Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36993D4/4A734B822FCB11F09C9B0DBCDAE4EC9C/CFZSep0iAmz-gRG6M4cl_B6GyqA.mft
File:                     CFZSep0iAmz-gRG6M4cl_B6GyqA.mft (raw, json)
Hash identifier:          c0VAyyydL2/3RxcxJxZ3veLmQc+iH51/yIz14VwRSgc=
Subject key identifier:   4F:03:32:FA:A5:9F:A6:B0:F9:7A:45:6A:77:47:0B:18:18:28:E8:74
Authority key identifier: 08:56:52:7A:9D:22:02:6C:FE:81:11:BA:33:87:25:FC:1E:86:CA:A0
Certificate issuer:       /CN=F36993D4AF/serialNumber=0856527A9D22026CFE8111BA338725FC1E86CAA0
Certificate serial:       0163
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CFZSep0iAmz-gRG6M4cl_B6GyqA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36993D4/4A734B822FCB11F09C9B0DBCDAE4EC9C/CFZSep0iAmz-gRG6M4cl_B6GyqA.mft
Manifest number:          0160
Signing time:             Thu 16 Apr 2026 04:52:09 +0000
Manifest this update:     Thu 16 Apr 2026 04:52:09 +0000
Manifest next update:     Sat 18 Apr 2026 04:52:09 +0000
Files and hashes:         1: CFZSep0iAmz-gRG6M4cl_B6GyqA.crl (hash: p3iffSxL6qWY5HgfJZ4xgDp1qv2GGfREnpQuq6VTLOo=)
                          2: 13E4DE8C30AC11F0AE6D139CDAE4EC9C.roa (hash: WbFTeA4PMTVD0fXbeP2ec+8+4PF17WQg0dVXFVp7fgM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36993D4/4A734B822FCB11F09C9B0DBCDAE4EC9C/CFZSep0iAmz-gRG6M4cl_B6GyqA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36993D4/4A734B822FCB11F09C9B0DBCDAE4EC9C/CFZSep0iAmz-gRG6M4cl_B6GyqA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CFZSep0iAmz-gRG6M4cl_B6GyqA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 18 Apr 2026 04:52:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 355 (0x163)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36993D4AF, serialNumber=0856527A9D22026CFE8111BA338725FC1E86CAA0
        Validity
            Not Before: Apr 16 04:52:09 2026 GMT
            Not After : Apr 18 04:52:09 2026 GMT
        Subject: CN=69e06af9-0ad5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:6c:2c:54:92:34:60:34:cc:c2:a7:00:61:a4:
                    67:bf:b0:95:d2:b2:8c:f1:27:28:db:c4:7a:3f:7a:
                    2e:c8:90:cb:7e:e2:70:71:1e:eb:cf:9c:ab:58:ee:
                    cc:11:b9:fe:7e:42:50:eb:58:6b:9a:ad:ae:33:d7:
                    50:66:ed:55:45:1b:5c:3d:95:a7:00:e2:53:86:10:
                    79:f6:89:95:a4:a2:e2:eb:47:69:09:92:a9:2d:87:
                    8f:ef:3b:3d:70:59:33:05:0b:23:86:3a:30:d7:7c:
                    15:c2:b9:7e:6f:db:05:54:4c:0d:8e:62:2c:79:ed:
                    98:dd:a8:7a:4c:af:b4:d8:d0:18:7f:45:28:cc:93:
                    74:bd:bb:cb:c2:f9:62:07:c8:cc:4c:50:3b:83:28:
                    1b:13:5a:df:a5:2c:24:1a:ea:4f:6e:6f:73:c5:e0:
                    e7:5b:7c:f4:c8:0f:d2:ca:c6:c9:87:9d:8c:6d:3e:
                    96:1b:36:82:55:77:23:67:fd:66:2c:d9:8c:ce:68:
                    fa:c7:e0:dd:75:0a:98:65:1d:23:e5:bb:60:82:a4:
                    75:5b:10:3d:87:27:e1:6d:d9:08:6b:c5:3f:88:40:
                    2c:3e:4a:21:ea:64:4c:3b:33:60:25:65:c3:29:eb:
                    a8:5e:84:ae:e2:ff:35:49:ae:3a:a6:80:c5:66:f3:
                    47:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:03:32:FA:A5:9F:A6:B0:F9:7A:45:6A:77:47:0B:18:18:28:E8:74
            X509v3 Authority Key Identifier:
                keyid:08:56:52:7A:9D:22:02:6C:FE:81:11:BA:33:87:25:FC:1E:86:CA:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36993D4/4A734B822FCB11F09C9B0DBCDAE4EC9C/CFZSep0iAmz-gRG6M4cl_B6GyqA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CFZSep0iAmz-gRG6M4cl_B6GyqA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36993D4/4A734B822FCB11F09C9B0DBCDAE4EC9C/CFZSep0iAmz-gRG6M4cl_B6GyqA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:e4:ef:b6:ab:8a:96:62:d6:16:89:c7:2f:e8:18:6b:9b:47:
         ef:b4:f9:18:22:df:66:a0:04:85:ca:25:8a:ff:f5:4d:e2:a5:
         4c:8a:5e:c1:7b:1e:45:ee:61:6f:e8:c5:25:8e:81:04:a2:8c:
         d9:f5:06:99:2f:45:b9:3c:2e:c2:ad:0a:b4:0b:a2:ea:6b:7b:
         cc:2a:ff:9a:06:43:bd:58:4c:c8:6b:ca:b4:c6:df:33:d4:01:
         8b:af:7c:ff:fd:f3:9e:50:3f:6f:0f:74:c7:a9:23:d9:00:1f:
         02:70:5b:3d:48:b9:ed:14:48:7d:e4:4f:bd:bd:78:63:eb:02:
         56:90:b8:b2:90:ef:2d:11:c9:6f:53:31:b0:12:e3:ff:8a:00:
         ea:98:ff:43:55:9c:e0:96:b3:5d:ea:27:8b:ce:e3:fd:50:d8:
         c9:cc:b8:9c:37:45:ec:bc:59:89:00:3f:d2:91:99:01:a2:9b:
         3f:2e:c1:18:9f:6c:14:c3:a0:c4:8d:43:f6:96:36:0d:ab:c6:
         fe:38:d2:96:2e:40:87:ed:09:fe:29:b2:ee:d1:ee:b0:66:a4:
         99:45:a7:d3:44:d0:d0:8b:a1:63:0f:f9:3c:ac:09:c5:ea:52:
         18:45:cc:d5:bc:18:9b:a2:25:24:be:90:4b:52:b0:6f:71:44:
         6b:da:46:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:55:21 2026 by rpki-client