Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A9F58/2674144C1D5E11F1BB6B757FDAE4EC9C/LLe0CZqpG_BaF2pF-h63Z-m1oq8.mft
File:                     LLe0CZqpG_BaF2pF-h63Z-m1oq8.mft (raw, json)
Hash identifier:          b3+sZKUJY6F/DbIGcWbQ/MtI2aIXjPe2mmoztI+DzT8=
Subject key identifier:   9E:90:80:BF:FF:08:38:8B:A3:61:76:E4:2B:D7:DA:5C:B4:96:0A:55
Authority key identifier: 2C:B7:B4:09:9A:A9:1B:F0:5A:17:6A:45:FA:1E:B7:67:E9:B5:A2:AF
Certificate issuer:       /CN=F36A9F58AF/serialNumber=2CB7B4099AA91BF05A176A45FA1EB767E9B5A2AF
Certificate serial:       29
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/LLe0CZqpG_BaF2pF-h63Z-m1oq8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A9F58/2674144C1D5E11F1BB6B757FDAE4EC9C/LLe0CZqpG_BaF2pF-h63Z-m1oq8.mft
Manifest number:          28
Signing time:             Fri 17 Apr 2026 05:28:41 +0000
Manifest this update:     Fri 17 Apr 2026 05:28:41 +0000
Manifest next update:     Sun 19 Apr 2026 05:28:40 +0000
Files and hashes:         1: LLe0CZqpG_BaF2pF-h63Z-m1oq8.crl (hash: jHDpRbeuZ3fzP2jvtJ8EO9x9BN2yTZZ1LvZFRZ3hOyg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A9F58/2674144C1D5E11F1BB6B757FDAE4EC9C/LLe0CZqpG_BaF2pF-h63Z-m1oq8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A9F58/2674144C1D5E11F1BB6B757FDAE4EC9C/LLe0CZqpG_BaF2pF-h63Z-m1oq8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/LLe0CZqpG_BaF2pF-h63Z-m1oq8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 05:28:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 41 (0x29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A9F58AF, serialNumber=2CB7B4099AA91BF05A176A45FA1EB767E9B5A2AF
        Validity
            Not Before: Apr 17 05:28:41 2026 GMT
            Not After : Apr 19 05:28:40 2026 GMT
        Subject: CN=69e1c509-57dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:63:05:c0:5d:26:2c:12:1c:cd:17:54:3b:fb:
                    bd:42:8c:b2:1e:a3:3e:d0:1e:d8:76:e5:35:9f:3a:
                    1b:fa:d0:e1:f3:7b:0a:7c:cc:c8:19:38:54:ae:eb:
                    9e:7a:b0:1f:81:0b:b4:a7:b9:30:8a:da:6f:79:73:
                    e0:43:f3:34:1a:cb:58:81:80:20:6d:ee:62:c7:d9:
                    2c:82:24:95:95:92:05:77:dd:d6:70:95:67:d9:67:
                    fe:c3:65:eb:9a:b2:0d:b9:76:7f:16:89:f9:88:33:
                    3d:61:34:1b:4f:ff:79:a6:4d:8f:90:ad:8e:c1:2a:
                    19:63:3f:ab:14:54:6a:f0:7c:50:61:59:f2:71:ae:
                    ff:5b:1f:5f:0b:cd:06:ed:b1:8c:be:94:83:a1:53:
                    36:78:b7:e8:47:eb:f7:b3:fb:65:de:73:8a:7c:64:
                    76:13:19:2d:d7:3e:ca:15:7d:ef:89:e6:67:be:e2:
                    7f:ed:5d:d7:88:28:d1:75:ed:05:6d:e8:44:3e:86:
                    99:59:49:93:44:72:f3:a1:f4:44:80:e7:7c:fe:23:
                    31:09:23:96:a9:83:de:53:0d:9c:d3:b0:f4:3e:8a:
                    7a:7f:9d:27:db:ee:81:90:ae:b8:68:2f:33:76:3c:
                    17:15:0d:b4:1d:f7:19:88:7d:c0:63:5a:58:15:e0:
                    6e:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:90:80:BF:FF:08:38:8B:A3:61:76:E4:2B:D7:DA:5C:B4:96:0A:55
            X509v3 Authority Key Identifier:
