Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362A252/78E7D528020111EDB680DB81F1222468/X5HjfhfEpYcVoBr_CSmLsW8jgsY.mft
File:                     X5HjfhfEpYcVoBr_CSmLsW8jgsY.mft (raw, json)
Hash identifier:          0iXIvjHyLswd2gpKL18jWIzuGk6ffKnOSwl2yR8tpPY=
Subject key identifier:   D1:78:BC:58:07:63:0A:13:CB:8F:1F:CB:FC:DC:3A:4A:55:39:42:A9
Authority key identifier: 5F:91:E3:7E:17:C4:A5:87:15:A0:1A:FF:09:29:8B:B1:6F:23:82:C6
Certificate issuer:       /CN=F362A252AF/serialNumber=5F91E37E17C4A58715A01AFF09298BB16F2382C6
Certificate serial:       058A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/X5HjfhfEpYcVoBr_CSmLsW8jgsY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362A252/78E7D528020111EDB680DB81F1222468/X5HjfhfEpYcVoBr_CSmLsW8jgsY.mft
Manifest number:          0588
Signing time:             Fri 17 Apr 2026 02:50:21 +0000
Manifest this update:     Fri 17 Apr 2026 02:50:21 +0000
Manifest next update:     Sun 19 Apr 2026 02:50:21 +0000
Files and hashes:         1: X5HjfhfEpYcVoBr_CSmLsW8jgsY.crl (hash: 6mHINuuVSK4JkL+KQ+sDHv9QIQDLiaEniPt5F9WspmE=)
                          2: 07EE873A020211EDAC199783F1222468.roa (hash: YfCMAg3Y9dxZRfFftpeSFNVqy74lmtcSUOaH6LHRzXE=)
                          3: EE58E52E1D3511F1976FBC97DAE4EC9C.roa (hash: 2zXpu+BjJJ/YZS6CragLKC0p/JQpfEL/6yBthdYOWUs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362A252/78E7D528020111EDB680DB81F1222468/X5HjfhfEpYcVoBr_CSmLsW8jgsY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362A252/78E7D528020111EDB680DB81F1222468/X5HjfhfEpYcVoBr_CSmLsW8jgsY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/X5HjfhfEpYcVoBr_CSmLsW8jgsY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1418 (0x58a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362A252AF, serialNumber=5F91E37E17C4A58715A01AFF09298BB16F2382C6
        Validity
            Not Before: Apr 17 02:50:21 2026 GMT
            Not After : Apr 19 02:50:21 2026 GMT
        Subject: CN=69e19fed-3582
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:d3:f1:e0:52:68:3a:b5:58:50:de:6c:71:94:
                    d2:2f:87:d9:28:a8:c4:21:15:cd:30:bf:01:9c:16:
                    52:89:92:9a:09:2b:c6:61:ed:46:a1:ab:66:96:0d:
                    c3:83:47:bb:ad:7a:49:d1:b9:3f:c0:6c:80:be:1a:
                    ba:99:3b:2c:aa:83:23:d3:21:35:55:83:00:ec:b5:
                    4a:fc:89:2c:5b:cc:ea:ff:98:58:91:b0:c5:e1:92:
                    f2:30:fa:b7:4a:2d:08:5b:06:fc:d7:1f:91:40:35:
                    be:b6:d3:d8:3a:cf:cd:39:f9:70:b2:5d:4e:7a:06:
                    0a:9f:cb:c5:eb:41:ef:64:be:c9:cc:eb:79:3f:a0:
                    d4:fe:67:e0:75:bd:5e:5c:55:d1:b6:e7:2a:49:0d:
                    2a:6b:d4:fc:0c:1b:af:3a:1a:61:00:b9:6d:b0:52:
                    ec:29:52:d3:73:8c:35:28:85:2e:c4:a0:9d:2a:08:
                    95:d0:95:5e:53:e7:8b:c5:62:c1:7d:eb:5c:1a:b1:
                    01:56:25:3a:3e:92:2d:9f:0a:13:a0:0f:48:3d:78:
                    24:ac:4e:8b:e9:a1:6b:ff:cb:9b:b7:df:f1:dc:5e:
                    ee:3a:52:55:11:a8:8c:e4:92:59:50:26:ad:49:63:
                    d7:2a:83:3a:d6:44:f7:5e:cc:ff:b3:63:5e:a4:61:
                    25:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:78:BC:58:07:63:0A:13:CB:8F:1F:CB:FC:DC:3A:4A:55:39:42:A9
            X509v3 Authority Key Identifier:
                keyid:5F:91:E3:7E:17:C4:A5:87:15:A0:1A:FF:09:29:8B:B1:6F:23:82:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362A252/78E7D528020111EDB680DB81F1222468/X5HjfhfEpYcVoBr_CSmLsW8jgsY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/X5HjfhfEpYcVoBr_CSmLsW8jgsY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362A252/78E7D528020111EDB680DB81F1222468/X5HjfhfEpYcVoBr_CSmLsW8jgsY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:12:b6:17:0b:98:87:84:70:68:32:a4:1c:46:cf:23:b6:fc:
         45:b8:cc:a0:41:b2:fe:d6:4a:64:57:e4:5b:aa:2f:25:72:05:
         37:76:c3:04:20:a1:0c:27:2c:e1:26:72:8c:bb:3a:d1:d6:2e:
         8c:41:82:0c:fa:b6:b4:f8:15:90:8b:89:6f:4c:a6:fc:43:0b:
         c5:26:1e:8f:43:2e:49:e3:0f:9a:37:68:f3:30:8c:ce:ad:03:
         c0:3f:e4:33:06:40:fb:00:c7:bd:ed:23:a8:fd:c6:e3:da:17:
         68:84:d0:96:bd:81:3c:4a:39:40:de:62:ac:ed:13:5a:06:6e:
         a1:03:b1:ff:00:00:30:2f:e7:99:18:f2:f7:07:7a:84:92:55:
         8f:70:e6:8d:8a:a1:72:79:27:14:a6:c1:8a:f7:ca:05:8f:ad:
         42:79:61:28:90:95:dd:49:1e:9c:77:85:2e:aa:cd:eb:6e:71:
         39:17:1d:c9:9b:38:e4:cf:27:bb:dd:64:1e:71:4a:f2:cb:3c:
         ad:c3:5b:56:b2:0e:54:4f:fb:9a:c0:af:3c:2f:b5:e2:7b:58:
         e7:aa:be:19:e1:82:6a:a1:66:09:3f:0e:25:70:19:cd:26:92:
         aa:f5:ec:0a:7c:80:40:e6:61:91:d6:57:ed:3e:60:d3:84:70:
         98:8c:20:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:05:13 2026 by rpki-client