Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361B835/9F84D4AC24C611F099A06586DAE4EC9C/aIyQ9SPX7PkOt9yYG3Bx44NJMVI.mft
File:                     aIyQ9SPX7PkOt9yYG3Bx44NJMVI.mft (raw, json)
Hash identifier:          /WJRZE/1vnzXqw3QRv1vKaQuaohSraQHF0eQ5fStxJw=
Subject key identifier:   DA:F9:BA:F1:DF:10:EF:EB:40:0C:ED:EE:D2:5B:B0:54:29:50:81:09
Authority key identifier: 68:8C:90:F5:23:D7:EC:F9:0E:B7:DC:98:1B:70:71:E3:83:49:31:52
Certificate issuer:       /CN=F361B835AF/serialNumber=688C90F523D7ECF90EB7DC981B7071E383493152
Certificate serial:       0168
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/aIyQ9SPX7PkOt9yYG3Bx44NJMVI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361B835/9F84D4AC24C611F099A06586DAE4EC9C/aIyQ9SPX7PkOt9yYG3Bx44NJMVI.mft
Manifest number:          0167
Signing time:             Fri 17 Apr 2026 04:49:58 +0000
Manifest this update:     Fri 17 Apr 2026 04:49:58 +0000
Manifest next update:     Sun 19 Apr 2026 04:49:58 +0000
Files and hashes:         1: aIyQ9SPX7PkOt9yYG3Bx44NJMVI.crl (hash: TDjOdZmuyjS4hQSZkckdQ3YIzk2EvgNeY2TgXpvhdc8=)
                          2: ED854A8624C811F0B4D15694DAE4EC9C.roa (hash: KyIxaodmc2Nf2dSIBbZZRE5rqK1fV8FCMAMx88jtkk4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361B835/9F84D4AC24C611F099A06586DAE4EC9C/aIyQ9SPX7PkOt9yYG3Bx44NJMVI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361B835/9F84D4AC24C611F099A06586DAE4EC9C/aIyQ9SPX7PkOt9yYG3Bx44NJMVI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/aIyQ9SPX7PkOt9yYG3Bx44NJMVI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 04:49:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 360 (0x168)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361B835AF, serialNumber=688C90F523D7ECF90EB7DC981B7071E383493152
        Validity
            Not Before: Apr 17 04:49:58 2026 GMT
            Not After : Apr 19 04:49:58 2026 GMT
        Subject: CN=69e1bbf6-f495
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:cd:87:8b:e5:1a:24:5d:1f:ee:f5:70:15:54:
                    13:bd:46:d1:8a:c1:24:79:9a:7b:9b:d9:20:45:ef:
                    39:a4:a8:95:56:5b:b1:32:3a:2b:09:62:32:3b:75:
                    11:fd:74:e3:ec:bb:b5:f3:20:25:8a:a0:40:56:f5:
                    97:dd:83:2f:f1:58:71:99:20:0f:09:2a:bb:25:75:
                    34:30:fb:c5:fd:89:57:6d:d6:42:e8:d0:27:f1:66:
                    af:bd:8d:ab:3a:f5:9a:17:7e:99:1c:1c:d6:ad:64:
                    49:f2:b1:89:4a:d3:96:fd:ef:27:31:cf:26:32:70:
                    7b:15:85:8a:b9:50:ae:d8:34:d6:1e:ed:84:d0:0a:
                    4e:ca:9d:ab:a4:83:57:5f:bc:76:27:06:a1:d1:80:
                    08:f0:39:54:f2:8d:04:f8:75:8b:50:09:56:49:15:
                    c8:c0:7c:25:79:c8:03:bd:55:62:3e:47:87:59:d9:
                    b1:47:b7:1e:a1:50:d9:c5:16:e7:20:9b:8a:52:9b:
                    6d:94:8d:c9:19:4b:75:8a:b8:bf:cd:9e:79:18:c2:
                    09:40:0c:44:28:69:4f:78:f3:e9:54:21:9a:4b:58:
                    62:83:7f:bc:d7:96:88:16:5a:7a:9c:57:15:21:36:
                    e5:f6:28:6c:4f:03:71:8c:a9:91:b1:24:36:ce:40:
