Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3664815/F675B6D0F1D711F0B0265CB1DAE4EC9C/NoqlwYM32LEA43kHcgA1BOIR25U.mft
File:                     NoqlwYM32LEA43kHcgA1BOIR25U.mft (raw, json)
Hash identifier:          GNIyOBm58VtEihUlQeWgKOo0rBdFtc76riaxIhK/ZiY=
Subject key identifier:   B4:74:FB:B4:E9:B1:37:4B:EB:EB:4C:EC:63:D6:99:D0:FE:92:60:37
Authority key identifier: 36:8A:A5:C1:83:37:D8:B1:00:E3:79:07:72:00:35:04:E2:11:DB:95
Certificate issuer:       /CN=F3664815AF/serialNumber=368AA5C18337D8B100E3790772003504E211DB95
Certificate serial:       5E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/NoqlwYM32LEA43kHcgA1BOIR25U.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3664815/F675B6D0F1D711F0B0265CB1DAE4EC9C/NoqlwYM32LEA43kHcgA1BOIR25U.mft
Manifest number:          5D
Signing time:             Fri 17 Apr 2026 05:21:31 +0000
Manifest this update:     Fri 17 Apr 2026 05:21:30 +0000
Manifest next update:     Sun 19 Apr 2026 05:21:30 +0000
Files and hashes:         1: NoqlwYM32LEA43kHcgA1BOIR25U.crl (hash: VEZvSxiKTbYijQ//w8pB9SYwT9YOX+WMmMdCnTG7X3Q=)
                          2: 728FCC2EF1D811F0A90A06B4DAE4EC9C.roa (hash: 6RL/4V6ZWEbg7BN3QUTvLxt/VnmJ1eoKO54see9w44I=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3664815/F675B6D0F1D711F0B0265CB1DAE4EC9C/NoqlwYM32LEA43kHcgA1BOIR25U.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3664815/F675B6D0F1D711F0B0265CB1DAE4EC9C/NoqlwYM32LEA43kHcgA1BOIR25U.mft
                          rsync://rpki.afrinic.net/repository/afrinic/NoqlwYM32LEA43kHcgA1BOIR25U.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 05:21:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 94 (0x5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3664815AF, serialNumber=368AA5C18337D8B100E3790772003504E211DB95
        Validity
            Not Before: Apr 17 05:21:30 2026 GMT
            Not After : Apr 19 05:21:30 2026 GMT
        Subject: CN=69e1c35b-7b04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:7c:9d:b2:7c:c2:c9:72:9a:fb:db:15:6f:8a:
                    95:8c:4c:c3:b4:01:f1:72:f5:59:e3:63:d8:da:2f:
                    8e:ad:e4:d8:3b:3d:cc:d1:31:2e:20:d4:a1:9e:8f:
                    3f:3d:17:2f:65:98:42:4e:60:20:fb:24:ac:37:72:
                    bc:6f:4a:81:fd:ed:87:1f:d0:3e:12:87:48:a2:4b:
                    c0:bd:51:23:2e:ff:ae:b5:34:ef:bf:84:bb:45:6f:
                    ee:83:27:72:12:25:bf:de:e5:12:16:24:ab:7b:0e:
                    85:a0:a9:9a:5c:d5:5a:9b:15:13:d2:bc:80:7a:8c:
                    70:2b:ef:fe:ac:18:e6:f1:dc:d5:e2:dc:e8:c9:a8:
                    2d:2f:61:83:8d:e3:bb:4a:81:02:7a:cd:45:24:68:
                    b6:df:e7:05:d3:1d:27:0c:46:81:1d:a3:6d:d8:58:
                    f1:8b:2a:f5:3a:f2:9e:4f:e6:2a:5f:b0:00:75:9c:
                    a2:13:a3:25:a3:65:15:0c:21:20:5c:b4:83:6c:97:
                    cd:84:a1:85:b2:a1:fc:84:51:00:6c:e7:9d:f6:44:
                    55:f8:bf:7c:6e:fe:b0:67:fd:17:a4:bc:36:d8:1c:
                    25:4b:a0:e1:73:d8:d0:d4:09:ee:71:18:b9:8b:a9:
                    62:4e:62:12:c8:f5:ee:69:78:e9:1f:8a:65:6e:fc:
                    6a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:74:FB:B4:E9:B1:37:4B:EB:EB:4C:EC:63:D6:99:D0:FE:92:60:37
