Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368588E/A3823956CB2F11E9890D1B27F8AEA228/XK2jLPsAGrpuTJ9SE9kodlsVozc.mft
File:                     XK2jLPsAGrpuTJ9SE9kodlsVozc.mft (raw, json)
Hash identifier:          a0qL45V5QsbDpHsCN1lQS+wgD2dVXh4mUSZsoxm7eZI=
Subject key identifier:   08:B0:94:DE:AC:5A:8D:97:A9:99:55:36:23:E9:86:93:A7:EB:4D:55
Authority key identifier: 5C:AD:A3:2C:FB:00:1A:BA:6E:4C:9F:52:13:D9:28:76:5B:15:A3:37
Certificate issuer:       /CN=F368588EAF/serialNumber=5CADA32CFB001ABA6E4C9F5213D928765B15A337
Certificate serial:       09CF
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/XK2jLPsAGrpuTJ9SE9kodlsVozc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368588E/A3823956CB2F11E9890D1B27F8AEA228/XK2jLPsAGrpuTJ9SE9kodlsVozc.mft
Manifest number:          09C3
Signing time:             Fri 17 Apr 2026 01:33:17 +0000
Manifest this update:     Fri 17 Apr 2026 01:33:16 +0000
Manifest next update:     Sun 19 Apr 2026 01:33:16 +0000
Files and hashes:         1: XK2jLPsAGrpuTJ9SE9kodlsVozc.crl (hash: w7h00YSBlsahE9KLkJzO38aOdOFF+FijNDi0tb1UbnY=)
                          2: E90920E88E6511EBBF85CD6BF8AEA228.roa (hash: 2lqZqDUQcUKxveTR9cI5M5tuAOp//Ev36g7no9oTmfc=)
                          3: B45912FE8E6511EB8C41896BF8AEA228.roa (hash: qKKMDXSoDlqwiHmOGrIIdcwys6RCpAU+b2nSH+ukCFY=)
                          4: 82AA23C48E6511EB87AB596BF8AEA228.roa (hash: Awf3KcwUqHS+Tb+h21An3tUV9Zndn4ovZSX7QkhwLRI=)
                          5: 314349A68E6611EB8D43336CF8AEA228.roa (hash: Thxt35OuW2OHwRepR9n+aTVJ70XOv0V6vWotqPw7F9g=)
                          6: 524153BE8E6611EBB85F5E6CF8AEA228.roa (hash: 2hd9ZQH6yn17Npd0+aOdMdIMVFAkEErgQuvgi60v08M=)
                          7: 5B5AB2F28E6511EB82C6206BF8AEA228.roa (hash: uqU9yrUWC7VxCjK9hx7zhOvnfnJosiQgLAmWL6ofW8s=)
                          8: 6001068C237F11EFAF71141F7DDC24C2.roa (hash: Fe1hHfr+f3y3JImtSfxXw39BMD+ou4/AEKixzkcLodk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368588E/A3823956CB2F11E9890D1B27F8AEA228/XK2jLPsAGrpuTJ9SE9kodlsVozc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368588E/A3823956CB2F11E9890D1B27F8AEA228/XK2jLPsAGrpuTJ9SE9kodlsVozc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/XK2jLPsAGrpuTJ9SE9kodlsVozc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 01:33:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2511 (0x9cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368588EAF, serialNumber=5CADA32CFB001ABA6E4C9F5213D928765B15A337
        Validity
            Not Before: Apr 17 01:33:16 2026 GMT
            Not After : Apr 19 01:33:16 2026 GMT
        Subject: CN=69e18ddd-d211
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:24:22:89:9f:0f:75:ad:be:a4:fb:f8:ef:88:
