Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3694A3E/A405B592984311EFB970F4B6762E951A/DoVnb92LLIvqeU6JUNJzTz-JMME.mft
File:                     DoVnb92LLIvqeU6JUNJzTz-JMME.mft (raw, json)
Hash identifier:          f6KIvaEPUhS72aFeGW8hwc+GRJe2qmRIIyxQYV/+LsI=
Subject key identifier:   F2:05:BF:7D:18:60:D4:4B:81:50:A8:C9:B9:0C:6C:9F:D7:D5:DE:4D
Authority key identifier: 0E:85:67:6F:DD:8B:2C:8B:EA:79:4E:89:50:D2:73:4F:3F:89:30:C1
Certificate issuer:       /CN=F3694A3EAF/serialNumber=0E85676FDD8B2C8BEA794E8950D2734F3F8930C1
Certificate serial:       0225
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/DoVnb92LLIvqeU6JUNJzTz-JMME.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3694A3E/A405B592984311EFB970F4B6762E951A/DoVnb92LLIvqeU6JUNJzTz-JMME.mft
Manifest number:          0223
Signing time:             Fri 17 Apr 2026 04:35:23 +0000
Manifest this update:     Fri 17 Apr 2026 04:35:23 +0000
Manifest next update:     Sun 19 Apr 2026 04:35:23 +0000
Files and hashes:         1: DoVnb92LLIvqeU6JUNJzTz-JMME.crl (hash: +e/Z+LEtHZvjmOQcvz64L4SYrI5slpu3TKD/KSKY8rc=)
                          2: 0F329508984711EF85483C4D762E951A.roa (hash: a0BidHbztDQTPkWjYpuerywnpAYxfdwn5c2aRLRiLtE=)
                          3: 551A9F322CCD11F09F73B0B5DAE4EC9C.roa (hash: qDJZJ73fwcMimn2oqNCcTPQF5DF0ccPRcwR3NYTQ2dI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3694A3E/A405B592984311EFB970F4B6762E951A/DoVnb92LLIvqeU6JUNJzTz-JMME.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3694A3E/A405B592984311EFB970F4B6762E951A/DoVnb92LLIvqeU6JUNJzTz-JMME.mft
                          rsync://rpki.afrinic.net/repository/afrinic/DoVnb92LLIvqeU6JUNJzTz-JMME.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 549 (0x225)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3694A3EAF, serialNumber=0E85676FDD8B2C8BEA794E8950D2734F3F8930C1
        Validity
            Not Before: Apr 17 04:35:23 2026 GMT
            Not After : Apr 19 04:35:23 2026 GMT
        Subject: CN=69e1b88b-b8c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c6:bf:9b:f3:b7:89:d8:31:c2:9f:c1:58:75:
                    ee:3c:cb:38:98:30:58:05:cf:6e:20:9a:61:60:ad:
                    8a:d7:44:ca:fa:89:68:97:85:8f:2a:bd:71:ce:05:
                    73:9f:12:ca:a2:42:67:ca:5f:94:c8:21:29:3c:1b:
                    56:5d:40:73:e1:a8:25:5c:e7:a8:10:40:29:14:ad:
                    a6:b5:3a:27:12:2d:f5:db:7d:38:c0:96:80:19:59:
                    ed:95:45:0f:73:66:65:36:f2:60:fe:9d:48:f5:a8:
                    d7:bb:1d:fc:41:af:cd:a0:ea:de:bf:f9:fa:cc:c6:
                    1a:ed:b7:0d:b1:99:e9:db:bb:25:a3:de:5e:25:a0:
                    ca:54:f3:94:27:e1:f4:5d:7d:64:6c:25:7e:28:ee:
                    f7:f6:64:9a:3b:71:c9:74:16:e4:c9:1f:28:73:7c:
                    72:8d:c1:46:db:a8:7d:82:67:dd:c2:bb:af:6c:df:
                    9a:c1:89:43:64:e8:87:8a:0f:2c:78:27:a7:87:83:
                    16:fc:5e:8f:33:75:ff:eb:ea:9a:28:74:31:de:dc:
                    63:2a:43:88:91:9a:c9:10:31:41:94:3e:35:71:c9:
                    51:02:67:a3:f8:02:e2:54:65:c3:86:35:b4:ba:60:
                    fe:cc:2f:08:20:05:1a:e9:7a:78:9d:e0:fe:a1:bb:
