Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3636791/557822D8340611F1A55233CBCE1D38B0/2FLZY43gNj3YSH_gDch1vI-a080.mft
File:                     2FLZY43gNj3YSH_gDch1vI-a080.mft (raw, json)
Hash identifier:          LkObu7Wbs+NGZ3KBhmCrhXPi+OytgjN5UBQ0V8AEQgM=
Subject key identifier:   33:D9:62:47:7C:8F:06:7D:A0:A1:80:FC:18:D9:41:CC:FC:17:09:6E
Authority key identifier: D8:52:D9:63:8D:E0:36:3D:D8:48:7F:E0:0D:C8:75:BC:8F:9A:D3:CD
Certificate issuer:       /CN=F3636791AF/serialNumber=D852D9638DE0363DD8487FE00DC875BC8F9AD3CD
Certificate serial:       0F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/2FLZY43gNj3YSH_gDch1vI-a080.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3636791/557822D8340611F1A55233CBCE1D38B0/2FLZY43gNj3YSH_gDch1vI-a080.mft
Manifest number:          0C
Signing time:             Fri 17 Apr 2026 05:31:18 +0000
Manifest this update:     Fri 17 Apr 2026 05:31:17 +0000
Manifest next update:     Sun 19 Apr 2026 05:31:17 +0000
Files and hashes:         1: 2FLZY43gNj3YSH_gDch1vI-a080.crl (hash: p3a2EP7WVjfm4uaB2A3YFh3SaqwYdf+CKm4SaEAMWJA=)
                          2: 3CC30608340711F1AFB184CFCE1D38B0.roa (hash: I53gWi2CJOwoPI79Xfi6bjQo4aU2ORPkeD1ir1Rh7cI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3636791/557822D8340611F1A55233CBCE1D38B0/2FLZY43gNj3YSH_gDch1vI-a080.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3636791/557822D8340611F1A55233CBCE1D38B0/2FLZY43gNj3YSH_gDch1vI-a080.mft
                          rsync://rpki.afrinic.net/repository/afrinic/2FLZY43gNj3YSH_gDch1vI-a080.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15 (0xf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3636791AF, serialNumber=D852D9638DE0363DD8487FE00DC875BC8F9AD3CD
        Validity
            Not Before: Apr 17 05:31:17 2026 GMT
            Not After : Apr 19 05:31:17 2026 GMT
        Subject: CN=69e1c5a6-969c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:32:93:9f:7c:3f:8c:9c:3c:21:76:ac:f6:66:
                    8a:a5:1d:e3:65:59:96:e5:d5:12:2e:8d:43:a6:3f:
                    10:c6:0f:5f:97:7d:1c:6f:a0:a4:a9:25:30:82:b7:
                    1e:4f:ad:52:a6:c4:74:32:97:6e:0d:e2:93:55:64:
                    fc:36:03:54:f9:cb:2d:07:32:c4:e1:78:e5:ef:24:
                    bd:c3:1c:19:d0:a4:a6:9a:8b:ec:cd:57:0c:c8:bb:
                    e3:7d:c9:e6:ad:ee:3d:b7:f9:f1:c4:fd:82:28:d1:
                    ef:61:8f:51:ba:4d:86:6d:0d:21:61:c5:62:ca:38:
                    db:65:ab:fe:27:78:0b:93:0b:fd:00:43:9d:9e:ce:
                    41:c8:89:13:3b:95:e5:d4:40:5f:d8:85:97:7b:54:
                    26:3f:39:7f:ec:56:3c:71:66:e5:e0:4b:04:af:31:
                    ec:4e:17:1d:d4:8b:fc:f3:9a:23:a3:c2:5b:ed:80:
                    62:92:a4:11:27:88:9f:6f:c9:5b:31:34:21:d4:02:
                    ba:dc:4d:b5:89:30:55:d1:2e:75:3c:19:e7:ab:6e:
                    b9:8c:f4:5d:e5:5f:80:f3:e5:d4:99:5e:7b:01:08:
                    7c:ac:0f:d4:f3:69:f1:6e:dc:77:e5:cf:dc:c8:49:
                    e6:1c:cf:47:41:fc:d4:88:76:60:7f:e0:af:72:a7:
                    0d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:D9:62:47:7C:8F:06:7D:A0:A1:80:FC:18:D9:41:CC:FC:17:09:6E
