Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3642A06/5A984604FC6011F0A9A7EDC7DAE4EC9C/U-hK8pdaGMGaOWVSP_CxvITmAj0.mft
File:                     U-hK8pdaGMGaOWVSP_CxvITmAj0.mft (raw, json)
Hash identifier:          WpSS0FRuV37xO1hX1xV9ARi/fOdtyFJwzslscEw9fX0=
Subject key identifier:   30:F3:D7:1E:3A:AB:70:71:EB:9F:20:8C:D6:FC:FD:F0:36:7C:EC:73
Authority key identifier: 53:E8:4A:F2:97:5A:18:C1:9A:39:65:52:3F:F0:B1:BC:84:E6:02:3D
Certificate issuer:       /CN=F3642A06AF/serialNumber=53E84AF2975A18C19A3965523FF0B1BC84E6023D
Certificate serial:       52
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/U-hK8pdaGMGaOWVSP_CxvITmAj0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3642A06/5A984604FC6011F0A9A7EDC7DAE4EC9C/U-hK8pdaGMGaOWVSP_CxvITmAj0.mft
Manifest number:          51
Signing time:             Fri 17 Apr 2026 05:23:30 +0000
Manifest this update:     Fri 17 Apr 2026 05:23:30 +0000
Manifest next update:     Sun 19 Apr 2026 05:23:30 +0000
Files and hashes:         1: U-hK8pdaGMGaOWVSP_CxvITmAj0.crl (hash: rPxDD5FeCH5JOd+Wb9Y4QuXCLONXrYBSPpmEG13JPxo=)
                          2: 30AAB082FC6211F0840064D0DAE4EC9C.roa (hash: FTL97fxTl1eE12YVO6r15mzp9MJrM8fqutIMlkKBkag=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3642A06/5A984604FC6011F0A9A7EDC7DAE4EC9C/U-hK8pdaGMGaOWVSP_CxvITmAj0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3642A06/5A984604FC6011F0A9A7EDC7DAE4EC9C/U-hK8pdaGMGaOWVSP_CxvITmAj0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/U-hK8pdaGMGaOWVSP_CxvITmAj0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 82 (0x52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3642A06AF, serialNumber=53E84AF2975A18C19A3965523FF0B1BC84E6023D
        Validity
            Not Before: Apr 17 05:23:30 2026 GMT
            Not After : Apr 19 05:23:30 2026 GMT
        Subject: CN=69e1c3d2-5299
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c9:9e:8d:cf:44:f8:6f:fb:34:1a:36:e6:e4:
                    de:0a:98:3e:d9:6f:61:a1:df:16:ae:d4:3a:be:29:
                    71:e5:8b:68:65:cd:52:6f:ef:64:ac:e3:ac:3c:fc:
                    29:bf:09:33:f7:41:1f:d8:61:ba:3b:bb:a9:9e:08:
                    3e:f4:0b:9c:9f:9e:6d:c7:64:d8:0a:74:19:e1:e7:
                    e5:c7:72:68:9a:43:f7:49:25:61:4d:c6:de:ce:cf:
                    35:59:98:45:08:3b:2f:cc:0a:af:8f:41:a4:2d:98:
                    3c:f2:c2:98:21:b9:aa:c8:e0:b7:85:0b:7b:56:82:
                    52:ab:01:89:68:0b:41:f3:bb:82:23:33:ba:a8:8e:
                    c5:03:d5:dd:de:26:3e:65:e6:74:67:0b:58:79:f4:
                    42:c2:10:6f:69:8d:4a:6d:39:05:3f:84:26:d7:f0:
                    b5:c4:e7:2b:02:fc:17:b1:26:96:07:65:c1:15:03:
                    be:7a:d4:19:7a:4c:d4:d9:90:19:4c:d5:4f:a0:c0:
                    7b:e2:a3:a3:37:68:97:15:24:2f:bd:b0:47:65:80:
                    47:1f:1c:7a:41:32:0b:7c:57:eb:13:eb:3d:ca:ed:
                    1c:94:7e:1c:30:47:a0:43:d6:28:d3:73:86:d9:02:
                    0b:2a:cf:48:0e:7c:e2:cb:94:e7:d2:85:06:a9:04:
                    a8:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:F3:D7:1E:3A:AB:70:71:EB:9F:20:8C:D6:FC:FD:F0:36:7C:EC:73
