Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366372C/5F217C34657F11ED964AEF85F1222468/saGqcslle0DmFrw3PhPPk7Ip6z8.mft
File:                     saGqcslle0DmFrw3PhPPk7Ip6z8.mft (raw, json)
Hash identifier:          QWm36vNvo2g7nIjMxIOifEVoHFKqTJyWp7YROu5Tlsw=
Subject key identifier:   89:1B:9C:CC:DB:EB:81:C6:17:45:C0:B7:B5:D8:3E:AE:32:CC:23:14
Authority key identifier: B1:A1:AA:72:C9:65:7B:40:E6:16:BC:37:3E:13:CF:93:B2:29:EB:3F
Certificate issuer:       /CN=F366372CAF/serialNumber=B1A1AA72C9657B40E616BC373E13CF93B229EB3F
Certificate serial:       050F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/saGqcslle0DmFrw3PhPPk7Ip6z8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366372C/5F217C34657F11ED964AEF85F1222468/saGqcslle0DmFrw3PhPPk7Ip6z8.mft
Manifest number:          050C
Signing time:             Fri 17 Apr 2026 03:04:19 +0000
Manifest this update:     Fri 17 Apr 2026 03:04:18 +0000
Manifest next update:     Sun 19 Apr 2026 03:04:18 +0000
Files and hashes:         1: saGqcslle0DmFrw3PhPPk7Ip6z8.crl (hash: /Cx3lo9X7x24swanla5P1oVsk0jKbdnIqweU7HbsjtA=)
                          2: 2BBF1C3A309C11F088CE98B2DAE4EC9C.roa (hash: d3U7Ue8n5ODoQtIkqxmfs88xiOyVzuOgtMD6Gn4U5Yo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366372C/5F217C34657F11ED964AEF85F1222468/saGqcslle0DmFrw3PhPPk7Ip6z8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366372C/5F217C34657F11ED964AEF85F1222468/saGqcslle0DmFrw3PhPPk7Ip6z8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/saGqcslle0DmFrw3PhPPk7Ip6z8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1295 (0x50f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366372CAF, serialNumber=B1A1AA72C9657B40E616BC373E13CF93B229EB3F
        Validity
            Not Before: Apr 17 03:04:18 2026 GMT
            Not After : Apr 19 03:04:18 2026 GMT
        Subject: CN=69e1a333-23bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ed:5f:64:23:f7:51:ba:68:97:b9:dd:fe:b8:
                    2e:7e:d3:d5:20:f5:08:05:32:05:b4:1b:c7:7d:12:
                    7f:16:8f:6f:fd:f0:f2:af:4a:93:09:9e:c9:a3:58:
                    7d:ed:71:99:fb:60:90:a0:8d:40:9d:80:27:47:ea:
                    18:2a:ec:7f:bc:7b:04:d9:7c:89:50:37:87:ab:64:
                    95:9f:fb:3b:c7:b5:62:15:05:26:d9:96:34:14:84:
                    94:e1:59:d2:0b:e0:f6:fa:d2:c4:a1:b6:d5:53:d6:
                    cb:75:be:79:16:47:83:8a:4b:3c:8c:53:ac:9c:23:
                    38:46:b3:13:b0:65:f8:bd:43:9d:48:e5:18:d3:7c:
                    fb:9c:e6:0e:08:57:7f:60:ae:ff:22:57:ce:0d:ac:
                    2a:bf:b2:ae:52:6f:1b:08:40:27:f4:ca:4c:40:ec:
                    43:28:5b:b2:76:f0:c2:8d:bc:c7:90:97:54:50:15:
                    d8:ed:22:0e:db:c6:13:91:ea:49:1b:b9:5d:33:6e:
                    53:53:bf:34:2f:1f:04:6a:9a:2c:f6:51:11:8c:d7:
                    85:f6:ea:e0:21:1f:25:75:d8:b3:e9:80:fa:60:3a:
                    64:a9:57:8e:6d:5c:73:4c:e1:32:0f:30:50:37:60:
                    64:8c:92:e5:d6:8a:ee:e0:87:bd:9a:53:fa:cf:5a:
                    48:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:1B:9C:CC:DB:EB:81:C6:17:45:C0:B7:B5:D8:3E:AE:32:CC:23:14
