:a6:dc:4b:df:d3:a5:31:19:56:e1:
         ff:cd:6b:e5:ac:56:85:31:b5:d8:c4:29:b7:19:f4:77:87:25:
         7e:1a:57:75:54:f1:e4:9d:c5:9b:fe:51:f2:1a:f7:f5:72:7c:
         28:d9:43:7a:16:0d:a1:63:a5:5c:f5:e0:d0:27:f1:af:ac:f5:
         fb:aa:f3:bd:8b:f5:15:dd:6f:69:8c:be:32:5e:ad:35:49:0d:
         a7:0c:77:86:d7:d6:9e:ee:13:42:12:9d:5d:02:22:b3:d2:e7:
         96:e6:e0:f9:fc:d0:4f:8b:89:33:0c:2f:84:28:00:8f:35:b8:
         e8:36:c7:8f:19:ee:5c:25:11:82:2e:a1:4f:bf:06:09:d0:93:
         f5:e4:36:76:19:f7:3d:d5:b1:47:18:8a:a3:67:be:dd:ea:52:
         c0:6f:fc:1c:93:a5:c3:c7:44:86:63:01:a0:57:86:cd:ad:e5:
         dc:80:17:cf:a7:e5:99:1b:74:2a:8c:c9:61:0b:19:86:96:34:
         96:f7:79:88:9d:e2:fa:aa:c0:b4:d6:fa:45:38:7b:99:b0:45:
         be:60:c0:f1:8e:46:9e:54:62:06:f2:72:d7:96:ba:4a:7d:d2:
         d9:00:1c:78
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCKgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MTZENkZBRjExMC8GA1UEBRMoQjYzMkRDNEFFNTNBNUUyQTU5QjU1QkY1QUFDN0Mx
NDkxMEMxNEQxNjAeFw0yNjA0MTcwMTQ3MDZaFw0yNjA0MTkwMTQ3MDZaMBgxFjAU
BgNVBAMTDTY5ZTE5MTFiLThjNmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDDXce/39ir3l5dqP9ZRUhOULev7gPKE4b3nYrP3avpukjX1nMUA6NxcEGL
jW7xsglMBsW4a9wEZzy4kdIAO9U2duwAYjup3Osw7bJywLNT348oO/yiS+eoMOF4
Z+D5yr14r4LlWeBa0i2ih0hORE76iSxliXcwkJdNewzxipbPYSn4tsjW1Niuk/qG
Hw6v7hO00SLqtUeQ7CV4DBliGiVacXqTcik3Jqos5+3Z2zWwCxzm2+UEGfb7jHbn
24Yn/1Jh/ZjNvD7uBNXtDchJGPA4mtRUnvuKSV5p1aIWVHhwWwV2uwiNqsP8ryvL
pZ2AF42axckgt8ZgF1Aw7AcL1ywBAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUw0Dy
LFJPgZal4EpU7SSwO4Vk3NIwHwYDVR0jBBgwFoAUtjLcSuU6XipZtVv1qsfBSRDB
TRYwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjE2RDZGLzM3OTlFQzg0OTNBMjExRUFCOTJDMEI2QkY4QUVBMjI4L3RqTGNT
dVU2WGlwWnRWdjFxc2ZCU1JEQlRSWS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3RqTGNTdVU2WGlwWnRWdjFxc2ZCU1JEQlRSWS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MTZENkYvMzc5OUVDODQ5M0EyMTFFQUI5MkMwQjZCRjhB
RUEyMjgvdGpMY1N1VTZYaXBadFZ2MXFzZkJTUkRCVFJZLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB7pJtv03KW0IswSHWhroKCZ0uGg4FY
hbJfoKbcS9/TpTEZVuH/zWvlrFaFMbXYxCm3GfR3hyV+Gld1VPHkncWb/lHyGvf1
cnwo2UN6Fg2hY6Vc9eDQJ/GvrPX7qvO9i/UV3W9pjL4yXq01SQ2nDHeG19ae7hNC
Ep1dAiKz0ueW5uD5/NBPi4kzDC+EKACPNbjoNsePGe5cJRGCLqFPvwYJ0JP15DZ2
Gfc91bFHGIqjZ77d6lLAb/wck6XDx0SGYwGgV4bNreXcgBfPp+WZG3QqjMlhCxmG
ljSW93mIneL6qsC01vpFOHuZsEW+YMDxjkaeVGIG8nLXlrpKfdLZABx4
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:13:54 2026 by rpki-client