Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3646008/785175CA088D11EBAAD1BC5BF8AEA228/XudwaWdbdcoke_xc0zALF7WznDQ.mft
File:                     XudwaWdbdcoke_xc0zALF7WznDQ.mft (raw, json)
Hash identifier:          77poxTIRe7xWW5UDWqt534H+wZU9hM9O8U2405qcHdE=
Subject key identifier:   29:11:FD:67:26:60:91:F4:61:D7:2F:B6:66:2F:4C:0B:3F:9A:01:61
Authority key identifier: 5E:E7:70:69:67:5B:75:CA:24:7B:FC:5C:D3:30:0B:17:B5:B3:9C:34
Certificate issuer:       /CN=F3646008AF/serialNumber=5EE77069675B75CA247BFC5CD3300B17B5B39C34
Certificate serial:       0811
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/XudwaWdbdcoke_xc0zALF7WznDQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3646008/785175CA088D11EBAAD1BC5BF8AEA228/XudwaWdbdcoke_xc0zALF7WznDQ.mft
Manifest number:          0811
Signing time:             Fri 17 Apr 2026 01:53:20 +0000
Manifest this update:     Fri 17 Apr 2026 01:53:19 +0000
Manifest next update:     Sun 19 Apr 2026 01:53:19 +0000
Files and hashes:         1: XudwaWdbdcoke_xc0zALF7WznDQ.crl (hash: 2p9ZNfs8xWk2T5LZb6x59c50Po2EwEWvtyIIID6t7gc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3646008/785175CA088D11EBAAD1BC5BF8AEA228/XudwaWdbdcoke_xc0zALF7WznDQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3646008/785175CA088D11EBAAD1BC5BF8AEA228/XudwaWdbdcoke_xc0zALF7WznDQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/XudwaWdbdcoke_xc0zALF7WznDQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 01:53:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2065 (0x811)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3646008AF, serialNumber=5EE77069675B75CA247BFC5CD3300B17B5B39C34
        Validity
            Not Before: Apr 17 01:53:19 2026 GMT
            Not After : Apr 19 01:53:19 2026 GMT
        Subject: CN=69e19290-0623
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:bc:bc:b0:ff:25:70:18:64:4e:a3:6c:dc:f4:
                    ca:02:36:27:72:25:50:44:54:4a:df:d2:e2:55:ee:
                    9a:b7:75:6b:03:a6:15:fe:9c:22:55:2a:15:a5:6f:
                    03:dc:d2:74:13:89:14:5a:90:64:ba:04:8e:a9:2c:
                    a3:1f:7f:96:96:8d:02:92:ce:70:64:e1:75:42:46:
                    2d:c1:7b:a4:3b:a5:23:18:b9:6d:1a:fc:5a:27:ba:
                    0e:8c:38:f3:09:a0:8d:ff:0d:60:15:52:d2:16:73:
                    0c:ca:7e:51:2b:c6:06:bb:c8:04:56:82:73:76:ba:
                    be:b1:cd:5b:c5:4e:2b:ee:d6:b7:73:64:46:64:8b:
                    ba:a6:bf:8b:0b:83:c8:c0:a9:08:aa:cd:9a:0d:04:
                    03:8e:f5:71:0f:13:2d:9e:f4:8b:38:72:fc:77:56:
                    f7:63:44:bc:fe:b4:37:4a:60:bb:7c:a6:7f:44:ab:
                    9c:50:8d:a2:5e:8c:ae:1f:5d:af:ac:82:81:ae:bb:
                    ca:fb:4e:7a:14:7d:42:fb:29:9f:fa:c3:ef:d1:44:
                    6a:1e:c2:96:88:04:47:82:9a:f3:5f:93:07:74:89:
                    00:e2:f0:66:a4:44:5e:88:c8:92:49:5b:51:ca:21:
                    e3:0f:93:e2:04:12:a8:92:5f:4c:fb:45:e3:e4:32:
                    97:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:11:FD:67:26:60:91:F4:61:D7:2F:B6:66:2F:4C:0B:3F:9A:01:61
            X509v3 Authority Key Identifier:
                keyid:5E:E7:70:69:67:5B:75:CA:24:7B:FC:5C:D3:30:0B:17:B5:B3:9C:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3646008/785175CA088D11EBAAD1BC5BF8AEA228/XudwaWdbdcoke_xc0zALF7WznDQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XudwaWdbdcoke_xc0zALF7WznDQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3646008/785175CA088D11EBAAD1BC5BF8AEA228/XudwaWdbdcoke_xc0zALF7WznDQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:ab:dd:af:3f:fb:9a:2e:a3:9c:b6:53:42:e4:88:dc:93:66:
         e2:e2:08:17:f8:b6:79:73:39:71:9c:0a:50:fe:48:8f:89:b0:
         a2:1f:31:92:df:0b:68:8c:c7:0c:52:f1:16:2a:4e:1b:70:0e:
         77:7a:4e:06:cf:4e:7a:70:ff:de:ae:b5:04:fd:f4:28:48:9d:
         69:fe:64:e6:87:e0:f0:eb:8f:0d:40:a2:db:c4:60:92:ba:1f:
         a1:4d:0f:b5:93:19:57:1e:be:8f:ac:44:cb:72:89:b7:dd:34:
         ee:d5:34:39:72:74:17:d4:88:ff:70:0e:81:25:9c:37:2a:3e:
         4b:87:2e:2f:0b:c2:23:c7:06:80:5d:3c:af:f2:01:af:9d:4b:
         db:f7:62:93:4e:ab:f2:02:98:b3:9e:b1:d6:6c:58:c9:a4:80:
         d7:22:fa:48:5a:c4:04:cc:38:8c:62:df:6e:27:3c:1b:dc:f7:
         7a:81:2b:0a:7d:35:7c:4c:ab:92:05:80:2c:76:65:50:49:3d:
         bd:c3:31:46:39:78:6b:d2:e0:7d:56:91:e6:16:28:d5:f1:69:
         9d:92:59:c9:99:7a:ba:a1:4f:7f:7f:a4:2e:60:ed:27:11:5d:
         d0:07:56:d2:c6:bc:97:d5:99:6c:39:c9:2e:0f:ba:45:85:43:
         08:05:22:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:46:17 2026 by rpki-client