Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368D59F/CF10B148324211F18586228DDAE4EC9C/B0Bo8Lwdf2xlr15SAuIhENaFelk.mft
File:                     B0Bo8Lwdf2xlr15SAuIhENaFelk.mft (raw, json)
Hash identifier:          2diaXpjJwVgke7jydF8JSHwOC1VUJPc1oKP2mHna5QA=
Subject key identifier:   B1:D4:5F:03:75:DB:14:4E:4A:A4:DB:3C:DF:E9:7E:73:11:67:14:9C
Authority key identifier: 07:40:68:F0:BC:1D:7F:6C:65:AF:5E:52:02:E2:21:10:D6:85:7A:59
Certificate issuer:       /CN=F368D59FAF/serialNumber=074068F0BC1D7F6C65AF5E5202E22110D6857A59
Certificate serial:       0D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/B0Bo8Lwdf2xlr15SAuIhENaFelk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368D59F/CF10B148324211F18586228DDAE4EC9C/B0Bo8Lwdf2xlr15SAuIhENaFelk.mft
Manifest number:          0C
Signing time:             Fri 17 Apr 2026 05:30:18 +0000
Manifest this update:     Fri 17 Apr 2026 05:30:17 +0000
Manifest next update:     Sun 19 Apr 2026 05:30:17 +0000
Files and hashes:         1: B0Bo8Lwdf2xlr15SAuIhENaFelk.crl (hash: F6lj2ANQV/8nWHzWA2/YKW1wM4fPzzs47ixLVyYfLfk=)
                          2: CDA23108324A11F1B60EAEB9DAE4EC9C.roa (hash: cE1RonJWQjRj/5iPA//z9En6WXcsSeuTNBdrevPeLx8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368D59F/CF10B148324211F18586228DDAE4EC9C/B0Bo8Lwdf2xlr15SAuIhENaFelk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368D59F/CF10B148324211F18586228DDAE4EC9C/B0Bo8Lwdf2xlr15SAuIhENaFelk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/B0Bo8Lwdf2xlr15SAuIhENaFelk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13 (0xd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368D59FAF, serialNumber=074068F0BC1D7F6C65AF5E5202E22110D6857A59
        Validity
            Not Before: Apr 17 05:30:17 2026 GMT
            Not After : Apr 19 05:30:17 2026 GMT
        Subject: CN=69e1c56a-dae8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:99:b3:a1:f6:71:f3:31:09:32:4d:07:bd:4a:
                    f2:05:ad:21:0b:9c:57:ba:01:2c:50:60:9c:81:35:
                    70:83:02:63:7b:8c:28:ff:ed:53:60:15:82:1d:16:
                    80:ea:3f:7d:ad:59:25:8c:4f:95:d7:69:d3:4d:7e:
                    98:c9:e8:82:fd:f5:06:6b:be:95:c3:29:84:c3:6d:
                    3b:88:6d:79:fb:e2:09:0a:fb:9e:2a:bb:e3:07:00:
                    36:4d:eb:92:70:8f:88:61:12:35:ce:61:80:c8:10:
                    a8:39:6d:68:b3:eb:1d:ed:f6:d3:6b:bc:08:44:62:
                    45:84:e4:c1:7d:67:f6:2e:e9:03:16:6a:78:f1:15:
                    25:ac:0c:32:5c:97:ae:43:b6:37:20:08:94:77:d9:
                    77:fb:2b:06:56:58:67:8f:06:e5:28:19:d7:e9:28:
                    ae:56:bb:34:21:11:81:fe:7b:da:11:c2:a3:d3:40:
                    1c:55:73:91:4a:4d:f1:06:63:a2:6e:78:a4:1c:bf:
                    f5:04:7e:23:2b:1b:9d:61:91:01:9a:55:e4:fb:ed:
                    fa:91:7a:00:22:a1:ec:3a:7f:c3:1d:0e:0c:d5:fb:
                    78:58:50:1f:83:51:66:3c:e5:76:6c:bb:b0:8d:cc:
                    a7:3e:0d:e3:d3:1a:2c:20:86:f0:9d:90:6b:ee:2e:
                    67:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:D4:5F:03:75:DB:14:4E:4A:A4:DB:3C:DF:E9:7E:73:11:67:14:9C
            X509v3 Authority Key Identifier:
                keyid:07:40:68:F0:BC:1D:7F:6C:65:AF:5E:52:02:E2:21:10:D6:85:7A:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368D59F/CF10B148324211F18586228DDAE4EC9C/B0Bo8Lwdf2xlr15SAuIhENaFelk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/B0Bo8Lwdf2xlr15SAuIhENaFelk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368D59F/CF10B148324211F18586228DDAE4EC9C/B0Bo8Lwdf2xlr15SAuIhENaFelk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:37:7e:bb:d7:99:3e:36:29:2c:38:87:71:fe:22:fd:7c:cd:
         62:9d:fa:e2:8b:4f:94:e3:cc:13:e0:ea:de:3b:0d:6a:29:68:
         f5:56:93:91:50:3f:70:54:0f:5e:a1:e1:d4:f4:f5:40:1f:5e:
         44:77:c2:b9:46:de:85:f7:ec:f3:9f:3a:89:c6:bb:01:6f:02:
         01:11:05:df:45:a4:52:bc:68:fe:cf:03:e4:dd:7c:a9:b1:7e:
         99:a8:7f:ec:d9:e0:98:4e:82:0f:66:7e:a2:89:d0:37:e0:33:
         27:4c:b1:1c:2d:a3:f5:08:7e:2b:3a:c1:e9:4c:c7:6a:1e:42:
         37:8d:18:ff:69:4a:e2:3f:33:9a:90:c2:fb:80:57:5e:98:ff:
         c5:11:bb:31:ee:49:12:c0:14:40:32:67:ec:10:a3:8a:a7:94:
         39:dd:2b:c5:72:a3:bc:fa:b1:91:7b:64:c6:e9:53:b2:75:5d:
         7d:8b:9d:e0:60:70:a1:41:5b:66:ad:4c:62:eb:0b:3a:2c:f9:
         bd:ba:c4:c3:bb:b0:48:f4:39:69:8e:49:83:c0:d1:d8:68:01:
         7c:a9:4e:75:48:a7:f1:52:bf:1c:57:93:07:85:a6:dc:05:26:
         c0:6e:e8:d7:ea:f4:07:e2:05:85:9d:64:d8:b1:20:ac:da:34:
         a1:65:12:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:41:32 2026 by rpki-client