Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B8D1/2F69E8C221F011EE8646970F4AD9E6FC/ZbPoGBw9qNHWQehKRcjvgjndfqc.mft
File:                     ZbPoGBw9qNHWQehKRcjvgjndfqc.mft (raw, json)
Hash identifier:          402NRSVpj0ZKcpJM8SNjC+C2pZPMypzvJxNhYd/SpNI=
Subject key identifier:   F1:DF:2E:85:0D:88:B0:3E:7A:03:AD:10:D3:96:D2:3D:31:AC:89:1C
Authority key identifier: 65:B3:E8:18:1C:3D:A8:D1:D6:41:E8:4A:45:C8:EF:82:39:DD:7E:A7
Certificate issuer:       /CN=F367B8D1RI/serialNumber=65B3E8181C3DA8D1D641E84A45C8EF8239DD7EA7
Certificate serial:       0414
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/ZbPoGBw9qNHWQehKRcjvgjndfqc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/2F69E8C221F011EE8646970F4AD9E6FC/ZbPoGBw9qNHWQehKRcjvgjndfqc.mft
Manifest number:          0412
Signing time:             Sat 18 Apr 2026 03:32:54 +0000
Manifest this update:     Sat 18 Apr 2026 03:32:54 +0000
Manifest next update:     Mon 20 Apr 2026 03:32:54 +0000
Files and hashes:         1: ZbPoGBw9qNHWQehKRcjvgjndfqc.crl (hash: lsfDkgFPgbHV2LE9xHSfBLMzoUuMCvfStNThFnuWy40=)
                          2: 705538E8F23411F0ABE2AFDCDAE4EC9C.roa (hash: +jhpv0hpOYh5YDao9lohBm7A/3HpwqG1brbR9Ufglgk=)
                          3: 2CF4F1D0F23211F0AF31EACFDAE4EC9C.roa (hash: Kw9yZHPeCDbD4dtkgjG9vBqQvYKkUDgIRAQiwyBUt8w=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/2F69E8C221F011EE8646970F4AD9E6FC/ZbPoGBw9qNHWQehKRcjvgjndfqc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/2F69E8C221F011EE8646970F4AD9E6FC/ZbPoGBw9qNHWQehKRcjvgjndfqc.mft
                          rsync://rpki.afrinic.net/repository/ripe/ZbPoGBw9qNHWQehKRcjvgjndfqc.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 20 Apr 2026 00:45:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1044 (0x414)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367B8D1RI, serialNumber=65B3E8181C3DA8D1D641E84A45C8EF8239DD7EA7
        Validity
            Not Before: Apr 18 03:32:54 2026 GMT
            Not After : Apr 20 03:32:54 2026 GMT
        Subject: CN=69e2fb66-fa1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:cc:68:bf:af:6b:74:6f:44:7d:48:d7:27:fe:
                    7b:c1:a2:a9:87:65:05:c4:44:a4:32:74:9a:8c:71:
                    4b:98:b3:ed:df:47:11:6e:03:69:33:bf:f7:12:38:
                    36:04:e9:ed:80:09:e2:77:c1:e3:af:bf:fa:d6:54:
                    72:70:32:4d:22:fb:45:34:1f:2a:30:05:7c:c4:b3:
                    bc:5c:50:ec:d7:a3:b7:ea:58:ae:e5:e6:ab:bb:7f:
                    3a:6f:93:e2:36:7a:fb:23:57:0d:56:7e:2f:2d:65:
                    83:90:44:04:74:27:e1:dc:ad:e3:37:1e:dc:6a:dc:
                    07:68:b8:76:c9:ec:bd:87:48:35:03:21:67:31:27:
                    84:13:fd:4f:63:5b:8c:75:e2:bf:3e:85:c8:f1:3b:
                    e3:bf:7a:e7:54:49:81:e3:a7:cd:ef:ad:9f:d9:fd:
                    ef:b0:27:84:0f:6a:32:0a:ae:09:95:ed:bd:46:c6:
                    fa:96:04:98:57:5d:bc:ae:62:28:16:37:b5:ed:50:
                    22:25:18:59:8b:f1:87:cb:34:28:27:6c:5e:a9:7c:
                    74:fc:16:40:d2:d8:71:b0:bd:10:25:bf:fe:91:73:
                    13:a0:d9:95:f6:0f:f2:55:40:f2:92:07:35:9b:51:
                    f4:3e:a4:0e:e2:18:e1:fd:fb:1e:26:ec:9a:fb:0e:
