Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3654397/8D7B31801F9611ED8233F28CF1222468/A-IO7xUFA6CxlRGK6Idof1pCecI.mft
File:                     A-IO7xUFA6CxlRGK6Idof1pCecI.mft (raw, json)
Hash identifier:          iHiyxVIM6UiENWPH8lIkt8e/d/LlQaheLRd//SXXcBo=
Subject key identifier:   F9:44:47:A4:F0:63:6F:EC:12:A8:0C:0D:2A:B1:7C:DE:D5:26:8C:53
Authority key identifier: 03:E2:0E:EF:15:05:03:A0:B1:95:11:8A:E8:87:68:7F:5A:42:79:C2
Certificate issuer:       /CN=F3654397AF/serialNumber=03E20EEF150503A0B195118AE887687F5A4279C2
Certificate serial:       058E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/A-IO7xUFA6CxlRGK6Idof1pCecI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3654397/8D7B31801F9611ED8233F28CF1222468/A-IO7xUFA6CxlRGK6Idof1pCecI.mft
Manifest number:          057D
Signing time:             Fri 17 Apr 2026 02:54:08 +0000
Manifest this update:     Fri 17 Apr 2026 02:54:07 +0000
Manifest next update:     Sun 19 Apr 2026 02:54:07 +0000
Files and hashes:         1: A-IO7xUFA6CxlRGK6Idof1pCecI.crl (hash: wsDIRRziv9wPMgf++gF29idlJ//jp16pcReGe/0S2js=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3654397/8D7B31801F9611ED8233F28CF1222468/A-IO7xUFA6CxlRGK6Idof1pCecI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3654397/8D7B31801F9611ED8233F28CF1222468/A-IO7xUFA6CxlRGK6Idof1pCecI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/A-IO7xUFA6CxlRGK6Idof1pCecI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1422 (0x58e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3654397AF, serialNumber=03E20EEF150503A0B195118AE887687F5A4279C2
        Validity
            Not Before: Apr 17 02:54:07 2026 GMT
            Not After : Apr 19 02:54:07 2026 GMT
        Subject: CN=69e1a0cf-c2d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6f:21:51:ce:3d:ff:2a:c8:9f:ab:c0:a3:6e:
                    29:a5:06:f4:2b:50:9f:27:8d:a0:f2:21:fb:c6:90:
                    8f:4c:24:13:16:7b:87:a4:35:5f:b9:5d:45:09:23:
                    30:2d:72:86:12:18:2a:2a:30:3c:fb:5f:3f:29:a8:
                    d1:f1:b7:3a:bb:b6:4f:1b:6a:45:1e:70:8b:6e:55:
                    f5:93:98:12:dc:bb:db:7b:41:34:7a:be:88:44:f2:
                    ac:6c:bf:70:62:97:f5:91:70:00:95:8d:be:dc:05:
                    e0:ce:40:25:66:62:b4:67:fe:e9:83:e5:31:44:73:
                    63:4f:1a:54:ce:cc:44:2a:44:79:5b:04:50:bf:a7:
                    dd:8a:7d:59:14:d0:ac:cb:06:19:68:72:1b:57:1b:
                    89:fd:b9:85:0f:cb:03:e0:1f:d5:f6:1d:2e:8d:21:
                    cd:b2:e2:71:c1:7f:94:da:0b:7e:62:f8:be:a1:b7:
                    ed:2e:a1:1f:13:4e:b9:4b:1a:8e:e6:df:df:e3:79:
                    27:ea:64:8b:0b:c0:3a:b0:67:3a:b8:90:c9:0d:9e:
                    b0:3c:91:29:03:26:d6:6b:d7:fc:b0:e2:3d:84:8c:
                    e7:df:ea:02:9e:a7:2e:36:bb:91:70:01:55:a0:e7:
                    5b:ad:f4:55:6b:35:07:45:60:1e:97:df:17:7d:40:
                    b1:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:44:47:A4:F0:63:6F:EC:12:A8:0C:0D:2A:B1:7C:DE:D5:26:8C:53
