Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3656387/C78EEF9090CD11EC8B7B29A05A40D577/0cZXgBrfziVpTfuxqVxs2kR-O7o.mft
File:                     0cZXgBrfziVpTfuxqVxs2kR-O7o.mft (raw, json)
Hash identifier:          9JnK5xnr7dHC2FaoW39qA9W6QXSaIk1+5e9PDJG+GYM=
Subject key identifier:   F6:76:78:62:BF:6D:4C:C0:C7:E8:2E:86:E9:89:3A:71:0A:5E:85:00
Authority key identifier: D1:C6:57:80:1A:DF:CE:25:69:4D:FB:B1:A9:5C:6C:DA:44:7E:3B:BA
Certificate issuer:       /CN=F3656387AF/serialNumber=D1C657801ADFCE25694DFBB1A95C6CDA447E3BBA
Certificate serial:       061D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/0cZXgBrfziVpTfuxqVxs2kR-O7o.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3656387/C78EEF9090CD11EC8B7B29A05A40D577/0cZXgBrfziVpTfuxqVxs2kR-O7o.mft
Manifest number:          061B
Signing time:             Fri 17 Apr 2026 02:35:29 +0000
Manifest this update:     Fri 17 Apr 2026 02:35:28 +0000
Manifest next update:     Sun 19 Apr 2026 02:35:28 +0000
Files and hashes:         1: 0cZXgBrfziVpTfuxqVxs2kR-O7o.crl (hash: 3hYaQ6hFVOGR7DZ/BConPQZQ3aa8vcfHcYd7fxZU25s=)
                          2: 5929BAD6881811EF9F8726B0762E951A.roa (hash: gqseLBT3raRF8qI8a39+TId/5s+ZYprcLYdDUSRWjC4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3656387/C78EEF9090CD11EC8B7B29A05A40D577/0cZXgBrfziVpTfuxqVxs2kR-O7o.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3656387/C78EEF9090CD11EC8B7B29A05A40D577/0cZXgBrfziVpTfuxqVxs2kR-O7o.mft
                          rsync://rpki.afrinic.net/repository/afrinic/0cZXgBrfziVpTfuxqVxs2kR-O7o.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 02:35:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1565 (0x61d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3656387AF, serialNumber=D1C657801ADFCE25694DFBB1A95C6CDA447E3BBA
        Validity
            Not Before: Apr 17 02:35:28 2026 GMT
            Not After : Apr 19 02:35:28 2026 GMT
        Subject: CN=69e19c71-8f96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4e:12:b0:ee:73:53:d4:da:94:75:5c:16:4f:
                    37:7d:39:76:6b:db:b8:a2:9e:44:46:fc:a9:f4:28:
                    29:81:96:67:01:11:9b:12:b3:c6:93:a9:d8:b6:d5:
                    ed:4a:37:b8:3b:cd:90:5f:ec:76:e6:18:b0:43:61:
                    ce:62:15:8a:78:20:b6:cc:58:f7:4b:a1:1f:6a:47:
                    51:df:b5:3d:80:2d:c4:71:77:78:f2:75:0f:04:ec:
                    8f:e6:7f:b2:d0:df:c3:bf:38:73:7d:35:66:47:58:
                    82:61:51:05:90:1a:59:fa:d9:40:40:3e:19:83:f7:
                    a1:9e:d2:d9:cf:fc:1b:66:15:eb:c6:f6:23:1d:77:
                    2b:45:2d:dd:e9:2f:2a:ab:38:4b:de:e5:ac:ff:69:
                    4f:69:cc:6d:fa:58:d1:cd:13:a8:40:ef:78:44:bd:
                    c5:ca:15:61:a5:d3:07:4b:ba:54:07:c2:ff:65:30:
                    49:e2:2f:5a:c5:92:81:ce:d1:f9:5b:65:ec:c4:42:
                    07:34:fb:1c:d4:c5:cc:5e:bf:54:cb:c9:ab:e2:1d:
                    29:bb:26:9d:e5:ca:6e:59:60:7b:d0:33:6c:be:a3:
                    55:9e:cd:a0:c3:cf:61:b8:9f:60:2e:ff:09:4b:c4:
                    03:b3:4a:c2:a7:e1:bb:a1:0e:01:54:0f:9a:19:d9:
