Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3671BB4/02E646F8061D11EABC386256F8AEA228/9yrHa7B-RN3HrGDmYx8c0u3wNd0.mft
File:                     9yrHa7B-RN3HrGDmYx8c0u3wNd0.mft (raw, json)
Hash identifier:          Nh8Q2oR4jsTeTzgPrNqQNTzz0Ukfe5gdlert1u6pnl8=
Subject key identifier:   4E:CB:2B:7A:3C:AA:60:D0:B3:0D:63:F8:ED:AE:50:2F:90:C8:92:27
Authority key identifier: F7:2A:C7:6B:B0:7E:44:DD:C7:AC:60:E6:63:1F:1C:D2:ED:F0:35:DD
Certificate issuer:       /CN=F3671BB4AF/serialNumber=F72AC76BB07E44DDC7AC60E6631F1CD2EDF035DD
Certificate serial:       096D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/9yrHa7B-RN3HrGDmYx8c0u3wNd0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3671BB4/02E646F8061D11EABC386256F8AEA228/9yrHa7B-RN3HrGDmYx8c0u3wNd0.mft
Manifest number:          0968
Signing time:             Fri 17 Apr 2026 01:37:21 +0000
Manifest this update:     Fri 17 Apr 2026 01:37:20 +0000
Manifest next update:     Sun 19 Apr 2026 01:37:20 +0000
Files and hashes:         1: 9yrHa7B-RN3HrGDmYx8c0u3wNd0.crl (hash: bqcOUHIuzPSLepugrrKi4LShshWfGvPirhEOOV+o6js=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3671BB4/02E646F8061D11EABC386256F8AEA228/9yrHa7B-RN3HrGDmYx8c0u3wNd0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3671BB4/02E646F8061D11EABC386256F8AEA228/9yrHa7B-RN3HrGDmYx8c0u3wNd0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/9yrHa7B-RN3HrGDmYx8c0u3wNd0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 01:37:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2413 (0x96d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3671BB4AF, serialNumber=F72AC76BB07E44DDC7AC60E6631F1CD2EDF035DD
        Validity
            Not Before: Apr 17 01:37:20 2026 GMT
            Not After : Apr 19 01:37:20 2026 GMT
        Subject: CN=69e18ed1-ecfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0c:71:05:43:37:f7:cc:1a:81:3f:86:db:f2:
                    3b:bc:70:32:e1:e9:e4:75:b1:93:3a:74:46:3d:cb:
                    05:8d:0f:f4:ea:0f:bd:6e:9e:a0:4e:25:60:76:56:
                    a6:d4:4b:4f:02:c9:34:0a:ef:0f:8a:60:dd:74:96:
                    e1:46:54:5e:c9:58:84:8c:1d:37:49:2f:ce:a9:38:
                    8f:e2:b4:e5:c5:c5:2c:45:36:30:96:b8:6f:dd:bd:
                    55:62:f6:f4:94:82:b9:10:03:16:1f:a3:52:9a:57:
                    1c:51:90:d3:90:a7:ca:3e:82:32:5e:ed:05:c5:9f:
                    a9:2f:0e:ef:02:50:a9:7f:ed:25:ce:af:f2:cf:89:
                    3f:2d:4b:93:be:1e:7e:aa:5b:c2:32:dd:ee:c4:ac:
                    bf:11:fe:d8:4c:06:5f:2d:f8:8e:b9:4a:7e:94:8e:
                    33:b0:18:ec:1f:75:72:ac:e7:19:03:4e:f9:81:56:
                    50:1a:58:6f:6b:05:7e:d7:67:ee:56:5b:69:23:18:
                    58:b3:4a:12:eb:8b:2f:81:46:e1:f5:ad:75:09:0a:
                    f5:64:d6:89:04:bd:51:94:c2:94:f6:d1:0a:04:ad:
                    60:db:de:4b:0f:4d:4f:fc:15:d0:4d:84:68:12:51:
                    b5:6d:f7:47:f0:a6:ce:c3:f7:31:26:17:89:d0:f4:
                    b2:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:CB:2B:7A:3C:AA:60:D0:B3:0D:63:F8:ED:AE:50:2F:90:C8:92:27
            X509v3 Authority Key Identifier:
                keyid:F7:2A:C7:6B:B0:7E:44:DD:C7:AC:60:E6:63:1F:1C:D2:ED:F0:35:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3671BB4/02E646F8061D11EABC386256F8AEA228/9yrHa7B-RN3HrGDmYx8c0u3wNd0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9yrHa7B-RN3HrGDmYx8c0u3wNd0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3671BB4/02E646F8061D11EABC386256F8AEA228/9yrHa7B-RN3HrGDmYx8c0u3wNd0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:01:0f:4f:b3:65:7f:8a:01:b7:0e:3a:4f:ba:17:8d:55:20:
         7f:c3:75:c9:74:1e:65:86:92:45:b1:9a:2a:87:42:5f:71:92:
         78:2d:50:7a:2b:b3:2e:6a:1a:0f:f1:31:e6:7b:9e:19:d1:42:
         1e:07:22:dd:cf:3f:7a:9a:ae:4e:52:44:ba:fb:1c:3f:b8:a3:
         a5:68:d7:43:8e:ff:87:5d:ef:26:02:b3:5f:4f:2d:7e:41:32:
         35:59:4c:9f:d1:90:db:16:12:8c:66:ab:6d:63:8b:58:c1:e2:
         45:ab:85:96:65:bb:07:6b:c8:fb:4f:a7:08:04:57:00:0d:a7:
         ac:31:d2:b9:90:d1:51:7b:0b:77:15:f7:73:55:19:bd:f0:a6:
         6c:f5:17:3a:fe:c7:04:7d:64:c6:b3:68:de:a0:8e:43:03:21:
         0d:1a:23:4b:9d:6f:d5:15:7f:55:be:69:a6:f0:73:23:d8:27:
         58:47:7c:4c:67:02:e3:28:4b:fc:15:05:7d:51:cc:be:8a:c5:
         37:ba:3b:0e:6d:f1:10:ec:18:2a:6c:ef:fe:10:35:e3:b9:b5:
         2d:08:48:b3:0d:82:44:ef:e0:ca:3a:5b:6d:25:15:01:65:2e:
         73:6a:9c:51:ba:22:88:cd:ea:c1:75:ca:61:bc:76:5b:7c:8f:
         25:d4:e9:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:26:57 2026 by rpki-client