Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368312F/0BC79D2EB77611F0877ABAE9DAE4EC9C/PQ4DaEavbVRHjAyBh8jXIjOqwco.mft
File:                     PQ4DaEavbVRHjAyBh8jXIjOqwco.mft (raw, json)
Hash identifier:          LOTW/mEcb56rt8lJNcyau+LdXl2vLiTDBoLOFyRg0fg=
Subject key identifier:   2D:A3:EF:8F:2B:15:0F:3D:72:57:DE:8B:76:95:EA:D6:51:CD:BC:30
Authority key identifier: 3D:0E:03:68:46:AF:6D:54:47:8C:0C:81:87:C8:D7:22:33:AA:C1:CA
Certificate issuer:       /CN=F368312FAF/serialNumber=3D0E036846AF6D54478C0C8187C8D72233AAC1CA
Certificate serial:       AE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PQ4DaEavbVRHjAyBh8jXIjOqwco.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368312F/0BC79D2EB77611F0877ABAE9DAE4EC9C/PQ4DaEavbVRHjAyBh8jXIjOqwco.mft
Manifest number:          AC
Signing time:             Fri 17 Apr 2026 05:11:08 +0000
Manifest this update:     Fri 17 Apr 2026 05:11:07 +0000
Manifest next update:     Sun 19 Apr 2026 05:11:07 +0000
Files and hashes:         1: PQ4DaEavbVRHjAyBh8jXIjOqwco.crl (hash: oFRtHFTbS+3E4cZ9UOCy+YnkL+v5slGs3nVo8Hukpg0=)
                          2: 5ADD0CAEB77711F0B31C3CF2DAE4EC9C.roa (hash: XcjIzmFNzJT5kTJblhnVUYbZcRGqo4ZoGY70idy8eA8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368312F/0BC79D2EB77611F0877ABAE9DAE4EC9C/PQ4DaEavbVRHjAyBh8jXIjOqwco.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368312F/0BC79D2EB77611F0877ABAE9DAE4EC9C/PQ4DaEavbVRHjAyBh8jXIjOqwco.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PQ4DaEavbVRHjAyBh8jXIjOqwco.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 174 (0xae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368312FAF, serialNumber=3D0E036846AF6D54478C0C8187C8D72233AAC1CA
        Validity
            Not Before: Apr 17 05:11:07 2026 GMT
            Not After : Apr 19 05:11:07 2026 GMT
        Subject: CN=69e1c0ec-9ff9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ad:87:ab:f7:d3:d9:c7:69:01:ca:2c:72:7e:
                    92:c5:53:a2:e2:43:4f:ec:e1:1b:23:61:67:74:f2:
                    73:4b:fd:f8:61:70:7d:83:c3:f7:74:9f:bb:75:0e:
                    93:85:3f:be:ba:21:ed:61:9f:7d:3c:7b:73:4e:54:
                    5f:0e:48:d4:7f:3f:85:53:3c:74:cd:1a:7a:aa:c2:
                    de:c8:ff:3c:68:2a:c3:b8:26:d5:cd:c6:5a:10:4e:
                    80:fa:2a:72:1a:cb:e5:5e:1c:05:7a:8b:9f:46:a8:
                    77:23:a4:b5:b3:ed:65:a9:7f:5d:65:fb:42:c5:8f:
                    0f:a4:12:9c:18:2d:c4:67:c4:08:07:e0:13:23:e3:
                    e2:4c:02:02:db:a8:22:58:2c:fe:39:ab:28:9f:3f:
                    a9:7b:da:f1:2c:11:ba:1b:52:ce:f5:6a:a0:4a:64:
                    6c:df:99:f2:a2:e0:e6:c9:5a:76:18:2f:86:7b:b2:
                    c2:1b:87:90:d0:f9:01:46:bd:f2:86:f4:33:6c:31:
                    da:53:10:ff:74:93:96:e5:11:66:b2:a4:ca:23:73:
                    b6:6f:a1:6f:38:68:38:74:fa:93:76:c3:a1:90:2e:
                    cb:99:4c:4c:c4:86:b8:4e:3a:61:7c:90:5e:82:12:
                    ca:bc:db:97:3e:92:8f:4c:d6:21:7b:a7:af:90:2c:
                    b3:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:A3:EF:8F:2B:15:0F:3D:72:57:DE:8B:76:95:EA:D6:51:CD:BC:30
            X509v3 Authority Key Identifier:
                keyid:3D:0E:03:68:46:AF:6D:54:47:8C:0C:81:87:C8:D7:22:33:AA:C1:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368312F/0BC79D2EB77611F0877ABAE9DAE4EC9C/PQ4DaEavbVRHjAyBh8jXIjOqwco.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PQ4DaEavbVRHjAyBh8jXIjOqwco.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368312F/0BC79D2EB77611F0877ABAE9DAE4EC9C/PQ4DaEavbVRHjAyBh8jXIjOqwco.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:85:0c:79:40:cb:50:59:3b:bb:39:58:bb:c9:2f:20:26:d3:
         1c:50:57:40:8c:75:f7:43:ae:10:98:21:06:a6:dc:80:8f:45:
         74:2f:4b:59:0d:b0:0f:19:e0:a3:65:05:86:37:4c:40:fd:11:
         05:fa:9b:7c:8b:d3:ab:41:21:a7:45:7f:f1:dd:b0:1d:fd:d8:
         40:2b:12:8e:62:ff:24:47:1a:ab:da:34:91:d2:81:2b:28:fc:
         5e:f0:0e:d6:cf:d2:93:27:f9:1f:00:0f:5b:48:f1:c8:ef:13:
         73:43:95:a2:09:e8:c8:8c:88:6d:0e:aa:50:ac:ed:d8:8f:61:
         e7:3b:f2:e8:01:b4:8b:60:72:57:e6:0a:d5:86:7d:8e:ff:7a:
         08:0a:8f:8b:28:48:6b:9e:5c:f2:5c:0a:76:8b:8d:7f:b2:5f:
         f9:e4:36:31:9d:29:90:1d:ba:13:dc:b0:56:95:ab:3c:f8:2c:
         45:a6:e5:c7:ac:44:ff:65:f9:3e:ca:85:4c:2e:b2:0f:0a:0b:
         0d:f1:9a:e6:44:be:df:b3:51:53:a0:5b:f0:2d:61:8e:ee:80:
         e2:59:7d:19:ba:06:24:18:88:16:66:b1:47:8d:c4:d9:f5:ed:
         d0:c3:a2:bd:69:9d:86:2c:9f:c0:10:ae:7e:5a:5d:66:6d:1e:
         2b:4d:e0:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:39:02 2026 by rpki-client