Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3639454/AF906B7EF92F11EC815BF183F1222468/4L4sQqYq5tdSnBfTRMLSF3Y3qWY.mft
File:                     4L4sQqYq5tdSnBfTRMLSF3Y3qWY.mft (raw, json)
Hash identifier:          Pm7bdszoG6illtRBbDVBNA2imAlzsu7Us7G91yywpmo=
Subject key identifier:   DD:E4:EA:77:6D:7F:AD:55:4E:46:C9:39:B0:E9:1A:9C:74:FA:4E:E5
Authority key identifier: E0:BE:2C:42:A6:2A:E6:D7:52:9C:17:D3:44:C2:D2:17:76:37:A9:66
Certificate issuer:       /CN=F3639454AF/serialNumber=E0BE2C42A62AE6D7529C17D344C2D2177637A966
Certificate serial:       0594
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/4L4sQqYq5tdSnBfTRMLSF3Y3qWY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3639454/AF906B7EF92F11EC815BF183F1222468/4L4sQqYq5tdSnBfTRMLSF3Y3qWY.mft
Manifest number:          0592
Signing time:             Fri 17 Apr 2026 02:48:56 +0000
Manifest this update:     Fri 17 Apr 2026 02:48:55 +0000
Manifest next update:     Sun 19 Apr 2026 02:48:55 +0000
Files and hashes:         1: 4L4sQqYq5tdSnBfTRMLSF3Y3qWY.crl (hash: 1aGzIy5NNJ3ZKGyVjnd/tfotZSBF89HFqPWTi88oHsI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3639454/AF906B7EF92F11EC815BF183F1222468/4L4sQqYq5tdSnBfTRMLSF3Y3qWY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3639454/AF906B7EF92F11EC815BF183F1222468/4L4sQqYq5tdSnBfTRMLSF3Y3qWY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/4L4sQqYq5tdSnBfTRMLSF3Y3qWY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1428 (0x594)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3639454AF, serialNumber=E0BE2C42A62AE6D7529C17D344C2D2177637A966
        Validity
            Not Before: Apr 17 02:48:55 2026 GMT
            Not After : Apr 19 02:48:55 2026 GMT
        Subject: CN=69e19f98-0dde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7f:0e:5b:fa:59:a4:72:1d:2c:4a:36:b2:9f:
                    c3:49:80:24:e9:03:5d:d0:bc:13:8e:d2:9b:bf:27:
                    95:30:30:a8:d5:a4:ff:e9:e3:08:92:99:4b:c8:6f:
                    c7:53:b6:c2:c5:f3:ac:6f:81:11:3d:2b:1a:a0:1d:
                    90:47:56:9c:c7:cb:5e:b7:41:34:6f:37:a2:d9:83:
                    55:04:e2:c6:44:0d:fb:7f:00:ba:8e:b0:d7:a9:f1:
                    81:56:5f:46:14:83:83:6b:7d:8b:5f:fe:fa:93:39:
                    9a:c5:f7:63:7a:ab:71:4c:52:49:8b:2f:59:3d:68:
                    27:5a:d3:5c:dd:bb:27:52:ab:dd:66:3f:e7:86:c2:
                    b8:a5:f0:67:70:a8:39:aa:4a:36:32:9a:10:d1:f8:
                    3a:2a:04:00:81:52:64:1a:f7:89:d1:a9:6b:42:21:
                    f8:dd:12:5c:98:f6:da:3a:2b:e2:6e:41:06:db:9d:
                    dd:b0:7a:50:ea:32:9f:e4:c4:ca:54:c3:af:43:d7:
                    fa:a1:80:19:3d:93:50:15:e4:f0:94:cf:ce:b5:9a:
                    44:51:70:45:f0:b8:95:03:09:b4:d1:56:24:8e:7b:
                    7a:0d:ab:f9:f4:ce:ff:77:5d:67:fb:72:3a:45:41:
                    2f:02:30:0b:48:2d:72:cb:05:83:ef:4e:f8:6a:9a:
                    c4:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:E4:EA:77:6D:7F:AD:55:4E:46:C9:39:B0:E9:1A:9C:74:FA:4E:E5
