Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361CA27/65AC04E001C911F1AF2D178EDAE4EC9C/kL4BhbknyIKl6feqNl6TXL9FWfg.mft
File:                     kL4BhbknyIKl6feqNl6TXL9FWfg.mft (raw, json)
Hash identifier:          XHzhUCFa7zZuncm21ouMCRNOugAShsZYoJV3QR+I3aI=
Subject key identifier:   67:79:1D:B3:D9:70:4A:2D:1A:6A:ED:30:D0:16:66:35:C4:C9:DD:F5
Authority key identifier: 90:BE:01:85:B9:27:C8:82:A5:E9:F7:AA:36:5E:93:5C:BF:45:59:F8
Certificate issuer:       /CN=F361CA27AF/serialNumber=90BE0185B927C882A5E9F7AA365E935CBF4559F8
Certificate serial:       49
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/kL4BhbknyIKl6feqNl6TXL9FWfg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361CA27/65AC04E001C911F1AF2D178EDAE4EC9C/kL4BhbknyIKl6feqNl6TXL9FWfg.mft
Manifest number:          49
Signing time:             Fri 17 Apr 2026 05:24:30 +0000
Manifest this update:     Fri 17 Apr 2026 05:24:30 +0000
Manifest next update:     Sun 19 Apr 2026 05:24:30 +0000
Files and hashes:         1: kL4BhbknyIKl6feqNl6TXL9FWfg.crl (hash: zHYnEV0KsOvVEs++BTbtk18J9eAn6XpKzLza5NDJ3pE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361CA27/65AC04E001C911F1AF2D178EDAE4EC9C/kL4BhbknyIKl6feqNl6TXL9FWfg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361CA27/65AC04E001C911F1AF2D178EDAE4EC9C/kL4BhbknyIKl6feqNl6TXL9FWfg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/kL4BhbknyIKl6feqNl6TXL9FWfg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 05:24:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 73 (0x49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361CA27AF, serialNumber=90BE0185B927C882A5E9F7AA365E935CBF4559F8
        Validity
            Not Before: Apr 17 05:24:30 2026 GMT
            Not After : Apr 19 05:24:30 2026 GMT
        Subject: CN=69e1c40e-5d23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:11:14:1f:c1:36:d1:91:b8:08:ce:35:30:f8:
                    76:19:fc:78:14:4e:ed:23:71:ad:bf:b1:43:34:50:
                    74:2c:78:f9:fc:38:78:78:23:3e:d8:dc:ea:c4:f8:
                    a2:88:2e:07:ed:33:26:42:63:17:5d:51:10:47:10:
                    9c:b4:0e:a9:3b:c4:86:ef:89:2e:cd:89:5a:88:e9:
                    13:ab:31:e8:77:58:d6:d9:b3:c2:18:51:cc:9d:7d:
                    da:83:0c:4d:53:87:0e:21:15:cd:47:e8:e8:25:31:
                    86:66:37:86:0a:ed:8b:c5:ce:d1:80:be:15:4c:70:
                    fc:32:b7:e7:c5:64:2e:ee:2a:3d:39:6f:87:48:7b:
                    3e:f0:78:f5:f2:19:ec:35:a8:07:62:67:e5:62:0d:
                    ec:b6:8b:a6:a5:56:fc:a0:b1:bc:37:5a:97:6d:22:
                    8f:d6:2e:58:23:90:f1:29:2e:dc:3d:d0:c8:6a:61:
                    e9:1d:e2:4d:aa:e7:ba:e1:43:af:7e:28:fb:5d:4b:
                    f6:c6:0a:a5:fd:90:7f:5e:44:76:03:0f:57:b9:ac:
                    80:fd:bb:05:94:b0:6f:6f:f6:dc:7c:f5:70:ea:ec:
                    4e:1b:65:d0:50:27:a6:81:b0:a6:16:0c:74:16:5f:
                    33:3f:af:06:66:b1:2c:b7:54:d8:76:00:f2:1e:cf:
                    a1:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:79:1D:B3:D9:70:4A:2D:1A:6A:ED:30:D0:16:66:35:C4:C9:DD:F5
            X509v3 Authority Key Identifier:
                keyid:90:BE:01:85:B9:27:C8:82:A5:E9:F7:AA:36:5E:93:5C:BF:45:59:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361CA27/65AC04E001C911F1AF2D178EDAE4EC9C/kL4BhbknyIKl6feqNl6TXL9FWfg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kL4BhbknyIKl6feqNl6TXL9FWfg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361CA27/65AC04E001C911F1AF2D178EDAE4EC9C/kL4BhbknyIKl6feqNl6TXL9FWfg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:7b:81:dc:4d:64:10:7e:e4:29:01:c5:3c:d3:f9:fa:0e:56:
         ea:e2:b2:19:80:ec:2b:dd:61:83:22:aa:5e:7c:b5:2e:46:7c:
         f0:7c:86:f1:73:77:fd:ac:be:64:ec:53:5a:1c:cf:78:ae:03:
         51:92:12:80:7a:ea:a3:ce:3a:d2:04:3a:f3:ba:b3:d6:a2:31:
         b2:b6:77:4a:9d:b3:20:d2:06:e5:c4:1e:d9:de:c1:26:df:8b:
         b9:9a:27:39:5c:56:79:69:24:30:1b:69:71:4d:c5:75:c3:25:
         d4:87:c7:0d:e9:e5:8c:5b:cb:c4:0d:fb:03:56:8e:9c:be:85:
         26:23:16:58:2b:e6:91:89:e9:5d:2a:bc:df:e5:70:c4:46:00:
         a8:39:99:be:da:da:14:d7:33:76:b5:a7:ee:fb:5f:a9:b2:2a:
         19:fe:f1:c4:16:0b:30:e7:2e:76:f4:03:2e:28:d4:e8:88:9f:
         b2:37:f7:3f:b9:48:2e:0d:60:0b:82:c2:83:ee:94:6d:82:38:
         e9:b8:b9:68:c5:cf:be:e1:bb:08:1c:be:bc:73:aa:95:0e:86:
         9f:66:68:a1:4c:08:d5:99:fc:f3:b2:5c:38:47:44:ce:b4:74:
         86:80:70:6e:d0:df:66:29:73:22:b0:e8:17:9f:a2:13:86:0f:
         51:30:1e:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:32:28 2026 by rpki-client