Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B1EE5/21831C1C4F1511EFB7A68685762E951A/l8yJP0_VIPZzaAb5eWJZm3eOG2M.mft
File:                     l8yJP0_VIPZzaAb5eWJZm3eOG2M.mft (raw, json)
Hash identifier:          C8vK6wX0Mw2zK/YPXYxsxWgRcg+T/PRUMLTSczTuXVw=
Subject key identifier:   BB:9D:5B:8D:4E:F1:31:7F:CA:D5:16:91:9B:52:B0:33:63:30:25:7B
Authority key identifier: 97:CC:89:3F:4F:D5:20:F6:73:68:06:F9:79:62:59:9B:77:8E:1B:63
Certificate issuer:       /CN=F36B1EE5AF/serialNumber=97CC893F4FD520F6736806F97962599B778E1B63
Certificate serial:       0287
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/l8yJP0_VIPZzaAb5eWJZm3eOG2M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B1EE5/21831C1C4F1511EFB7A68685762E951A/l8yJP0_VIPZzaAb5eWJZm3eOG2M.mft
Manifest number:          0284
Signing time:             Fri 17 Apr 2026 04:20:32 +0000
Manifest this update:     Fri 17 Apr 2026 04:20:31 +0000
Manifest next update:     Sun 19 Apr 2026 04:20:31 +0000
Files and hashes:         1: l8yJP0_VIPZzaAb5eWJZm3eOG2M.crl (hash: nuxLXQg26hf93c4gCje68uz33JuaedRf93av9STpVhA=)
                          2: 15FF8A604F2E11EFBF7DAA5D762E951A.roa (hash: Ji+PkrLYVd8mg+kmjzLysu+cTidIjguKCtckW26wTJg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B1EE5/21831C1C4F1511EFB7A68685762E951A/l8yJP0_VIPZzaAb5eWJZm3eOG2M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B1EE5/21831C1C4F1511EFB7A68685762E951A/l8yJP0_VIPZzaAb5eWJZm3eOG2M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/l8yJP0_VIPZzaAb5eWJZm3eOG2M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 647 (0x287)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B1EE5AF, serialNumber=97CC893F4FD520F6736806F97962599B778E1B63
        Validity
            Not Before: Apr 17 04:20:31 2026 GMT
            Not After : Apr 19 04:20:31 2026 GMT
        Subject: CN=69e1b50f-2a01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3a:49:b1:9c:18:aa:f5:3b:49:d6:77:10:7d:
                    94:f2:ff:34:7d:ec:44:41:22:c0:41:73:4e:3b:92:
                    6b:32:0d:f8:06:e5:d8:6d:d3:3b:3d:2d:2e:3f:8a:
                    55:eb:3f:0b:8c:33:de:d2:fa:4e:7e:2b:35:0b:c5:
                    ab:51:06:29:5f:f6:5a:6b:cf:20:c5:c3:03:ea:57:
                    ab:25:27:bd:45:fc:35:eb:a2:ff:39:e9:7f:a6:1c:
                    a5:7b:cd:85:b2:ff:0b:11:af:e4:bd:7b:22:ee:bc:
                    05:9b:29:46:d0:78:55:c1:34:98:d3:fa:4b:81:f3:
                    11:04:f2:1b:cc:4a:a9:ab:e5:f5:c7:4e:e2:4f:e4:
                    98:dc:56:47:1d:9c:9b:ca:e7:42:f0:d3:24:f7:53:
                    0a:5b:d1:4a:cf:7f:2c:a7:2b:c2:72:05:2c:bc:6e:
                    98:26:a8:8a:b8:8e:b2:f6:27:9d:13:b9:e9:f5:9d:
                    ae:91:4f:ad:d9:ac:27:6a:f2:7f:2e:8b:d3:35:a1:
                    0f:1e:ce:f2:7f:65:80:60:fa:7d:0e:b5:fd:c0:32:
                    66:c3:46:db:57:7e:86:a1:94:42:59:21:f1:31:1f:
                    09:2e:50:a3:ca:28:02:4f:53:27:eb:d2:c1:ca:5b:
                    d4:30:91:eb:b2:d9:8f:5a:34:31:6f:b5:2e:4d:16:
                    b8:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:9D:5B:8D:4E:F1:31:7F:CA:D5:16:91:9B:52:B0:33:63:30:25:7B
            X509v3 Authority Key Identifier:
                keyid:97:CC:89:3F:4F:D5:20:F6:73:68:06:F9:79:62:59:9B:77:8E:1B:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B1EE5/21831C1C4F1511EFB7A68685762E951A/l8yJP0_VIPZzaAb5eWJZm3eOG2M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8yJP0_VIPZzaAb5eWJZm3eOG2M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B1EE5/21831C1C4F1511EFB7A68685762E951A/l8yJP0_VIPZzaAb5eWJZm3eOG2M.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:b7:c5:13:5f:8e:3b:c5:f5:0b:41:2f:1a:a0:c4:bb:85:1f:
         25:42:b4:ac:27:9a:94:97:48:87:4a:b8:f8:0c:6f:7f:68:8e:
         4c:d5:a5:6c:38:f1:be:27:e3:1a:5e:5e:1a:26:17:c5:b6:d7:
         78:5e:fc:c9:dd:ab:13:a6:ea:12:6b:17:6b:77:26:10:6f:d3:
         36:61:ba:00:c0:13:ca:c5:ad:06:e8:e2:89:a3:e7:80:f5:85:
         0e:e0:c3:cd:ea:98:30:ef:20:c2:54:05:90:c7:49:e8:cb:f1:
         8d:3f:c2:42:17:76:80:b1:fb:1a:43:fa:43:83:06:07:29:ff:
         c4:af:91:e8:83:d7:c5:2f:0d:54:cc:d1:b5:5a:d6:12:36:7e:
         3c:3e:03:00:ef:4a:a5:cf:d0:f3:ca:30:07:d6:93:ae:84:3b:
         39:5a:79:6a:ee:c9:81:fa:7e:fa:ce:6d:4f:22:bf:c5:b3:a8:
         c5:d7:85:5b:e7:38:28:1b:65:1c:aa:75:64:4f:a4:27:9f:82:
         49:34:f0:c9:04:bf:75:63:b0:ac:04:4d:07:c2:22:6c:64:b0:
         26:6d:8d:d3:9d:d4:3c:b4:1c:c6:bb:4a:6b:3a:82:97:9a:3f:
         43:fd:2e:82:b3:98:98:41:63:a5:d7:42:95:a0:33:fc:ad:60:
         13:e0:c6:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:25:47 2026 by rpki-client