            X509v3 Authority Key Identifier:
                keyid:53:E8:4A:F2:97:5A:18:C1:9A:39:65:52:3F:F0:B1:BC:84:E6:02:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3642A06/5A984604FC6011F0A9A7EDC7DAE4EC9C/U-hK8pdaGMGaOWVSP_CxvITmAj0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/U-hK8pdaGMGaOWVSP_CxvITmAj0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3642A06/5A984604FC6011F0A9A7EDC7DAE4EC9C/U-hK8pdaGMGaOWVSP_CxvITmAj0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:b8:a8:d7:e5:a0:4c:ad:1d:9e:53:7e:e3:80:3c:8e:00:82:
         ec:71:e2:4f:bf:22:62:9e:a2:2f:55:59:0e:ed:41:82:b5:72:
         6e:31:d6:ba:56:ec:66:55:d2:20:0c:40:ce:f0:ac:d3:72:ea:
         89:69:f4:d9:ed:41:fd:52:21:1f:5e:69:86:04:b1:f6:92:74:
         d1:c4:e0:fa:a4:cd:23:a3:9b:e8:a9:e4:2a:69:5b:07:5f:63:
         9e:ea:40:15:f5:62:75:19:93:27:e0:2d:64:a9:50:cc:2c:be:
         f6:bc:26:c3:e4:1f:c3:7d:76:02:b1:16:2c:c5:73:e5:7b:8b:
         ad:7c:70:82:3e:80:1d:80:b6:bb:2f:e8:36:bd:f7:ff:ce:79:
         7c:3a:88:03:8f:a6:85:0e:af:7f:77:a8:36:36:3f:2e:fa:10:
         be:96:6b:f6:3f:6f:71:82:a9:bd:cb:9b:d4:36:1a:f5:10:ac:
         d5:f1:77:91:ed:0c:71:58:d1:db:a8:1e:0b:d5:80:b3:5c:d3:
         33:0f:f7:b6:ed:4a:e1:58:30:5f:b0:eb:cf:c4:1b:bc:f7:f1:
         75:ef:c6:ab:53:57:1c:9d:ac:eb:06:7c:3c:07:48:97:14:91:
         3a:60:28:65:75:ff:bd:67:6c:51:df:c2:99:7a:b5:ab:64:86:
         47:ef:c9:29
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIBUjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY0
MkEwNkFGMTEwLwYDVQQFEyg1M0U4NEFGMjk3NUExOEMxOUEzOTY1NTIzRkYwQjFC
Qzg0RTYwMjNEMB4XDTI2MDQxNzA1MjMzMFoXDTI2MDQxOTA1MjMzMFowGDEWMBQG
A1UEAxMNNjllMWMzZDItNTI5OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMnJno3PRPhv+zQaNubk3gqYPtlvYaHfFq7UOr4pceWLaGXNUm/vZKzjrDz8
Kb8JM/dBH9hhuju7qZ4IPvQLnJ+ebcdk2Ap0GeHn5cdyaJpD90klYU3G3s7PNVmY
RQg7L8wKr49BpC2YPPLCmCG5qsjgt4ULe1aCUqsBiWgLQfO7giMzuqiOxQPV3d4m
PmXmdGcLWHn0QsIQb2mNSm05BT+EJtfwtcTnKwL8F7EmlgdlwRUDvnrUGXpM1NmQ
GUzVT6DAe+KjozdolxUkL72wR2WARx8cekEyC3xX6xPrPcrtHJR+HDBHoEPWKNNz
htkCCyrPSA584suU59KFBqkEqG0CAwEAAaOCArgwggK0MB0GA1UdDgQWBBQw89ce
OqtwceufIIzW/P3wNnzsczAfBgNVHSMEGDAWgBRT6Eryl1oYwZo5ZVI/8LG8hOYC
PTAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NDJBMDYvNUE5ODQ2MDRGQzYwMTFGMEE5QTdFREM3REFFNEVDOUMvVS1oSzhw
ZGFHTUdhT1dWU1BfQ3h2SVRtQWowLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvVS1oSzhwZGFHTUdhT1dWU1BfQ3h2SVRtQWowLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUF
BzALhn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY0MkEwNi81QTk4NDYwNEZDNjAxMUYwQTlBN0VEQzdEQUU0
RUM5Qy9VLWhLOHBkYUdNR2FPV1ZTUF9DeHZJVG1BajAubWZ0MDUGCCsGAQUFBzAN
hilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBAFa4qNfloEytHZ5TfuOAPI4Aguxx4k+/
ImKeoi9VWQ7tQYK1cm4x1rpW7GZV0iAMQM7wrNNy6olp9NntQf1SIR9eaYYEsfaS
dNHE4PqkzSOjm+ip5CppWwdfY57qQBX1YnUZkyfgLWSpUMwsvva8JsPkH8N9dgKx
FizFc+V7i618cII+gB2Atrsv6Da99//OeXw6iAOPpoUOr393qDY2Py76EL6Wa/Y/
b3GCqb3Lm9Q2GvUQrNXxd5HtDHFY0duoHgvVgLNc0zMP97btSuFYMF+w68/EG7z3
8XXvxqtTVxydrOsGfDwHSJcUkTpgKGV1/71nbFHfwpl6tatkhkfvySk=
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:02:32 2026 by rpki-client