            X509v3 Authority Key Identifier:
                keyid:D8:52:D9:63:8D:E0:36:3D:D8:48:7F:E0:0D:C8:75:BC:8F:9A:D3:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3636791/557822D8340611F1A55233CBCE1D38B0/2FLZY43gNj3YSH_gDch1vI-a080.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2FLZY43gNj3YSH_gDch1vI-a080.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3636791/557822D8340611F1A55233CBCE1D38B0/2FLZY43gNj3YSH_gDch1vI-a080.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:50:b0:b8:db:f7:bb:8d:59:bb:50:ac:27:78:90:9f:bf:25:
         c8:ea:36:fc:3f:90:92:42:05:c8:d3:41:53:9a:5b:f5:c5:b2:
         82:40:b6:8a:9a:26:3f:1a:be:d1:af:56:60:7d:d1:c3:06:4c:
         52:39:51:72:87:4c:89:e2:1f:7f:ae:0a:ef:12:08:7b:1e:33:
         b2:8e:c7:64:a0:a2:6f:6f:9d:99:dd:95:af:50:58:eb:a9:53:
         02:a7:09:e1:9d:da:7b:14:af:69:0e:a8:92:a5:21:0f:1f:7c:
         5f:3b:2f:46:b1:03:9f:56:0c:8a:01:53:d3:a1:ab:f8:bf:cc:
         7c:04:b3:37:a7:9e:92:87:41:7d:c5:b1:aa:02:58:c2:1a:24:
         ce:69:aa:ea:c7:c3:2f:25:4f:e4:27:24:b4:d6:3d:11:56:c0:
         3e:77:ea:de:21:3f:9e:74:0b:15:5d:c4:4a:5b:23:e3:a1:32:
         47:d7:05:9b:52:9f:27:78:41:7a:9a:dc:fd:40:93:1e:ef:e7:
         39:10:c9:c2:57:39:70:c6:a7:49:49:d3:9a:2e:b9:5a:45:c3:
         c9:a9:b6:e8:0a:ca:f9:80:fe:c3:41:4f:3d:39:f7:25:59:58:
         11:fc:d8:b0:9e:9f:35:ae:2f:fe:84:d9:44:f3:a7:a5:30:8a:
         e5:de:0e:9b
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIBDzANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzYz
Njc5MUFGMTEwLwYDVQQFEyhEODUyRDk2MzhERTAzNjNERDg0ODdGRTAwREM4NzVC
QzhGOUFEM0NEMB4XDTI2MDQxNzA1MzExN1oXDTI2MDQxOTA1MzExN1owGDEWMBQG
A1UEAxMNNjllMWM1YTYtOTY5YzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKcyk598P4ycPCF2rPZmiqUd42VZluXVEi6NQ6Y/EMYPX5d9HG+gpKklMIK3
Hk+tUqbEdDKXbg3ik1Vk/DYDVPnLLQcyxOF45e8kvcMcGdCkppqL7M1XDMi7433J
5q3uPbf58cT9gijR72GPUbpNhm0NIWHFYso422Wr/id4C5ML/QBDnZ7OQciJEzuV
5dRAX9iFl3tUJj85f+xWPHFm5eBLBK8x7E4XHdSL/POaI6PCW+2AYpKkESeIn2/J
WzE0IdQCutxNtYkwVdEudTwZ56tuuYz0XeVfgPPl1JleewEIfKwP1PNp8W7cd+XP
3MhJ5hzPR0H81Ih2YH/gr3KnDT8CAwEAAaOCArgwggK0MB0GA1UdDgQWBBQz2WJH
fI8GfaChgPwY2UHM/BcJbjAfBgNVHSMEGDAWgBTYUtljjeA2PdhIf+ANyHW8j5rT
zTAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2MzY3OTEvNTU3ODIyRDgzNDA2MTFGMUE1NTIzM0NCQ0UxRDM4QjAvMkZMWlk0
M2dOajNZU0hfZ0RjaDF2SS1hMDgwLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvMkZMWlk0M2dOajNZU0hfZ0RjaDF2SS1hMDgwLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUF
BzALhn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzYzNjc5MS81NTc4MjJEODM0MDYxMUYxQTU1MjMzQ0JDRTFE
MzhCMC8yRkxaWTQzZ05qM1lTSF9nRGNoMXZJLWEwODAubWZ0MDUGCCsGAQUFBzAN
hilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBADZQsLjb97uNWbtQrCd4kJ+/JcjqNvw/
kJJCBcjTQVOaW/XFsoJAtoqaJj8avtGvVmB90cMGTFI5UXKHTIniH3+uCu8SCHse
M7KOx2Sgom9vnZndla9QWOupUwKnCeGd2nsUr2kOqJKlIQ8ffF87L0axA59WDIoB
U9Ohq/i/zHwEszennpKHQX3FsaoCWMIaJM5pqurHwy8lT+QnJLTWPRFWwD536t4h
P550CxVdxEpbI+OhMkfXBZtSnyd4QXqa3P1Akx7v5zkQycJXOXDGp0lJ05ouuVpF
w8mptugKyvmA/sNBTz059yVZWBH82LCenzWuL/6E2UTzp6UwiuXeDps=
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:53:22 2026 by rpki-client