Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36178B7/15810E4C170F11F1A6B8F3BDDAE4EC9C/LhA-fe7g0Ngs5bParoVBeHiOQX8.mft
File:                     LhA-fe7g0Ngs5bParoVBeHiOQX8.mft (raw, json)
Hash identifier:          Z31Hz4Kfrc9U4wSWekKQBm9lAtEFzxiuJAKKTQJTK64=
Subject key identifier:   2C:F3:3A:C8:B4:46:CF:B9:31:82:CC:D9:07:3E:79:72:B2:9A:E7:94
Authority key identifier: 2E:10:3E:7D:EE:E0:D0:D8:2C:E5:B3:DA:AE:85:41:78:78:8E:41:7F
Certificate issuer:       /CN=F36178B7AF/serialNumber=2E103E7DEEE0D0D82CE5B3DAAE854178788E417F
Certificate serial:       35
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/LhA-fe7g0Ngs5bParoVBeHiOQX8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36178B7/15810E4C170F11F1A6B8F3BDDAE4EC9C/LhA-fe7g0Ngs5bParoVBeHiOQX8.mft
Manifest number:          33
Signing time:             Fri 17 Apr 2026 05:27:41 +0000
Manifest this update:     Fri 17 Apr 2026 05:27:40 +0000
Manifest next update:     Sun 19 Apr 2026 05:27:40 +0000
Files and hashes:         1: LhA-fe7g0Ngs5bParoVBeHiOQX8.crl (hash: o7dEl7LyEuHJbEMPklT1J9JvpX4n+o4hItbpqEOuW54=)
                          2: C8CD247417BC11F1BE3B9AEDDAE4EC9C.roa (hash: iqjOXjoK3SelRrgitYQIUB9lYBSmjguVzAy9QzoOASA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36178B7/15810E4C170F11F1A6B8F3BDDAE4EC9C/LhA-fe7g0Ngs5bParoVBeHiOQX8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36178B7/15810E4C170F11F1A6B8F3BDDAE4EC9C/LhA-fe7g0Ngs5bParoVBeHiOQX8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/LhA-fe7g0Ngs5bParoVBeHiOQX8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 53 (0x35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36178B7AF, serialNumber=2E103E7DEEE0D0D82CE5B3DAAE854178788E417F
        Validity
            Not Before: Apr 17 05:27:40 2026 GMT
            Not After : Apr 19 05:27:40 2026 GMT
        Subject: CN=69e1c4cc-dec2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c9:ad:83:9e:ae:26:f0:d0:7c:83:af:74:9d:
                    b6:60:b6:38:0e:12:78:ac:e1:bc:c6:9a:cc:e1:8f:
                    3b:f6:55:0e:de:98:44:99:be:28:55:0d:9a:24:b6:
                    cf:6c:84:fc:5f:71:b9:3b:44:c8:22:42:be:52:55:
                    fe:39:74:51:69:49:b6:01:39:dd:12:5d:80:d6:f6:
                    97:6e:9f:52:49:42:59:e8:8d:96:d4:22:72:73:d8:
                    a0:68:c3:3d:da:d3:33:57:f3:c8:04:e5:00:46:67:
                    8c:dc:d9:1f:fe:06:26:2a:64:d0:0b:eb:2a:5e:e0:
                    69:f5:69:15:3f:e5:4a:7e:83:4b:26:bd:cf:fd:0d:
                    08:6b:19:2f:32:01:51:39:c4:67:60:cd:71:96:d7:
                    0d:80:bf:99:b3:e8:e4:e0:6b:f8:f1:00:b0:f3:93:
                    f5:2d:41:f0:a8:40:c4:3c:ff:8f:b9:79:c2:9f:fc:
                    e0:41:b5:3c:21:ea:a2:1d:ea:31:d1:4c:fb:4c:e1:
                    9b:ad:9b:e2:b7:6e:c9:34:8a:59:15:46:df:08:cf:
                    d1:24:d7:94:04:12:88:0f:85:51:6c:0c:bb:a2:f9:
                    2a:99:ab:d7:f8:2b:f7:25:41:b2:68:26:9b:f5:6b:
                    12:b6:37:eb:2e:35:5e:74:38:ac:6b:66:28:6b:21:
                    f8:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:F3:3A:C8:B4:46:CF:B9:31:82:CC:D9:07:3E:79:72:B2:9A:E7:94
            X509v3 Authority Key Identifier:
                keyid:2E:10:3E:7D:EE:E0:D0:D8:2C:E5:B3:DA:AE:85:41:78:78:8E:41:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36178B7/15810E4C170F11F1A6B8F3BDDAE4EC9C/LhA-fe7g0Ngs5bParoVBeHiOQX8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LhA-fe7g0Ngs5bParoVBeHiOQX8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36178B7/15810E4C170F11F1A6B8F3BDDAE4EC9C/LhA-fe7g0Ngs5bParoVBeHiOQX8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:af:1b:7b:a9:52:70:29:9c:c0:0f:e5:c6:98:22:ab:53:13:
         55:54:6e:7f:4c:af:7e:cd:72:0a:32:64:50:26:08:8b:a3:6d:
         4b:59:03:4a:b1:70:38:97:83:b2:dd:58:d9:75:fa:95:76:d6:
         20:af:fd:ab:1e:f3:3f:be:c8:7b:b1:8f:0e:2b:ef:f5:e1:2b:
         e6:98:d0:85:c1:29:d7:5e:7f:9f:38:eb:e5:f0:89:9f:21:aa:
         b4:ee:5c:83:47:d0:55:9a:38:74:07:7f:64:6e:b1:99:6e:ef:
         89:fc:ff:13:54:cb:3d:77:ca:3a:e7:07:b3:ec:8e:8b:66:23:
         2e:bd:a9:c1:f8:5a:c2:09:03:8b:e1:12:c3:30:3f:1b:4f:e3:
         ec:e5:6b:f2:10:e5:2c:59:e8:41:52:14:76:c9:2b:d2:f0:45:
         66:c9:67:1e:6c:db:42:ac:f1:ec:72:8e:7f:2c:ba:d7:d7:96:
         08:dd:c2:45:8e:07:72:2d:51:ee:12:dc:81:ff:df:6c:75:6a:
         5d:e9:3e:68:60:23:cd:9b:9c:a3:04:74:31:8c:1a:ab:91:82:
         98:c9:ae:97:db:e7:bd:93:2a:40:de:3d:94:70:2b:7c:fc:86:
         cf:15:53:25:51:45:e8:f5:a0:2a:fd:a4:f3:5e:22:d5:57:7e:
         ff:f7:41:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:01:50 2026 by rpki-client