Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FA5F/71124C3ED5C511F0944258ACDAE4EC9C/pCKYJAT-Aumg8-y5hTV-RG-IID0.mft
File:                     pCKYJAT-Aumg8-y5hTV-RG-IID0.mft (raw, json)
Hash identifier:          71Vj7if3dfU2wq2qEQsNRYHL4T6p5uAgh8gk72nOi9c=
Subject key identifier:   17:C1:66:21:10:55:D1:68:01:BC:0E:71:46:1D:FE:7D:AE:16:09:6D
Authority key identifier: A4:22:98:24:04:FE:02:E9:A0:F3:EC:B9:85:35:7E:44:6F:88:20:3D
Certificate issuer:       /CN=F362FA5FAF/serialNumber=A422982404FE02E9A0F3ECB985357E446F88203D
Certificate serial:       88
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/pCKYJAT-Aumg8-y5hTV-RG-IID0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362FA5F/71124C3ED5C511F0944258ACDAE4EC9C/pCKYJAT-Aumg8-y5hTV-RG-IID0.mft
Manifest number:          86
Signing time:             Fri 17 Apr 2026 05:17:20 +0000
Manifest this update:     Fri 17 Apr 2026 05:17:19 +0000
Manifest next update:     Sun 19 Apr 2026 05:17:19 +0000
Files and hashes:         1: pCKYJAT-Aumg8-y5hTV-RG-IID0.crl (hash: 72UBheQvw+IXz7SkCxQK8TV2PqWy67Zhxviz4UPmY34=)
                          2: 02DBFF9AD5C911F0BEEFA9C1DAE4EC9C.roa (hash: 6Mw6IJOKCFiOFJKPzw6NDpNLOWvwX8+ywwAHH8ia5xU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362FA5F/71124C3ED5C511F0944258ACDAE4EC9C/pCKYJAT-Aumg8-y5hTV-RG-IID0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362FA5F/71124C3ED5C511F0944258ACDAE4EC9C/pCKYJAT-Aumg8-y5hTV-RG-IID0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/pCKYJAT-Aumg8-y5hTV-RG-IID0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 136 (0x88)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362FA5FAF, serialNumber=A422982404FE02E9A0F3ECB985357E446F88203D
        Validity
            Not Before: Apr 17 05:17:19 2026 GMT
            Not After : Apr 19 05:17:19 2026 GMT
        Subject: CN=69e1c260-ea28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:4e:df:ab:1e:95:db:31:11:9b:ee:0e:f3:23:
                    a7:f3:15:9f:4c:eb:34:3d:81:8a:ac:ef:61:d6:aa:
                    a2:24:7e:1f:ab:cd:a9:b5:13:2d:a9:08:f8:83:65:
                    e8:c8:c0:d3:4a:38:54:a1:0a:99:3d:db:ed:37:69:
                    36:0f:54:2f:19:89:b5:34:cf:75:b6:8c:a7:29:c3:
                    3f:0d:67:d7:e3:b7:5c:60:d0:a4:a3:1e:5b:d5:ed:
                    08:72:ea:c8:2b:5d:da:34:84:4b:e2:7f:6d:c0:f6:
                    b2:f0:48:47:7f:8e:e9:f0:63:17:88:fb:23:bd:5e:
                    a5:0d:d5:c3:cf:3e:b8:59:63:98:37:7d:94:d5:bd:
                    99:f5:cf:9d:2b:50:5a:26:80:85:ac:ca:b4:99:bd:
                    6d:24:23:5a:6c:56:e9:98:5c:39:55:7a:2a:c8:1e:
                    24:b0:e9:f3:6e:d3:da:0a:5b:a3:1a:a2:0e:f0:80:
                    c2:eb:62:72:3d:da:78:68:c3:62:38:52:00:84:95:
                    eb:a3:94:1e:7a:2c:3a:e4:02:4f:25:ae:39:d3:34:
                    f7:5e:b5:8e:bd:78:6b:ed:37:45:0d:2e:fa:dd:3f:
                    c3:a2:e9:92:f5:90:4e:2d:8b:9b:89:aa:64:4f:84:
                    15:0a:61:c6:2b:c0:e8:48:1c:ad:0c:ff:ce:0d:b0:
                    23:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:C1:66:21:10:55:D1:68:01:BC:0E:71:46:1D:FE:7D:AE:16:09:6D
            X509v3 Authority Key Identifier:
                keyid:A4:22:98:24:04:FE:02:E9:A0:F3:EC:B9:85:35:7E:44:6F:88:20:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362FA5F/71124C3ED5C511F0944258ACDAE4EC9C/pCKYJAT-Aumg8-y5hTV-RG-IID0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/pCKYJAT-Aumg8-y5hTV-RG-IID0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FA5F/71124C3ED5C511F0944258ACDAE4EC9C/pCKYJAT-Aumg8-y5hTV-RG-IID0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:94:c8:30:e3:97:33:e9:cb:0c:10:2d:e3:b5:ef:0e:0e:3f:
         55:79:bc:f2:85:32:fe:49:e8:7b:f1:ca:4f:a1:29:72:87:b4:
         6d:f3:05:e0:fd:69:7f:90:5c:de:b7:60:98:14:f0:f6:47:3e:
         3d:a4:14:88:6a:23:fb:95:fd:b0:08:a7:d4:45:f6:70:c2:91:
         a1:6c:e7:01:dd:88:6d:a1:34:2f:be:a3:eb:1f:c7:e3:21:20:
         ab:18:fd:fd:17:b6:a6:40:74:b7:f7:c7:2d:ec:a7:d0:ca:be:
         9e:8d:9e:93:3f:25:0b:de:86:8e:39:54:5b:62:35:e2:c9:57:
         e7:e0:d7:b3:7a:2f:c2:1a:7d:6b:41:be:9a:5b:cf:52:68:f4:
         47:49:c6:ff:d7:04:be:12:ba:a6:01:54:aa:07:d7:36:6d:f7:
         bf:24:77:f6:a2:42:67:97:6d:12:12:78:69:76:9c:9f:5b:b0:
         35:1b:87:12:5c:15:3a:aa:c5:87:d3:96:0a:f5:1f:e9:1e:a9:
         51:4c:05:6b:8b:01:b8:d5:3f:73:da:45:5d:84:62:55:91:70:
         f3:33:94:3a:c8:c7:61:e7:be:4b:7a:d3:e5:5b:3e:ee:9d:1d:
         4d:1f:af:80:70:0f:f0:1e:a4:92:01:0e:85:f7:07:f9:ad:ee:
         78:2f:6e:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:57:35 2026 by rpki-client