Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3633396/FC567508067711EC9D163D5AD8A014CE/NSunHRHXakg8nsebSWRvi0XYOLo.mft
File:                     NSunHRHXakg8nsebSWRvi0XYOLo.mft (raw, json)
Hash identifier:          8O/QkXGxjtWWP040DjJy8Vxt3oQgCti2Y3l71Rj4QtE=
Subject key identifier:   D6:5D:3E:97:54:9D:73:9B:E3:2B:E0:E0:25:6D:DD:6A:E4:F6:3C:EB
Authority key identifier: 35:2B:A7:1D:11:D7:6A:48:3C:9E:C7:9B:49:64:6F:8B:45:D8:38:BA
Certificate issuer:       /CN=F3633396AF/serialNumber=352BA71D11D76A483C9EC79B49646F8B45D838BA
Certificate serial:       06CE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/NSunHRHXakg8nsebSWRvi0XYOLo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3633396/FC567508067711EC9D163D5AD8A014CE/NSunHRHXakg8nsebSWRvi0XYOLo.mft
Manifest number:          06CC
Signing time:             Fri 17 Apr 2026 02:20:00 +0000
Manifest this update:     Fri 17 Apr 2026 02:19:59 +0000
Manifest next update:     Sun 19 Apr 2026 02:19:59 +0000
Files and hashes:         1: NSunHRHXakg8nsebSWRvi0XYOLo.crl (hash: yXgkfCpdFb8vWNHpxM9PqQpuTRrRfFEg8LdnWkZeea4=)
                          2: B83520CE3C5411F0B678C6A7DAE4EC9C.roa (hash: G6iOOYX+72GS+UQO3yIOd7hEz/TAFLzGnnM38j3t3+w=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3633396/FC567508067711EC9D163D5AD8A014CE/NSunHRHXakg8nsebSWRvi0XYOLo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3633396/FC567508067711EC9D163D5AD8A014CE/NSunHRHXakg8nsebSWRvi0XYOLo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/NSunHRHXakg8nsebSWRvi0XYOLo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 02:19:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1742 (0x6ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3633396AF, serialNumber=352BA71D11D76A483C9EC79B49646F8B45D838BA
        Validity
            Not Before: Apr 17 02:19:59 2026 GMT
            Not After : Apr 19 02:19:59 2026 GMT
        Subject: CN=69e198cf-da54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d0:48:0f:b5:18:3f:ab:ee:49:04:d2:bf:8d:
                    e0:ae:60:24:c3:79:a4:ec:01:77:6d:81:ba:e7:a6:
                    1f:07:05:1b:7d:34:15:fc:7a:0c:d5:fc:f2:6c:45:
                    ce:c5:2e:98:ed:10:6e:dc:f4:18:34:bc:8c:5f:7c:
                    9c:11:ac:a1:2d:aa:37:fc:bc:ae:2d:ae:ed:6d:cc:
                    43:d5:c8:0b:3c:08:ba:55:46:38:88:de:51:5d:a9:
                    97:17:e9:9a:f6:a4:8d:53:7d:b5:6c:19:9d:65:82:
                    8a:53:0b:40:76:9e:e8:7a:42:9d:15:ac:39:cc:ba:
                    e0:61:cb:bf:56:ed:fc:71:0e:2c:e7:39:ff:46:a1:
                    3d:39:26:71:b1:cf:40:93:00:11:ad:87:57:22:fe:
                    08:07:ff:3b:1f:6b:8e:ff:58:a2:6c:26:23:eb:21:
                    fb:7b:b4:a6:3c:7d:c4:65:30:df:fe:f4:06:3a:6f:
                    85:44:82:1d:e6:f5:1f:fa:16:6d:75:41:b6:64:f7:
                    ed:88:59:5a:ee:cb:d5:16:5d:9a:ec:ad:34:05:04:
                    06:6b:1c:8b:f1:39:cd:0b:d6:ee:83:85:7d:5c:4a:
                    77:46:38:79:e0:93:46:e6:48:56:77:40:3b:5d:3a:
                    c1:39:36:f8:cd:1a:88:ef:f1:1e:c8:34:ff:eb:fc:
