Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369E9B3/EE40A58A558C11EFAFCCFBA0762E951A/9XSxa6hq2W4A3trNY0H5qCTqR6c.mft
File:                     9XSxa6hq2W4A3trNY0H5qCTqR6c.mft (raw, json)
Hash identifier:          vcveftM6LpOlh06ig4SVY30A/QSUUch9EPDmYa1YTyU=
Subject key identifier:   95:C6:4F:00:FD:32:BB:63:48:47:E5:10:21:19:E8:DF:1E:B5:53:41
Authority key identifier: F5:74:B1:6B:A8:6A:D9:6E:00:DE:DA:CD:63:41:F9:A8:24:EA:47:A7
Certificate issuer:       /CN=F369E9B3AF/serialNumber=F574B16BA86AD96E00DEDACD6341F9A824EA47A7
Certificate serial:       0290
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/9XSxa6hq2W4A3trNY0H5qCTqR6c.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369E9B3/EE40A58A558C11EFAFCCFBA0762E951A/9XSxa6hq2W4A3trNY0H5qCTqR6c.mft
Manifest number:          0289
Signing time:             Fri 17 Apr 2026 04:22:18 +0000
Manifest this update:     Fri 17 Apr 2026 04:22:18 +0000
Manifest next update:     Sun 19 Apr 2026 04:22:18 +0000
Files and hashes:         1: 9XSxa6hq2W4A3trNY0H5qCTqR6c.crl (hash: fiSxAi6G+58f6dSb+izvR6YAxLPhSyt/mgBumg1UCoQ=)
                          2: AEEDAD061A0711F192AA088FDAE4EC9C.roa (hash: JNwZ7kUtB4FzpUgaJAkRzngvDEP1d2+9HLGp6xBl/AI=)
                          3: 8036BCAE2A7F11F19DD1749ADAE4EC9C.roa (hash: Br53n/pGReLNyDpsiSvYoijagBzl59OaUoRNTDvz4ms=)
                          4: F0AE3C30F8F411F0BD60DAC7DAE4EC9C.roa (hash: w6gvWanr3TgG7meRgmSObxkcZzrvD0UBJOndkTrbcL0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369E9B3/EE40A58A558C11EFAFCCFBA0762E951A/9XSxa6hq2W4A3trNY0H5qCTqR6c.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369E9B3/EE40A58A558C11EFAFCCFBA0762E951A/9XSxa6hq2W4A3trNY0H5qCTqR6c.mft
                          rsync://rpki.afrinic.net/repository/afrinic/9XSxa6hq2W4A3trNY0H5qCTqR6c.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 04:22:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 656 (0x290)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369E9B3AF, serialNumber=F574B16BA86AD96E00DEDACD6341F9A824EA47A7
        Validity
            Not Before: Apr 17 04:22:18 2026 GMT
            Not After : Apr 19 04:22:18 2026 GMT
        Subject: CN=69e1b57a-db17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7a:8e:64:0e:20:9f:95:6d:2f:61:a2:f1:68:
                    97:4c:75:38:5f:4d:4e:75:e8:5c:2a:2d:c2:11:e2:
                    57:aa:8d:9e:d6:9b:5b:90:b6:13:dd:13:b1:17:60:
                    35:c0:3f:91:64:95:61:64:2a:07:34:9d:65:de:ae:
                    55:b1:a4:80:09:8a:d9:f5:8f:46:ff:43:13:59:c1:
                    c6:89:8c:9f:b2:22:f6:4b:c5:64:43:08:35:82:95:
                    5c:c7:ba:82:a6:cf:11:02:4c:31:d9:f7:33:43:e7:
                    69:4e:a4:b5:a7:b1:58:fc:d0:30:be:d3:7a:14:41:
                    f1:15:d7:dd:8a:32:0a:8e:8f:cf:20:81:12:8f:5a:
                    4c:c1:07:46:32:42:8d:38:86:48:83:27:16:cc:67:
                    3d:27:a2:a5:be:5b:ff:e9:a0:47:2f:2c:92:ab:64:
                    d1:3b:0d:d3:e6:ed:90:e3:4d:6e:57:8b:a2:bb:24:
                    94:bb:ff:75:f9:2a:83:87:69:35:8a:fe:57:9f:51:
                    71:a2:b4:cd:24:a6:2a:3f:8d:a4:af:ef:dd:f2:db:
                    38:2d:64:a1:8b:c2:ce:aa:76:d9:10:fd:c8:1e:e4:
                    df:27:ad:ea:ef:8e:5a:f9:82:db:39:01:86:b9:f4:
                    91:1e:23:4f:0d:7e:62:fb:dc:de:67:fd:09:2d:cb:
                    cf:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:C6:4F:00:FD:32:BB:63:48:47:E5:10:21:19:E8:DF:1E:B5:53:41
            X509v3 Authority Key Identifier:
                keyid:F5:74:B1:6B:A8:6A:D9:6E:00:DE:DA:CD:63:41:F9:A8:24:EA:47:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369E9B3/EE40A58A558C11EFAFCCFBA0762E951A/9XSxa6hq2W4A3trNY0H5qCTqR6c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9XSxa6hq2W4A3trNY0H5qCTqR6c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369E9B3/EE40A58A558C11EFAFCCFBA0762E951A/9XSxa6hq2W4A3trNY0H5qCTqR6c.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:6b:59:10:7a:3a:f2:49:17:60:d3:48:88:a8:a7:54:52:ec:
         df:33:28:81:63:e0:21:f3:af:d0:c8:cf:69:44:f8:c2:0b:7c:
         bc:fb:2d:da:77:f6:81:9e:2f:04:95:07:e2:81:3b:ac:1a:8c:
         eb:c7:98:c4:c9:4f:4b:c6:43:67:1f:71:bd:5f:6e:fb:a9:bf:
         cf:6a:9f:77:be:02:2b:2d:96:de:f1:9e:cb:d1:5f:d5:80:f8:
         cc:fa:0d:15:3e:59:00:2e:31:53:0c:b1:4d:24:e3:4e:05:e9:
         73:d1:0f:0f:4a:6e:0f:df:10:b7:32:6f:86:30:ef:3f:63:1d:
         d2:42:75:b8:5a:c5:69:3d:d6:97:4c:e7:5e:d1:55:78:d6:23:
         7d:91:4e:cd:e5:6b:12:cb:9a:0b:d2:92:d7:44:b5:09:01:bb:
         a1:0b:c0:7d:e0:67:5b:65:ba:b9:29:0e:98:9b:76:de:b4:4d:
         3f:79:77:6c:12:7a:0c:33:9d:b8:e6:6b:52:86:fd:ac:13:95:
         23:38:80:28:7a:7d:62:64:c9:54:29:18:73:49:9b:09:29:c6:
         ee:1e:05:f7:d2:3e:b4:4c:fc:56:27:92:36:b2:d6:33:86:e5:
         15:6a:64:c2:1b:06:39:be:84:a1:ab:84:53:c1:ff:4f:5f:68:
         05:e2:c9:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:42:27 2026 by rpki-client