                    a3:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:DF:2E:85:0D:88:B0:3E:7A:03:AD:10:D3:96:D2:3D:31:AC:89:1C
            X509v3 Authority Key Identifier:
                keyid:65:B3:E8:18:1C:3D:A8:D1:D6:41:E8:4A:45:C8:EF:82:39:DD:7E:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/2F69E8C221F011EE8646970F4AD9E6FC/ZbPoGBw9qNHWQehKRcjvgjndfqc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/ZbPoGBw9qNHWQehKRcjvgjndfqc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/2F69E8C221F011EE8646970F4AD9E6FC/ZbPoGBw9qNHWQehKRcjvgjndfqc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:05:43:79:ab:b2:6c:76:7a:57:23:58:72:ce:69:02:44:d4:
         d2:c4:1f:ed:d1:66:98:b6:64:a8:64:d7:d1:9d:2e:12:4a:31:
         e1:1d:30:d3:dd:2a:ec:74:15:0e:3c:f3:53:3a:f2:78:2b:eb:
         a0:06:6a:06:e5:27:98:47:61:62:29:3b:64:4c:00:b9:ca:b2:
         f5:8a:9f:09:fd:64:4f:4f:77:65:a7:eb:55:c7:0a:ce:9e:a1:
         25:e1:97:f6:4c:fc:a3:1b:02:56:ad:7b:a6:26:b5:b9:9f:06:
         a7:92:d9:e4:9f:e7:fd:ef:59:e0:fd:40:8d:fc:08:06:5b:c5:
         f2:9d:eb:24:60:34:58:6c:7c:a3:58:9a:1c:bd:6b:5c:ce:56:
         92:7e:65:b2:4c:6a:3b:ea:77:e9:88:be:40:8b:29:f9:1c:4e:
         53:09:fd:fa:c8:89:d4:6d:ef:9e:b6:36:93:6d:c6:32:ac:e3:
         ee:97:f3:f1:e9:af:13:4f:d8:ec:5c:aa:79:04:88:ee:5b:6a:
         f6:2c:cb:b0:dc:9c:22:86:98:cb:a1:0c:6b:15:43:70:fb:7c:
         6d:c6:eb:4b:76:39:24:bd:68:49:da:89:a2:d5:62:b8:d2:79:
         4f:17:d5:6e:22:2f:36:32:ef:47:6f:b1:68:00:1a:84:60:b6:
         d8:e2:7c:9c
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICBBQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
N0I4RDFSSTExMC8GA1UEBRMoNjVCM0U4MTgxQzNEQThEMUQ2NDFFODRBNDVDOEVG
ODIzOUREN0VBNzAeFw0yNjA0MTgwMzMyNTRaFw0yNjA0MjAwMzMyNTRaMBgxFjAU
BgNVBAMTDTY5ZTJmYjY2LWZhMWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDRzGi/r2t0b0R9SNcn/nvBoqmHZQXERKQydJqMcUuYs+3fRxFuA2kzv/cS
ODYE6e2ACeJ3weOvv/rWVHJwMk0i+0U0HyowBXzEs7xcUOzXo7fqWK7l5qu7fzpv
k+I2evsjVw1Wfi8tZYOQRAR0J+HcreM3Htxq3AdouHbJ7L2HSDUDIWcxJ4QT/U9j
W4x14r8+hcjxO+O/eudUSYHjp83vrZ/Z/e+wJ4QPajIKrgmV7b1GxvqWBJhXXbyu
YigWN7XtUCIlGFmL8YfLNCgnbF6pfHT8FkDS2HGwvRAlv/6RcxOg2ZX2D/JVQPKS
BzWbUfQ+pA7iGOH9+x4m7Jr7DqP/AgMBAAGjggK1MIICsTAdBgNVHQ4EFgQU8d8u
hQ2IsD56A60Q05bSPTGsiRwwHwYDVR0jBBgwFoAUZbPoGBw9qNHWQehKRcjvgjnd
fqcwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjdCOEQxLzJGNjlFOEMyMjFGMDExRUU4NjQ2OTcwRjRBRDlFNkZDL1piUG9H
Qnc5cU5IV1FlaEtSY2p2Z2puZGZxYy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9yaXBl
L1piUG9HQnc5cU5IV1FlaEtSY2p2Z2puZGZxYy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2N0I4RDEvMkY2OUU4QzIyMUYwMTFFRTg2NDY5NzBGNEFEOUU2
RkMvWmJQb0dCdzlxTkhXUWVoS1JjanZnam5kZnFjLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC0BUN5q7JsdnpXI1hyzmkCRNTSxB/t0WaY
tmSoZNfRnS4SSjHhHTDT3SrsdBUOPPNTOvJ4K+ugBmoG5SeYR2FiKTtkTAC5yrL1
ip8J/WRPT3dlp+tVxwrOnqEl4Zf2TPyjGwJWrXumJrW5nwanktnkn+f971ng/UCN
/AgGW8XyneskYDRYbHyjWJocvWtczlaSfmWyTGo76nfpiL5Aiyn5HE5TCf36yInU
be+etjaTbcYyrOPul/Px6a8TT9jsXKp5BIjuW2r2LMuw3JwihpjLoQxrFUNw+3xt
xutLdjkkvWhJ2omi1WK40nlPF9VuIi82Mu9Hb7FoABqEYLbY4nyc
-----END CERTIFICATE-----
Generated at Sat Apr 18 05:50:55 2026 by rpki-client