Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36AA372/2DD27FE8BFC211F09C621AC9DAE4EC9C/RlaXNRFZ0UHlSS-N3AARcfbR5fI.mft
File:                     RlaXNRFZ0UHlSS-N3AARcfbR5fI.mft (raw, json)
Hash identifier:          E3Saf1/X4i+7WwTD0ELcKehIe52srlu0paaDFhnMp48=
Subject key identifier:   DC:11:9F:DF:1B:79:75:58:A3:BE:27:37:9E:55:45:10:97:AA:02:41
Authority key identifier: 46:56:97:35:11:59:D1:41:E5:49:2F:8D:DC:00:11:71:F6:D1:E5:F2
Certificate issuer:       /CN=F36AA372AF/serialNumber=465697351159D141E5492F8DDC001171F6D1E5F2
Certificate serial:       A6
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/RlaXNRFZ0UHlSS-N3AARcfbR5fI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36AA372/2DD27FE8BFC211F09C621AC9DAE4EC9C/RlaXNRFZ0UHlSS-N3AARcfbR5fI.mft
Manifest number:          A4
Signing time:             Sun 19 Apr 2026 05:12:42 +0000
Manifest this update:     Sun 19 Apr 2026 05:12:41 +0000
Manifest next update:     Tue 21 Apr 2026 05:12:41 +0000
Files and hashes:         1: RlaXNRFZ0UHlSS-N3AARcfbR5fI.crl (hash: SPj6Hlx0gktBmWHrssB7nX8+elpOxED5Pd3/OteS188=)
                          2: 5771723CBFCC11F0B32C4386DAE4EC9C.roa (hash: GFNOWIn+BnzxN06/P09ij0NnM/A7yIAgr7oflS33glE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36AA372/2DD27FE8BFC211F09C621AC9DAE4EC9C/RlaXNRFZ0UHlSS-N3AARcfbR5fI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36AA372/2DD27FE8BFC211F09C621AC9DAE4EC9C/RlaXNRFZ0UHlSS-N3AARcfbR5fI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/RlaXNRFZ0UHlSS-N3AARcfbR5fI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 21 Apr 2026 00:07:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 166 (0xa6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36AA372AF, serialNumber=465697351159D141E5492F8DDC001171F6D1E5F2
        Validity
            Not Before: Apr 19 05:12:41 2026 GMT
            Not After : Apr 21 05:12:41 2026 GMT
        Subject: CN=69e4644a-f2b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:39:9a:85:3f:15:c5:0e:72:50:67:0a:51:e2:
                    92:a9:3f:a5:48:c0:7c:7a:fc:e1:64:e5:ab:08:8d:
                    bd:de:99:a0:5d:37:9e:33:14:b9:fb:84:53:78:14:
                    cc:55:23:9d:d0:bc:b8:9b:f3:cb:e2:71:12:fa:0a:
                    e1:b5:44:ac:bb:7a:2e:21:26:66:c0:f5:f4:13:c3:
                    4e:cd:45:6f:3e:76:1b:d3:5d:72:f7:68:2f:10:cb:
                    7b:35:08:01:fe:91:9a:28:c9:d6:50:d0:35:9d:2f:
                    bd:61:e9:c1:22:d7:10:8f:59:51:8d:88:04:ae:87:
                    60:54:da:af:04:fe:e1:74:dd:b9:75:eb:2c:e9:4c:
                    0e:43:e8:0e:f8:ce:66:c8:34:63:94:60:70:b1:fa:
                    e5:5e:ba:d1:87:66:2a:0f:32:f8:9e:7f:d0:1e:d5:
                    cf:c9:b6:01:f9:cb:ac:d9:a2:0b:00:57:ca:f5:ec:
                    50:fd:1a:84:a1:0f:fe:c4:c8:dd:59:2e:e0:52:05:
                    30:0f:0f:03:93:19:32:11:15:40:fd:c8:ff:66:b9:
                    ca:b0:72:d9:f6:9b:2d:1a:5b:e1:73:1b:f4:5a:9b:
                    17:36:81:5c:43:80:39:9c:43:38:3e:7f:82:20:31:
                    a9:be:5e:90:9d:8c:16:4a:6b:a9:98:86:08:8e:05:
                    b4:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:11:9F:DF:1B:79:75:58:A3:BE:27:37:9E:55:45:10:97:AA:02:41
            X509v3 Authority Key Identifier:
                keyid:46:56:97:35:11:59:D1:41:E5:49:2F:8D:DC:00:11:71:F6:D1:E5:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36AA372/2DD27FE8BFC211F09C621AC9DAE4EC9C/RlaXNRFZ0UHlSS-N3AARcfbR5fI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/RlaXNRFZ0UHlSS-N3AARcfbR5fI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AA372/2DD27FE8BFC211F09C621AC9DAE4EC9C/RlaXNRFZ0UHlSS-N3AARcfbR5fI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:85:05:71:9d:4d:23:5d:6c:c7:21:38:08:21:51:38:20:02:
         fe:08:09:d7:9e:0d:42:bb:96:d8:25:f8:0c:c4:b2:b3:cb:c5:
         64:82:8c:9f:13:37:02:54:0f:b4:37:ba:cc:4d:74:85:4f:dd:
         0b:d5:e7:6a:f3:42:73:ad:a0:09:ea:3b:c9:a9:bd:fd:80:46:
         e9:e2:70:d8:9f:2e:7e:e6:6c:d7:16:26:ef:9a:09:eb:24:9c:
         1f:52:da:ee:4f:59:25:8d:af:94:dc:04:e4:45:90:a1:45:bd:
         1f:59:41:46:4e:06:c8:b7:fb:68:8a:1a:80:24:40:fe:95:67:
         32:80:85:3a:83:3f:6b:b4:fd:43:35:d0:94:a7:53:16:9b:5c:
         6e:f9:68:7c:5e:fb:5f:be:85:eb:e9:10:87:d5:34:e8:4d:40:
         6e:ac:0f:48:74:68:85:13:cf:ce:12:f3:81:dc:65:b5:57:9d:
         bd:3e:5f:83:40:46:98:9c:de:2c:4c:3c:1d:f5:d3:45:db:1e:
         0f:24:67:83:69:c2:ce:1f:34:94:b8:9c:7a:b4:78:93:e3:74:
         ce:bd:34:05:ca:fc:68:45:ed:ae:e5:57:bd:ef:84:eb:32:ba:
         2b:ab:8e:0a:36:c5:56:6e:35:f8:40:4c:f2:ed:b4:c6:de:3b:
         ae:e3:5b:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:42:11 2026 by rpki-client