                    28:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:5D:3E:97:54:9D:73:9B:E3:2B:E0:E0:25:6D:DD:6A:E4:F6:3C:EB
            X509v3 Authority Key Identifier:
                keyid:35:2B:A7:1D:11:D7:6A:48:3C:9E:C7:9B:49:64:6F:8B:45:D8:38:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3633396/FC567508067711EC9D163D5AD8A014CE/NSunHRHXakg8nsebSWRvi0XYOLo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/NSunHRHXakg8nsebSWRvi0XYOLo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3633396/FC567508067711EC9D163D5AD8A014CE/NSunHRHXakg8nsebSWRvi0XYOLo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:6e:03:3f:24:a3:5c:e4:c3:b5:ed:13:92:f7:91:2b:a6:11:
         7e:7d:1f:ab:15:b9:9b:00:ba:df:9e:57:77:8a:82:c7:54:bc:
         d2:16:41:49:95:89:26:fb:d4:e2:08:df:3c:52:71:55:63:b2:
         ce:c1:70:ed:37:f8:03:63:08:09:3b:5c:28:b5:68:23:4e:39:
         57:6c:7e:88:06:74:58:a6:64:86:4a:31:3f:9a:4f:3a:07:c1:
         dc:e1:42:df:5f:3e:7f:16:7a:54:43:0d:e9:50:46:21:72:42:
         31:5c:59:35:ba:09:a5:8e:12:99:9f:f0:79:03:bb:91:5f:ea:
         0c:92:60:49:c5:57:15:f3:6f:94:fb:94:41:0e:3c:38:0b:b7:
         6a:ad:6f:4b:f5:1a:6c:64:a6:27:d5:51:bf:11:c1:2d:38:d5:
         53:09:03:b0:2e:f7:a6:99:7b:80:28:51:44:1f:f4:c6:7a:06:
         d7:bf:20:06:c8:b3:8f:8e:5a:94:3d:e7:50:d1:1d:c0:39:bc:
         4a:50:a9:94:11:1f:a5:86:f2:22:37:01:45:db:35:0b:30:cf:
         ba:15:7e:14:d9:1d:43:85:f5:58:b8:03:ee:31:0f:ce:d3:1a:
         fe:34:0b:26:97:db:ca:b9:ad:6a:73:54:41:6e:68:d2:cb:85:
         1e:dd:9f:54
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBs4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MzMzOTZBRjExMC8GA1UEBRMoMzUyQkE3MUQxMUQ3NkE0ODNDOUVDNzlCNDk2NDZG
OEI0NUQ4MzhCQTAeFw0yNjA0MTcwMjE5NTlaFw0yNjA0MTkwMjE5NTlaMBgxFjAU
BgNVBAMTDTY5ZTE5OGNmLWRhNTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCz0EgPtRg/q+5JBNK/jeCuYCTDeaTsAXdtgbrnph8HBRt9NBX8egzV/PJs
Rc7FLpjtEG7c9Bg0vIxffJwRrKEtqjf8vK4tru1tzEPVyAs8CLpVRjiI3lFdqZcX
6Zr2pI1TfbVsGZ1lgopTC0B2nuh6Qp0VrDnMuuBhy79W7fxxDiznOf9GoT05JnGx
z0CTABGth1ci/ggH/zsfa47/WKJsJiPrIft7tKY8fcRlMN/+9AY6b4VEgh3m9R/6
Fm11QbZk9+2IWVruy9UWXZrsrTQFBAZrHIvxOc0L1u6DhX1cSndGOHngk0bmSFZ3
QDtdOsE5NvjNGojv8R7INP/r/CgZAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU1l0+
l1Sdc5vjK+DgJW3dauT2POswHwYDVR0jBBgwFoAUNSunHRHXakg8nsebSWRvi0XY
OLowDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjMzMzk2L0ZDNTY3NTA4MDY3NzExRUM5RDE2M0Q1QUQ4QTAxNENFL05TdW5I
UkhYYWtnOG5zZWJTV1J2aTBYWU9Mby5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL05TdW5IUkhYYWtnOG5zZWJTV1J2aTBYWU9Mby5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MzMzOTYvRkM1Njc1MDgwNjc3MTFFQzlEMTYzRDVBRDhB
MDE0Q0UvTlN1bkhSSFhha2c4bnNlYlNXUnZpMFhZT0xvLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCqbgM/JKNc5MO17ROS95ErphF+fR+r
FbmbALrfnld3ioLHVLzSFkFJlYkm+9TiCN88UnFVY7LOwXDtN/gDYwgJO1wotWgj
TjlXbH6IBnRYpmSGSjE/mk86B8Hc4ULfXz5/FnpUQw3pUEYhckIxXFk1ugmljhKZ
n/B5A7uRX+oMkmBJxVcV82+U+5RBDjw4C7dqrW9L9RpsZKYn1VG/EcEtONVTCQOw
LvemmXuAKFFEH/TGegbXvyAGyLOPjlqUPedQ0R3AObxKUKmUER+lhvIiNwFF2zUL
MM+6FX4U2R1DhfVYuAPuMQ/O0xr+NAsml9vKua1qc1RBbmjSy4Ue3Z9U
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:31:14 2026 by rpki-client