Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369E735/7BC5D4801CD711F1B9A0DDDFDAE4EC9C/b4Um3OtaqCQHFEfR3rQc7IBrSoE.mft
File:                     b4Um3OtaqCQHFEfR3rQc7IBrSoE.mft (raw, json)
Hash identifier:          ShMXSde2fcJlvNNQ3bOTNH+sZwEM3klUhhV1sXlpYyw=
Subject key identifier:   84:D2:21:8D:E4:F4:1E:FA:54:6E:1D:04:FE:58:72:59:3F:5B:DD:B7
Authority key identifier: 6F:85:26:DC:EB:5A:A8:24:07:14:47:D1:DE:B4:1C:EC:80:6B:4A:81
Certificate issuer:       /CN=F369E735AF/serialNumber=6F8526DCEB5AA824071447D1DEB41CEC806B4A81
Certificate serial:       2A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/b4Um3OtaqCQHFEfR3rQc7IBrSoE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369E735/7BC5D4801CD711F1B9A0DDDFDAE4EC9C/b4Um3OtaqCQHFEfR3rQc7IBrSoE.mft
Manifest number:          29
Signing time:             Fri 17 Apr 2026 05:28:28 +0000
Manifest this update:     Fri 17 Apr 2026 05:28:28 +0000
Manifest next update:     Sun 19 Apr 2026 05:28:28 +0000
Files and hashes:         1: b4Um3OtaqCQHFEfR3rQc7IBrSoE.crl (hash: QDkHc3CmU+hyj/BVc3sNryO9CzatI8Jx+ZQbKaCkGi8=)
                          2: 8DE4B02A1CDA11F1B51079F1DAE4EC9C.roa (hash: ki1Y7U8ceJ4uu+WWwIuci/NWldaq2lAVwWjFI1+0Btg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369E735/7BC5D4801CD711F1B9A0DDDFDAE4EC9C/b4Um3OtaqCQHFEfR3rQc7IBrSoE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369E735/7BC5D4801CD711F1B9A0DDDFDAE4EC9C/b4Um3OtaqCQHFEfR3rQc7IBrSoE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/b4Um3OtaqCQHFEfR3rQc7IBrSoE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 42 (0x2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369E735AF, serialNumber=6F8526DCEB5AA824071447D1DEB41CEC806B4A81
        Validity
            Not Before: Apr 17 05:28:28 2026 GMT
            Not After : Apr 19 05:28:28 2026 GMT
        Subject: CN=69e1c4fc-8769
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:bf:02:ba:04:3b:25:ea:db:d3:5f:5b:11:c5:
                    34:01:a9:93:9b:13:d1:10:6c:1a:ee:97:8f:b1:91:
                    f2:36:5c:d3:53:6f:da:32:51:c9:44:93:d9:92:ef:
                    a2:3a:73:a8:b3:fe:82:a9:22:ab:b5:d7:60:aa:68:
                    6f:ad:ef:9a:32:43:dd:73:a3:cb:55:89:31:3a:df:
                    76:11:43:14:ce:cf:7c:4c:1d:ad:04:22:bf:7a:b4:
                    4b:a7:ea:36:4f:28:1b:b7:81:88:74:ae:5d:c5:8f:
                    b5:e8:9c:a1:e8:63:99:88:49:c1:f5:6f:5e:37:b1:
                    6d:fb:3e:20:91:b9:85:5f:ee:81:a6:37:8c:ec:b4:
                    2a:13:d6:0a:85:67:bb:8e:6f:54:e6:d7:d1:39:97:
                    99:dd:a3:b9:31:8c:b2:9f:93:41:c8:cc:06:f4:3b:
                    95:4b:cb:7c:4b:11:12:21:e5:c7:d3:2b:24:27:9c:
                    07:84:dc:77:6e:6f:76:31:01:28:47:88:6e:56:a6:
                    37:ae:47:8f:25:62:4e:46:71:ae:f7:aa:1b:82:6b:
                    80:bd:24:97:8f:46:8d:77:fc:82:12:6c:75:af:71:
                    3d:da:2f:e6:dd:4c:1b:f6:bf:3e:af:99:d4:fe:42:
                    7e:cb:6a:ff:36:d9:f1:08:b6:75:9d:fd:ee:c5:28:
                    7d:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:D2:21:8D:E4:F4:1E:FA:54:6E:1D:04:FE:58:72:59:3F:5B:DD:B7
            X509v3 Authority Key Identifier:
                keyid:6F:85:26:DC:EB:5A:A8:24:07:14:47:D1:DE:B4:1C:EC:80:6B:4A:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369E735/7BC5D4801CD711F1B9A0DDDFDAE4EC9C/b4Um3OtaqCQHFEfR3rQc7IBrSoE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/b4Um3OtaqCQHFEfR3rQc7IBrSoE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369E735/7BC5D4801CD711F1B9A0DDDFDAE4EC9C/b4Um3OtaqCQHFEfR3rQc7IBrSoE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:11:fe:04:f5:9d:ba:53:56:b6:a3:8e:83:b5:95:30:42:52:
         d7:d3:7a:14:aa:a1:04:ae:76:ec:98:a6:65:f7:8d:f5:a4:05:
         38:10:5a:52:db:08:0f:05:94:ab:42:c1:92:62:b0:1f:ce:3e:
         50:f8:5b:f3:ec:d2:aa:33:d1:ad:b2:5a:26:3c:82:64:1f:ba:
         b0:1d:62:05:7d:3e:f4:a2:de:47:cf:35:91:ae:d4:6d:1b:70:
         b2:2a:cc:af:99:8d:54:06:64:b1:50:a2:ef:35:63:b4:27:35:
         41:e5:a2:6c:38:eb:64:23:86:06:1d:52:eb:ee:42:a3:b9:a8:
         83:8a:a0:7c:e1:c8:63:74:80:c3:12:d9:83:e0:98:da:18:f3:
         8f:3a:61:80:3a:d9:88:6d:4e:15:d7:7d:c5:5c:38:5a:63:61:
         a1:d9:bb:e6:64:75:ce:3b:38:c8:6e:32:b2:70:7a:a0:3a:57:
         c9:28:3a:a1:0c:fa:da:60:0e:fd:09:4a:10:be:95:b4:88:d1:
         ff:98:f5:0e:11:f7:bc:85:7c:c1:a3:41:20:dd:51:b1:ed:06:
         1a:b0:aa:94:e1:2f:e7:65:9b:af:4d:40:85:e5:41:7e:c1:24:
         6a:89:3a:e5:b0:d2:7f:3e:e1:38:19:90:f8:38:96:2a:00:ec:
         3e:19:c5:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:14:47 2026 by rpki-client