Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3664A2A/61139A4C2A5311EE9174E2464AD9E6FC/mo0OmoAqT1sF0LmwiVg0TYdylpw.mft
File:                     mo0OmoAqT1sF0LmwiVg0TYdylpw.mft (raw, json)
Hash identifier:          1QaBRWz9L26a7zjyJiA74HOV+vf7FafDvXdrtHeLFZA=
Subject key identifier:   52:3E:CA:32:A1:2C:AC:4C:2F:E6:6B:68:A9:1A:C2:49:8B:EE:16:59
Authority key identifier: 9A:8D:0E:9A:80:2A:4F:5B:05:D0:B9:B0:89:58:34:4D:87:72:96:9C
Certificate issuer:       /CN=F3664A2AAF/serialNumber=9A8D0E9A802A4F5B05D0B9B08958344D8772969C
Certificate serial:       0408
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/mo0OmoAqT1sF0LmwiVg0TYdylpw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3664A2A/61139A4C2A5311EE9174E2464AD9E6FC/mo0OmoAqT1sF0LmwiVg0TYdylpw.mft
Manifest number:          0405
Signing time:             Fri 17 Apr 2026 03:34:20 +0000
Manifest this update:     Fri 17 Apr 2026 03:34:19 +0000
Manifest next update:     Sun 19 Apr 2026 03:34:19 +0000
Files and hashes:         1: mo0OmoAqT1sF0LmwiVg0TYdylpw.crl (hash: rcnujNo5na7XihH+tDenBSYAC+KeQx8tyU6V1hOTkoU=)
                          2: 74A188D4198F11F1A0453B9FDAE4EC9C.roa (hash: heRN3Hl/VoKOoahx6fv1krdzclqG2Ce9G2KiMF/ZKFs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3664A2A/61139A4C2A5311EE9174E2464AD9E6FC/mo0OmoAqT1sF0LmwiVg0TYdylpw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3664A2A/61139A4C2A5311EE9174E2464AD9E6FC/mo0OmoAqT1sF0LmwiVg0TYdylpw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/mo0OmoAqT1sF0LmwiVg0TYdylpw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 03:34:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1032 (0x408)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3664A2AAF, serialNumber=9A8D0E9A802A4F5B05D0B9B08958344D8772969C
        Validity
            Not Before: Apr 17 03:34:19 2026 GMT
            Not After : Apr 19 03:34:19 2026 GMT
        Subject: CN=69e1aa3c-4b7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d8:77:ad:65:48:6b:df:21:ec:a5:05:ca:83:
                    b3:fd:46:3d:7d:8e:11:73:7f:47:e4:c2:ed:b0:5a:
                    27:2e:91:23:29:97:e1:b1:7f:7a:f9:54:90:e2:f7:
                    e1:b2:6a:b1:ab:79:7a:72:98:a3:ea:c0:2d:85:0e:
                    77:79:8f:dd:c5:f5:77:76:d9:7f:1f:44:a3:70:03:
                    8d:3a:b1:88:82:58:64:23:ac:04:5d:e9:5d:9a:02:
                    d3:30:a9:f9:43:e6:81:39:2a:92:3a:ae:36:7c:2d:
                    d6:87:47:ad:61:db:05:d2:82:08:3f:a4:1a:f6:49:
                    bb:30:41:82:ec:e9:93:46:9f:4b:c4:36:ea:55:cd:
                    74:93:62:3e:ac:ab:52:b3:e2:05:71:48:bd:47:c7:
                    f3:fa:dc:08:bd:89:80:9b:e8:fb:f4:e0:79:c1:78:
                    32:ed:57:95:e0:04:ef:fa:ea:a3:27:5e:fe:e0:05:
                    77:54:b6:ba:54:d8:de:7a:d9:4e:82:1c:a5:81:51:
                    22:91:be:c6:f7:5b:69:86:c6:6a:58:da:17:51:9b:
                    c9:f7:40:1c:26:27:c0:ee:4b:e9:e7:20:70:02:13:
                    86:6a:fd:82:1b:e5:4a:55:09:b9:d0:23:dc:b4:ea:
                    6b:fb:98:25:c7:f7:fd:4f:98:f9:e2:3a:a0:a3:28:
                    c0:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:3E:CA:32:A1:2C:AC:4C:2F:E6:6B:68:A9:1A:C2:49:8B:EE:16:59
            X509v3 Authority Key Identifier:
                keyid:9A:8D:0E:9A:80:2A:4F:5B:05:D0:B9:B0:89:58:34:4D:87:72:96:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3664A2A/61139A4C2A5311EE9174E2464AD9E6FC/mo0OmoAqT1sF0LmwiVg0TYdylpw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/mo0OmoAqT1sF0LmwiVg0TYdylpw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3664A2A/61139A4C2A5311EE9174E2464AD9E6FC/mo0OmoAqT1sF0LmwiVg0TYdylpw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:22:ef:a4:00:15:f8:02:ab:bb:ea:8c:40:39:98:6a:44:c7:
         15:73:ab:5f:3b:e7:5b:49:9f:2b:a3:c2:fb:2d:0e:91:c1:1d:
         7a:ec:70:73:d7:e5:80:61:6c:b4:3b:7d:a2:db:40:91:79:f1:
         91:b3:ee:da:25:cc:5a:8f:87:0a:86:4d:d6:a7:11:f8:82:58:
         89:40:ce:b3:52:e9:e5:dc:d8:86:fa:95:a7:39:d3:23:be:b1:
         3b:97:a7:7f:1e:99:f3:ab:0c:92:45:4a:18:aa:99:29:b2:59:
         54:3a:4f:b2:14:88:ef:9e:ce:49:87:98:83:c4:bd:43:ea:82:
         95:e5:ba:42:94:fb:6c:5e:a5:8a:91:5a:fa:01:8d:7b:4e:51:
         7c:c8:1a:9a:e0:ee:29:66:cb:a3:06:68:70:b2:aa:9e:da:c7:
         4b:74:c0:dd:3f:3d:16:9a:63:2a:55:6c:3b:60:d2:c9:84:a6:
         ab:c7:b1:a2:fe:85:1d:33:fc:af:e7:c8:83:17:fa:09:53:50:
         2c:a0:c8:62:b6:6a:7f:1b:96:2b:13:29:c0:5f:b8:67:fe:63:
         14:91:dc:d8:3c:df:22:f3:08:bf:91:a3:e0:c5:0f:c8:d5:e3:
         d9:cf:ca:70:bb:b7:1b:c4:2d:8e:49:7d:0a:77:26:0b:a6:69:
         7c:06:df:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:49:05 2026 by rpki-client