            X509v3 Authority Key Identifier:
                keyid:03:E2:0E:EF:15:05:03:A0:B1:95:11:8A:E8:87:68:7F:5A:42:79:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3654397/8D7B31801F9611ED8233F28CF1222468/A-IO7xUFA6CxlRGK6Idof1pCecI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/A-IO7xUFA6CxlRGK6Idof1pCecI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3654397/8D7B31801F9611ED8233F28CF1222468/A-IO7xUFA6CxlRGK6Idof1pCecI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:09:1e:ae:a0:af:06:ab:1a:68:5b:9d:d9:9e:27:67:19:69:
         c6:50:62:57:75:ac:64:dd:c6:21:01:5c:58:09:14:23:fd:17:
         07:0d:47:21:7b:55:a4:1a:e3:29:d3:e7:ca:f4:a1:15:13:25:
         6f:ad:58:ba:77:9f:c5:8e:7f:b3:24:2a:8e:cb:f4:6a:c1:2d:
         0f:8f:45:0c:00:17:4c:92:7d:92:dc:de:a4:6b:c5:6f:3c:4e:
         ef:3d:18:f4:4d:dc:9d:3a:db:a9:e4:50:1c:e2:ed:a4:f4:a7:
         3d:18:ae:1c:3c:8c:8e:2c:b4:ae:17:a1:38:48:d4:19:13:dc:
         dd:9a:f2:ba:9c:81:76:de:84:8a:f9:71:35:c7:e1:54:ad:b8:
         e4:9a:0a:2f:d6:19:9d:e0:4a:f5:63:07:8e:af:f8:12:5c:de:
         d1:10:6e:eb:aa:93:76:e0:7a:45:7d:35:34:21:e9:3c:03:e4:
         d0:6c:1f:72:15:6c:66:61:22:14:26:3e:91:de:be:91:1d:9d:
         27:5d:f4:74:8e:66:1d:28:d7:c3:36:e2:a4:05:01:34:89:3b:
         9b:e8:28:d0:87:e4:e1:da:8c:a5:09:15:8c:08:3d:ac:1c:56:
         f1:e4:81:b6:0b:94:82:40:dc:e6:2e:78:a0:1b:68:a0:43:2a:
         ac:28:96:2c
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBY4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NTQzOTdBRjExMC8GA1UEBRMoMDNFMjBFRUYxNTA1MDNBMEIxOTUxMThBRTg4NzY4
N0Y1QTQyNzlDMjAeFw0yNjA0MTcwMjU0MDdaFw0yNjA0MTkwMjU0MDdaMBgxFjAU
BgNVBAMTDTY5ZTFhMGNmLWMyZDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC2byFRzj3/Ksifq8CjbimlBvQrUJ8njaDyIfvGkI9MJBMWe4ekNV+5XUUJ
IzAtcoYSGCoqMDz7Xz8pqNHxtzq7tk8bakUecItuVfWTmBLcu9t7QTR6vohE8qxs
v3Bil/WRcACVjb7cBeDOQCVmYrRn/umD5TFEc2NPGlTOzEQqRHlbBFC/p92KfVkU
0KzLBhlochtXG4n9uYUPywPgH9X2HS6NIc2y4nHBf5TaC35i+L6ht+0uoR8TTrlL
Go7m39/jeSfqZIsLwDqwZzq4kMkNnrA8kSkDJtZr1/yw4j2EjOff6gKepy42u5Fw
AVWg51ut9FVrNQdFYB6X3xd9QLFrAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU+URH
pPBjb+wSqAwNKrF83tUmjFMwHwYDVR0jBBgwFoAUA+IO7xUFA6CxlRGK6Idof1pC
ecIwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjU0Mzk3LzhEN0IzMTgwMUY5NjExRUQ4MjMzRjI4Q0YxMjIyNDY4L0EtSU83
eFVGQTZDeGxSR0s2SWRvZjFwQ2VjSS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0EtSU83eFVGQTZDeGxSR0s2SWRvZjFwQ2VjSS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NTQzOTcvOEQ3QjMxODAxRjk2MTFFRDgyMzNGMjhDRjEy
MjI0NjgvQS1JTzd4VUZBNkN4bFJHSzZJZG9mMXBDZWNJLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC9CR6uoK8GqxpoW53ZnidnGWnGUGJX
daxk3cYhAVxYCRQj/RcHDUche1WkGuMp0+fK9KEVEyVvrVi6d5/Fjn+zJCqOy/Rq
wS0Pj0UMABdMkn2S3N6ka8VvPE7vPRj0TdydOtup5FAc4u2k9Kc9GK4cPIyOLLSu
F6E4SNQZE9zdmvK6nIF23oSK+XE1x+FUrbjkmgov1hmd4Er1YweOr/gSXN7REG7r
qpN24HpFfTU0Iek8A+TQbB9yFWxmYSIUJj6R3r6RHZ0nXfR0jmYdKNfDNuKkBQE0
iTub6CjQh+Th2oylCRWMCD2sHFbx5IG2C5SCQNzmLnigG2igQyqsKJYs
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:22:17 2026 by rpki-client