Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36818C8/E820A7FCF9F211EBAC18522DD8A014CE/Ic9mCQ8NCPeTru46mq74zw9BMAs.mft
File:                     Ic9mCQ8NCPeTru46mq74zw9BMAs.mft (raw, json)
Hash identifier:          NdzlQ2DzqqRBJ8hdoNc407iWS0KDSr8GpHmouhoVAEs=
Subject key identifier:   CB:22:E1:DD:6B:B1:F5:FC:40:73:CB:7A:AB:EF:92:0D:8F:D8:C6:2A
Authority key identifier: 21:CF:66:09:0F:0D:08:F7:93:AE:EE:3A:9A:AE:F8:CF:0F:41:30:0B
Certificate issuer:       /CN=F36818C8AF/serialNumber=21CF66090F0D08F793AEEE3A9AAEF8CF0F41300B
Certificate serial:       06E0
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Ic9mCQ8NCPeTru46mq74zw9BMAs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36818C8/E820A7FCF9F211EBAC18522DD8A014CE/Ic9mCQ8NCPeTru46mq74zw9BMAs.mft
Manifest number:          06DD
Signing time:             Fri 17 Apr 2026 02:11:18 +0000
Manifest this update:     Fri 17 Apr 2026 02:11:17 +0000
Manifest next update:     Sun 19 Apr 2026 02:11:17 +0000
Files and hashes:         1: Ic9mCQ8NCPeTru46mq74zw9BMAs.crl (hash: wJpfLvHXDMzQ5cjN7oy9WCcg1cuqZDJ7xrgRo7SZyLk=)
                          2: E0505504C53611F09BAB2BC1DAE4EC9C.roa (hash: quGCMeMgrGs/I61IGIUq5ARCX8eAFzJjwoxXSU6rXcg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36818C8/E820A7FCF9F211EBAC18522DD8A014CE/Ic9mCQ8NCPeTru46mq74zw9BMAs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36818C8/E820A7FCF9F211EBAC18522DD8A014CE/Ic9mCQ8NCPeTru46mq74zw9BMAs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Ic9mCQ8NCPeTru46mq74zw9BMAs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 02:11:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1760 (0x6e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36818C8AF, serialNumber=21CF66090F0D08F793AEEE3A9AAEF8CF0F41300B
        Validity
            Not Before: Apr 17 02:11:17 2026 GMT
            Not After : Apr 19 02:11:17 2026 GMT
        Subject: CN=69e196c6-19ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:52:e0:00:ef:37:1d:eb:38:5d:79:65:b5:26:
                    b1:3f:c0:a6:2f:25:8a:4b:66:86:d6:75:70:6f:02:
                    18:f4:5c:4b:68:69:44:db:da:c2:25:01:4a:f6:73:
                    4b:19:52:e5:b6:8e:09:4a:04:ed:b5:1b:53:33:d2:
                    0d:37:6d:24:9d:19:89:c5:15:51:74:41:cb:b3:8a:
                    38:ea:3b:10:e9:c8:88:c9:e3:70:4e:40:d6:4a:2a:
                    ef:0b:ab:07:03:3f:16:a3:89:4f:f7:55:0c:ff:61:
                    ef:95:a8:a4:4b:36:f7:8b:99:13:3b:d8:78:f5:b6:
                    00:72:e2:95:f4:0c:4c:b5:1f:94:1f:38:e7:87:5a:
                    76:38:bf:f7:55:ff:c9:64:52:89:d5:79:ef:00:2c:
                    20:da:6c:13:cc:41:38:38:2e:2c:38:4a:f6:cc:e3:
                    1d:2b:4f:ee:02:86:20:9f:8a:99:e1:73:f3:68:1f:
                    ce:5d:82:ff:7c:77:d3:01:78:cd:99:33:c7:cd:70:
                    a9:1d:83:5a:91:82:e3:f9:13:7f:2e:22:34:93:0c:
                    6d:1d:cc:db:94:26:76:05:82:60:27:8f:36:87:a3:
                    90:38:91:4a:00:09:b7:81:6b:c4:c1:d8:c5:1c:85:
                    e4:40:89:ce:63:59:88:83:d4:aa:2a:d0:ca:b9:83:
                    0b:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:22:E1:DD:6B:B1:F5:FC:40:73:CB:7A:AB:EF:92:0D:8F:D8:C6:2A
            X509v3 Authority Key Identifier:
                keyid:21:CF:66:09:0F:0D:08:F7:93:AE:EE:3A:9A:AE:F8:CF:0F:41:30:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36818C8/E820A7FCF9F211EBAC18522DD8A014CE/Ic9mCQ8NCPeTru46mq74zw9BMAs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Ic9mCQ8NCPeTru46mq74zw9BMAs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36818C8/E820A7FCF9F211EBAC18522DD8A014CE/Ic9mCQ8NCPeTru46mq74zw9BMAs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:e5:a2:c0:b1:3f:fd:56:5f:3d:aa:6e:84:c8:2a:b4:6d:af:
         4b:8a:94:c6:0b:71:32:65:be:e4:b7:b7:a7:06:83:f7:6b:c2:
         d5:7d:d0:d9:54:a7:d9:8e:3c:d9:fd:5e:15:d9:4f:58:39:a3:
         6d:4c:f3:e1:91:34:ee:32:61:ec:bc:01:23:60:38:4f:04:bb:
         e1:4c:f1:d7:73:d0:a4:9f:e8:51:1c:47:d7:2c:9f:19:5e:fe:
         38:6a:b0:6d:f5:c6:f8:61:7b:60:09:d9:fb:6c:e1:d7:d2:33:
         23:d0:de:4c:43:f6:72:a4:63:d8:4f:32:85:1a:60:66:11:4b:
         89:49:b1:33:8b:1c:fd:80:14:35:3a:29:0f:f0:3f:38:e2:72:
         27:dc:9e:86:28:33:4b:44:bd:b5:63:ab:af:43:1a:21:1f:a9:
         c3:63:37:49:19:98:56:bb:d7:ae:5e:3d:d2:c6:7b:17:2d:c4:
         74:82:bf:e0:98:99:3f:05:22:49:bc:d2:8d:25:54:25:8f:82:
         f3:ad:de:30:51:8c:54:38:a3:b3:86:5d:24:8e:43:dc:ce:d6:
         9a:8d:01:ef:05:21:4b:27:40:e8:80:84:2d:48:b2:be:90:25:
         47:67:4a:4d:96:74:fd:d6:30:b0:7d:e1:83:3f:b0:0a:a0:f9:
         6f:79:d7:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:51:47 2026 by rpki-client