Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3630D7E/E06DA510797311EA82E97681F8AEA228/bssXAorVt9tcd32x3OCXh-SVstE.mft
File:                     bssXAorVt9tcd32x3OCXh-SVstE.mft (raw, json)
Hash identifier:          rFXvUkPivUP+4iO71nC9QX6pHhOwP24vFAuRzI2NPIM=
Subject key identifier:   71:0E:68:E4:C7:83:F7:3F:9A:EC:E9:D0:76:0D:B5:DE:39:16:94:BD
Authority key identifier: 6E:CB:17:02:8A:D5:B7:DB:5C:77:7D:B1:DC:E0:97:87:E4:95:B2:D1
Certificate issuer:       /CN=F3630D7EAF/serialNumber=6ECB17028AD5B7DB5C777DB1DCE09787E495B2D1
Certificate serial:       08DD
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/bssXAorVt9tcd32x3OCXh-SVstE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3630D7E/E06DA510797311EA82E97681F8AEA228/bssXAorVt9tcd32x3OCXh-SVstE.mft
Manifest number:          08D8
Signing time:             Fri 17 Apr 2026 01:43:58 +0000
Manifest this update:     Fri 17 Apr 2026 01:43:57 +0000
Manifest next update:     Sun 19 Apr 2026 01:43:57 +0000
Files and hashes:         1: bssXAorVt9tcd32x3OCXh-SVstE.crl (hash: yOwTSDAP3oRfulyZv090Cwl2LifeQL/pPY8r/gf29w0=)
                          2: 4C93AD482A7111F1BFB9EECADAE4EC9C.roa (hash: 1Oc7qz+Lk94BWa35i9DuQ6Lqo6kBFCtOUZX3ruT365o=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3630D7E/E06DA510797311EA82E97681F8AEA228/bssXAorVt9tcd32x3OCXh-SVstE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3630D7E/E06DA510797311EA82E97681F8AEA228/bssXAorVt9tcd32x3OCXh-SVstE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/bssXAorVt9tcd32x3OCXh-SVstE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2269 (0x8dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3630D7EAF, serialNumber=6ECB17028AD5B7DB5C777DB1DCE09787E495B2D1
        Validity
            Not Before: Apr 17 01:43:57 2026 GMT
            Not After : Apr 19 01:43:57 2026 GMT
        Subject: CN=69e1905e-ac03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ad:e6:44:94:5c:05:d0:2d:12:35:bd:61:30:
                    59:37:49:65:12:f0:dd:de:b2:4e:74:39:97:80:eb:
                    4f:33:f3:28:46:88:a2:1d:92:99:e7:bc:70:27:3b:
                    24:e7:33:a0:cc:81:f8:c4:ba:d9:9a:b4:82:1b:07:
                    94:00:98:c1:58:65:9c:46:5c:8f:e0:1b:a3:32:d7:
                    e0:f8:33:e6:c6:7d:03:a0:94:ba:9e:de:8c:79:fc:
                    04:6a:a8:c6:f0:e6:b4:79:9f:c6:81:48:e8:1a:77:
                    48:af:01:68:1e:7c:84:a5:31:31:6b:50:14:61:8b:
                    ef:bb:d5:86:0c:47:09:14:56:d4:c9:96:b0:73:24:
                    91:47:56:c7:de:b2:ac:8e:84:b5:85:ad:8b:61:98:
                    19:54:ce:6f:4f:c4:61:f9:02:3e:19:8a:75:c0:90:
                    56:70:d8:cb:f4:e0:dc:78:93:17:91:81:e1:16:a4:
                    f9:52:fb:aa:d8:e0:fe:95:b4:77:a2:08:27:18:03:
                    f5:4c:9f:e7:06:d2:6f:6d:63:e5:7d:2f:5e:d4:74:
                    51:60:92:37:d3:3a:aa:d6:04:7e:ca:dd:57:2e:7f:
                    fe:38:0b:84:6a:c4:da:8a:1b:51:fc:f9:64:b9:3a:
                    0f:e8:e0:45:e2:e9:2e:ba:a8:73:3e:51:54:ba:af:
                    10:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:0E:68:E4:C7:83:F7:3F:9A:EC:E9:D0:76:0D:B5:DE:39:16:94:BD
            X509v3 Authority Key Identifier:
                keyid:6E:CB:17:02:8A:D5:B7:DB:5C:77:7D:B1:DC:E0:97:87:E4:95:B2:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3630D7E/E06DA510797311EA82E97681F8AEA228/bssXAorVt9tcd32x3OCXh-SVstE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/bssXAorVt9tcd32x3OCXh-SVstE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3630D7E/E06DA510797311EA82E97681F8AEA228/bssXAorVt9tcd32x3OCXh-SVstE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:aa:4f:b9:5c:2a:83:59:59:5b:44:55:a5:91:44:cf:32:e8:
         89:71:06:4c:a9:8c:dc:1d:a0:d4:4d:51:d3:28:f9:91:3c:2d:
         17:db:68:3b:af:5d:c9:66:47:2e:d1:73:66:e9:52:fb:57:3e:
         4a:20:46:dc:70:d2:15:9f:ee:03:9e:e4:ba:99:00:5e:3f:39:
         f6:03:de:4b:e4:fe:12:21:f0:fa:86:1e:c7:56:c2:58:1b:bc:
         bb:5e:bd:83:27:bd:ca:d8:7a:f9:78:d8:72:35:b0:f7:f8:f1:
         76:f0:c5:b2:83:5e:3e:b2:ec:02:20:e8:ce:7f:58:c1:40:3e:
         dd:05:10:68:af:f8:78:3a:05:92:39:53:a7:5b:b6:4f:dc:54:
         e8:5c:2e:d6:8f:44:34:ac:0f:25:41:c3:8c:3f:f6:c0:0d:81:
         11:f4:87:54:af:88:a0:35:51:89:1f:7e:c4:08:4f:d0:f1:89:
         1c:e4:a5:e4:cf:99:bd:41:48:55:9a:3c:23:73:bf:36:bc:45:
         8b:6e:06:9f:21:0d:26:e0:3c:6f:24:c1:ca:5d:39:00:e7:ac:
         8c:f6:31:3e:63:49:be:9b:c4:4f:6e:46:4f:58:34:f8:9e:ff:
         d5:af:f6:ff:15:7b:f0:86:cc:8e:4f:dc:19:79:cb:7b:51:df:
         21:34:a8:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:42:33 2026 by rpki-client