Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3672189/38C85C46912A11EF98AA067A762E951A/pmHmEV84xQtNTFvj-kiO2AWMwvE.mft
File:                     pmHmEV84xQtNTFvj-kiO2AWMwvE.mft (raw, json)
Hash identifier:          bfWDmJyiIrH51u2mSrCTgtK9WrVXWwnVZIyue3q7Sdc=
Subject key identifier:   47:BD:C7:46:29:E4:2B:3F:11:A6:AB:FA:67:69:B8:25:78:EF:8A:FB
Authority key identifier: A6:61:E6:11:5F:38:C5:0B:4D:4C:5B:E3:FA:48:8E:D8:05:8C:C2:F1
Certificate issuer:       /CN=F3672189AF/serialNumber=A661E6115F38C50B4D4C5BE3FA488ED8058CC2F1
Certificate serial:       022D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/pmHmEV84xQtNTFvj-kiO2AWMwvE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3672189/38C85C46912A11EF98AA067A762E951A/pmHmEV84xQtNTFvj-kiO2AWMwvE.mft
Manifest number:          022C
Signing time:             Fri 17 Apr 2026 04:34:47 +0000
Manifest this update:     Fri 17 Apr 2026 04:34:46 +0000
Manifest next update:     Sun 19 Apr 2026 04:34:46 +0000
Files and hashes:         1: pmHmEV84xQtNTFvj-kiO2AWMwvE.crl (hash: ShmLTKO++KknSudLaBVvrF5z1jCXJONxwwfmAYRcaiY=)
                          2: 84121498949611EFBE8BA57F762E951A.roa (hash: XaqvhZS4unq9+u8DbG/XQq/y/o0dswE+yS72E0NeXdI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3672189/38C85C46912A11EF98AA067A762E951A/pmHmEV84xQtNTFvj-kiO2AWMwvE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3672189/38C85C46912A11EF98AA067A762E951A/pmHmEV84xQtNTFvj-kiO2AWMwvE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/pmHmEV84xQtNTFvj-kiO2AWMwvE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 557 (0x22d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3672189AF, serialNumber=A661E6115F38C50B4D4C5BE3FA488ED8058CC2F1
        Validity
            Not Before: Apr 17 04:34:46 2026 GMT
            Not After : Apr 19 04:34:46 2026 GMT
        Subject: CN=69e1b867-1c65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ec:7c:5f:22:4d:07:bf:1c:9f:40:17:0a:9a:
                    cc:f5:97:06:3d:e9:51:90:1d:e6:4a:c5:fe:00:f6:
                    b4:64:b3:41:8e:f2:ec:43:31:83:4d:d5:0d:d7:cb:
                    0a:c4:1d:48:79:fd:a0:7e:8b:be:3a:c8:2f:32:fa:
                    dd:23:67:65:2e:30:ca:35:f9:a3:9f:ab:f8:a8:f4:
                    06:4f:72:34:ec:61:e4:95:47:3a:19:83:dc:89:2f:
                    aa:31:58:9c:20:6f:14:7c:cd:5b:97:95:9b:d0:4f:
                    12:fe:c1:55:5b:b5:6f:a7:39:12:79:34:a6:30:19:
                    f1:63:f5:2f:61:06:e9:b8:5a:6d:fb:da:2f:4f:6f:
                    bd:5c:94:22:ec:6c:ce:c4:56:ad:23:66:af:ed:39:
                    c1:b8:7f:79:ce:41:50:ef:b2:79:ab:74:0b:1f:3a:
                    8f:42:51:69:a3:bc:32:21:90:f0:30:07:0c:29:c3:
                    14:f2:62:0b:5a:d8:bb:17:b4:95:89:34:5d:7d:b1:
                    b1:95:79:48:00:34:53:fd:43:5f:9b:e2:d0:1f:ea:
                    d1:dc:09:e4:2a:d5:2f:99:6f:31:30:1a:a3:20:bc:
                    c6:b5:35:54:5e:71:fe:01:eb:05:01:27:00:9e:9a:
                    49:e6:f4:9c:0e:e0:b9:b7:35:42:86:8c:21:e1:9c:
                    34:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:BD:C7:46:29:E4:2B:3F:11:A6:AB:FA:67:69:B8:25:78:EF:8A:FB