            X509v3 Authority Key Identifier:
                keyid:36:8A:A5:C1:83:37:D8:B1:00:E3:79:07:72:00:35:04:E2:11:DB:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3664815/F675B6D0F1D711F0B0265CB1DAE4EC9C/NoqlwYM32LEA43kHcgA1BOIR25U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/NoqlwYM32LEA43kHcgA1BOIR25U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3664815/F675B6D0F1D711F0B0265CB1DAE4EC9C/NoqlwYM32LEA43kHcgA1BOIR25U.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:a7:32:8d:8d:95:c0:22:47:8c:d2:6a:81:26:81:1a:f9:0d:
         9a:fc:92:38:4f:11:98:f3:c1:71:da:ed:bb:8f:5c:d5:d2:e8:
         8b:6d:52:75:0e:24:bb:82:d6:66:71:19:1b:68:52:0b:0f:ee:
         56:c1:f2:24:c2:18:07:d5:63:92:c6:20:92:eb:1e:69:d0:a2:
         45:c2:2d:e1:93:84:13:82:75:11:a1:00:1f:28:28:e8:46:50:
         80:83:42:e9:6c:c0:12:f6:ae:fe:7e:4b:92:94:e5:12:f0:cb:
         c9:67:e7:9f:46:fa:f9:b7:f1:04:67:41:45:81:ee:43:d6:49:
         d4:66:20:f1:1c:b9:95:a0:84:ce:03:be:f2:f2:92:e7:ec:ce:
         81:4d:31:64:bd:59:a6:f1:a1:55:4a:6e:bd:f0:65:ed:0f:61:
         e2:81:de:41:93:35:c4:f1:b0:d4:f4:b1:77:e3:88:05:a5:11:
         9c:cf:a9:c7:77:3d:12:ee:bb:4f:1d:12:9d:76:5e:9c:e0:c3:
         43:99:7d:7b:bd:3a:3d:f1:86:a8:f4:58:3f:3c:12:03:54:86:
         ab:c2:87:96:4d:e2:85:4e:0a:75:4e:39:e5:8f:48:cd:6a:70:
         40:4f:e3:6b:9f:00:b3:22:4c:c0:98:b9:1e:c1:64:6f:5e:d0:
         c4:01:35:aa
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIBXjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY2
NDgxNUFGMTEwLwYDVQQFEygzNjhBQTVDMTgzMzdEOEIxMDBFMzc5MDc3MjAwMzUw
NEUyMTFEQjk1MB4XDTI2MDQxNzA1MjEzMFoXDTI2MDQxOTA1MjEzMFowGDEWMBQG
A1UEAxMNNjllMWMzNWItN2IwNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALJ8nbJ8wslymvvbFW+KlYxMw7QB8XL1WeNj2Novjq3k2Ds9zNExLiDUoZ6P
Pz0XL2WYQk5gIPskrDdyvG9Kgf3thx/QPhKHSKJLwL1RIy7/rrU077+Eu0Vv7oMn
chIlv97lEhYkq3sOhaCpmlzVWpsVE9K8gHqMcCvv/qwY5vHc1eLc6MmoLS9hg43j
u0qBAnrNRSRott/nBdMdJwxGgR2jbdhY8Ysq9Trynk/mKl+wAHWcohOjJaNlFQwh
IFy0g2yXzYShhbKh/IRRAGznnfZEVfi/fG7+sGf9F6S8NtgcJUug4XPY0NQJ7nEY
uYupYk5iEsj17ml46R+KZW78atkCAwEAAaOCArgwggK0MB0GA1UdDgQWBBS0dPu0
6bE3S+vrTOxj1pnQ/pJgNzAfBgNVHSMEGDAWgBQ2iqXBgzfYsQDjeQdyADUE4hHb
lTAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NjQ4MTUvRjY3NUI2RDBGMUQ3MTFGMEIwMjY1Q0IxREFFNEVDOUMvTm9xbHdZ
TTMyTEVBNDNrSGNnQTFCT0lSMjVVLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvTm9xbHdZTTMyTEVBNDNrSGNnQTFCT0lSMjVVLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUF
BzALhn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY2NDgxNS9GNjc1QjZEMEYxRDcxMUYwQjAyNjVDQjFEQUU0
RUM5Qy9Ob3Fsd1lNMzJMRUE0M2tIY2dBMUJPSVIyNVUubWZ0MDUGCCsGAQUFBzAN
hilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBABanMo2NlcAiR4zSaoEmgRr5DZr8kjhP
EZjzwXHa7buPXNXS6IttUnUOJLuC1mZxGRtoUgsP7lbB8iTCGAfVY5LGIJLrHmnQ
okXCLeGThBOCdRGhAB8oKOhGUICDQulswBL2rv5+S5KU5RLwy8ln559G+vm38QRn
QUWB7kPWSdRmIPEcuZWghM4DvvLykufszoFNMWS9WabxoVVKbr3wZe0PYeKB3kGT
NcTxsNT0sXfjiAWlEZzPqcd3PRLuu08dEp12Xpzgw0OZfXu9Oj3xhqj0WD88EgNU
hqvCh5ZN4oVOCnVOOeWPSM1qcEBP42ufALMiTMCYuR7BZG9e0MQBNao=
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:22:01 2026 by rpki-client