Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36576E8/C3808986FC6111ECB17E22ABF1222468/2_aMnFwB1o68DJDe5MB0naI6L9Y.mft
File:                     2_aMnFwB1o68DJDe5MB0naI6L9Y.mft (raw, json)
Hash identifier:          2FnGuEUl7FeiXjhgQ8h8LduUyIaHLxUoXc879H1y1MU=
Subject key identifier:   F6:42:F6:70:7D:10:6E:D2:11:3E:6B:05:CD:18:85:13:5D:63:38:8A
Authority key identifier: DB:F6:8C:9C:5C:01:D6:8E:BC:0C:90:DE:E4:C0:74:9D:A2:3A:2F:D6
Certificate issuer:       /CN=F36576E8AF/serialNumber=DBF68C9C5C01D68EBC0C90DEE4C0749DA23A2FD6
Certificate serial:       05B7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/2_aMnFwB1o68DJDe5MB0naI6L9Y.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36576E8/C3808986FC6111ECB17E22ABF1222468/2_aMnFwB1o68DJDe5MB0naI6L9Y.mft
Manifest number:          05AC
Signing time:             Fri 17 Apr 2026 02:49:20 +0000
Manifest this update:     Fri 17 Apr 2026 02:49:19 +0000
Manifest next update:     Sun 19 Apr 2026 02:49:19 +0000
Files and hashes:         1: 2_aMnFwB1o68DJDe5MB0naI6L9Y.crl (hash: sseSSzozB+FXqJMPpJGmloOx6XBaxXWuqOidlh53X0c=)
                          2: B12CB62E195E11F189CC1679DAE4EC9C.roa (hash: qHoQ6d/3gZBEDfhM/jAJ1S6dJN+igIoj4x/FpVhkFJI=)
                          3: B3EE18F22BD011F08A7C27A2DAE4EC9C.roa (hash: LA8q+uNhXBWE2SjasyXDN1aUvOktsdxT0z0WdJkFsK8=)
                          4: 89B3F2A6195E11F19D35F978DAE4EC9C.roa (hash: baGYyd6gk5MAgEJKDFBx1V6tWNd0Wz/VZWyHzFiNi+Y=)
                          5: 4E666882195E11F18BD2B3F3DAE4EC9C.roa (hash: s/B6JWmALGd9JtpV1fZC8Bgu+GPVUAr+NxUz/GTPeGg=)
                          6: 40EAC0D62BD411F0A36BE4B8DAE4EC9C.roa (hash: 9fvE1IFZCB+MmUfnvjTiAQ0VJX4n1Jw5PnZOQzfgAA8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36576E8/C3808986FC6111ECB17E22ABF1222468/2_aMnFwB1o68DJDe5MB0naI6L9Y.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36576E8/C3808986FC6111ECB17E22ABF1222468/2_aMnFwB1o68DJDe5MB0naI6L9Y.mft
                          rsync://rpki.afrinic.net/repository/afrinic/2_aMnFwB1o68DJDe5MB0naI6L9Y.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1463 (0x5b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36576E8AF, serialNumber=DBF68C9C5C01D68EBC0C90DEE4C0749DA23A2FD6
        Validity
            Not Before: Apr 17 02:49:19 2026 GMT
            Not After : Apr 19 02:49:19 2026 GMT
        Subject: CN=69e19fb0-73dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:62:0b:58:3b:a7:36:e4:ef:1d:5e:80:43:5b:
                    9b:ec:98:77:c7:23:72:8b:70:e0:1c:ee:d4:08:5b:
                    08:11:6f:65:4d:73:29:64:80:5a:94:7d:6e:85:20:
                    d6:bf:39:26:19:76:cc:00:60:65:b3:ea:ff:86:57:
                    e6:4f:bb:ab:1a:8a:a3:dc:13:ff:f9:6b:11:6e:92:
                    f6:f8:87:3c:50:4d:4a:36:d4:50:9a:46:21:07:47:
                    da:76:bf:9b:07:e6:08:76:81:de:9c:b9:84:ff:f2:
                    8a:7b:77:ac:50:da:a2:b4:ed:a2:db:68:22:d5:74:
                    03:ac:62:91:50:de:91:2d:13:5b:bb:1f:d1:70:74:
                    79:2f:47:f4:0a:68:86:7a:c8:6c:ad:96:b5:ac:bb:
                    14:bf:55:dd:9a:a1:2b:aa:32:fa:88:38:6d:3f:04:
                    77:70:16:48:d6:42:09:a1:8a:85:b9:87:04:c3:99:
                    4f:7b:90:84:62:1c:ab:e6:93:cf:0a:01:c4:50:30:
                    56:1f:af:6b:a6:d2:20:06:fa:b9:1f:4f:e6:0b:6f:
                    0c:2d:d6:e4:51:b4:ae:41:a8:33:8d:d1:6e:e6:38:
                    be:4d:94:a0:bc:2e:9f:9c:0a:3c:99:2b:43:dd:4b:
                    e0:6e:bc:ce:2a:6b:d3:17:f9:45:96:0d:56:1e:dd:
                    34:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:42:F6:70:7D:10:6E:D2:11:3E:6B:05:CD:18:85:13:5D:63:38:8A
            X509v3 Authority Key Identifier:
                keyid:DB:F6:8C:9C:5C:01:D6:8E:BC:0C:90:DE:E4:C0:74:9D:A2:3A:2F:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36576E8/C3808986FC6111ECB17E22ABF1222468/2_aMnFwB1o68DJDe5MB0naI6L9Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2_aMnFwB1o68DJDe5MB0naI6L9Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36576E8/C3808986FC6111ECB17E22ABF1222468/2_aMnFwB1o68DJDe5MB0naI6L9Y.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:60:8b:4f:56:c2:24:fb:53:e8:67:f3:5a:07:07:6d:23:ab:
         1a:67:5e:82:d6:ec:45:64:9f:67:49:6e:3f:eb:bb:c2:e1:3e:
         90:ba:9f:cf:52:c8:95:f1:65:f5:72:91:be:87:6e:99:4c:b2:
         1a:70:a5:ec:a6:30:81:95:9c:ae:83:18:dd:c6:10:af:9a:1f:
         bd:6e:21:d8:9a:c5:2b:8b:d2:1b:30:69:9b:2b:7a:7d:e0:3f:
         e7:d5:45:75:b3:32:4d:d7:bf:4a:ef:69:b6:fb:27:7a:ff:12:
         97:17:fd:67:fb:d8:c5:87:60:b8:dd:1b:01:18:68:12:0c:78:
         8f:d4:f7:dc:75:f8:69:1a:08:24:fc:fd:24:c8:b3:c7:b1:47:
         a1:18:2d:15:97:4f:a8:92:42:ce:17:fb:8d:64:a4:f9:0a:6a:
         e1:f2:e0:f3:f7:18:e8:1d:2b:1d:3b:21:c9:f1:45:45:6b:09:
         25:6e:22:f5:fb:4a:ce:b4:7c:95:75:b5:8e:ff:5c:b3:91:f7:
         92:4b:08:1b:85:36:bf:23:9a:4f:c3:98:ab:5c:11:36:da:a6:
         0c:67:dd:35:21:79:0f:53:87:4a:b9:44:52:43:90:03:36:72:
         07:1d:e5:8e:c8:dc:cd:cd:f5:dd:90:1b:04:bd:c8:36:68:84:
         c9:42:e9:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:20:51 2026 by rpki-client