Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363F154/5B6403CC632011F08846FF83DAE4EC9C/-g_6yHvTgP7bhzcer63RaQsq2C4.mft
File:                     -g_6yHvTgP7bhzcer63RaQsq2C4.mft (raw, json)
Hash identifier:          0Ks2ntsglRlTettUVJQNsCh/XNmZXf2f/BiklG4iDQE=
Subject key identifier:   31:35:90:FE:07:27:0D:A1:99:3C:D7:77:45:2B:40:11:02:1B:26:AA
Authority key identifier: FA:0F:FA:C8:7B:D3:80:FE:DB:87:37:1E:AF:AD:D1:69:0B:2A:D8:2E
Certificate issuer:       /CN=F363F154AF/serialNumber=FA0FFAC87BD380FEDB87371EAFADD1690B2AD82E
Certificate serial:       0118
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/-g_6yHvTgP7bhzcer63RaQsq2C4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363F154/5B6403CC632011F08846FF83DAE4EC9C/-g_6yHvTgP7bhzcer63RaQsq2C4.mft
Manifest number:          0117
Signing time:             Fri 17 Apr 2026 04:59:22 +0000
Manifest this update:     Fri 17 Apr 2026 04:59:21 +0000
Manifest next update:     Sun 19 Apr 2026 04:59:21 +0000
Files and hashes:         1: -g_6yHvTgP7bhzcer63RaQsq2C4.crl (hash: 8mQ9bNS/aTa94GwvW3ofEXBCl3nkcDI+1ZFQwMlCfIE=)
                          2: 57B051BC632111F087023D8CDAE4EC9C.roa (hash: l8pJclCAwgGqv0y5xnIc9EyuBUpnbxxdsHPfPUfesL0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363F154/5B6403CC632011F08846FF83DAE4EC9C/-g_6yHvTgP7bhzcer63RaQsq2C4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363F154/5B6403CC632011F08846FF83DAE4EC9C/-g_6yHvTgP7bhzcer63RaQsq2C4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/-g_6yHvTgP7bhzcer63RaQsq2C4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 04:59:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 280 (0x118)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363F154AF, serialNumber=FA0FFAC87BD380FEDB87371EAFADD1690B2AD82E
        Validity
            Not Before: Apr 17 04:59:21 2026 GMT
            Not After : Apr 19 04:59:21 2026 GMT
        Subject: CN=69e1be2a-1f25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:00:cd:25:2c:b4:b3:2c:86:bf:f0:de:55:c1:
                    27:5e:12:85:4b:66:32:c3:ca:08:42:bf:f7:da:8f:
                    dc:5f:e1:4d:a8:90:b7:ed:3b:29:82:5a:2b:c2:9b:
                    81:7f:37:e6:80:0d:50:13:a3:01:5f:68:a3:d5:ec:
                    06:f8:7b:13:31:4c:d9:6f:b1:18:9d:3d:b5:18:8c:
                    88:a3:ce:01:95:0d:a0:9f:27:48:90:38:df:bc:c8:
                    40:e9:8e:58:9e:b4:d4:6c:2b:3f:8a:e3:cd:98:58:
                    dd:e6:b6:29:f0:9b:4b:56:a8:31:c9:c0:97:e3:bd:
                    d6:d2:25:0d:53:ea:fd:fe:ab:c8:33:cc:20:ae:78:
                    f4:92:bf:6b:58:e8:2c:a1:bf:0c:f2:a5:b4:ed:a6:
                    1d:84:1b:a7:bb:ff:77:3a:c3:7c:6b:c0:72:7d:0d:
                    cc:a1:0f:0b:3f:ae:ac:3b:ea:c2:3d:6d:8e:e7:69:
                    05:0d:b6:ee:04:df:dd:fb:c9:a9:4a:08:c8:71:c2:
                    57:a2:61:98:94:0f:bb:a3:97:1e:32:fb:39:46:fe:
                    94:d8:d6:80:0c:a6:5c:27:97:7a:b6:ac:1f:a3:48:
                    ce:6e:88:fd:e3:2d:d0:a9:96:50:76:5b:13:51:40:
                    ee:68:c1:7c:24:8c:d5:52:e6:74:12:d0:6a:5f:20:
                    82:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:35:90:FE:07:27:0D:A1:99:3C:D7:77:45:2B:40:11:02:1B:26:AA
            X509v3 Authority Key Identifier:
                keyid:FA:0F:FA:C8:7B:D3:80:FE:DB:87:37:1E:AF:AD:D1:69:0B:2A:D8:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363F154/5B6403CC632011F08846FF83DAE4EC9C/-g_6yHvTgP7bhzcer63RaQsq2C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-g_6yHvTgP7bhzcer63RaQsq2C4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363F154/5B6403CC632011F08846FF83DAE4EC9C/-g_6yHvTgP7bhzcer63RaQsq2C4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:d6:52:65:05:f4:4f:38:c5:2d:fe:f7:cf:ad:32:ec:58:51:
         40:d7:b3:04:16:53:1c:8f:a8:dc:9f:f7:bb:d7:e6:7e:05:81:
         ff:0f:d7:ae:6c:2f:7b:14:bf:27:06:f9:c4:be:c6:38:ba:f0:
         b0:6b:2d:52:cb:d4:05:e7:bf:54:45:3d:24:70:7e:e8:9d:75:
         f9:38:ac:50:37:92:67:5c:71:84:f8:45:ac:3e:55:0f:7e:7d:
         38:d2:30:4a:8c:29:6d:f4:27:c1:82:38:24:23:45:fa:e3:33:
         82:a4:84:96:e9:36:e2:b1:a0:2e:00:87:34:0d:07:8c:8d:55:
         66:f0:b1:3d:8b:75:0b:2c:bc:54:37:30:9e:81:fa:4d:48:b2:
         64:4a:ef:93:96:34:37:c8:aa:7b:63:47:e8:71:f3:98:8b:26:
         9f:7f:c3:1c:11:5a:89:d8:d9:45:05:b8:b0:81:1f:1a:56:e6:
         a8:94:65:97:81:ff:2b:02:cd:4e:2b:15:19:7d:19:c9:67:cf:
         5b:e9:93:bc:4d:c9:6e:3c:9e:2f:53:26:d7:4a:65:98:0c:59:
         85:1a:91:01:d1:e4:1d:aa:47:d9:5e:50:d4:0e:35:25:10:e5:
         18:6d:f5:a6:1c:f3:ef:a7:0e:58:72:e4:cb:8d:13:1d:53:17:
         e7:78:0b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:23:37 2026 by rpki-client