Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3659F9C/321B02027A0911EDACA64885F1222468/B0rky8vOb02Yhv7yEVKxOmrac9Y.mft
File:                     B0rky8vOb02Yhv7yEVKxOmrac9Y.mft (raw, json)
Hash identifier:          KEAs+aU4RT7yXl/2Mjf0ebVEIyJUeeozeAr+eI2bMhw=
Subject key identifier:   03:18:F3:CA:D4:E3:AE:BC:47:B6:A8:22:47:B9:D3:05:BA:2E:41:DF
Authority key identifier: 07:4A:E4:CB:CB:CE:6F:4D:98:86:FE:F2:11:52:B1:3A:6A:DA:73:D6
Certificate issuer:       /CN=F3659F9CAF/serialNumber=074AE4CBCBCE6F4D9886FEF21152B13A6ADA73D6
Certificate serial:       04F1
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/B0rky8vOb02Yhv7yEVKxOmrac9Y.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/321B02027A0911EDACA64885F1222468/B0rky8vOb02Yhv7yEVKxOmrac9Y.mft
Manifest number:          04F1
Signing time:             Fri 17 Apr 2026 03:05:57 +0000
Manifest this update:     Fri 17 Apr 2026 03:05:56 +0000
Manifest next update:     Sun 19 Apr 2026 03:05:56 +0000
Files and hashes:         1: B0rky8vOb02Yhv7yEVKxOmrac9Y.crl (hash: uaAZSrXtf15XMiiQIzFSaL88Hvxy5Wt+uvvyxq5oOYw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/321B02027A0911EDACA64885F1222468/B0rky8vOb02Yhv7yEVKxOmrac9Y.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/321B02027A0911EDACA64885F1222468/B0rky8vOb02Yhv7yEVKxOmrac9Y.mft
                          rsync://rpki.afrinic.net/repository/afrinic/B0rky8vOb02Yhv7yEVKxOmrac9Y.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1265 (0x4f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3659F9CAF, serialNumber=074AE4CBCBCE6F4D9886FEF21152B13A6ADA73D6
        Validity
            Not Before: Apr 17 03:05:56 2026 GMT
            Not After : Apr 19 03:05:56 2026 GMT
        Subject: CN=69e1a394-b751
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b0:43:42:ac:3f:a0:0c:ce:ea:91:ef:7e:fe:
                    fb:c5:87:74:a4:4c:bc:bf:66:74:5a:bd:b2:1a:a3:
                    6d:75:e0:fb:34:95:fe:df:3f:b5:25:65:5a:f9:da:
                    99:86:4e:c0:7b:b5:6c:d1:e7:4d:48:e8:57:61:bf:
                    f2:da:8d:76:65:c6:ad:19:b5:f6:cf:b6:f4:99:d8:
                    6d:19:9a:9c:59:a3:74:98:cd:4d:26:0b:79:31:99:
                    ee:6d:de:a5:75:d1:b8:5b:11:40:60:a2:a2:19:7f:
                    87:03:b3:28:93:69:dc:15:64:c7:a7:d7:4a:8b:96:
                    03:bd:9a:d7:ef:e3:a4:28:01:e1:4f:2d:cf:ad:c3:
                    5d:25:c9:77:eb:ad:05:10:d1:5a:ee:e7:24:72:bd:
                    c8:76:93:68:c0:cd:a6:32:5c:d9:da:c0:59:e9:cd:
                    77:81:0d:2e:51:90:29:42:1a:f4:5c:38:71:25:b8:
                    ce:d5:d7:0b:e5:24:4f:c9:b1:88:48:da:fe:74:eb:
                    7f:df:a0:42:41:5d:95:70:63:d3:2d:6b:8e:1b:a1:
                    79:d3:4b:d9:bc:57:8e:af:84:a5:80:83:47:27:9b:
                    e9:d3:5b:38:65:a3:46:ac:e1:b8:42:1d:ee:23:51:
                    bd:10:bd:c6:68:d6:8b:89:07:6e:2b:df:70:d1:eb:
                    39:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:18:F3:CA:D4:E3:AE:BC:47:B6:A8:22:47:B9:D3:05:BA:2E:41:DF
            X509v3 Authority Key Identifier:
                keyid:07:4A:E4:CB:CB:CE:6F:4D:98:86:FE:F2:11:52:B1:3A:6A:DA:73:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/321B02027A0911EDACA64885F1222468/B0rky8vOb02Yhv7yEVKxOmrac9Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/B0rky8vOb02Yhv7yEVKxOmrac9Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/321B02027A0911EDACA64885F1222468/B0rky8vOb02Yhv7yEVKxOmrac9Y.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:68:8c:29:6f:bb:0f:af:fc:69:10:c9:d4:0b:26:9f:8b:22:
         db:08:45:16:de:fd:dd:d6:aa:6a:01:f5:86:49:62:77:c0:06:
         a8:fb:cc:84:0a:4d:19:a9:43:f0:1e:8f:0e:77:3e:d1:3c:0b:
         f7:75:5b:b2:79:d9:c9:4e:d2:33:49:46:37:1e:f8:1c:35:99:
         c5:a6:54:66:9d:74:83:c6:91:66:14:ac:39:b3:a8:03:79:cf:
         b2:16:0b:31:6d:e0:a0:9f:c0:52:fb:3e:42:a8:05:45:cc:c5:
         a5:a0:db:ac:ed:96:4a:36:39:ab:97:aa:ed:06:8a:a6:5a:09:
         d1:e3:32:fb:de:83:40:68:12:71:48:59:5d:29:d1:7c:0d:37:
         e0:79:5a:a6:32:cb:08:a7:21:00:2d:c2:b4:8d:90:ef:63:6a:
         12:92:62:8e:5d:ad:ba:9c:29:c8:6d:49:30:ea:94:c8:9f:63:
         f7:7b:f8:0a:13:62:f0:a0:9a:56:ef:fa:c4:5f:7e:60:f5:d1:
         6e:7d:ac:60:a3:45:d7:b6:23:8d:8b:72:11:29:5a:32:f8:48:
         14:c7:47:6d:23:fe:ad:3d:bb:cb:97:fe:4d:b0:0d:82:ef:db:
         b4:12:62:db:70:2b:59:e2:a8:50:97:62:9d:85:f3:31:5b:1c:
         ef:28:ef:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:52:31 2026 by rpki-client