Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363235D/677CFDEC4C3911F083EC3397DAE4EC9C/Bal449VH9Vk-SwMZcDhZhpRQWMY.mft
File:                     Bal449VH9Vk-SwMZcDhZhpRQWMY.mft (raw, json)
Hash identifier:          5GWADTTcfQaGclZL5O1J55+1hn+a3r6Qq5zPxeVFf2I=
Subject key identifier:   2C:17:0D:0D:B0:20:7C:36:80:AE:EB:E8:4B:C7:EA:0D:CD:E3:8B:AC
Authority key identifier: 05:A9:78:E3:D5:47:F5:59:3E:4B:03:19:70:38:59:86:94:50:58:C6
Certificate issuer:       /CN=F363235DAF/serialNumber=05A978E3D547F5593E4B031970385986945058C6
Certificate serial:       0149
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Bal449VH9Vk-SwMZcDhZhpRQWMY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363235D/677CFDEC4C3911F083EC3397DAE4EC9C/Bal449VH9Vk-SwMZcDhZhpRQWMY.mft
Manifest number:          0144
Signing time:             Sun 19 Apr 2026 04:54:34 +0000
Manifest this update:     Sun 19 Apr 2026 04:54:33 +0000
Manifest next update:     Tue 21 Apr 2026 04:54:33 +0000
Files and hashes:         1: Bal449VH9Vk-SwMZcDhZhpRQWMY.crl (hash: hUgZ47B/y+pj61lLyca7XKNpieUsfPvVe213piVZzCU=)
                          2: 956D6C004C7A11F0941F5DBBDAE4EC9C.roa (hash: 4pbVD/R5drzn4R/PeVc+1JSe6FAId7REQJilHo0BefE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363235D/677CFDEC4C3911F083EC3397DAE4EC9C/Bal449VH9Vk-SwMZcDhZhpRQWMY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363235D/677CFDEC4C3911F083EC3397DAE4EC9C/Bal449VH9Vk-SwMZcDhZhpRQWMY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Bal449VH9Vk-SwMZcDhZhpRQWMY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 21 Apr 2026 00:07:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 329 (0x149)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363235DAF, serialNumber=05A978E3D547F5593E4B031970385986945058C6
        Validity
            Not Before: Apr 19 04:54:33 2026 GMT
            Not After : Apr 21 04:54:33 2026 GMT
        Subject: CN=69e4600a-e814
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:8f:38:83:14:54:6d:03:0c:76:67:b5:18:ad:
                    78:87:d7:6a:36:85:dc:12:c1:28:81:19:f5:5b:4a:
                    c4:ff:40:4a:64:8e:e0:f4:55:3c:be:36:cb:93:56:
                    97:14:58:b0:f4:08:7e:18:30:e9:1f:b1:d3:d0:1c:
                    b3:26:be:d9:9e:cb:87:2d:93:9d:b8:a8:1d:72:fc:
                    12:df:25:4e:21:44:37:2c:f5:78:a8:4c:87:67:97:
                    e0:80:7c:cd:bb:3f:1e:05:d2:30:69:b0:1d:09:75:
                    40:32:f4:b3:07:cb:5e:a4:13:42:56:2f:1e:b2:41:
                    10:f1:84:dc:49:5e:66:90:34:a3:18:14:52:db:cc:
                    ba:5a:7b:6b:53:1a:a1:a4:29:35:de:a2:ab:a4:f3:
                    65:74:2f:0a:d6:31:46:bb:eb:10:85:05:df:10:c9:
                    72:ea:4d:ae:f4:6d:c0:ac:22:6c:6e:b9:77:40:34:
                    9a:6d:58:c9:35:88:68:36:37:04:61:dc:fd:4b:9b:
                    4d:0f:b4:70:df:29:7f:ca:39:b0:f3:61:e7:0b:dd:
                    1d:2a:e7:84:a8:7a:08:c9:eb:bd:c8:8e:f3:cd:2a:
                    81:ab:56:0c:5c:6b:4d:6e:6a:2b:5f:7e:d9:5e:76:
                    ff:24:a7:bb:e3:38:9d:5c:35:3f:90:38:ca:97:7a:
                    f7:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:17:0D:0D:B0:20:7C:36:80:AE:EB:E8:4B:C7:EA:0D:CD:E3:8B:AC
            X509v3 Authority Key Identifier:
                keyid:05:A9:78:E3:D5:47:F5:59:3E:4B:03:19:70:38:59:86:94:50:58:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363235D/677CFDEC4C3911F083EC3397DAE4EC9C/Bal449VH9Vk-SwMZcDhZhpRQWMY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Bal449VH9Vk-SwMZcDhZhpRQWMY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363235D/677CFDEC4C3911F083EC3397DAE4EC9C/Bal449VH9Vk-SwMZcDhZhpRQWMY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:28:35:19:9e:55:e6:d1:00:b5:49:0f:4e:3d:8f:3f:77:62:
         97:2e:8c:28:9f:dd:96:e0:76:52:9c:88:57:e0:7c:f4:d5:9c:
         ae:90:e8:fe:8e:09:3b:a1:1d:8b:e3:a8:45:77:ff:0a:41:d1:
         75:81:67:96:a2:50:42:59:ce:32:76:30:f8:bf:e8:64:c7:3d:
         61:80:07:29:4f:26:93:8a:60:7c:96:f9:34:72:18:b6:2a:67:
         1e:1b:8a:8d:70:42:08:a8:7b:6d:16:7d:77:08:32:07:4b:22:
         f8:e5:7d:63:c9:53:8e:a9:f2:e0:38:e7:a8:c6:0f:90:83:b0:
         1b:6d:a7:97:d4:d3:75:cf:1f:a5:62:c1:e4:92:36:8d:d1:77:
         32:d9:53:5b:ce:94:55:27:27:0f:7f:a3:72:89:c3:41:26:1e:
         15:f6:b8:20:16:41:be:1f:7a:52:d3:e6:2e:c5:63:8d:dc:6f:
         a8:22:65:77:61:04:91:04:9e:8d:17:87:f0:40:06:08:04:da:
         ed:49:79:58:e0:e1:52:eb:0e:04:f9:2b:38:25:39:fa:14:09:
         b8:45:9b:f0:3b:58:55:d0:ec:24:e6:15:4d:9c:20:41:31:db:
         41:24:8b:c7:96:e5:0a:db:fd:8c:0b:b2:02:da:11:20:82:7c:
         ed:f7:c6:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:44:07 2026 by rpki-client