                keyid:2C:B7:B4:09:9A:A9:1B:F0:5A:17:6A:45:FA:1E:B7:67:E9:B5:A2:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A9F58/2674144C1D5E11F1BB6B757FDAE4EC9C/LLe0CZqpG_BaF2pF-h63Z-m1oq8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LLe0CZqpG_BaF2pF-h63Z-m1oq8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A9F58/2674144C1D5E11F1BB6B757FDAE4EC9C/LLe0CZqpG_BaF2pF-h63Z-m1oq8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:69:69:8d:e0:73:1f:61:a4:a4:3c:71:3d:72:0d:6a:a4:57:
         94:c4:9e:f0:75:06:9a:78:94:f0:d6:01:84:99:70:1f:dd:78:
         9c:5e:db:4e:70:01:3e:54:bb:99:65:40:59:58:5f:d9:78:e8:
         c5:27:87:95:0f:21:a3:e3:a4:1e:ef:72:c8:ce:ff:65:4a:09:
         0b:cf:43:33:51:53:28:f2:57:31:f5:18:71:da:74:f4:3a:89:
         68:98:46:45:60:3f:66:fb:f2:5c:d7:25:3c:76:79:e4:59:45:
         35:ec:a2:75:db:07:7c:d4:57:76:e5:68:39:70:c0:e4:80:7a:
         60:d4:7a:8e:82:5e:4b:c2:45:15:07:36:88:42:62:16:b0:4f:
         6e:61:7c:f5:d3:b0:10:7c:3a:23:88:59:e9:45:af:9c:fb:41:
         fe:d8:54:52:bf:23:9d:3f:e2:c1:ff:74:a4:eb:3c:78:70:1f:
         7b:74:c6:ff:0f:b8:e8:45:e6:bc:18:2c:ec:77:cc:42:c2:b9:
         97:c0:d3:41:0e:36:77:67:93:60:24:11:53:63:49:71:2c:52:
         aa:92:ad:06:66:19:88:4b:d5:8d:45:05:1a:e2:b7:a6:7d:52:
         99:35:cc:bd:46:ec:cf:91:b8:dc:85:68:c9:35:70:b6:05:d3:
         5a:6f:2a:cc
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIBKTANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZB
OUY1OEFGMTEwLwYDVQQFEygyQ0I3QjQwOTlBQTkxQkYwNUExNzZBNDVGQTFFQjc2
N0U5QjVBMkFGMB4XDTI2MDQxNzA1Mjg0MVoXDTI2MDQxOTA1Mjg0MFowGDEWMBQG
A1UEAxMNNjllMWM1MDktNTdkZDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKVjBcBdJiwSHM0XVDv7vUKMsh6jPtAe2HblNZ86G/rQ4fN7CnzMyBk4VK7r
nnqwH4ELtKe5MIrab3lz4EPzNBrLWIGAIG3uYsfZLIIklZWSBXfd1nCVZ9ln/sNl
65qyDbl2fxaJ+YgzPWE0G0//eaZNj5CtjsEqGWM/qxRUavB8UGFZ8nGu/1sfXwvN
Bu2xjL6Ug6FTNni36Efr97P7Zd5zinxkdhMZLdc+yhV974nmZ77if+1d14go0XXt
BW3oRD6GmVlJk0Ry86H0RIDnfP4jMQkjlqmD3lMNnNOw9D6Ken+dJ9vugZCuuGgv
M3Y8FxUNtB33GYh9wGNaWBXgbhECAwEAAaOCArgwggK0MB0GA1UdDgQWBBSekIC/
/wg4i6NhduQr19pctJYKVTAfBgNVHSMEGDAWgBQst7QJmqkb8FoXakX6Hrdn6bWi
rzAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2QTlGNTgvMjY3NDE0NEMxRDVFMTFGMUJCNkI3NTdGREFFNEVDOUMvTExlMENa
cXBHX0JhRjJwRi1oNjNaLW0xb3E4LmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvTExlMENacXBHX0JhRjJwRi1oNjNaLW0xb3E4LmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUF
BzALhn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzZBOUY1OC8yNjc0MTQ0QzFENUUxMUYxQkI2Qjc1N0ZEQUU0
RUM5Qy9MTGUwQ1pxcEdfQmFGMnBGLWg2M1otbTFvcTgubWZ0MDUGCCsGAQUFBzAN
hilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBAEZpaY3gcx9hpKQ8cT1yDWqkV5TEnvB1
Bpp4lPDWAYSZcB/deJxe205wAT5Uu5llQFlYX9l46MUnh5UPIaPjpB7vcsjO/2VK
CQvPQzNRUyjyVzH1GHHadPQ6iWiYRkVgP2b78lzXJTx2eeRZRTXsonXbB3zUV3bl
aDlwwOSAemDUeo6CXkvCRRUHNohCYhawT25hfPXTsBB8OiOIWelFr5z7Qf7YVFK/
I50/4sH/dKTrPHhwH3t0xv8PuOhF5rwYLOx3zELCuZfA00EONndnk2AkEVNjSXEs
UqqSrQZmGYhL1Y1FBRrit6Z9Upk1zL1G7M+RuNyFaMk1cLYF01pvKsw=
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:02:36 2026 by rpki-client