Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361785A/87ADD7309FF011EFB75B2B9D762E951A/rMoLOe836hkY2RAi6kHS1ZNtJCY.mft
File:                     rMoLOe836hkY2RAi6kHS1ZNtJCY.mft (raw, json)
Hash identifier:          jYUlOmQmIH373v5CNaMeJQkCwR78aGZsK5a9lG4IPfs=
Subject key identifier:   04:00:C2:90:8F:A2:27:3E:8D:D8:93:B3:CF:3C:46:A7:D8:1B:42:8B
Authority key identifier: AC:CA:0B:39:EF:37:EA:19:18:D9:10:22:EA:41:D2:D5:93:6D:24:26
Certificate issuer:       /CN=F361785AAF/serialNumber=ACCA0B39EF37EA1918D91022EA41D2D5936D2426
Certificate serial:       0220
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rMoLOe836hkY2RAi6kHS1ZNtJCY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361785A/87ADD7309FF011EFB75B2B9D762E951A/rMoLOe836hkY2RAi6kHS1ZNtJCY.mft
Manifest number:          021D
Signing time:             Fri 17 Apr 2026 04:36:11 +0000
Manifest this update:     Fri 17 Apr 2026 04:36:10 +0000
Manifest next update:     Sun 19 Apr 2026 04:36:10 +0000
Files and hashes:         1: rMoLOe836hkY2RAi6kHS1ZNtJCY.crl (hash: vthfj/Uj398Fwdt+AstJq0IdFbmEEktyiWTaBVfunIU=)
                          2: 0865A9A03F8011F09D9EB4C0DAE4EC9C.roa (hash: eAtT77xV4NEBf1cf+HT8ySye2iBWrSOl4kk6XxsESlo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361785A/87ADD7309FF011EFB75B2B9D762E951A/rMoLOe836hkY2RAi6kHS1ZNtJCY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361785A/87ADD7309FF011EFB75B2B9D762E951A/rMoLOe836hkY2RAi6kHS1ZNtJCY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/rMoLOe836hkY2RAi6kHS1ZNtJCY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 544 (0x220)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361785AAF, serialNumber=ACCA0B39EF37EA1918D91022EA41D2D5936D2426
        Validity
            Not Before: Apr 17 04:36:10 2026 GMT
            Not After : Apr 19 04:36:10 2026 GMT
        Subject: CN=69e1b8bb-ed20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:8d:9e:ea:6e:43:94:14:0c:ed:13:de:1f:05:
                    31:0c:b2:a2:4e:ee:3f:03:86:2d:5d:f3:1c:8e:1c:
                    e6:35:bb:e5:68:59:a1:50:ed:fc:fe:bb:89:10:73:
                    b6:ad:99:9b:a0:a0:ae:eb:97:6b:ae:d4:2b:ca:51:
                    b5:30:94:11:51:65:03:aa:76:cc:31:9c:1b:12:6e:
                    9c:90:bd:ae:7c:52:06:2c:b3:8a:d1:cf:64:aa:b6:
                    56:aa:74:5c:e0:b8:e9:01:41:22:e5:79:80:6d:19:
                    83:7e:f8:c3:8b:41:48:84:a6:7b:1d:36:42:67:1f:
                    2e:cd:28:6f:f6:4c:02:96:b4:d3:96:fd:67:b1:0f:
                    d2:12:f4:04:99:01:cb:6d:47:2b:b0:2c:db:f1:77:
                    90:fe:92:b6:5a:e9:6c:b5:c7:ad:ea:b1:b7:4b:94:
                    0e:80:df:ab:71:a6:11:23:89:78:b1:b0:13:b5:bd:
                    e2:09:0f:23:bc:f5:b3:f3:06:6a:d9:8c:10:0c:1b:
                    5e:91:77:31:b9:1e:cf:bf:47:0a:02:91:be:5b:bd:
                    7e:51:ba:3f:96:9e:19:6d:f2:35:1d:20:8c:86:eb:
                    dc:8a:ac:18:07:15:5f:3b:f1:06:1d:94:62:74:f3:
                    54:90:1b:ad:fb:e3:4b:1d:87:d5:91:23:89:84:1c:
                    e1:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:00:C2:90:8F:A2:27:3E:8D:D8:93:B3:CF:3C:46:A7:D8:1B:42:8B
