Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3657B9B/2B343DB038D711EC866DDE7DD8A014CE/5EQ9BuJ23CaV_RskPB6hv524UiY.mft
File:                     5EQ9BuJ23CaV_RskPB6hv524UiY.mft (raw, json)
Hash identifier:          UM/b0oMpjsnbQbcWrctO0ZgJmbzFaFAdyh6YWY2y5Is=
Subject key identifier:   35:0A:17:E6:14:E5:49:95:80:3A:0B:09:BA:2D:31:F3:BD:41:C1:45
Authority key identifier: E4:44:3D:06:E2:76:DC:26:95:FD:1B:24:3C:1E:A1:BF:9D:B8:52:26
Certificate issuer:       /CN=F3657B9BAF/serialNumber=E4443D06E276DC2695FD1B243C1EA1BF9DB85226
Certificate serial:       068F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/5EQ9BuJ23CaV_RskPB6hv524UiY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3657B9B/2B343DB038D711EC866DDE7DD8A014CE/5EQ9BuJ23CaV_RskPB6hv524UiY.mft
Manifest number:          068C
Signing time:             Fri 17 Apr 2026 02:28:30 +0000
Manifest this update:     Fri 17 Apr 2026 02:28:29 +0000
Manifest next update:     Sun 19 Apr 2026 02:28:29 +0000
Files and hashes:         1: 5EQ9BuJ23CaV_RskPB6hv524UiY.crl (hash: VS1w4d/lcYHa+xPS6V+siuTauFDlGLGOtBroFfvn3EQ=)
                          2: AEB08BE23CB311F0A3A36586DAE4EC9C.roa (hash: U3rXSw5pvREzEYNmu5t5TwCQxiXYw/SdogPjZlJiIYw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3657B9B/2B343DB038D711EC866DDE7DD8A014CE/5EQ9BuJ23CaV_RskPB6hv524UiY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3657B9B/2B343DB038D711EC866DDE7DD8A014CE/5EQ9BuJ23CaV_RskPB6hv524UiY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/5EQ9BuJ23CaV_RskPB6hv524UiY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 02:28:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1679 (0x68f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3657B9BAF, serialNumber=E4443D06E276DC2695FD1B243C1EA1BF9DB85226
        Validity
            Not Before: Apr 17 02:28:29 2026 GMT
            Not After : Apr 19 02:28:29 2026 GMT
        Subject: CN=69e19ace-734f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:db:c1:47:d3:e5:1d:87:91:ec:33:89:0a:00:
                    b8:42:41:dd:da:df:02:e7:af:d7:70:b5:11:54:e8:
                    be:9c:71:33:73:0a:5b:e2:40:cf:6b:73:c3:53:17:
                    7a:69:1a:54:e3:a5:d4:74:38:68:70:90:98:ab:38:
                    a1:89:6e:01:b2:44:a5:be:4a:60:4e:52:0f:81:84:
                    f1:33:a4:f4:e4:4c:cd:a9:b5:06:bc:31:14:c9:5c:
                    ab:f7:af:4e:94:f8:e1:d8:8c:67:e4:5c:29:41:01:
                    91:07:93:cb:93:fe:c2:fe:c5:45:3d:f3:03:58:67:
                    87:11:a3:1d:61:4e:42:7f:c7:12:5c:35:75:b0:dd:
                    04:07:5d:ba:a4:33:c7:82:8d:d7:78:aa:e9:cc:de:
                    f4:93:9e:0c:76:37:66:18:31:aa:07:63:cb:6e:f3:
                    fa:b3:4b:9d:56:fa:46:58:a0:02:20:74:55:ad:76:
                    f7:e7:1e:50:57:da:ca:46:8d:88:e1:68:f6:85:69:
                    c4:d5:70:d2:85:f2:fe:52:79:84:1a:91:09:80:07:
                    ef:22:41:c2:a5:a6:7b:b6:d6:63:7f:ab:ac:a2:2b:
                    12:9f:9f:b4:21:5e:fe:15:79:3b:51:87:2d:ab:fe:
                    c3:41:91:d6:7e:2b:4a:a6:d4:eb:94:60:61:9d:e1:
                    1f:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:0A:17:E6:14:E5:49:95:80:3A:0B:09:BA:2D:31:F3:BD:41:C1:45
            X509v3 Authority Key Identifier:
                keyid:E4:44:3D:06:E2:76:DC:26:95:FD:1B:24:3C:1E:A1:BF:9D:B8:52:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3657B9B/2B343DB038D711EC866DDE7DD8A014CE/5EQ9BuJ23CaV_RskPB6hv524UiY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/5EQ9BuJ23CaV_RskPB6hv524UiY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3657B9B/2B343DB038D711EC866DDE7DD8A014CE/5EQ9BuJ23CaV_RskPB6hv524UiY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:7d:ec:50:3e:85:ca:2f:f6:c1:79:49:01:a6:1b:a8:08:aa:
         dc:db:e0:14:63:0f:ae:be:0b:e4:14:52:f4:10:78:8e:e2:53:
         72:9a:f8:08:72:68:0e:0c:ce:fc:30:77:ca:69:41:be:f6:39:
         36:c6:8a:91:43:1a:70:bb:89:fb:ef:8b:e5:4f:90:fa:b9:18:
         48:0f:e1:95:f9:bb:8b:f9:69:6e:cc:05:1e:cb:83:dd:ca:51:
         95:47:4b:83:66:bc:7e:be:b1:71:29:3d:0d:bf:59:63:da:5b:
         03:d9:cb:c9:ce:fa:b8:eb:54:c8:2e:a4:ad:a8:ed:d0:18:13:
         89:c6:58:78:13:a8:69:a4:bc:e7:f5:e1:2f:64:04:3e:f4:40:
         cb:a0:86:7c:b8:c1:1d:05:c4:3b:0a:4e:19:42:3f:ad:08:7f:
         99:b7:e7:d8:6e:8a:6a:45:4c:1e:a6:e6:8e:85:e0:77:70:24:
         fa:7f:32:8a:03:19:fe:66:60:8c:cd:f7:be:a2:da:19:98:53:
         8e:da:8a:85:6b:41:10:a6:8b:6e:18:04:ba:4f:1c:46:b3:b3:
         b9:e9:57:fe:c2:0d:51:b6:ae:5d:d8:a6:5d:c1:3d:d5:fe:2b:
         fe:a8:2c:49:08:05:37:18:37:42:e3:a8:5b:01:50:85:6d:97:
         36:69:d5:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:39:40 2026 by rpki-client