Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365F7E8/D868211096CA11EEA01BDA73D25BE465/xaUP22PDxb0fR0h14JTxitF-H5Y.mft
File:                     xaUP22PDxb0fR0h14JTxitF-H5Y.mft (raw, json)
Hash identifier:          GDN8tXUAsRR28fGY2NHlz5aIyggc8tydkRNMKVIKt0w=
Subject key identifier:   68:7C:50:A6:0D:AB:94:CA:AD:9D:17:DF:25:7A:03:A1:C1:75:52:E8
Authority key identifier: C5:A5:0F:DB:63:C3:C5:BD:1F:47:48:75:E0:94:F1:8A:D1:7E:1F:96
Certificate issuer:       /CN=F365F7E8AF/serialNumber=C5A50FDB63C3C5BD1F474875E094F18AD17E1F96
Certificate serial:       0372
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/xaUP22PDxb0fR0h14JTxitF-H5Y.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/D868211096CA11EEA01BDA73D25BE465/xaUP22PDxb0fR0h14JTxitF-H5Y.mft
Manifest number:          0371
Signing time:             Fri 17 Apr 2026 03:52:15 +0000
Manifest this update:     Fri 17 Apr 2026 03:52:14 +0000
Manifest next update:     Sun 19 Apr 2026 03:52:14 +0000
Files and hashes:         1: xaUP22PDxb0fR0h14JTxitF-H5Y.crl (hash: UTQKqNhqAEBe9NQ1YVzMq6DzdLQTCDzLCgY1EVF4GOI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/D868211096CA11EEA01BDA73D25BE465/xaUP22PDxb0fR0h14JTxitF-H5Y.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/D868211096CA11EEA01BDA73D25BE465/xaUP22PDxb0fR0h14JTxitF-H5Y.mft
                          rsync://rpki.afrinic.net/repository/afrinic/xaUP22PDxb0fR0h14JTxitF-H5Y.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 03:52:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 882 (0x372)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365F7E8AF, serialNumber=C5A50FDB63C3C5BD1F474875E094F18AD17E1F96
        Validity
            Not Before: Apr 17 03:52:14 2026 GMT
            Not After : Apr 19 03:52:14 2026 GMT
        Subject: CN=69e1ae6f-e804
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f8:58:85:ca:58:a7:68:af:6d:d8:88:82:2c:
                    8c:b7:e2:18:0f:bf:69:9d:d4:33:ee:fa:56:60:3f:
                    ad:12:25:2d:b6:e9:d5:43:b1:bd:ff:02:62:9f:40:
                    f6:98:a1:4c:01:18:f4:c1:30:7f:15:14:f8:16:66:
                    61:3b:bb:35:10:2a:d3:d7:3f:38:7b:6e:6f:46:6e:
                    29:39:a9:d8:2b:dd:48:16:82:40:8e:21:9c:f8:3e:
                    c3:84:e7:ef:fb:b3:77:98:00:56:10:fe:74:d6:e3:
                    3e:2b:12:4a:04:a3:7d:ce:74:d5:a9:15:95:b9:95:
                    b0:df:8a:6c:ca:02:cb:05:24:06:8b:0d:23:ca:fb:
                    c9:ed:f3:f2:83:2d:44:7d:ed:9b:bc:6f:46:50:82:
                    55:82:76:28:2e:78:d3:91:7c:5c:9a:48:25:6f:f5:
                    7a:13:49:4d:b6:c0:15:62:4d:02:e8:a3:88:04:ee:
                    eb:61:06:8c:42:ab:6c:61:6b:57:40:cb:97:22:fd:
                    60:51:51:a7:22:b6:d5:ab:79:f4:b0:db:9e:5c:d6:
                    c4:30:81:09:5d:56:a5:79:3c:45:9a:cd:96:b2:fb:
                    ec:5b:6b:51:9a:94:c3:2c:20:77:54:50:d4:17:7e:
                    63:c9:a4:ac:4d:ad:19:4e:9c:31:a9:f0:d1:7f:09:
                    24:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:7C:50:A6:0D:AB:94:CA:AD:9D:17:DF:25:7A:03:A1:C1:75:52:E8
            X509v3 Authority Key Identifier:
                keyid:C5:A5:0F:DB:63:C3:C5:BD:1F:47:48:75:E0:94:F1:8A:D1:7E:1F:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/D868211096CA11EEA01BDA73D25BE465/xaUP22PDxb0fR0h14JTxitF-H5Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xaUP22PDxb0fR0h14JTxitF-H5Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/D868211096CA11EEA01BDA73D25BE465/xaUP22PDxb0fR0h14JTxitF-H5Y.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:cb:59:f5:89:5c:84:b0:10:81:c0:d7:c0:e5:83:09:26:f4:
         52:61:03:d5:c1:89:23:98:d1:8c:51:98:eb:09:12:1f:e2:ab:
         ac:ce:ae:2d:ee:1c:90:f1:01:f1:36:9e:b2:12:fe:f1:4f:75:
         24:51:c3:35:46:a8:83:74:fb:f0:53:34:7e:b5:44:1e:3b:8a:
         13:42:03:69:80:e6:f4:1c:23:4a:17:d5:ef:4a:38:9e:a3:fe:
         9d:c6:89:19:b4:96:e2:30:cc:36:42:b7:58:c4:dc:56:0a:a7:
         75:6d:e1:d9:b5:8b:49:b7:85:84:de:87:7d:51:2d:18:32:ae:
         eb:5a:65:ae:da:45:fb:12:02:01:82:a9:a0:81:bf:6a:ca:d4:
         a2:ea:44:f8:ce:1d:04:ff:7b:6e:29:83:f7:77:f0:a8:4b:4f:
         f4:a2:b4:3b:04:33:0f:58:1e:9a:6e:9f:78:f2:b9:a6:8b:88:
         a0:a1:68:45:28:d9:ec:0c:67:94:90:68:39:5e:1b:be:ad:40:
         11:bf:19:2f:0c:d8:bc:f5:8f:8f:9b:cd:52:a1:02:42:e7:35:
         d0:1f:cb:cf:cb:99:2c:07:b0:8b:a3:26:cd:c7:5f:3d:9a:79:
         4e:28:34:ae:71:c4:c1:2f:24:76:a5:9f:18:a3:65:2e:57:60:
         63:95:4a:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:57:47 2026 by rpki-client