            X509v3 Authority Key Identifier:
                keyid:A6:61:E6:11:5F:38:C5:0B:4D:4C:5B:E3:FA:48:8E:D8:05:8C:C2:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3672189/38C85C46912A11EF98AA067A762E951A/pmHmEV84xQtNTFvj-kiO2AWMwvE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/pmHmEV84xQtNTFvj-kiO2AWMwvE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3672189/38C85C46912A11EF98AA067A762E951A/pmHmEV84xQtNTFvj-kiO2AWMwvE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:9c:cb:3e:34:0e:e5:cf:01:32:1b:14:e2:cd:2b:11:a2:cb:
         e1:85:12:45:2d:37:8a:58:54:44:9a:a5:2d:6a:61:12:21:31:
         67:ec:33:30:64:a1:da:dc:de:32:1e:6c:6f:97:59:e9:d7:a0:
         f3:7d:ae:21:02:25:51:de:a8:4c:20:e6:bd:cb:ca:26:22:7e:
         f2:88:8c:70:6a:ce:0e:e9:4c:ab:95:13:2c:51:46:63:a0:ff:
         5d:75:1b:08:cc:0e:b1:5a:f8:e5:f6:a7:fa:02:7d:07:9f:98:
         ae:0b:f4:21:a0:ca:1f:a5:40:e0:6c:d0:65:43:91:9f:b5:10:
         fe:72:f9:51:be:dc:86:2b:a2:56:4e:d9:48:63:6b:32:37:cf:
         b5:e9:67:2f:38:bb:25:db:57:4f:fc:8b:db:6c:8b:32:1f:8f:
         59:93:ae:40:65:c5:25:81:14:04:3c:b7:ea:c3:23:01:e8:10:
         d9:06:32:9a:93:c5:3b:e6:5a:41:14:7e:76:bb:8f:fa:3e:18:
         fb:42:4c:d5:bc:91:cf:dd:cc:6f:cb:ff:f3:ab:39:09:71:c8:
         ce:e2:53:01:66:26:ca:98:d9:fe:15:eb:7a:72:94:14:8e:6e:
         a4:c7:a2:84:bd:2f:6f:50:1a:4f:cf:91:de:2a:54:a0:d1:6d:
         30:ac:15:d2
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAi0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NzIxODlBRjExMC8GA1UEBRMoQTY2MUU2MTE1RjM4QzUwQjRENEM1QkUzRkE0ODhF
RDgwNThDQzJGMTAeFw0yNjA0MTcwNDM0NDZaFw0yNjA0MTkwNDM0NDZaMBgxFjAU
BgNVBAMTDTY5ZTFiODY3LTFjNjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCq7HxfIk0HvxyfQBcKmsz1lwY96VGQHeZKxf4A9rRks0GO8uxDMYNN1Q3X
ywrEHUh5/aB+i746yC8y+t0jZ2UuMMo1+aOfq/io9AZPcjTsYeSVRzoZg9yJL6ox
WJwgbxR8zVuXlZvQTxL+wVVbtW+nORJ5NKYwGfFj9S9hBum4Wm372i9Pb71clCLs
bM7EVq0jZq/tOcG4f3nOQVDvsnmrdAsfOo9CUWmjvDIhkPAwBwwpwxTyYgta2LsX
tJWJNF19sbGVeUgANFP9Q1+b4tAf6tHcCeQq1S+ZbzEwGqMgvMa1NVRecf4B6wUB
JwCemknm9JwO4Lm3NUKGjCHhnDR3AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUR73H
RinkKz8Rpqv6Z2m4JXjvivswHwYDVR0jBBgwFoAUpmHmEV84xQtNTFvj+kiO2AWM
wvEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjcyMTg5LzM4Qzg1QzQ2OTEyQTExRUY5OEFBMDY3QTc2MkU5NTFBL3BtSG1F
Vjg0eFF0TlRGdmota2lPMkFXTXd2RS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3BtSG1FVjg0eFF0TlRGdmota2lPMkFXTXd2RS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NzIxODkvMzhDODVDNDY5MTJBMTFFRjk4QUEwNjdBNzYy
RTk1MUEvcG1IbUVWODR4UXROVEZ2ai1raU8yQVdNd3ZFLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAanMs+NA7lzwEyGxTizSsRosvhhRJF
LTeKWFREmqUtamESITFn7DMwZKHa3N4yHmxvl1np16Dzfa4hAiVR3qhMIOa9y8om
In7yiIxwas4O6UyrlRMsUUZjoP9ddRsIzA6xWvjl9qf6An0Hn5iuC/QhoMofpUDg
bNBlQ5GftRD+cvlRvtyGK6JWTtlIY2syN8+16WcvOLsl21dP/IvbbIsyH49Zk65A
ZcUlgRQEPLfqwyMB6BDZBjKak8U75lpBFH52u4/6Phj7QkzVvJHP3cxvy//zqzkJ
ccjO4lMBZibKmNn+Fet6cpQUjm6kx6KEvS9vUBpPz5HeKlSg0W0wrBXS
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:54:20 2026 by rpki-client