            X509v3 Authority Key Identifier:
                keyid:E0:BE:2C:42:A6:2A:E6:D7:52:9C:17:D3:44:C2:D2:17:76:37:A9:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3639454/AF906B7EF92F11EC815BF183F1222468/4L4sQqYq5tdSnBfTRMLSF3Y3qWY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4L4sQqYq5tdSnBfTRMLSF3Y3qWY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3639454/AF906B7EF92F11EC815BF183F1222468/4L4sQqYq5tdSnBfTRMLSF3Y3qWY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:33:20:49:02:8c:9f:92:3f:00:1b:26:0f:6b:58:2d:77:d2:
         b6:04:5c:ae:44:14:9f:3c:7c:db:50:a4:7f:ed:fc:bf:50:dd:
         0a:0e:58:dc:aa:f6:53:aa:eb:88:50:a1:b6:c0:d3:79:25:96:
         d6:97:64:89:a0:fd:85:9a:28:ef:e9:de:4b:87:85:bb:6c:1c:
         79:fb:af:19:e3:fe:3f:09:97:95:57:5d:42:4a:4c:2b:7e:f0:
         2f:b6:fc:50:a7:9c:78:d9:3e:8b:9c:a5:fb:8e:98:fd:74:5e:
         dd:06:5c:b2:ae:ea:42:a9:38:9c:fb:3f:34:d3:b0:dd:7e:c9:
         ba:c4:94:4d:9d:f7:e7:6d:89:08:1f:1b:c3:55:5f:38:0d:7c:
         5a:1a:33:a0:73:83:65:48:07:94:f0:85:6c:f6:d7:0d:91:b4:
         e5:bc:a4:83:47:12:f4:00:7c:3e:9d:91:8f:14:e7:fc:b3:cf:
         89:88:60:53:b0:a2:23:f6:b8:ec:e8:a3:42:07:62:52:83:e0:
         f1:95:08:65:71:4e:93:ff:4a:c4:a4:87:1d:c3:36:56:2b:4f:
         c4:f5:28:86:6f:04:49:6a:97:cf:40:73:ed:6b:08:44:f3:79:
         44:df:ef:da:f3:fc:07:72:a5:9a:64:a0:fa:0d:0a:4a:77:90:
         d0:5e:21:f7
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBZQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
Mzk0NTRBRjExMC8GA1UEBRMoRTBCRTJDNDJBNjJBRTZENzUyOUMxN0QzNDRDMkQy
MTc3NjM3QTk2NjAeFw0yNjA0MTcwMjQ4NTVaFw0yNjA0MTkwMjQ4NTVaMBgxFjAU
BgNVBAMTDTY5ZTE5Zjk4LTBkZGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC2fw5b+lmkch0sSjayn8NJgCTpA13QvBOO0pu/J5UwMKjVpP/p4wiSmUvI
b8dTtsLF86xvgRE9KxqgHZBHVpzHy163QTRvN6LZg1UE4sZEDft/ALqOsNep8YFW
X0YUg4NrfYtf/vqTOZrF92N6q3FMUkmLL1k9aCda01zduydSq91mP+eGwril8Gdw
qDmqSjYymhDR+DoqBACBUmQa94nRqWtCIfjdElyY9to6K+JuQQbbnd2welDqMp/k
xMpUw69D1/qhgBk9k1AV5PCUz861mkRRcEXwuJUDCbTRViSOe3oNq/n0zv93XWf7
cjpFQS8CMAtILXLLBYPvTvhqmsTNAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU3eTq
d21/rVVORsk5sOkanHT6TuUwHwYDVR0jBBgwFoAU4L4sQqYq5tdSnBfTRMLSF3Y3
qWYwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjM5NDU0L0FGOTA2QjdFRjkyRjExRUM4MTVCRjE4M0YxMjIyNDY4LzRMNHNR
cVlxNXRkU25CZlRSTUxTRjNZM3FXWS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzRMNHNRcVlxNXRkU25CZlRSTUxTRjNZM3FXWS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2Mzk0NTQvQUY5MDZCN0VGOTJGMTFFQzgxNUJGMTgzRjEy
MjI0NjgvNEw0c1FxWXE1dGRTbkJmVFJNTFNGM1kzcVdZLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQASMyBJAoyfkj8AGyYPa1gtd9K2BFyu
RBSfPHzbUKR/7fy/UN0KDljcqvZTquuIUKG2wNN5JZbWl2SJoP2Fmijv6d5Lh4W7
bBx5+68Z4/4/CZeVV11CSkwrfvAvtvxQp5x42T6LnKX7jpj9dF7dBlyyrupCqTic
+z8007Ddfsm6xJRNnffnbYkIHxvDVV84DXxaGjOgc4NlSAeU8IVs9tcNkbTlvKSD
RxL0AHw+nZGPFOf8s8+JiGBTsKIj9rjs6KNCB2JSg+DxlQhlcU6T/0rEpIcdwzZW
K0/E9SiGbwRJapfPQHPtawhE83lE3+/a8/wHcqWaZKD6DQpKd5DQXiH3
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:57:06 2026 by rpki-client