                    ae:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:05:BF:7D:18:60:D4:4B:81:50:A8:C9:B9:0C:6C:9F:D7:D5:DE:4D
            X509v3 Authority Key Identifier:
                keyid:0E:85:67:6F:DD:8B:2C:8B:EA:79:4E:89:50:D2:73:4F:3F:89:30:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3694A3E/A405B592984311EFB970F4B6762E951A/DoVnb92LLIvqeU6JUNJzTz-JMME.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DoVnb92LLIvqeU6JUNJzTz-JMME.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3694A3E/A405B592984311EFB970F4B6762E951A/DoVnb92LLIvqeU6JUNJzTz-JMME.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:00:b8:0c:b8:e5:29:88:51:28:b7:f1:72:c0:b9:3c:02:9f:
         a0:0d:75:ce:17:be:1c:13:56:61:14:a8:6e:dd:b5:3f:57:13:
         ec:a7:44:3b:f8:cc:d5:37:f1:14:fb:c7:5b:4d:f4:da:ba:3b:
         3f:dc:7b:4b:2d:0e:57:cc:9b:c4:86:15:fc:b4:d7:fe:3a:32:
         9c:bf:d1:a7:a9:5b:46:b7:65:8d:af:d9:9a:f3:78:ae:c0:65:
         0d:84:e8:a5:cd:8d:4e:60:81:17:4d:f6:37:c9:dd:19:bd:18:
         a7:02:af:5c:82:82:9f:61:82:1c:fc:b8:ad:ff:c4:35:04:ec:
         2a:52:01:b8:d4:9c:dc:16:09:28:c3:08:f5:ad:71:69:f8:dd:
         6c:83:2b:70:94:03:9f:06:dc:57:3d:b3:7e:1b:23:61:55:1d:
         a8:f9:b5:70:19:c8:08:f1:09:41:5c:b1:29:2e:b7:62:3e:c8:
         f0:61:48:ab:7e:7f:95:da:a4:c4:58:69:28:4c:4e:c1:41:4b:
         c3:3f:70:4d:9e:64:b6:4f:cf:e0:8d:cf:24:fb:91:bb:93:b6:
         22:34:86:da:c2:fd:2e:f5:18:be:2b:3f:c0:02:c3:07:3b:34:
         48:32:2a:a2:4d:9a:43:d4:ab:98:4d:3c:b6:fe:0f:b9:49:cb:
         3e:45:ab:b9
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAiUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OTRBM0VBRjExMC8GA1UEBRMoMEU4NTY3NkZERDhCMkM4QkVBNzk0RTg5NTBEMjcz
NEYzRjg5MzBDMTAeFw0yNjA0MTcwNDM1MjNaFw0yNjA0MTkwNDM1MjNaMBgxFjAU
BgNVBAMTDTY5ZTFiODhiLWI4YzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDRxr+b87eJ2DHCn8FYde48yziYMFgFz24gmmFgrYrXRMr6iWiXhY8qvXHO
BXOfEsqiQmfKX5TIISk8G1ZdQHPhqCVc56gQQCkUraa1OicSLfXbfTjAloAZWe2V
RQ9zZmU28mD+nUj1qNe7HfxBr82g6t6/+frMxhrttw2xmenbuyWj3l4loMpU85Qn
4fRdfWRsJX4o7vf2ZJo7ccl0FuTJHyhzfHKNwUbbqH2CZ93Cu69s35rBiUNk6IeK
Dyx4J6eHgxb8Xo8zdf/r6poodDHe3GMqQ4iRmskQMUGUPjVxyVECZ6P4AuJUZcOG
NbS6YP7MLwggBRrpenid4P6hu64/AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU8gW/
fRhg1EuBUKjJuQxsn9fV3k0wHwYDVR0jBBgwFoAUDoVnb92LLIvqeU6JUNJzTz+J
MMEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjk0QTNFL0E0MDVCNTkyOTg0MzExRUZCOTcwRjRCNjc2MkU5NTFBL0RvVm5i
OTJMTEl2cWVVNkpVTkp6VHotSk1NRS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0RvVm5iOTJMTEl2cWVVNkpVTkp6VHotSk1NRS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OTRBM0UvQTQwNUI1OTI5ODQzMTFFRkI5NzBGNEI2NzYy
RTk1MUEvRG9WbmI5MkxMSXZxZVU2SlVOSnpUei1KTU1FLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBqALgMuOUpiFEot/FywLk8Ap+gDXXO
F74cE1ZhFKhu3bU/VxPsp0Q7+MzVN/EU+8dbTfTaujs/3HtLLQ5XzJvEhhX8tNf+
OjKcv9GnqVtGt2WNr9ma83iuwGUNhOilzY1OYIEXTfY3yd0ZvRinAq9cgoKfYYIc
/Lit/8Q1BOwqUgG41JzcFgkowwj1rXFp+N1sgytwlAOfBtxXPbN+GyNhVR2o+bVw
GcgI8QlBXLEpLrdiPsjwYUirfn+V2qTEWGkoTE7BQUvDP3BNnmS2T8/gjc8k+5G7
k7YiNIbawv0u9Ri+Kz/AAsMHOzRIMiqiTZpD1KuYTTy2/g+5Scs+Rau5
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:50:21 2026 by rpki-client