Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369A175/70EF6578D1D011F089F2F4E0DAE4EC9C/p2GjM_sHiCoLh27yN6AEmoSNfjE.mft
File:                     p2GjM_sHiCoLh27yN6AEmoSNfjE.mft (raw, json)
Hash identifier:          m80ZucRJryzysNOdqaH7lRv2KrFm4V+hk7VoPaLSWPU=
Subject key identifier:   08:3C:38:3F:7D:FC:DE:97:B0:72:15:1A:A0:20:6E:44:57:9C:FC:E2
Authority key identifier: A7:61:A3:33:FB:07:88:2A:0B:87:6E:F2:37:A0:04:9A:84:8D:7E:31
Certificate issuer:       /CN=F369A175AF/serialNumber=A761A333FB07882A0B876EF237A0049A848D7E31
Certificate serial:       89
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/p2GjM_sHiCoLh27yN6AEmoSNfjE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369A175/70EF6578D1D011F089F2F4E0DAE4EC9C/p2GjM_sHiCoLh27yN6AEmoSNfjE.mft
Manifest number:          88
Signing time:             Fri 17 Apr 2026 05:16:32 +0000
Manifest this update:     Fri 17 Apr 2026 05:16:31 +0000
Manifest next update:     Sun 19 Apr 2026 05:16:31 +0000
Files and hashes:         1: p2GjM_sHiCoLh27yN6AEmoSNfjE.crl (hash: U9wy3OB/8A/yZTdAlD1I+MU40PVlZmMbzR/g3oJZaLk=)
                          2: D8BE6E24D1D011F081FB64E3DAE4EC9C.roa (hash: 2R26vV4RIhLeHcqd7Et7YVYkAWTwdZTJEaPCxT554BM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369A175/70EF6578D1D011F089F2F4E0DAE4EC9C/p2GjM_sHiCoLh27yN6AEmoSNfjE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369A175/70EF6578D1D011F089F2F4E0DAE4EC9C/p2GjM_sHiCoLh27yN6AEmoSNfjE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/p2GjM_sHiCoLh27yN6AEmoSNfjE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 137 (0x89)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369A175AF, serialNumber=A761A333FB07882A0B876EF237A0049A848D7E31
        Validity
            Not Before: Apr 17 05:16:31 2026 GMT
            Not After : Apr 19 05:16:31 2026 GMT
        Subject: CN=69e1c230-bcb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d3:56:5a:bd:13:45:7e:f7:5c:5d:8a:2d:3c:
                    7c:f1:ad:ac:97:3c:0f:85:a3:6f:11:6b:61:6b:d1:
                    1a:2a:6c:4d:f0:b0:4d:2e:43:2b:36:64:60:d9:b0:
                    c5:e0:6c:a9:9d:31:1c:5a:f1:28:2a:b8:eb:7e:05:
                    41:f4:1c:a3:7a:ca:24:d5:00:dd:93:75:76:2e:dc:
                    61:84:47:4d:65:1c:3c:3c:12:e4:d8:3b:9f:fa:a6:
                    33:fd:4b:08:eb:07:de:fd:5f:3f:bc:3f:08:b0:5a:
                    cb:2d:33:da:5e:02:aa:0d:58:a5:29:c4:9b:b2:2a:
                    41:f5:04:35:35:a0:ed:1c:ff:d6:4b:43:8e:c1:60:
                    2b:57:2c:45:af:b5:5b:93:27:47:22:f7:e4:e9:9d:
                    e0:60:8e:68:7d:15:b6:96:e7:cf:41:14:07:d9:e1:
                    07:7f:98:e4:0f:64:65:34:9c:6c:c3:1e:9b:0c:57:
                    19:dc:79:27:12:9e:e5:5e:2d:47:c3:d0:26:cc:ad:
                    b4:b5:fd:a0:a7:ad:d9:f4:dc:76:52:fa:80:e2:0f:
                    67:03:f2:8b:5c:8d:3b:de:4d:ed:1a:07:18:02:8a:
                    86:d6:61:54:9e:0e:da:47:69:51:63:16:ff:ca:d8:
                    ab:de:2c:6c:4e:43:4e:5d:64:d2:03:aa:e7:62:7c:
                    fe:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:3C:38:3F:7D:FC:DE:97:B0:72:15:1A:A0:20:6E:44:57:9C:FC:E2
            X509v3 Authority Key Identifier:
                keyid:A7:61:A3:33:FB:07:88:2A:0B:87:6E:F2:37:A0:04:9A:84:8D:7E:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369A175/70EF6578D1D011F089F2F4E0DAE4EC9C/p2GjM_sHiCoLh27yN6AEmoSNfjE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/p2GjM_sHiCoLh27yN6AEmoSNfjE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369A175/70EF6578D1D011F089F2F4E0DAE4EC9C/p2GjM_sHiCoLh27yN6AEmoSNfjE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:a9:5a:78:4f:54:53:ef:6d:34:4a:c5:ca:db:2c:91:e6:2c:
         1f:c3:f5:c8:12:2c:d8:01:09:e1:00:09:e1:43:a8:e2:3d:87:
         ff:77:ef:88:91:36:05:56:69:ff:cc:b0:c5:5a:f4:61:17:cc:
         e1:e7:1b:63:2d:77:33:96:ed:a1:94:ed:3d:33:89:6e:bd:e0:
         23:da:a7:b6:f7:4f:ef:44:2c:f1:d2:e2:7d:bb:6f:f9:a9:98:
         af:4d:68:1b:c6:67:21:d4:83:c5:ee:e8:e5:de:65:6f:38:71:
         e2:b9:12:73:ca:2e:03:ef:92:8d:0e:30:55:18:d0:0d:53:bd:
         b2:09:97:df:bc:d9:c5:03:9d:9c:ea:90:dc:38:bb:ce:50:17:
         ba:b5:d2:f9:5e:c5:a8:83:69:25:b7:b5:20:2e:26:f3:11:83:
         26:ec:01:9c:b9:9e:08:b7:53:29:3d:a0:1b:ed:d9:a0:f5:31:
         0f:bd:20:b4:af:03:96:1e:a9:8b:95:7b:d9:4e:c6:ec:34:66:
         0e:4e:ea:c0:0a:18:6d:9b:d4:33:5e:26:bf:45:e9:1c:17:ed:
         ab:cb:13:a9:34:a1:f4:e7:13:13:ce:00:25:b6:89:14:35:8d:
         d1:6e:61:88:1e:fa:06:91:02:19:c5:2a:1d:15:db:98:5b:05:
         b6:69:d8:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:24:55 2026 by rpki-client