Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3624132/8BFBD952D1AC11EFA5D11655762E951A/ksorQe7D4BoZOJ4iIIisP8OhSO0.mft
File:                     ksorQe7D4BoZOJ4iIIisP8OhSO0.mft (raw, json)
Hash identifier:          sZuqRxo7Ne92xQTJl6Uy317uNF4fF07OliLKJAz6Tog=
Subject key identifier:   78:66:00:04:4E:F2:19:DF:7C:BC:AE:2D:20:6C:43:0B:BA:C9:B7:80
Authority key identifier: 92:CA:2B:41:EE:C3:E0:1A:19:38:9E:22:20:88:AC:3F:C3:A1:48:ED
Certificate issuer:       /CN=F3624132AF/serialNumber=92CA2B41EEC3E01A19389E222088AC3FC3A148ED
Certificate serial:       01D5
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ksorQe7D4BoZOJ4iIIisP8OhSO0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3624132/8BFBD952D1AC11EFA5D11655762E951A/ksorQe7D4BoZOJ4iIIisP8OhSO0.mft
Manifest number:          01D3
Signing time:             Fri 17 Apr 2026 04:41:47 +0000
Manifest this update:     Fri 17 Apr 2026 04:41:47 +0000
Manifest next update:     Sun 19 Apr 2026 04:41:46 +0000
Files and hashes:         1: ksorQe7D4BoZOJ4iIIisP8OhSO0.crl (hash: ojPRB2ixzTa4NQH0alPNdNkYhWhIFlPiWUAmlzSPAEg=)
                          2: 2C6E0438D1B111EFAE9F9072762E951A.roa (hash: B0CbiM/bAowuKqrYGTi8MxK8c+r/1xQQXbcFOdolRIY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3624132/8BFBD952D1AC11EFA5D11655762E951A/ksorQe7D4BoZOJ4iIIisP8OhSO0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3624132/8BFBD952D1AC11EFA5D11655762E951A/ksorQe7D4BoZOJ4iIIisP8OhSO0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ksorQe7D4BoZOJ4iIIisP8OhSO0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 04:41:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 469 (0x1d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3624132AF, serialNumber=92CA2B41EEC3E01A19389E222088AC3FC3A148ED
        Validity
            Not Before: Apr 17 04:41:47 2026 GMT
            Not After : Apr 19 04:41:46 2026 GMT
        Subject: CN=69e1ba0b-8d7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:a4:16:b9:5a:6a:ba:46:49:17:c4:6b:c6:ad:
                    96:61:b4:28:07:5f:59:c1:6f:f8:88:69:b0:69:84:
                    6b:22:84:f5:2c:67:b6:00:2f:0d:49:b7:a1:a7:be:
                    d0:c1:0f:c0:9d:dc:4d:7f:92:61:9a:cf:ca:7a:c4:
                    4c:97:f0:83:e7:6f:c0:8a:f4:a0:2d:db:91:7f:42:
                    aa:ec:8d:53:27:2e:10:63:14:87:60:82:ea:80:f3:
                    57:5b:d5:f8:8c:b8:c4:4b:3c:c2:e1:15:0f:58:38:
                    fe:a3:09:47:d7:85:74:0b:1b:04:3b:a2:cb:2d:34:
                    bd:56:0c:85:9f:49:a8:d3:af:8b:9b:db:aa:1a:b6:
                    de:4b:6c:56:01:44:d6:51:4f:65:6b:2f:c8:46:b3:
                    45:6e:13:20:91:86:83:7d:41:09:0f:47:7f:54:b8:
                    e6:c9:7f:6c:b5:4a:af:db:dd:05:87:09:2c:83:80:
                    a6:33:09:3c:a2:96:1d:81:74:87:a1:fa:7c:ef:7e:
                    12:15:16:69:c0:ef:98:49:ff:10:20:e6:8c:17:3b:
                    9e:a0:d4:dd:49:14:d8:e4:51:75:19:f0:19:f5:f1:
                    b5:f3:21:79:1a:08:2c:25:87:35:1d:7e:60:02:a8:
                    00:21:29:e0:7a:b6:96:9c:75:f3:d6:06:97:a3:b1:
                    92:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:66:00:04:4E:F2:19:DF:7C:BC:AE:2D:20:6C:43:0B:BA:C9:B7:80
            X509v3 Authority Key Identifier:
                keyid:92:CA:2B:41:EE:C3:E0:1A:19:38:9E:22:20:88:AC:3F:C3:A1:48:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3624132/8BFBD952D1AC11EFA5D11655762E951A/ksorQe7D4BoZOJ4iIIisP8OhSO0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ksorQe7D4BoZOJ4iIIisP8OhSO0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3624132/8BFBD952D1AC11EFA5D11655762E951A/ksorQe7D4BoZOJ4iIIisP8OhSO0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:60:45:d5:dc:af:62:a0:18:64:01:6e:05:68:df:7b:13:6c:
         41:00:76:fa:1d:96:cd:03:2a:eb:f7:13:f2:52:ab:ff:5f:47:
         13:b1:69:2b:d8:ff:ca:e7:e0:50:1b:73:3e:2c:de:db:cd:15:
         f1:fc:ba:d5:20:4c:50:46:f4:9d:5d:10:c8:59:d5:ee:97:da:
         18:c0:a4:bb:c3:74:25:a7:16:0b:ab:65:ff:57:e3:ed:4b:33:
         e3:97:b7:73:de:1b:73:65:d2:30:ec:94:e6:2a:6c:da:e6:d6:
         83:e4:db:eb:d1:7c:be:fe:d6:26:54:06:b5:15:e5:9a:cf:70:
         45:02:2a:5f:1e:9d:eb:04:91:c8:73:76:c2:40:a5:e7:8f:c5:
         9f:5c:0f:cb:18:ab:ef:9c:c9:a5:c9:5e:52:46:46:42:0a:c6:
         cc:48:ff:8a:29:5f:6e:ac:71:12:d0:8b:0a:2b:43:89:fa:65:
         21:d5:48:e8:dd:18:f5:ee:6a:24:9d:7b:c3:f5:a7:cd:0b:74:
         82:70:66:0a:e6:92:c4:4f:3f:ff:b1:58:92:0b:9c:7b:18:fd:
         bb:3d:d2:86:2b:04:50:42:39:f0:8b:70:88:d0:15:87:f5:bf:
         3d:12:f2:38:db:c5:5d:7d:37:5d:fe:32:36:ce:10:85:d6:ba:
         d9:91:4f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:39:31 2026 by rpki-client