Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A45F8/95187B187C1E11F0AB87CEE0DAE4EC9C/KFr00NNaAfToZi1wYXSTEwgbBW8.mft
File:                     KFr00NNaAfToZi1wYXSTEwgbBW8.mft (raw, json)
Hash identifier:          q3lfxVwb0AP2PmjJVO07lVlASWNB65LtSiRdASQqA1Y=
Subject key identifier:   0E:D2:3B:6B:ED:01:F6:91:A5:08:52:3C:26:F4:0B:04:90:55:99:1C
Authority key identifier: 28:5A:F4:D0:D3:5A:01:F4:E8:66:2D:70:61:74:93:13:08:1B:05:6F
Certificate issuer:       /CN=F36A45F8AF/serialNumber=285AF4D0D35A01F4E8662D7061749313081B056F
Certificate serial:       F9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/KFr00NNaAfToZi1wYXSTEwgbBW8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A45F8/95187B187C1E11F0AB87CEE0DAE4EC9C/KFr00NNaAfToZi1wYXSTEwgbBW8.mft
Manifest number:          F8
Signing time:             Fri 17 Apr 2026 05:04:34 +0000
Manifest this update:     Fri 17 Apr 2026 05:04:33 +0000
Manifest next update:     Sun 19 Apr 2026 05:04:33 +0000
Files and hashes:         1: KFr00NNaAfToZi1wYXSTEwgbBW8.crl (hash: DtgImP+TEJPV+g1BFUdgj92os6YL6CnI5eKY+ZpOnyw=)
                          2: C8DBFA287C1F11F0A46A9BE9DAE4EC9C.roa (hash: MEidKfzt+zEnon2K4l4j1oz0vKLVkgQvpvIBenvS0UU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A45F8/95187B187C1E11F0AB87CEE0DAE4EC9C/KFr00NNaAfToZi1wYXSTEwgbBW8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A45F8/95187B187C1E11F0AB87CEE0DAE4EC9C/KFr00NNaAfToZi1wYXSTEwgbBW8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/KFr00NNaAfToZi1wYXSTEwgbBW8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 249 (0xf9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A45F8AF, serialNumber=285AF4D0D35A01F4E8662D7061749313081B056F
        Validity
            Not Before: Apr 17 05:04:33 2026 GMT
            Not After : Apr 19 05:04:33 2026 GMT
        Subject: CN=69e1bf62-cf84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:de:b8:93:8f:7a:30:46:14:fe:65:0d:1a:6a:
                    3d:f5:64:87:50:ca:6b:49:66:86:53:c9:70:f0:fd:
                    ab:fd:f3:26:7f:16:62:a9:83:f8:47:34:be:dd:b0:
                    ed:3e:f0:38:b6:1c:1c:2e:95:32:8a:92:b0:3c:d7:
                    dc:c5:56:b0:58:28:80:4b:75:8f:dc:5e:d4:98:c9:
                    36:c0:3e:bc:c8:bf:7d:b3:72:14:37:45:87:ca:15:
                    54:5f:7e:a8:3b:6d:6d:36:7b:59:9b:60:f0:7b:30:
                    2d:85:08:d1:95:97:40:45:18:fb:31:de:0d:03:67:
                    b8:ac:b7:d3:19:bf:c8:c4:8c:e1:62:93:a0:b7:d7:
                    de:5b:b3:eb:a4:03:d7:4c:56:73:86:62:d2:0d:a1:
                    f0:6a:25:06:2a:27:4b:b9:5e:e7:61:58:51:68:1a:
                    3c:f2:5a:ec:3f:a1:f5:32:56:fa:8f:92:39:68:ea:
                    e6:9a:67:8b:fb:e2:70:03:ee:83:99:95:fa:f5:29:
                    97:6b:83:e7:18:be:22:07:23:49:e5:96:0d:e8:8d:
                    4a:31:3c:d3:51:77:b9:d3:27:8a:49:6e:f9:0c:3d:
                    78:1d:d0:a9:2e:86:f1:b4:4d:d6:ce:55:31:27:58:
                    97:f5:8f:11:e5:a3:4c:37:48:c9:f7:af:ff:21:dd:
                    68:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:D2:3B:6B:ED:01:F6:91:A5:08:52:3C:26:F4:0B:04:90:55:99:1C
