Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369D48A/C4097DD038D611ECA501247DD8A014CE/u_8lJAsgf5usxcuVSmIwmrulNl0.mft
File:                     u_8lJAsgf5usxcuVSmIwmrulNl0.mft (raw, json)
Hash identifier:          vNsBJ0y0ZTFEOvnInKEwhdq+TJRGLMzDC9uVYotlJno=
Subject key identifier:   9D:55:3B:37:47:42:8E:65:EB:7F:15:51:62:7A:A1:74:06:67:06:13
Authority key identifier: BB:FF:25:24:0B:20:7F:9B:AC:C5:CB:95:4A:62:30:9A:BB:A5:36:5D
Certificate issuer:       /CN=F369D48AAF/serialNumber=BBFF25240B207F9BACC5CB954A62309ABBA5365D
Certificate serial:       0691
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/u_8lJAsgf5usxcuVSmIwmrulNl0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369D48A/C4097DD038D611ECA501247DD8A014CE/u_8lJAsgf5usxcuVSmIwmrulNl0.mft
Manifest number:          068F
Signing time:             Fri 17 Apr 2026 02:28:18 +0000
Manifest this update:     Fri 17 Apr 2026 02:28:17 +0000
Manifest next update:     Sun 19 Apr 2026 02:28:17 +0000
Files and hashes:         1: u_8lJAsgf5usxcuVSmIwmrulNl0.crl (hash: modYaeQ8scJHJrpqXxFwzM7BmTIKO3Q5oxhQCy7NKmE=)
                          2: 5C15170E7C3F11ED8559019DF1222468.roa (hash: Fnw4e2Z6mQxfu98S+Kvx8lPub/zYdBqQ2Qpl3ytsjPY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369D48A/C4097DD038D611ECA501247DD8A014CE/u_8lJAsgf5usxcuVSmIwmrulNl0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369D48A/C4097DD038D611ECA501247DD8A014CE/u_8lJAsgf5usxcuVSmIwmrulNl0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/u_8lJAsgf5usxcuVSmIwmrulNl0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 02:28:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1681 (0x691)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369D48AAF, serialNumber=BBFF25240B207F9BACC5CB954A62309ABBA5365D
        Validity
            Not Before: Apr 17 02:28:17 2026 GMT
            Not After : Apr 19 02:28:17 2026 GMT
        Subject: CN=69e19ac1-f9ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0d:c8:9a:3e:c0:f6:21:50:e1:f9:34:ac:45:
                    24:b9:49:5d:57:06:24:c0:76:80:31:f7:6c:ea:78:
                    93:0c:19:31:e2:5f:ec:46:05:e7:1f:35:8e:e0:22:
                    c5:3e:e7:a8:c0:41:46:7e:04:b9:54:95:cd:f0:23:
                    d9:72:bf:24:c5:42:2a:01:d2:c4:f9:e8:01:50:ab:
                    76:ec:93:30:1a:45:fe:be:32:0e:b5:0a:cb:30:49:
                    30:20:55:21:6a:d9:7b:88:8e:a6:cb:6f:3e:f0:ac:
                    e8:de:48:14:06:62:84:e6:9b:49:c8:02:cd:aa:93:
                    c3:1e:b3:63:9f:01:06:fc:d9:03:d0:69:84:4a:5d:
                    44:ff:79:08:e2:c2:d0:1f:73:45:aa:03:8e:5a:f0:
                    b8:d4:5f:e2:9d:1d:e5:d0:84:a6:5f:2c:fa:de:32:
                    6c:df:00:22:d9:3d:cc:6e:70:20:54:6d:1a:69:f9:
                    88:2d:9e:b9:c1:01:95:0d:6b:92:25:5a:64:00:7f:
                    93:e4:f3:1f:8b:01:fe:ea:dc:aa:f1:a6:4f:08:84:
                    ee:2e:86:70:87:80:3d:9d:5a:7e:bf:dc:98:dc:86:
                    e0:ea:e6:2f:3f:65:da:6b:5e:ab:94:8f:14:d1:13:
                    fb:99:eb:f9:9e:f0:96:7f:0d:93:0e:2b:c3:cf:a4:
                    ad:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:55:3B:37:47:42:8E:65:EB:7F:15:51:62:7A:A1:74:06:67:06:13
            X509v3 Authority Key Identifier:
                keyid:BB:FF:25:24:0B:20:7F:9B:AC:C5:CB:95:4A:62:30:9A:BB:A5:36:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369D48A/C4097DD038D611ECA501247DD8A014CE/u_8lJAsgf5usxcuVSmIwmrulNl0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/u_8lJAsgf5usxcuVSmIwmrulNl0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369D48A/C4097DD038D611ECA501247DD8A014CE/u_8lJAsgf5usxcuVSmIwmrulNl0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:5f:2b:7e:19:a3:c3:84:db:ca:cc:d1:91:67:88:6f:b8:0e:
         3a:53:1d:60:1a:21:bd:02:53:e4:de:d5:58:97:0c:5a:c9:1c:
         3b:d0:83:a0:0b:5a:0b:32:bf:ac:9a:50:aa:b3:0f:74:1a:8c:
         41:2f:3d:31:e8:ef:85:6f:25:83:d0:61:a1:40:03:7c:a9:45:
         ba:be:13:af:47:e2:c8:4c:dc:ad:60:f5:0d:7a:51:16:b2:a1:
         30:a1:d1:7f:8e:3e:09:72:8a:76:00:ec:c7:fe:a4:07:3f:89:
         86:ee:f0:b4:86:32:52:a8:46:99:60:17:8f:d1:58:33:6c:0a:
         18:a7:38:d2:a4:40:05:eb:5b:0a:2e:dc:59:dc:52:85:71:e5:
         37:e6:99:ea:39:2f:7c:8d:7f:e4:5a:0b:02:df:83:0f:e4:36:
         96:03:93:c3:87:29:f1:95:9a:88:5f:1d:34:90:e7:c4:55:29:
         d4:7b:90:71:4b:d2:7a:49:27:bc:3a:01:e2:9c:be:9b:9a:0c:
         3b:f0:a2:04:89:1d:24:b4:94:f0:7a:92:91:16:3f:34:34:8f:
         fd:da:d6:95:3d:ed:ec:c5:9f:74:85:ba:87:2a:16:54:c9:06:
         e0:7a:37:76:74:9a:06:28:f1:f3:18:94:cc:0b:4a:db:d5:4e:
         d0:58:9d:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:04:17 2026 by rpki-client