Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B222D/452A30E0B5E111F0B13E07F6DAE4EC9C/Ctw8-7fdAy2pn0jHpA2G8Pkc_ho.mft
File:                     Ctw8-7fdAy2pn0jHpA2G8Pkc_ho.mft (raw, json)
Hash identifier:          GZ2AlfhiY+Br8y2P7Dbnd2WAQvpKg5QfnY0dp4LDL5c=
Subject key identifier:   AC:C3:20:F9:7A:B0:BF:E7:8F:A6:2A:C3:8D:9B:99:60:51:87:F7:62
Authority key identifier: 0A:DC:3C:FB:B7:DD:03:2D:A9:9F:48:C7:A4:0D:86:F0:F9:1C:FE:1A
Certificate issuer:       /CN=F36B222DAF/serialNumber=0ADC3CFBB7DD032DA99F48C7A40D86F0F91CFE1A
Certificate serial:       AE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Ctw8-7fdAy2pn0jHpA2G8Pkc_ho.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B222D/452A30E0B5E111F0B13E07F6DAE4EC9C/Ctw8-7fdAy2pn0jHpA2G8Pkc_ho.mft
Manifest number:          AD
Signing time:             Fri 17 Apr 2026 05:10:56 +0000
Manifest this update:     Fri 17 Apr 2026 05:10:55 +0000
Manifest next update:     Sun 19 Apr 2026 05:10:55 +0000
Files and hashes:         1: Ctw8-7fdAy2pn0jHpA2G8Pkc_ho.crl (hash: ncInYbz3OdcNpRlca4F2r8lfDTAwXZv6xYXfprUIc9c=)
                          2: C4BDCF3CB82B11F0B7DB80E1DAE4EC9C.roa (hash: tOfIeOAf4uXl6pOeSJ1Xju9VQWrYerPezpD2f2dwyfA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B222D/452A30E0B5E111F0B13E07F6DAE4EC9C/Ctw8-7fdAy2pn0jHpA2G8Pkc_ho.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B222D/452A30E0B5E111F0B13E07F6DAE4EC9C/Ctw8-7fdAy2pn0jHpA2G8Pkc_ho.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Ctw8-7fdAy2pn0jHpA2G8Pkc_ho.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 05:10:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 174 (0xae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B222DAF, serialNumber=0ADC3CFBB7DD032DA99F48C7A40D86F0F91CFE1A
        Validity
            Not Before: Apr 17 05:10:55 2026 GMT
            Not After : Apr 19 05:10:55 2026 GMT
        Subject: CN=69e1c0e0-57d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:30:b8:42:56:f8:f5:4f:be:6f:e3:00:b1:c0:
                    16:e4:1e:40:f7:00:10:51:8f:01:90:9a:34:fb:f7:
                    75:42:fb:5d:0c:47:54:27:77:c9:a2:a6:ec:00:1b:
                    e3:ba:fc:74:25:2d:ad:98:ef:c1:06:06:23:9f:11:
                    65:84:19:80:7c:39:dd:04:c7:81:fc:7d:08:86:58:
                    8f:13:01:12:4e:90:7a:97:40:49:d8:6b:32:6e:73:
                    6e:d6:a1:43:ee:ec:e0:2c:99:04:89:00:95:f9:8d:
                    75:25:25:5a:f1:c7:9b:a6:1e:1d:0d:44:78:2f:3b:
                    1f:52:6b:a2:6f:43:09:45:ae:0d:87:99:1e:79:5d:
                    75:ea:e6:64:56:ec:9c:0e:43:1d:7e:c6:b5:0d:cd:
                    10:06:fd:1a:dd:5e:f9:5b:eb:64:dc:4b:a4:6a:b2:
                    d1:a9:55:80:e1:3b:11:48:54:b8:a6:82:73:ba:51:
                    de:90:4c:eb:e8:5d:68:88:b0:b5:50:aa:f5:8a:5d:
                    74:2e:56:2d:7e:65:d7:34:09:d5:22:a1:76:9e:bf:
                    4d:6c:b8:55:87:a7:23:05:66:56:65:49:5e:29:79:
                    e7:5f:18:97:95:64:2a:12:dc:75:36:d9:b7:4b:26:
                    a6:e1:25:a2:ef:01:02:a8:89:79:2d:69:b7:d2:3c:
                    d1:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:C3:20:F9:7A:B0:BF:E7:8F:A6:2A:C3:8D:9B:99:60:51:87:F7:62
            X509v3 Authority Key Identifier:
                keyid:0A:DC:3C:FB:B7:DD:03:2D:A9:9F:48:C7:A4:0D:86:F0:F9:1C:FE:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B222D/452A30E0B5E111F0B13E07F6DAE4EC9C/Ctw8-7fdAy2pn0jHpA2G8Pkc_ho.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Ctw8-7fdAy2pn0jHpA2G8Pkc_ho.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B222D/452A30E0B5E111F0B13E07F6DAE4EC9C/Ctw8-7fdAy2pn0jHpA2G8Pkc_ho.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:91:9a:97:39:c7:32:c7:a5:3b:1b:fa:2f:cf:66:04:28:64:
         37:a2:3a:ab:53:23:0a:78:22:88:0b:d3:e9:1d:67:25:a9:62:
         83:44:e0:84:22:32:f1:a7:02:6c:5b:83:df:b0:d8:54:25:15:
         7d:28:7c:2d:5b:08:70:32:af:bf:1e:36:22:37:68:79:aa:b1:
         a5:a8:71:09:0b:a3:8d:9f:58:be:e0:7d:74:d1:36:e8:60:72:
         c4:71:7a:04:51:cc:10:39:95:58:de:95:2a:0a:9b:74:64:95:
         10:f0:7a:27:eb:5c:53:ce:65:4d:be:13:6f:7a:49:d0:4a:6c:
         39:5c:d7:5e:bb:d4:2e:98:b4:2a:d1:1c:bb:f6:28:2a:e5:be:
         ab:d8:a0:54:09:6a:0e:23:da:e0:92:9e:6d:fb:c3:f1:b1:00:
         1b:ca:b6:1f:99:7e:8f:1f:e1:72:9d:60:0d:ef:61:bf:01:07:
         1a:fa:67:3d:40:b8:62:d4:4e:05:fb:c8:0b:76:a2:23:b3:28:
         43:24:28:bf:fb:4a:74:ce:64:4f:e5:89:f2:63:98:1f:22:82:
         02:0e:b4:38:f9:d0:99:4e:b0:8f:36:49:8a:66:40:80:27:50:
         bd:89:ad:0a:84:5e:8a:cb:b5:59:10:a6:68:6a:05:a9:32:2f:
         ed:69:9a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:58:43 2026 by rpki-client