                    34:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:76:78:62:BF:6D:4C:C0:C7:E8:2E:86:E9:89:3A:71:0A:5E:85:00
            X509v3 Authority Key Identifier:
                keyid:D1:C6:57:80:1A:DF:CE:25:69:4D:FB:B1:A9:5C:6C:DA:44:7E:3B:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3656387/C78EEF9090CD11EC8B7B29A05A40D577/0cZXgBrfziVpTfuxqVxs2kR-O7o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0cZXgBrfziVpTfuxqVxs2kR-O7o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3656387/C78EEF9090CD11EC8B7B29A05A40D577/0cZXgBrfziVpTfuxqVxs2kR-O7o.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:bf:a6:b9:98:33:1d:ba:27:c0:03:3a:32:82:de:52:a7:61:
         25:26:11:da:1f:92:7e:9a:a2:71:e1:48:26:64:fa:43:cb:72:
         d1:62:27:f6:bf:b4:93:ac:5d:36:2d:44:e2:45:dc:f8:90:26:
         f5:b2:8b:04:52:8d:3c:27:3e:83:4b:d3:98:5a:42:59:7b:60:
         47:32:b7:86:11:83:3e:1d:9a:dd:b3:86:82:c5:26:64:c3:cd:
         07:7c:46:4c:ee:9d:ec:23:e2:2a:bb:e1:08:63:8d:34:c0:44:
         9e:7d:9b:52:8a:f6:c9:94:40:a4:b7:8b:db:e0:be:23:ae:75:
         1a:64:c4:d1:0c:15:60:73:10:5f:45:d0:18:0f:ee:4a:cb:38:
         a6:5d:2a:5c:2f:55:d5:d2:3e:df:b3:1b:3f:53:8a:64:14:5e:
         7c:54:6f:18:8b:3c:17:66:9b:f1:f8:c6:6f:d4:a5:27:87:6e:
         ba:19:f8:35:c4:88:ab:ce:89:5e:5e:c6:3f:e1:e6:a8:fa:bc:
         63:78:95:f6:cb:ce:91:29:4d:36:64:4d:8b:a5:95:15:de:7d:
         31:4e:c1:23:7b:7a:a3:2d:8d:d0:ba:f6:ad:d6:28:35:d3:05:
         99:87:b2:f8:44:7f:4e:80:e7:1d:9f:e0:03:d9:e2:f2:6c:0c:
         00:85:01:b4
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBh0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NTYzODdBRjExMC8GA1UEBRMoRDFDNjU3ODAxQURGQ0UyNTY5NERGQkIxQTk1QzZD
REE0NDdFM0JCQTAeFw0yNjA0MTcwMjM1MjhaFw0yNjA0MTkwMjM1MjhaMBgxFjAU
BgNVBAMTDTY5ZTE5YzcxLThmOTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC8ThKw7nNT1NqUdVwWTzd9OXZr27iinkRG/Kn0KCmBlmcBEZsSs8aTqdi2
1e1KN7g7zZBf7HbmGLBDYc5iFYp4ILbMWPdLoR9qR1HftT2ALcRxd3jydQ8E7I/m
f7LQ38O/OHN9NWZHWIJhUQWQGln62UBAPhmD96Ge0tnP/BtmFevG9iMddytFLd3p
LyqrOEve5az/aU9pzG36WNHNE6hA73hEvcXKFWGl0wdLulQHwv9lMEniL1rFkoHO
0flbZezEQgc0+xzUxcxev1TLyaviHSm7Jp3lym5ZYHvQM2y+o1WezaDDz2G4n2Au
/wlLxAOzSsKn4buhDgFUD5oZ2TRXAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU9nZ4
Yr9tTMDH6C6G6Yk6cQpehQAwHwYDVR0jBBgwFoAU0cZXgBrfziVpTfuxqVxs2kR+
O7owDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjU2Mzg3L0M3OEVFRjkwOTBDRDExRUM4QjdCMjlBMDVBNDBENTc3LzBjWlhn
QnJmemlWcFRmdXhxVnhzMmtSLU83by5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzBjWlhnQnJmemlWcFRmdXhxVnhzMmtSLU83by5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NTYzODcvQzc4RUVGOTA5MENEMTFFQzhCN0IyOUEwNUE0
MEQ1NzcvMGNaWGdCcmZ6aVZwVGZ1eHFWeHMya1ItTzdvLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAjv6a5mDMduifAAzoygt5Sp2ElJhHa
H5J+mqJx4UgmZPpDy3LRYif2v7STrF02LUTiRdz4kCb1sosEUo08Jz6DS9OYWkJZ
e2BHMreGEYM+HZrds4aCxSZkw80HfEZM7p3sI+Iqu+EIY400wESefZtSivbJlECk
t4vb4L4jrnUaZMTRDBVgcxBfRdAYD+5KyzimXSpcL1XV0j7fsxs/U4pkFF58VG8Y
izwXZpvx+MZv1KUnh266Gfg1xIirzoleXsY/4eao+rxjeJX2y86RKU02ZE2LpZUV
3n0xTsEje3qjLY3Quvat1ig10wWZh7L4RH9OgOcdn+AD2eLybAwAhQG0
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:05:23 2026 by rpki-client