Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368CD07/4C6DDDB4897011EFBB193A82762E951A/8F9eT4U_K8znmCtaZOAuRn1NY3k.mft
File:                     8F9eT4U_K8znmCtaZOAuRn1NY3k.mft (raw, json)
Hash identifier:          Lgb0AT+4Rv3rvPv4JJGGt7gMNGC7qsXdDryLBXg+ecc=
Subject key identifier:   6F:CC:FF:9B:8C:8D:78:E0:79:C9:9F:4F:D8:32:08:AD:D1:E1:04:19
Authority key identifier: F0:5F:5E:4F:85:3F:2B:CC:E7:98:2B:5A:64:E0:2E:46:7D:4D:63:79
Certificate issuer:       /CN=F368CD07AF/serialNumber=F05F5E4F853F2BCCE7982B5A64E02E467D4D6379
Certificate serial:       0237
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/8F9eT4U_K8znmCtaZOAuRn1NY3k.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368CD07/4C6DDDB4897011EFBB193A82762E951A/8F9eT4U_K8znmCtaZOAuRn1NY3k.mft
Manifest number:          0236
Signing time:             Sun 19 Apr 2026 04:34:04 +0000
Manifest this update:     Sun 19 Apr 2026 04:34:03 +0000
Manifest next update:     Tue 21 Apr 2026 04:34:03 +0000
Files and hashes:         1: 8F9eT4U_K8znmCtaZOAuRn1NY3k.crl (hash: qKpWHd/gdT4xb/7t1Rp+97CSltryMEZVcLprXrLhitQ=)
                          2: 0587256289A811EF93AD2A50762E951A.roa (hash: 6JhA3S1UqVY6eY/SMX4lyeIJmn8FI+S8y3sFftIT63s=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368CD07/4C6DDDB4897011EFBB193A82762E951A/8F9eT4U_K8znmCtaZOAuRn1NY3k.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368CD07/4C6DDDB4897011EFBB193A82762E951A/8F9eT4U_K8znmCtaZOAuRn1NY3k.mft
                          rsync://rpki.afrinic.net/repository/afrinic/8F9eT4U_K8znmCtaZOAuRn1NY3k.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 21 Apr 2026 00:07:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 567 (0x237)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368CD07AF, serialNumber=F05F5E4F853F2BCCE7982B5A64E02E467D4D6379
        Validity
            Not Before: Apr 19 04:34:03 2026 GMT
            Not After : Apr 21 04:34:03 2026 GMT
        Subject: CN=69e45b3c-054f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:c7:ca:25:85:05:7a:ba:51:b8:86:50:0e:c4:
                    ca:ad:75:b2:43:6d:0d:47:08:9f:52:62:31:dd:73:
                    41:72:80:e5:1c:b7:a8:f4:ef:63:40:ce:95:1b:0a:
                    51:67:06:01:23:9d:03:4c:bc:60:e5:23:bb:2e:53:
                    82:a4:fb:06:cb:d3:c5:ba:dd:ca:0b:2f:1e:4e:48:
                    a2:f5:1f:b3:f0:52:39:75:24:f8:fd:bc:01:ce:62:
                    7a:64:9b:49:34:40:52:59:ee:64:fd:fd:34:0a:9a:
                    cd:70:c9:8c:7e:d5:14:f2:c6:25:83:3b:4c:bd:41:
                    d4:8c:f3:d3:74:a2:3e:34:9c:f9:f2:e3:ff:0b:2d:
                    36:ec:98:52:25:f7:10:19:41:b0:00:08:0f:a2:8f:
                    e8:e4:4a:92:e0:ff:47:4d:5d:3d:03:f8:eb:3e:e5:
                    8c:35:6f:c2:58:29:43:d2:5f:59:cf:b9:75:26:f1:
                    68:eb:b7:da:73:f6:80:d8:7b:90:41:6d:ac:38:9f:
                    8f:35:15:1a:15:b0:5f:ee:80:4f:6e:62:01:8c:74:
                    09:ed:b1:82:86:89:ba:35:03:4d:da:f1:e9:e5:c5:
                    72:d1:2a:c9:a4:6b:66:f8:d9:3e:85:af:04:41:c8:
                    60:21:bf:fa:59:11:fe:e6:5f:75:71:81:78:cc:cf:
