Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3625A15/92C3CE082ECD11E980230320F8AEA228/CNLFTntRy8c0NN0AYFFFEi8ay2c.mft
File:                     CNLFTntRy8c0NN0AYFFFEi8ay2c.mft (raw, json)
Hash identifier:          HtUGg4nl8fpUB0zRXZy4c8gLShfg+96MOpIDoRpUaTg=
Subject key identifier:   05:E6:32:29:2C:CA:A3:B5:45:DA:43:B0:5B:9E:60:32:F7:CB:EE:0E
Authority key identifier: 08:D2:C5:4E:7B:51:CB:C7:34:34:DD:00:60:51:45:12:2F:1A:CB:67
Certificate issuer:       /CN=F3625A15AF/serialNumber=08D2C54E7B51CBC73434DD00605145122F1ACB67
Certificate serial:       0A85
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CNLFTntRy8c0NN0AYFFFEi8ay2c.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3625A15/92C3CE082ECD11E980230320F8AEA228/CNLFTntRy8c0NN0AYFFFEi8ay2c.mft
Manifest number:          0A81
Signing time:             Fri 17 Apr 2026 01:16:26 +0000
Manifest this update:     Fri 17 Apr 2026 01:16:25 +0000
Manifest next update:     Sun 19 Apr 2026 01:16:25 +0000
Files and hashes:         1: CNLFTntRy8c0NN0AYFFFEi8ay2c.crl (hash: sknyNS6n0JP83BK5LBwmgBTAV0bAALmVGIKB7+0mvew=)
                          2: 3F66AD3622C011F181F9D8ECDAE4EC9C.roa (hash: UYTOMSKRs/qbW+Sv3f+3H//zbO7ZLUVhyMToHB8R05g=)
                          3: 8DA0F20E22C011F1A24EFFECDAE4EC9C.roa (hash: pJKKgO8f4WVnAhfiOK2fL78gUsep3QpfIXLd2mvgIoo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3625A15/92C3CE082ECD11E980230320F8AEA228/CNLFTntRy8c0NN0AYFFFEi8ay2c.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3625A15/92C3CE082ECD11E980230320F8AEA228/CNLFTntRy8c0NN0AYFFFEi8ay2c.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CNLFTntRy8c0NN0AYFFFEi8ay2c.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2693 (0xa85)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3625A15AF, serialNumber=08D2C54E7B51CBC73434DD00605145122F1ACB67
        Validity
            Not Before: Apr 17 01:16:25 2026 GMT
            Not After : Apr 19 01:16:25 2026 GMT
        Subject: CN=69e189ea-9b76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:84:fb:f4:9b:15:65:58:b7:a4:e6:69:1a:16:
                    9c:8a:b6:a1:35:74:63:37:38:8f:15:74:b3:11:87:
                    3f:9c:95:6d:8f:de:c0:34:ba:f6:99:c2:e4:f4:db:
                    03:6f:54:26:42:6f:2f:ef:4c:b5:a4:eb:43:e9:c0:
                    c7:25:61:d8:b2:ed:01:85:69:e1:06:cf:88:41:57:
                    a5:63:13:e3:ff:75:83:53:a8:61:99:bd:71:2a:4a:
                    df:ec:d7:ff:3e:60:d7:03:89:b3:84:7b:b0:29:1a:
                    f6:5b:07:8f:8b:45:9a:86:d5:4f:04:d1:11:7e:7c:
                    3e:a5:a0:70:53:c4:8c:ec:77:e6:a6:ff:8b:50:64:
                    25:b1:f2:4a:4d:92:71:ea:7a:d9:0f:54:13:09:5f:
                    f6:2b:0d:6d:dd:61:20:aa:80:6f:77:19:02:2f:9b:
                    2c:e2:0d:3f:41:a0:18:16:36:ab:71:87:c0:26:c0:
                    c5:0f:1d:99:b6:92:77:ca:da:15:bf:66:d9:b4:42:
                    75:ec:68:cb:45:1c:dd:40:07:4a:2c:cc:4f:83:f0:
                    5b:5c:c0:fd:9e:5f:9c:a3:db:83:dc:3a:b8:ee:e1:
                    cb:dd:0a:8b:b0:09:7e:f9:d6:1a:ce:e2:6c:0b:41:
                    4c:38:30:bd:88:a2:c5:2e:b9:47:21:10:81:8f:b3:
                    ee:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:E6:32:29:2C:CA:A3:B5:45:DA:43:B0:5B:9E:60:32:F7:CB:EE:0E
            X509v3 Authority Key Identifier:
                keyid:08:D2:C5:4E:7B:51:CB:C7:34:34:DD:00:60:51:45:12:2F:1A:CB:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3625A15/92C3CE082ECD11E980230320F8AEA228/CNLFTntRy8c0NN0AYFFFEi8ay2c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CNLFTntRy8c0NN0AYFFFEi8ay2c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3625A15/92C3CE082ECD11E980230320F8AEA228/CNLFTntRy8c0NN0AYFFFEi8ay2c.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:94:68:8d:20:9a:09:c1:e3:6e:ed:f1:87:2b:e3:be:3c:b0:
         9a:a6:6e:48:5b:3e:cb:c6:30:2a:de:a6:5b:85:06:21:aa:ec:
         30:5f:1b:04:76:a3:c5:49:da:e9:d9:53:29:f2:a1:f5:7b:c0:
         4c:51:84:8b:58:77:57:c0:b0:8a:40:4d:62:52:81:82:4a:05:
         eb:b6:41:23:28:a0:19:1f:25:bf:29:ed:77:d1:26:a6:25:09:
         e1:32:55:46:04:5a:f9:03:e4:b9:e8:cc:53:a1:e2:70:34:65:
         7a:99:57:cb:f0:ae:4e:83:f0:09:af:d3:76:7d:0b:2d:25:5a:
         3e:ad:9b:c2:6c:cf:08:87:4e:0c:54:f5:fd:f4:90:e5:2e:ed:
         18:4e:a9:10:07:1c:fc:ff:a4:1d:65:90:45:95:79:d1:1d:35:
         6d:cf:40:f3:81:bb:7f:ba:6b:d0:bd:8f:0a:3e:b5:b5:fc:db:
         0d:0b:1c:0c:80:87:7b:c0:2f:ad:fb:6f:2c:8a:a9:61:23:cf:
         76:09:71:27:85:28:da:cd:99:15:3f:54:cd:1b:91:13:28:90:
         c5:c1:96:c0:30:ad:60:f5:31:0c:82:98:40:c5:4a:d1:de:94:
         09:68:30:4d:8c:a1:3f:16:ad:70:b9:38:37:94:e6:e6:40:cb:
         79:eb:82:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:57:32 2026 by rpki-client