Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A413F/EFD79ED2D33911EFB26AD7B3762E951A/xE7ima9Yscv0a9HSD8fc2XxqV2g.mft
File:                     xE7ima9Yscv0a9HSD8fc2XxqV2g.mft (raw, json)
Hash identifier:          vnKZnFxS0C5qEeDUcEJNo30KOcwfNjK7rFDzktDzDlU=
Subject key identifier:   15:0D:C2:D2:98:C8:C8:89:9B:AB:9C:1D:29:B4:4A:34:E1:62:7D:B8
Authority key identifier: C4:4E:E2:99:AF:58:B1:CB:F4:6B:D1:D2:0F:C7:DC:D9:7C:6A:57:68
Certificate issuer:       /CN=F36A413FAF/serialNumber=C44EE299AF58B1CBF46BD1D20FC7DCD97C6A5768
Certificate serial:       01D0
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/xE7ima9Yscv0a9HSD8fc2XxqV2g.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A413F/EFD79ED2D33911EFB26AD7B3762E951A/xE7ima9Yscv0a9HSD8fc2XxqV2g.mft
Manifest number:          01CF
Signing time:             Thu 16 Apr 2026 04:42:59 +0000
Manifest this update:     Thu 16 Apr 2026 04:42:59 +0000
Manifest next update:     Sat 18 Apr 2026 04:42:59 +0000
Files and hashes:         1: xE7ima9Yscv0a9HSD8fc2XxqV2g.crl (hash: htPfHGQn7Be77VSXuhPqofJ79LJlqTdmU6gf3X96NfI=)
                          2: 9FC2FD909B0411F0887961DFDAE4EC9C.roa (hash: SQLFm7c0g8dDMdmzog7bxprxzbcmvNx7dNociNoNFR4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A413F/EFD79ED2D33911EFB26AD7B3762E951A/xE7ima9Yscv0a9HSD8fc2XxqV2g.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A413F/EFD79ED2D33911EFB26AD7B3762E951A/xE7ima9Yscv0a9HSD8fc2XxqV2g.mft
                          rsync://rpki.afrinic.net/repository/afrinic/xE7ima9Yscv0a9HSD8fc2XxqV2g.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 18 Apr 2026 04:42:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 464 (0x1d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A413FAF, serialNumber=C44EE299AF58B1CBF46BD1D20FC7DCD97C6A5768
        Validity
            Not Before: Apr 16 04:42:59 2026 GMT
            Not After : Apr 18 04:42:59 2026 GMT
        Subject: CN=69e068d3-0e7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:61:a4:10:9e:9a:e0:f6:3e:43:2d:67:1f:db:
                    bc:18:08:b6:9b:4a:7c:20:4a:98:33:6b:86:f6:0c:
                    3d:9d:74:ab:41:a7:a3:9f:1f:74:af:82:0d:23:8c:
                    8c:a6:fe:c0:e2:35:18:16:b1:09:58:5c:3a:49:98:
                    3f:79:85:42:0b:e4:fe:6e:00:01:06:3b:23:fe:0c:
                    06:01:27:bd:f1:58:99:5c:30:17:44:3e:b4:b8:e2:
                    81:ba:a7:83:de:62:39:70:4d:e6:ad:e1:10:2a:e2:
                    32:0f:3a:b0:30:e4:bb:77:19:93:f0:3c:36:03:e7:
                    27:10:48:27:22:43:a3:0b:7d:5b:27:10:74:c9:32:
                    e1:c1:f0:b8:67:e8:31:ed:c6:2b:3a:c3:4a:9f:24:
                    b8:4f:ff:f1:3c:b6:78:70:b9:2d:0e:94:82:0b:1f:
                    a8:fa:70:a9:03:01:f6:71:4a:26:a5:cc:76:8d:ac:
                    fb:66:96:7f:92:be:06:1d:f4:41:49:62:d7:4a:4b:
                    0e:86:07:be:7c:1f:7a:77:eb:c5:da:f3:b2:f0:ad:
                    f6:60:8e:b4:20:41:08:4e:d9:58:7b:82:cd:db:46:
                    2d:5c:61:66:c6:17:eb:93:07:52:bc:c0:f4:c4:ae:
                    d5:8c:ea:54:58:9d:7f:a8:e5:da:13:93:cb:8d:b4:
