Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36746EB/0C564C5E5E4711ECB9A1AED95A40D577/KxftsiWoqa1OodSC-tfzt4JwvaQ.mft
File:                     KxftsiWoqa1OodSC-tfzt4JwvaQ.mft (raw, json)
Hash identifier:          9w/P30wAn03etE8HkXemP7yuke7JuETxNjKOSqA/osI=
Subject key identifier:   AF:32:06:AF:DB:F0:38:96:EA:D2:1F:61:89:C6:59:36:F3:B9:D2:45
Authority key identifier: 2B:17:ED:B2:25:A8:A9:AD:4E:A1:D4:82:FA:D7:F3:B7:82:70:BD:A4
Certificate issuer:       /CN=F36746EBAF/serialNumber=2B17EDB225A8A9AD4EA1D482FAD7F3B78270BDA4
Certificate serial:       065C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/KxftsiWoqa1OodSC-tfzt4JwvaQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36746EB/0C564C5E5E4711ECB9A1AED95A40D577/KxftsiWoqa1OodSC-tfzt4JwvaQ.mft
Manifest number:          065B
Signing time:             Sun 19 Apr 2026 02:33:28 +0000
Manifest this update:     Sun 19 Apr 2026 02:33:27 +0000
Manifest next update:     Tue 21 Apr 2026 02:33:27 +0000
Files and hashes:         1: KxftsiWoqa1OodSC-tfzt4JwvaQ.crl (hash: OQZP8IbXT+0ZRpnjpzcCwytdTHxAzE7+ISUa6VKzBkg=)
                          2: 0755AE8C5E4911EC910446DF5A40D577.roa (hash: AItjzWPSlit+SXvmdCFmobWIhqJxwMx7F/NvBd+HRhQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36746EB/0C564C5E5E4711ECB9A1AED95A40D577/KxftsiWoqa1OodSC-tfzt4JwvaQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36746EB/0C564C5E5E4711ECB9A1AED95A40D577/KxftsiWoqa1OodSC-tfzt4JwvaQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/KxftsiWoqa1OodSC-tfzt4JwvaQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 21 Apr 2026 00:07:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1628 (0x65c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36746EBAF, serialNumber=2B17EDB225A8A9AD4EA1D482FAD7F3B78270BDA4
        Validity
            Not Before: Apr 19 02:33:27 2026 GMT
            Not After : Apr 21 02:33:27 2026 GMT
        Subject: CN=69e43ef8-0bde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:03:64:98:32:19:7d:54:bb:10:3c:26:86:77:
                    44:cd:f3:2d:30:4f:9a:ee:1f:8e:c6:c2:17:d4:59:
                    83:dc:15:8b:02:86:15:14:40:16:c2:b3:d7:73:52:
                    b2:e5:b3:da:25:4f:a0:4f:71:0a:25:15:b9:1b:48:
                    d4:b8:67:a0:15:2a:08:13:6b:72:06:f0:ab:53:3d:
                    e0:d3:ae:69:6c:50:85:f7:04:af:f4:c5:17:fc:9b:
                    d8:76:9e:6c:c3:c7:d6:98:03:f5:4b:fa:8a:69:0c:
                    34:67:db:f9:14:df:be:7b:fa:fe:9d:c4:86:a9:ee:
                    00:42:fd:cd:70:85:81:2f:fc:dc:cb:23:8e:a1:07:
                    6d:8e:39:12:97:d4:58:d3:4a:97:3b:5e:bc:bc:be:
                    fa:4c:e7:5c:ea:fe:91:93:4d:93:1b:6e:68:e2:07:
                    75:8e:eb:ab:3e:19:2a:92:8a:68:4d:c7:52:4e:ad:
                    94:38:ac:ff:d5:ab:2c:31:e7:dd:33:9a:c9:36:16:
                    40:22:ac:92:82:d4:c1:43:69:19:de:ce:77:ca:c4:
                    7a:a7:ff:8a:46:04:a4:28:cc:07:80:db:8c:09:0a:
                    73:e2:91:fe:6d:ee:85:be:a9:7b:da:84:a5:1b:cc:
                    ef:66:c9:b5:9a:f9:fa:19:8e:d5:12:ad:44:29:1e:
                    fc:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:32:06:AF:DB:F0:38:96:EA:D2:1F:61:89:C6:59:36:F3:B9:D2:45
            X509v3 Authority Key Identifier:
                keyid:2B:17:ED:B2:25:A8:A9:AD:4E:A1:D4:82:FA:D7:F3:B7:82:70:BD:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36746EB/0C564C5E5E4711ECB9A1AED95A40D577/KxftsiWoqa1OodSC-tfzt4JwvaQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KxftsiWoqa1OodSC-tfzt4JwvaQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36746EB/0C564C5E5E4711ECB9A1AED95A40D577/KxftsiWoqa1OodSC-tfzt4JwvaQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:1b:b1:e8:27:d2:77:85:79:43:79:11:22:2a:cb:71:af:01:
         bf:dc:1b:3d:c0:9f:c0:91:62:1d:be:62:25:a5:27:c2:27:38:
         1f:cd:c6:f5:7a:7a:2a:68:1c:cc:80:30:41:44:8e:7f:df:b6:
         24:b2:13:ff:ee:dd:f2:b1:2a:97:b0:53:0d:c6:33:a2:00:53:
         69:0d:c8:01:ea:4f:df:ed:ff:c4:6c:94:bc:28:0c:a3:a0:98:
         e5:f5:59:3d:f5:b9:80:5f:26:8a:84:39:6f:80:83:53:93:44:
         df:50:0e:a7:54:49:6c:e3:ef:8e:8d:3f:fa:b2:cd:9e:89:cd:
         be:2c:4c:7b:e8:55:47:cc:0e:c6:ef:40:86:07:e6:06:ca:3f:
         86:3e:55:fa:ca:70:23:df:11:b6:40:1d:ec:eb:27:7c:67:51:
         0a:06:32:cd:0d:32:f7:63:e7:58:9a:05:28:f2:59:ff:c0:2f:
         c0:86:00:d7:3c:b2:8d:61:4b:c8:79:19:cb:8b:4a:dc:92:81:
         b9:94:3a:5c:4c:87:4d:0f:07:6c:39:c1:3b:33:96:25:c5:61:
         0d:e3:99:81:f1:82:4a:8d:a8:ae:18:dd:2c:59:94:00:d3:43:
         09:40:07:7d:29:82:8b:a3:97:3e:a3:e9:cc:11:cc:11:f9:81:
         e8:1c:da:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:29:10 2026 by rpki-client