                    94:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:F9:BA:F1:DF:10:EF:EB:40:0C:ED:EE:D2:5B:B0:54:29:50:81:09
            X509v3 Authority Key Identifier:
                keyid:68:8C:90:F5:23:D7:EC:F9:0E:B7:DC:98:1B:70:71:E3:83:49:31:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361B835/9F84D4AC24C611F099A06586DAE4EC9C/aIyQ9SPX7PkOt9yYG3Bx44NJMVI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/aIyQ9SPX7PkOt9yYG3Bx44NJMVI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361B835/9F84D4AC24C611F099A06586DAE4EC9C/aIyQ9SPX7PkOt9yYG3Bx44NJMVI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:66:6d:3c:0d:75:7f:6d:32:19:0d:8f:1c:d1:d0:83:6a:4b:
         5f:fd:28:fa:be:fa:ca:ee:d3:eb:9f:38:8b:e6:4b:07:68:10:
         f1:41:24:74:bc:5b:cf:57:ca:ba:45:7d:3a:1a:37:40:b8:7c:
         5c:c2:42:c6:7b:68:5a:da:5a:3c:84:0b:48:51:b7:be:5d:de:
         74:c2:9a:42:6f:d1:d0:34:f6:e7:db:89:37:16:be:6b:c5:55:
         46:4c:8b:cb:15:75:b2:03:24:b2:f0:12:52:c0:8c:a0:8b:14:
         2a:92:87:67:4c:e6:13:07:3d:ca:63:90:c6:65:f1:9e:e5:72:
         ee:4a:fe:d2:ec:54:4d:9c:57:a4:a8:73:37:04:90:95:55:63:
         b7:df:e9:7f:17:f5:c5:e9:fa:f8:ef:96:92:d2:cb:75:ba:d2:
         4a:36:eb:a4:dc:c8:e1:cb:70:dc:97:7b:11:69:e4:11:f9:6f:
         85:d5:2e:b6:3e:84:fb:96:18:b9:fb:ac:b6:d8:15:34:8c:3f:
         7b:38:30:93:ec:06:cc:7e:e1:49:f7:17:fa:30:f2:a2:ed:ff:
         c2:f3:81:c2:ea:38:fd:a3:46:92:65:7c:c0:aa:62:44:58:58:
         09:86:62:bf:42:59:62:e7:a5:5b:62:8d:3e:2e:17:82:70:7d:
         16:c4:b0:cc
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAWgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MUI4MzVBRjExMC8GA1UEBRMoNjg4QzkwRjUyM0Q3RUNGOTBFQjdEQzk4MUI3MDcx
RTM4MzQ5MzE1MjAeFw0yNjA0MTcwNDQ5NThaFw0yNjA0MTkwNDQ5NThaMBgxFjAU
BgNVBAMTDTY5ZTFiYmY2LWY0OTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDazYeL5RokXR/u9XAVVBO9RtGKwSR5mnub2SBF7zmkqJVWW7EyOisJYjI7
dRH9dOPsu7XzICWKoEBW9Zfdgy/xWHGZIA8JKrsldTQw+8X9iVdt1kLo0CfxZq+9
jas69ZoXfpkcHNatZEnysYlK05b97ycxzyYycHsVhYq5UK7YNNYe7YTQCk7Knauk
g1dfvHYnBqHRgAjwOVTyjQT4dYtQCVZJFcjAfCV5yAO9VWI+R4dZ2bFHtx6hUNnF
Fucgm4pSm22UjckZS3WKuL/NnnkYwglADEQoaU948+lUIZpLWGKDf7zXlogWWnqc
VxUhNuX2KGxPA3GMqZGxJDbOQJQVAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU2vm6
8d8Q7+tADO3u0luwVClQgQkwHwYDVR0jBBgwFoAUaIyQ9SPX7PkOt9yYG3Bx44NJ
MVIwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjFCODM1LzlGODRENEFDMjRDNjExRjA5OUEwNjU4NkRBRTRFQzlDL2FJeVE5
U1BYN1BrT3Q5eVlHM0J4NDROSk1WSS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2FJeVE5U1BYN1BrT3Q5eVlHM0J4NDROSk1WSS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MUI4MzUvOUY4NEQ0QUMyNEM2MTFGMDk5QTA2NTg2REFF
NEVDOUMvYUl5UTlTUFg3UGtPdDl5WUczQng0NE5KTVZJLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQABZm08DXV/bTIZDY8c0dCDaktf/Sj6
vvrK7tPrnziL5ksHaBDxQSR0vFvPV8q6RX06GjdAuHxcwkLGe2ha2lo8hAtIUbe+
Xd50wppCb9HQNPbn24k3Fr5rxVVGTIvLFXWyAySy8BJSwIygixQqkodnTOYTBz3K
Y5DGZfGe5XLuSv7S7FRNnFekqHM3BJCVVWO33+l/F/XF6fr475aS0st1utJKNuuk
3Mjhy3Dcl3sRaeQR+W+F1S62PoT7lhi5+6y22BU0jD97ODCT7AbMfuFJ9xf6MPKi
7f/C84HC6jj9o0aSZXzAqmJEWFgJhmK/Qlli56VbYo0+LheCcH0WxLDM
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:53:59 2026 by rpki-client