                    9f:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:CC:FF:9B:8C:8D:78:E0:79:C9:9F:4F:D8:32:08:AD:D1:E1:04:19
            X509v3 Authority Key Identifier:
                keyid:F0:5F:5E:4F:85:3F:2B:CC:E7:98:2B:5A:64:E0:2E:46:7D:4D:63:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368CD07/4C6DDDB4897011EFBB193A82762E951A/8F9eT4U_K8znmCtaZOAuRn1NY3k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/8F9eT4U_K8znmCtaZOAuRn1NY3k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368CD07/4C6DDDB4897011EFBB193A82762E951A/8F9eT4U_K8znmCtaZOAuRn1NY3k.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:d3:98:4d:0e:a5:7c:51:ec:49:7a:36:d3:2c:00:46:70:81:
         ec:d6:00:a1:b9:b5:ad:c5:bd:6c:a7:1f:55:f3:52:3c:32:f0:
         a9:e7:2d:a2:95:9c:0f:5e:a2:52:31:db:5e:c2:9e:9b:60:15:
         39:f0:56:01:70:1e:1b:2c:03:36:94:5a:2b:34:ca:59:3d:3b:
         db:53:ea:43:5e:49:5b:92:e1:6e:b5:77:fa:32:b2:fa:e4:db:
         76:e5:2e:ab:21:6c:c0:cb:9e:b3:e5:0d:1f:99:68:b2:95:aa:
         7f:ba:c9:b2:de:c9:20:69:8f:35:47:99:f0:ed:37:43:29:90:
         39:0e:ed:d1:fa:55:5d:0a:9e:c7:4e:06:77:7c:c9:59:f9:46:
         16:d0:87:ff:25:05:15:5c:69:a4:bc:3c:c6:7a:fb:36:29:9d:
         40:08:5b:34:dc:cb:96:6e:84:ea:47:8f:17:8d:83:79:7e:72:
         09:56:c3:87:06:ef:23:bc:4c:d6:8e:1f:46:41:6b:6d:e6:64:
         f7:39:91:76:5f:14:80:22:ef:58:48:cb:e4:46:66:fb:8f:2a:
         9c:5a:6c:b7:37:85:b8:c9:4a:65:6d:e9:b2:d4:92:a7:61:7c:
         d9:f9:a6:7b:86:0f:eb:3e:4a:7d:7d:c2:92:75:ea:0f:da:63:
         eb:09:17:d9
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAjcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OENEMDdBRjExMC8GA1UEBRMoRjA1RjVFNEY4NTNGMkJDQ0U3OTgyQjVBNjRFMDJF
NDY3RDRENjM3OTAeFw0yNjA0MTkwNDM0MDNaFw0yNjA0MjEwNDM0MDNaMBgxFjAU
BgNVBAMTDTY5ZTQ1YjNjLTA1NGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDix8olhQV6ulG4hlAOxMqtdbJDbQ1HCJ9SYjHdc0FygOUct6j072NAzpUb
ClFnBgEjnQNMvGDlI7suU4Kk+wbL08W63coLLx5OSKL1H7PwUjl1JPj9vAHOYnpk
m0k0QFJZ7mT9/TQKms1wyYx+1RTyxiWDO0y9QdSM89N0oj40nPny4/8LLTbsmFIl
9xAZQbAACA+ij+jkSpLg/0dNXT0D+Os+5Yw1b8JYKUPSX1nPuXUm8Wjrt9pz9oDY
e5BBbaw4n481FRoVsF/ugE9uYgGMdAntsYKGibo1A03a8enlxXLRKsmka2b42T6F
rwRByGAhv/pZEf7mX3VxgXjMz5+fAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUb8z/
m4yNeOB5yZ9P2DIIrdHhBBkwHwYDVR0jBBgwFoAU8F9eT4U/K8znmCtaZOAuRn1N
Y3kwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhDRDA3LzRDNkREREI0ODk3MDExRUZCQjE5M0E4Mjc2MkU5NTFBLzhGOWVU
NFVfSzh6bm1DdGFaT0F1Um4xTlkzay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzhGOWVUNFVfSzh6bm1DdGFaT0F1Um4xTlkzay5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OENEMDcvNEM2REREQjQ4OTcwMTFFRkJCMTkzQTgyNzYy
RTk1MUEvOEY5ZVQ0VV9LOHpubUN0YVpPQXVSbjFOWTNrLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAT05hNDqV8UexJejbTLABGcIHs1gCh
ubWtxb1spx9V81I8MvCp5y2ilZwPXqJSMdtewp6bYBU58FYBcB4bLAM2lForNMpZ
PTvbU+pDXklbkuFutXf6MrL65Nt25S6rIWzAy56z5Q0fmWiylap/usmy3skgaY81
R5nw7TdDKZA5Du3R+lVdCp7HTgZ3fMlZ+UYW0If/JQUVXGmkvDzGevs2KZ1ACFs0
3MuWboTqR48XjYN5fnIJVsOHBu8jvEzWjh9GQWtt5mT3OZF2XxSAIu9YSMvkRmb7
jyqcWmy3N4W4yUplbemy1JKnYXzZ+aZ7hg/rPkp9fcKSdeoP2mPrCRfZ
-----END CERTIFICATE-----
Generated at Sun Apr 19 12:54:22 2026 by rpki-client