Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3647FF0/A28AC10A32A911EDA4E5C9DCF1222468/kgRBKh8SvNXSs845kazvaXbIhl4.mft
File:                     kgRBKh8SvNXSs845kazvaXbIhl4.mft (raw, json)
Hash identifier:          NImANCtGaW35zRAxGm1aPTjc0EuXS1eq+Vs/DkLovGo=
Subject key identifier:   E7:34:F5:B4:D3:50:5C:D0:D5:ED:E4:39:14:BA:F1:67:B1:DC:B8:AF
Authority key identifier: 92:04:41:2A:1F:12:BC:D5:D2:B3:CE:39:91:AC:EF:69:76:C8:86:5E
Certificate issuer:       /CN=F3647FF0AF/serialNumber=9204412A1F12BCD5D2B3CE3991ACEF6976C8865E
Certificate serial:       0553
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/kgRBKh8SvNXSs845kazvaXbIhl4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3647FF0/A28AC10A32A911EDA4E5C9DCF1222468/kgRBKh8SvNXSs845kazvaXbIhl4.mft
Manifest number:          054F
Signing time:             Fri 17 Apr 2026 02:57:44 +0000
Manifest this update:     Fri 17 Apr 2026 02:57:43 +0000
Manifest next update:     Sun 19 Apr 2026 02:57:43 +0000
Files and hashes:         1: kgRBKh8SvNXSs845kazvaXbIhl4.crl (hash: PcPqcNo0UlY73yH4kMDH3jA7aFCb/A1Et8TMHzSwHEk=)
                          2: C1B630EE8D6B11F08834F6ACDAE4EC9C.roa (hash: dgSYZC5D+KjnOh21ksdGPfjeg//i1eX1fXXuJxMe2OM=)
                          3: 401D27E081C711F0830BC9C9DAE4EC9C.roa (hash: nJPUmahtOqiPFAxwPDfnodDi2p2b719GESj2IRhzuSA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3647FF0/A28AC10A32A911EDA4E5C9DCF1222468/kgRBKh8SvNXSs845kazvaXbIhl4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3647FF0/A28AC10A32A911EDA4E5C9DCF1222468/kgRBKh8SvNXSs845kazvaXbIhl4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/kgRBKh8SvNXSs845kazvaXbIhl4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1363 (0x553)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3647FF0AF, serialNumber=9204412A1F12BCD5D2B3CE3991ACEF6976C8865E
        Validity
            Not Before: Apr 17 02:57:43 2026 GMT
            Not After : Apr 19 02:57:43 2026 GMT
        Subject: CN=69e1a1a8-6b93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:13:c3:6b:fc:b5:3f:a4:41:77:d1:17:20:18:
                    d3:6a:17:94:57:25:78:f2:54:41:89:b9:a9:1f:cc:
                    53:0b:6c:9d:0c:ae:9c:bd:36:74:17:b4:67:b2:80:
                    ce:25:87:5b:68:32:2c:bf:3d:ca:f6:53:2f:73:a4:
                    94:b8:ab:8e:82:d8:e7:61:da:11:15:00:f7:36:74:
                    7c:1e:2f:25:54:86:7f:3d:bb:aa:fc:ab:21:af:d1:
                    b4:a3:92:04:7f:e1:bf:e6:46:4e:b5:ec:c5:68:87:
                    a8:b9:50:47:95:c5:ef:5a:ed:ec:3f:c5:b7:fd:9d:
                    58:ba:08:77:aa:6b:54:3d:b8:ea:e0:3a:8c:20:90:
                    91:be:f6:b0:3f:81:e9:96:4d:71:af:a0:99:69:fd:
                    ef:46:90:07:a3:d2:70:e3:99:b4:40:07:df:a5:74:
                    09:8b:d4:2a:7b:61:ff:a2:75:d6:6a:61:c7:74:43:
                    d5:d2:7d:36:45:f0:78:9e:fb:27:ef:b4:c1:73:ba:
                    57:de:66:11:39:56:05:17:0e:ea:61:fc:ee:6d:c9:
                    e3:94:3c:3d:d9:9a:44:7e:78:7c:e8:f6:da:6d:a2:
                    31:26:9a:f6:f2:95:81:2b:4a:97:cc:5b:e6:48:f8:
                    c1:f8:b2:2f:27:6b:c3:d7:80:90:2b:46:37:de:53:
                    c0:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:34:F5:B4:D3:50:5C:D0:D5:ED:E4:39:14:BA:F1:67:B1:DC:B8:AF
            X509v3 Authority Key Identifier:
                keyid:92:04:41:2A:1F:12:BC:D5:D2:B3:CE:39:91:AC:EF:69:76:C8:86:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3647FF0/A28AC10A32A911EDA4E5C9DCF1222468/kgRBKh8SvNXSs845kazvaXbIhl4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kgRBKh8SvNXSs845kazvaXbIhl4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3647FF0/A28AC10A32A911EDA4E5C9DCF1222468/kgRBKh8SvNXSs845kazvaXbIhl4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:57:0d:1e:ae:f7:3a:80:c4:40:1d:1b:61:80:e9:82:e1:5f:
         fd:36:dd:2c:5c:46:b7:a9:12:e8:11:fc:2f:f9:d2:a4:86:89:
         31:f6:5b:d0:79:64:c4:50:38:70:5d:e1:aa:96:79:24:60:d5:
         52:48:dd:95:e3:1d:7a:4f:1d:89:88:39:77:55:47:56:04:52:
         cd:d8:7c:10:53:29:a3:2b:85:ef:70:52:15:e3:6e:74:23:c6:
         9c:13:6f:4c:68:38:46:69:97:75:7d:3d:67:44:9d:04:97:c1:
         e3:87:3a:91:b9:40:45:a1:33:3c:3a:d1:a0:28:82:3e:c8:11:
         af:23:ec:fa:b4:6a:fc:45:a9:6d:45:3f:10:a2:d3:e1:3d:b6:
         47:84:75:53:ec:8a:82:1e:41:c9:5b:b5:b8:85:e9:01:9b:4a:
         f2:8a:dd:f6:6e:d1:09:e7:15:b0:e2:83:65:f0:95:8d:45:07:
         58:2e:ad:c3:13:be:7d:8d:06:7c:3e:a0:e1:9a:eb:a4:6e:e4:
         2a:54:7e:bb:dd:1e:c5:a7:87:62:87:6a:21:2d:b1:2b:d2:7b:
         54:08:c1:8d:c3:1a:7e:c8:30:68:a2:6c:ec:39:5f:09:17:0f:
         6c:c5:df:7a:33:10:c2:91:8e:2e:77:7f:1f:bb:3c:43:9d:bb:
         89:78:3a:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:22:51 2026 by rpki-client