Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36722D4/083238166BC011EFB4588370762E951A/eTxZut8MgIiYVmBdo1tuaNOiHCc.mft
File:                     eTxZut8MgIiYVmBdo1tuaNOiHCc.mft (raw, json)
Hash identifier:          /G4BwXjGp+KmNN1CUysK1iRroAPJ5SXLjOudgZNK83o=
Subject key identifier:   C0:E9:5F:B9:8A:7F:CD:FD:13:43:C0:21:73:22:31:2B:D5:6E:D5:B2
Authority key identifier: 79:3C:59:BA:DF:0C:80:88:98:56:60:5D:A3:5B:6E:68:D3:A2:1C:27
Certificate issuer:       /CN=F36722D4AF/serialNumber=793C59BADF0C80889856605DA35B6E68D3A21C27
Certificate serial:       025D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/eTxZut8MgIiYVmBdo1tuaNOiHCc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36722D4/083238166BC011EFB4588370762E951A/eTxZut8MgIiYVmBdo1tuaNOiHCc.mft
Manifest number:          025C
Signing time:             Fri 17 Apr 2026 04:26:26 +0000
Manifest this update:     Fri 17 Apr 2026 04:26:25 +0000
Manifest next update:     Sun 19 Apr 2026 04:26:25 +0000
Files and hashes:         1: eTxZut8MgIiYVmBdo1tuaNOiHCc.crl (hash: iA4IO5gGcVffEDlpooGEE0J0ujONh67W6eITMNffEC8=)
                          2: CD629ACC283911F19459E1D6DAE4EC9C.roa (hash: qPit9p6L2vy+4Gs/Kz5RznJquqAkXnHPYQx08zDmu40=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36722D4/083238166BC011EFB4588370762E951A/eTxZut8MgIiYVmBdo1tuaNOiHCc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36722D4/083238166BC011EFB4588370762E951A/eTxZut8MgIiYVmBdo1tuaNOiHCc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/eTxZut8MgIiYVmBdo1tuaNOiHCc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 04:26:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 605 (0x25d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36722D4AF, serialNumber=793C59BADF0C80889856605DA35B6E68D3A21C27
        Validity
            Not Before: Apr 17 04:26:25 2026 GMT
            Not After : Apr 19 04:26:25 2026 GMT
        Subject: CN=69e1b672-799e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:bb:12:53:63:c8:59:32:94:ca:18:1f:dc:81:
                    48:ee:b2:3f:89:9f:14:01:67:ee:33:0a:86:38:14:
                    04:3f:94:c1:c0:94:52:91:f8:31:93:1f:a9:6e:2f:
                    16:38:0e:5c:93:39:cc:e5:02:18:c4:0f:af:1b:0d:
                    1e:83:45:59:61:c0:48:be:78:72:89:6d:44:9b:6d:
                    4d:b2:73:2f:98:5e:57:f3:bc:f3:3a:6a:1c:e0:66:
                    1f:de:58:d9:64:00:e3:c1:36:87:57:ea:97:6e:ff:
                    68:09:d4:8f:32:94:a4:2a:a3:4f:6a:c3:58:0f:55:
                    39:8c:63:4b:4b:c7:42:e5:dd:a8:33:13:a1:87:ca:
                    b0:ef:c8:dd:d7:07:10:13:c3:ef:69:bd:72:0c:f3:
                    f3:17:e4:d4:2f:4a:91:10:77:6e:51:e2:aa:61:e8:
                    27:c4:46:90:59:58:3a:72:aa:5a:98:07:f0:5b:af:
                    d8:23:e8:ba:24:ae:82:97:5f:34:9f:1d:52:2f:65:
                    4a:21:f4:60:73:45:26:eb:ae:4b:ba:fd:7f:a7:ba:
                    1d:e7:07:73:5c:6b:b2:27:19:3f:b3:93:85:13:21:
                    04:ca:f7:3c:ba:33:df:ba:7c:dc:04:15:1d:8d:40:
                    92:8b:51:91:b9:91:9d:cd:45:89:ce:84:a4:d6:53:
                    fd:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:E9:5F:B9:8A:7F:CD:FD:13:43:C0:21:73:22:31:2B:D5:6E:D5:B2
            X509v3 Authority Key Identifier:
                keyid:79:3C:59:BA:DF:0C:80:88:98:56:60:5D:A3:5B:6E:68:D3:A2:1C:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36722D4/083238166BC011EFB4588370762E951A/eTxZut8MgIiYVmBdo1tuaNOiHCc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/eTxZut8MgIiYVmBdo1tuaNOiHCc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36722D4/083238166BC011EFB4588370762E951A/eTxZut8MgIiYVmBdo1tuaNOiHCc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:1e:ac:f6:4f:1e:ee:8e:84:09:61:3d:c4:d5:0c:eb:56:8e:
         ce:51:5d:e0:2f:d1:fc:d2:88:5b:2c:e3:20:88:ea:83:89:57:
         68:91:64:7e:0f:15:e2:77:ec:8b:59:c0:5d:90:26:35:41:83:
         cd:51:03:74:2f:a7:15:e0:b3:59:18:0c:0f:4d:22:a2:86:d9:
         2b:6f:3d:1d:f8:aa:f6:2b:d1:cc:a8:f5:d3:21:da:16:65:3e:
         92:59:1d:2f:8d:6e:f9:37:63:e7:78:3b:21:d0:c2:13:e3:54:
         37:ce:c2:79:86:22:4e:bb:d7:ef:e2:a0:9c:0d:b9:37:8b:28:
         01:e5:af:03:12:94:a0:5a:02:26:25:6b:47:53:80:e5:f9:1f:
         01:67:8e:e7:55:5f:7f:5a:7d:94:05:2d:d4:3e:11:e4:59:3e:
         93:f0:79:26:2b:c0:ef:26:e1:be:b5:71:16:02:d0:02:fe:a2:
         42:a5:7e:d1:15:cd:96:43:60:38:f4:07:d6:14:f3:71:b1:73:
         63:14:77:6c:69:6d:9c:bb:70:a2:5c:42:91:e6:82:e4:d4:36:
         8e:a5:c6:65:da:c1:8f:ab:54:a7:a7:1b:85:1f:0b:cd:19:2f:
         e5:05:8b:11:a1:16:ab:c5:e5:43:82:c0:6c:09:b7:33:b9:26:
         e3:e4:a4:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:43:12 2026 by rpki-client