                    fc:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:0D:C2:D2:98:C8:C8:89:9B:AB:9C:1D:29:B4:4A:34:E1:62:7D:B8
            X509v3 Authority Key Identifier:
                keyid:C4:4E:E2:99:AF:58:B1:CB:F4:6B:D1:D2:0F:C7:DC:D9:7C:6A:57:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A413F/EFD79ED2D33911EFB26AD7B3762E951A/xE7ima9Yscv0a9HSD8fc2XxqV2g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xE7ima9Yscv0a9HSD8fc2XxqV2g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A413F/EFD79ED2D33911EFB26AD7B3762E951A/xE7ima9Yscv0a9HSD8fc2XxqV2g.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:16:5a:5f:a3:fc:bf:17:f9:8a:7c:b2:29:b2:ed:4c:06:1a:
         9a:df:14:a7:01:60:ce:c0:c6:b5:cf:ad:c8:58:e5:cb:44:ac:
         59:50:a2:08:f1:1d:cd:cb:12:02:4a:32:91:1d:38:f5:96:38:
         0c:00:9e:f7:55:a6:d2:dc:ee:0b:e7:65:90:d5:26:fa:01:80:
         01:83:27:16:7f:6f:db:0a:30:1b:98:8f:66:58:4e:dc:0d:ee:
         39:7a:8c:cb:6d:fc:d7:e5:f0:a9:7d:54:a5:2f:e3:1c:da:ee:
         b0:14:cb:e5:80:97:1e:01:d6:23:65:a1:35:a1:c6:70:67:05:
         a4:49:86:73:e6:00:13:c2:6a:14:5f:18:43:65:38:74:07:7c:
         bb:80:66:cd:7d:ef:82:3c:d2:33:fe:8b:04:b9:6f:d7:f0:0a:
         d4:f8:5e:17:fd:df:67:94:c3:72:f5:d6:64:93:32:97:21:8a:
         c4:bf:0f:72:46:f9:38:b2:8f:ba:c9:bc:a5:9e:62:1e:be:b2:
         98:4c:5d:50:53:aa:af:5d:cf:74:4d:1b:15:f2:a6:d5:90:7b:
         2b:bd:b8:ed:34:8c:76:6e:90:10:5c:95:b4:cb:68:fc:56:b2:
         49:02:07:15:12:61:b5:1d:29:52:83:87:01:3e:cd:71:6e:bb:
         84:fc:33:97
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAdAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTQxM0ZBRjExMC8GA1UEBRMoQzQ0RUUyOTlBRjU4QjFDQkY0NkJEMUQyMEZDN0RD
RDk3QzZBNTc2ODAeFw0yNjA0MTYwNDQyNTlaFw0yNjA0MTgwNDQyNTlaMBgxFjAU
BgNVBAMTDTY5ZTA2OGQzLTBlN2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDQYaQQnprg9j5DLWcf27wYCLabSnwgSpgza4b2DD2ddKtBp6OfH3Svgg0j
jIym/sDiNRgWsQlYXDpJmD95hUIL5P5uAAEGOyP+DAYBJ73xWJlcMBdEPrS44oG6
p4PeYjlwTeat4RAq4jIPOrAw5Lt3GZPwPDYD5ycQSCciQ6MLfVsnEHTJMuHB8Lhn
6DHtxis6w0qfJLhP//E8tnhwuS0OlIILH6j6cKkDAfZxSialzHaNrPtmln+SvgYd
9EFJYtdKSw6GB758H3p368Xa87LwrfZgjrQgQQhO2Vh7gs3bRi1cYWbGF+uTB1K8
wPTErtWM6lRYnX+o5doTk8uNtPwHAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUFQ3C
0pjIyImbq5wdKbRKNOFifbgwHwYDVR0jBBgwFoAUxE7ima9Yscv0a9HSD8fc2Xxq
V2gwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkE0MTNGL0VGRDc5RUQyRDMzOTExRUZCMjZBRDdCMzc2MkU5NTFBL3hFN2lt
YTlZc2N2MGE5SFNEOGZjMlh4cVYyZy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3hFN2ltYTlZc2N2MGE5SFNEOGZjMlh4cVYyZy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QTQxM0YvRUZENzlFRDJEMzM5MTFFRkIyNkFEN0IzNzYy
RTk1MUEveEU3aW1hOVlzY3YwYTlIU0Q4ZmMyWHhxVjJnLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC+Flpfo/y/F/mKfLIpsu1MBhqa3xSn
AWDOwMa1z63IWOXLRKxZUKII8R3NyxICSjKRHTj1ljgMAJ73VabS3O4L52WQ1Sb6
AYABgycWf2/bCjAbmI9mWE7cDe45eozLbfzX5fCpfVSlL+Mc2u6wFMvlgJceAdYj
ZaE1ocZwZwWkSYZz5gATwmoUXxhDZTh0B3y7gGbNfe+CPNIz/osEuW/X8ArU+F4X
/d9nlMNy9dZkkzKXIYrEvw9yRvk4so+6ybylnmIevrKYTF1QU6qvXc90TRsV8qbV
kHsrvbjtNIx2bpAQXJW0y2j8VrJJAgcVEmG1HSlSg4cBPs1xbruE/DOX
-----END CERTIFICATE-----
Generated at Fri Apr 17 03:44:22 2026 by rpki-client