            X509v3 Authority Key Identifier:
                keyid:B1:A1:AA:72:C9:65:7B:40:E6:16:BC:37:3E:13:CF:93:B2:29:EB:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366372C/5F217C34657F11ED964AEF85F1222468/saGqcslle0DmFrw3PhPPk7Ip6z8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/saGqcslle0DmFrw3PhPPk7Ip6z8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366372C/5F217C34657F11ED964AEF85F1222468/saGqcslle0DmFrw3PhPPk7Ip6z8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:09:e4:6c:06:6b:63:bc:a0:65:7c:b6:aa:2b:e4:01:41:e7:
         64:d1:9c:c1:ba:c9:fd:28:a6:f4:8d:73:0d:8e:aa:20:e0:df:
         ca:ef:07:9a:f2:89:3d:4b:b7:14:4c:9a:79:08:96:41:07:03:
         83:a5:9e:b7:8e:37:26:ef:2b:d3:e7:82:68:5c:4a:61:be:93:
         5e:fb:c7:8f:38:25:57:26:d6:78:38:e0:2e:e8:01:ad:32:1f:
         f2:7c:c1:24:52:d7:5a:1d:70:5b:ff:3b:7b:44:b6:05:b2:e1:
         c5:2c:eb:3a:1a:40:b2:95:8c:68:94:5c:d0:9f:3c:c1:7a:59:
         54:ee:f3:66:a5:ef:c8:7d:19:af:bd:b4:71:33:8d:7e:f6:36:
         5b:f9:8e:34:f2:ae:a3:76:66:22:63:8b:12:93:bc:bb:c8:bb:
         e9:1f:4e:d3:3f:cf:db:36:0b:2c:6e:41:da:5f:d8:3e:b7:84:
         41:37:86:8a:9b:ec:22:a0:25:23:29:40:29:f3:ae:41:6e:e2:
         ed:44:40:25:46:f9:b3:08:f8:ca:8b:dc:a0:de:5c:18:8a:0d:
         e5:f5:68:34:6a:00:f6:19:94:8e:2c:df:67:a1:ec:83:74:66:
         1f:8d:96:0b:ec:c7:5c:25:f8:66:e7:54:f7:e9:f0:f1:81:64:
         9b:70:07:67
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBQ8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NjM3MkNBRjExMC8GA1UEBRMoQjFBMUFBNzJDOTY1N0I0MEU2MTZCQzM3M0UxM0NG
OTNCMjI5RUIzRjAeFw0yNjA0MTcwMzA0MThaFw0yNjA0MTkwMzA0MThaMBgxFjAU
BgNVBAMTDTY5ZTFhMzMzLTIzYmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCe7V9kI/dRumiXud3+uC5+09Ug9QgFMgW0G8d9En8Wj2/98PKvSpMJnsmj
WH3tcZn7YJCgjUCdgCdH6hgq7H+8ewTZfIlQN4erZJWf+zvHtWIVBSbZljQUhJTh
WdIL4Pb60sShttVT1st1vnkWR4OKSzyMU6ycIzhGsxOwZfi9Q51I5RjTfPuc5g4I
V39grv8iV84NrCq/sq5SbxsIQCf0ykxA7EMoW7J28MKNvMeQl1RQFdjtIg7bxhOR
6kkbuV0zblNTvzQvHwRqmiz2URGM14X26uAhHyV12LPpgPpgOmSpV45tXHNM4TIP
MFA3YGSMkuXWiu7gh72aU/rPWkinAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUiRuc
zNvrgcYXRcC3tdg+rjLMIxQwHwYDVR0jBBgwFoAUsaGqcslle0DmFrw3PhPPk7Ip
6z8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjYzNzJDLzVGMjE3QzM0NjU3RjExRUQ5NjRBRUY4NUYxMjIyNDY4L3NhR3Fj
c2xsZTBEbUZydzNQaFBQazdJcDZ6OC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3NhR3Fjc2xsZTBEbUZydzNQaFBQazdJcDZ6OC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NjM3MkMvNUYyMTdDMzQ2NTdGMTFFRDk2NEFFRjg1RjEy
MjI0Njgvc2FHcWNzbGxlMERtRnJ3M1BoUFBrN0lwNno4Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB4CeRsBmtjvKBlfLaqK+QBQedk0ZzB
usn9KKb0jXMNjqog4N/K7wea8ok9S7cUTJp5CJZBBwODpZ63jjcm7yvT54JoXEph
vpNe+8ePOCVXJtZ4OOAu6AGtMh/yfMEkUtdaHXBb/zt7RLYFsuHFLOs6GkCylYxo
lFzQnzzBellU7vNmpe/IfRmvvbRxM41+9jZb+Y408q6jdmYiY4sSk7y7yLvpH07T
P8/bNgssbkHaX9g+t4RBN4aKm+wioCUjKUAp865BbuLtREAlRvmzCPjKi9yg3lwY
ig3l9Wg0agD2GZSOLN9noeyDdGYfjZYL7MdcJfhm51T36fDxgWSbcAdn
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:34:37 2026 by rpki-client