            X509v3 Authority Key Identifier:
                keyid:AC:CA:0B:39:EF:37:EA:19:18:D9:10:22:EA:41:D2:D5:93:6D:24:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361785A/87ADD7309FF011EFB75B2B9D762E951A/rMoLOe836hkY2RAi6kHS1ZNtJCY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rMoLOe836hkY2RAi6kHS1ZNtJCY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361785A/87ADD7309FF011EFB75B2B9D762E951A/rMoLOe836hkY2RAi6kHS1ZNtJCY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:e6:3d:e6:1f:3b:a1:30:2e:54:35:08:50:e6:c6:56:b1:e6:
         f4:97:40:4a:e9:e5:3f:fe:fe:1b:ea:1c:be:26:b8:47:8d:b2:
         b6:58:d0:87:a5:d8:31:ed:51:da:c2:5f:cf:29:c7:85:9c:6e:
         59:c4:65:17:2b:60:2b:23:41:31:f7:25:48:c1:0b:37:15:92:
         eb:90:57:cf:56:9c:0c:2d:c2:22:de:ba:8d:ce:60:1c:93:0f:
         78:14:ec:82:f8:6d:72:4b:5a:3c:98:d7:5a:f9:b4:d2:12:a0:
         c1:40:32:76:39:f4:87:d3:a2:a4:d9:66:c4:80:30:df:b5:4d:
         a5:25:32:82:96:73:72:fd:8b:08:5c:b4:00:ab:42:f9:e1:e7:
         80:fd:f9:67:d3:2c:2b:8c:1a:8a:e2:98:a7:d4:26:1f:08:e4:
         76:27:fa:9c:8b:34:15:af:0a:57:2c:97:20:6e:af:38:31:80:
         ad:93:39:a1:5e:6a:ee:70:dc:bc:c5:ab:80:e3:53:d3:ff:6d:
         4b:ca:0d:ec:86:e4:cc:9f:02:47:cf:1b:1a:fc:7c:c1:d8:5a:
         94:ed:57:3b:f0:08:1b:59:60:70:de:cf:ea:a9:eb:e4:d9:5a:
         00:88:84:0b:bc:57:1e:23:1f:e1:ce:ad:97:55:e1:77:1f:00:
         66:9c:3a:bf
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAiAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MTc4NUFBRjExMC8GA1UEBRMoQUNDQTBCMzlFRjM3RUExOTE4RDkxMDIyRUE0MUQy
RDU5MzZEMjQyNjAeFw0yNjA0MTcwNDM2MTBaFw0yNjA0MTkwNDM2MTBaMBgxFjAU
BgNVBAMTDTY5ZTFiOGJiLWVkMjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC/jZ7qbkOUFAztE94fBTEMsqJO7j8Dhi1d8xyOHOY1u+VoWaFQ7fz+u4kQ
c7atmZugoK7rl2uu1CvKUbUwlBFRZQOqdswxnBsSbpyQva58UgYss4rRz2Sqtlaq
dFzguOkBQSLleYBtGYN++MOLQUiEpnsdNkJnHy7NKG/2TAKWtNOW/WexD9IS9ASZ
ActtRyuwLNvxd5D+krZa6Wy1x63qsbdLlA6A36txphEjiXixsBO1veIJDyO89bPz
BmrZjBAMG16RdzG5Hs+/RwoCkb5bvX5Ruj+Wnhlt8jUdIIyG69yKrBgHFV878QYd
lGJ081SQG63740sdh9WRI4mEHOHfAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUBADC
kI+iJz6N2JOzzzxGp9gbQoswHwYDVR0jBBgwFoAUrMoLOe836hkY2RAi6kHS1ZNt
JCYwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjE3ODVBLzg3QURENzMwOUZGMDExRUZCNzVCMkI5RDc2MkU5NTFBL3JNb0xP
ZTgzNmhrWTJSQWk2a0hTMVpOdEpDWS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3JNb0xPZTgzNmhrWTJSQWk2a0hTMVpOdEpDWS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MTc4NUEvODdBREQ3MzA5RkYwMTFFRkI3NUIyQjlENzYy
RTk1MUEvck1vTE9lODM2aGtZMlJBaTZrSFMxWk50SkNZLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDQ5j3mHzuhMC5UNQhQ5sZWseb0l0BK
6eU//v4b6hy+JrhHjbK2WNCHpdgx7VHawl/PKceFnG5ZxGUXK2ArI0Ex9yVIwQs3
FZLrkFfPVpwMLcIi3rqNzmAckw94FOyC+G1yS1o8mNda+bTSEqDBQDJ2OfSH06Kk
2WbEgDDftU2lJTKClnNy/YsIXLQAq0L54eeA/fln0ywrjBqK4pin1CYfCOR2J/qc
izQVrwpXLJcgbq84MYCtkzmhXmrucNy8xauA41PT/21Lyg3shuTMnwJHzxsa/HzB
2FqU7Vc78AgbWWBw3s/qqevk2VoAiIQLvFceIx/hzq2XVeF3HwBmnDq/
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:10:30 2026 by rpki-client