            X509v3 Authority Key Identifier:
                keyid:28:5A:F4:D0:D3:5A:01:F4:E8:66:2D:70:61:74:93:13:08:1B:05:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A45F8/95187B187C1E11F0AB87CEE0DAE4EC9C/KFr00NNaAfToZi1wYXSTEwgbBW8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KFr00NNaAfToZi1wYXSTEwgbBW8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A45F8/95187B187C1E11F0AB87CEE0DAE4EC9C/KFr00NNaAfToZi1wYXSTEwgbBW8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:f2:d7:ec:74:46:e2:ed:23:3a:8a:f6:a5:12:3e:8c:c5:c5:
         ba:f3:7e:85:38:b0:9f:c6:42:42:c8:c1:b1:0c:dc:e6:db:dc:
         fc:83:8f:ca:f9:ac:38:31:13:be:71:55:0c:a0:38:60:fd:69:
         94:76:bc:26:c1:14:b9:3a:83:4c:8b:27:92:91:54:7a:44:63:
         a5:2a:50:f5:4a:3a:00:b9:da:1c:4f:85:e5:ed:cb:09:9c:23:
         a1:48:c7:4c:24:55:08:a3:4c:c1:98:b7:1d:37:2a:d1:29:07:
         2f:df:f1:4c:bd:06:2e:c4:c4:99:5a:9d:1e:a1:e8:2e:63:fa:
         4f:cd:d8:bb:18:bc:1a:a1:33:a6:1d:5f:8d:60:b7:07:1f:05:
         fc:65:34:5e:f3:55:34:62:e2:84:b3:e2:fe:9e:6d:0d:04:03:
         49:fb:1a:37:42:12:52:66:18:36:02:c4:ab:bc:43:d5:a0:3e:
         de:48:cf:1b:fe:bd:54:9d:7b:c4:7f:70:2b:4c:64:6a:4e:ed:
         4c:24:61:db:0c:7a:01:f7:f3:0d:c5:99:ef:4d:de:4e:ed:dc:
         7f:ae:dc:dd:72:92:0a:f4:5c:41:0e:3e:ea:9c:55:1c:2a:76:
         cb:3c:76:c7:29:a9:7f:f5:72:c5:82:35:a3:21:0f:da:e7:fd:
         4c:5a:8c:1e
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAPkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTQ1RjhBRjExMC8GA1UEBRMoMjg1QUY0RDBEMzVBMDFGNEU4NjYyRDcwNjE3NDkz
MTMwODFCMDU2RjAeFw0yNjA0MTcwNTA0MzNaFw0yNjA0MTkwNTA0MzNaMBgxFjAU
BgNVBAMTDTY5ZTFiZjYyLWNmODQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC83riTj3owRhT+ZQ0aaj31ZIdQymtJZoZTyXDw/av98yZ/FmKpg/hHNL7d
sO0+8Di2HBwulTKKkrA819zFVrBYKIBLdY/cXtSYyTbAPrzIv32zchQ3RYfKFVRf
fqg7bW02e1mbYPB7MC2FCNGVl0BFGPsx3g0DZ7ist9MZv8jEjOFik6C3195bs+uk
A9dMVnOGYtINofBqJQYqJ0u5XudhWFFoGjzyWuw/ofUyVvqPkjlo6uaaZ4v74nAD
7oOZlfr1KZdrg+cYviIHI0nllg3ojUoxPNNRd7nTJ4pJbvkMPXgd0KkuhvG0TdbO
VTEnWJf1jxHlo0w3SMn3r/8h3WjNAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUDtI7
a+0B9pGlCFI8JvQLBJBVmRwwHwYDVR0jBBgwFoAUKFr00NNaAfToZi1wYXSTEwgb
BW8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkE0NUY4Lzk1MTg3QjE4N0MxRTExRjBBQjg3Q0VFMERBRTRFQzlDL0tGcjAw
Tk5hQWZUb1ppMXdZWFNURXdnYkJXOC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0tGcjAwTk5hQWZUb1ppMXdZWFNURXdnYkJXOC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QTQ1RjgvOTUxODdCMTg3QzFFMTFGMEFCODdDRUUwREFF
NEVDOUMvS0ZyMDBOTmFBZlRvWmkxd1lYU1RFd2diQlc4Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAv8tfsdEbi7SM6ivalEj6MxcW6836F
OLCfxkJCyMGxDNzm29z8g4/K+aw4MRO+cVUMoDhg/WmUdrwmwRS5OoNMiyeSkVR6
RGOlKlD1SjoAudocT4Xl7csJnCOhSMdMJFUIo0zBmLcdNyrRKQcv3/FMvQYuxMSZ
Wp0eoeguY/pPzdi7GLwaoTOmHV+NYLcHHwX8ZTRe81U0YuKEs+L+nm0NBANJ+xo3
QhJSZhg2AsSrvEPVoD7eSM8b/r1UnXvEf3ArTGRqTu1MJGHbDHoB9/MNxZnvTd5O
7dx/rtzdcpIK9FxBDj7qnFUcKnbLPHbHKal/9XLFgjWjIQ/a5/1MWowe
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:03:36 2026 by rpki-client