                    91:fc:df:f5:51:c1:e5:44:cf:82:5e:47:91:6c:05:
                    48:fe:5e:c1:1a:7e:f4:f7:47:9f:36:f9:81:b6:bd:
                    77:85:ec:98:62:9c:94:a3:81:85:32:d2:51:b2:72:
                    0c:2b:37:00:03:d3:39:95:7d:21:68:e9:24:ad:30:
                    40:e3:9d:d1:ad:b2:81:b4:df:1f:1d:18:33:ae:be:
                    dd:88:62:b0:da:2d:94:a4:90:3b:4b:0a:50:9c:11:
                    35:ae:e0:1b:bc:9c:04:84:b0:fb:1d:3a:63:38:cd:
                    53:e6:77:b4:94:cb:a9:4a:76:8f:02:e7:ed:a1:33:
                    37:d4:6c:cd:25:4f:33:bc:d6:85:5f:d6:51:92:9a:
                    49:1e:63:36:23:a5:3d:a6:86:80:04:f7:e7:bd:77:
                    3c:e0:96:82:c7:74:c9:8b:0e:bb:e2:7f:d5:3d:84:
                    4f:59:a9:e5:00:ad:64:2d:a5:cb:12:53:d7:f5:61:
                    94:34:26:83:b3:68:39:85:62:47:f3:5c:ea:4c:eb:
                    67:94:8e:1a:5a:51:ba:2d:72:3e:89:e2:79:88:c9:
                    25:00:df:93:8e:d5:b6:38:de:c1:5e:51:aa:ae:a5:
                    0b:b0:43:5c:cb:46:ae:c9:22:35:70:64:3d:e6:59:
                    9f:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:B0:94:DE:AC:5A:8D:97:A9:99:55:36:23:E9:86:93:A7:EB:4D:55
            X509v3 Authority Key Identifier:
                keyid:5C:AD:A3:2C:FB:00:1A:BA:6E:4C:9F:52:13:D9:28:76:5B:15:A3:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368588E/A3823956CB2F11E9890D1B27F8AEA228/XK2jLPsAGrpuTJ9SE9kodlsVozc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XK2jLPsAGrpuTJ9SE9kodlsVozc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368588E/A3823956CB2F11E9890D1B27F8AEA228/XK2jLPsAGrpuTJ9SE9kodlsVozc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:98:4e:2e:9c:1b:0d:12:8e:67:ac:e7:2c:36:68:cb:c3:18:
         c5:9b:81:77:8c:8d:e2:ad:06:43:9b:b0:e6:25:7e:57:b8:7b:
         8e:44:b5:b0:8f:88:cd:75:c3:44:3d:9c:ad:1d:3d:f2:27:0f:
         03:cc:64:a2:e5:66:ed:93:56:e8:6d:95:d9:f9:49:13:b1:2e:
         a5:f9:cb:fa:ed:7b:04:0f:ba:b1:e1:e8:b8:ab:97:66:2c:03:
         37:39:5c:59:f2:23:ba:46:ad:2f:92:75:22:dc:75:a8:4e:d4:
         e8:97:09:a9:1e:0e:bf:59:87:1d:a6:04:6a:67:ed:6c:db:e4:
         e6:1c:c3:95:5d:0e:ee:e0:b3:2a:1b:25:3c:d7:56:d2:0c:7d:
         f0:da:d4:35:ee:1c:0d:55:b2:69:7b:78:d1:fa:83:b6:d2:f9:
         bb:4b:b8:9c:79:22:ed:b6:51:e8:99:b3:02:54:49:79:2f:b0:
         f5:1c:89:39:60:dd:7a:25:17:74:fd:b8:43:3c:2b:4c:7f:52:
         81:06:26:a5:bb:4e:f2:5d:75:71:c3:5b:b6:9c:18:6d:07:25:
         b0:87:20:fa:3b:4a:d2:cb:ab:79:76:8c:c6:ea:f7:e0:a0:18:
         a0:ee:e1:3f:e2:fa:d1:22:7a:90:ef:b1:b5:dc:16:fe:76:20:
         b0:ee:6f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:02:37 2026 by rpki-client