Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367F26D/3F4041FC70B911E9A7F25D3FF8AEA228/nYezEXqhvXgot91GTXMHa66NzJY.mft
File:                     nYezEXqhvXgot91GTXMHa66NzJY.mft (raw, json)
Hash identifier:          wE8zJiJBcRIAbZnxzbZ14LPOqaooxNR/9G0Wij20GSM=
Subject key identifier:   3D:57:2B:05:12:09:8B:96:DF:FE:39:78:D2:61:DA:87:2C:75:44:DA
Authority key identifier: 9D:87:B3:11:7A:A1:BD:78:28:B7:DD:46:4D:73:07:6B:AE:8D:CC:96
Certificate issuer:       /CN=F367F26DRI/serialNumber=9D87B3117AA1BD7828B7DD464D73076BAE8DCC96
Certificate serial:       0A36
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/nYezEXqhvXgot91GTXMHa66NzJY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367F26D/3F4041FC70B911E9A7F25D3FF8AEA228/nYezEXqhvXgot91GTXMHa66NzJY.mft
Manifest number:          0A31
Signing time:             Fri 17 Apr 2026 01:18:38 +0000
Manifest this update:     Fri 17 Apr 2026 01:18:37 +0000
Manifest next update:     Sun 19 Apr 2026 01:18:37 +0000
Files and hashes:         1: nYezEXqhvXgot91GTXMHa66NzJY.crl (hash: 2quZEMvpz6BgBQAurkawkc4h/cbyZo+pj/M6sRZO7wA=)
                          2: 2080E9B0188C11F1AB23ECE6DAE4EC9C.roa (hash: 7+2h/hAR0ZH797eWYPIRfzQR4D387dc0Npd3o5pHyjg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367F26D/3F4041FC70B911E9A7F25D3FF8AEA228/nYezEXqhvXgot91GTXMHa66NzJY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367F26D/3F4041FC70B911E9A7F25D3FF8AEA228/nYezEXqhvXgot91GTXMHa66NzJY.mft
                          rsync://rpki.afrinic.net/repository/ripe/nYezEXqhvXgot91GTXMHa66NzJY.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 00:45:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2614 (0xa36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367F26DRI, serialNumber=9D87B3117AA1BD7828B7DD464D73076BAE8DCC96
        Validity
            Not Before: Apr 17 01:18:37 2026 GMT
            Not After : Apr 19 01:18:37 2026 GMT
        Subject: CN=69e18a6e-3cba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:cf:a6:72:3e:be:ae:d1:80:62:0f:b5:ec:9c:
                    09:a2:60:08:ef:a4:e1:19:93:25:de:6d:56:2f:ba:
                    af:c0:bc:63:93:3a:6f:1d:ba:8c:43:cd:56:ee:32:
                    62:72:88:c2:d4:03:71:e5:99:df:51:5d:a9:7b:83:
                    40:e4:c6:92:48:6d:24:c7:3d:08:0f:43:8c:fa:c7:
                    4c:93:a5:b5:24:43:ab:1c:b3:e5:e9:1a:32:84:09:
                    16:5d:8c:49:88:82:9a:9c:a6:f0:f9:3c:d0:06:89:
                    42:4c:5d:06:f0:b5:e7:39:8e:61:98:96:ca:62:30:
                    c8:69:af:ae:15:4b:de:8c:c2:69:67:a4:f2:c2:e4:
                    3e:ab:2d:64:da:3b:ed:83:d1:bf:64:ff:8b:78:6a:
                    5e:72:e5:9f:f9:14:da:91:2a:bf:20:48:83:94:70:
                    41:40:05:af:3d:a5:1c:17:15:58:65:5b:a9:66:02:
                    73:a4:fb:f7:07:73:d0:43:4b:f4:79:90:42:aa:1a:
                    d7:89:13:56:4c:7b:a1:2b:a7:6a:b5:78:af:d0:33:
                    86:3c:ed:80:12:2e:c7:7f:cb:c2:f1:a6:6d:58:1d:
                    89:f1:f6:98:4f:e2:38:1e:60:cf:51:10:87:0b:0f:
                    9b:c5:be:ec:a3:7c:f6:70:df:18:4a:dc:de:2a:eb:
                    e7:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:57:2B:05:12:09:8B:96:DF:FE:39:78:D2:61:DA:87:2C:75:44:DA
            X509v3 Authority Key Identifier:
                keyid:9D:87:B3:11:7A:A1:BD:78:28:B7:DD:46:4D:73:07:6B:AE:8D:CC:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367F26D/3F4041FC70B911E9A7F25D3FF8AEA228/nYezEXqhvXgot91GTXMHa66NzJY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/nYezEXqhvXgot91GTXMHa66NzJY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367F26D/3F4041FC70B911E9A7F25D3FF8AEA228/nYezEXqhvXgot91GTXMHa66NzJY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:d5:b9:b1:50:a2:e9:66:2f:64:d0:2d:eb:7a:61:86:cd:64:
         1e:2b:1f:ba:81:03:54:38:ad:77:cc:6b:08:75:8a:6c:39:2b:
         cf:5a:52:1e:d7:04:d4:71:00:bd:b9:14:71:7a:c7:49:88:13:
         8a:cd:40:ee:27:a6:b4:cb:cb:2d:1e:2b:57:9b:96:43:12:c3:
         47:b7:57:f0:a8:a5:64:c9:cc:6c:0b:6d:c8:ec:1e:5f:4a:fa:
         78:f6:9b:29:a0:12:32:ac:f9:23:a6:1e:34:f6:c0:ef:51:df:
         24:5a:4d:4b:5f:88:50:0e:d5:70:f0:f9:d8:c8:3b:15:86:4d:
         bc:d9:e7:78:ef:4d:35:9b:c3:0d:04:23:fe:c5:db:c9:d3:18:
         77:a7:5d:41:f0:d6:f4:77:1f:d5:58:76:12:69:67:49:3b:b3:
         81:90:2a:dc:14:7e:19:63:40:ea:89:b8:20:19:7b:23:11:68:
         26:50:23:93:a6:ca:2a:4e:48:02:2f:ef:04:2f:e8:e6:4f:8c:
         4c:09:bd:67:19:f4:84:9d:17:e6:c2:bc:f1:8f:f5:08:05:ad:
         bf:68:1f:5a:7f:a3:a6:8c:ba:96:de:ce:e8:e7:ec:22:bd:40:
         ac:32:36:71:54:4c:fc:c8:ee:9b:7a:b7:4d:fb:bd:eb:d9:29:
         c1:e1:fe:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:32:34 2026 by rpki-client