Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B2CCC/62285B28A35311EF9929879A762E951A/IPoazDHazMuDL9LUtfzXWC-kIsk.mft
File:                     IPoazDHazMuDL9LUtfzXWC-kIsk.mft (raw, json)
Hash identifier:          2R4H+d4cHbZu+JcxcEBZtmeE5HqCP0uQpRm2qRR+PgU=
Subject key identifier:   C9:1D:27:7F:64:A7:BB:EA:48:A8:C6:91:A5:41:83:B6:8C:AF:C9:F5
Authority key identifier: 20:FA:1A:CC:31:DA:CC:CB:83:2F:D2:D4:B5:FC:D7:58:2F:A4:22:C9
Certificate issuer:       /CN=F36B2CCCAF/serialNumber=20FA1ACC31DACCCB832FD2D4B5FCD7582FA422C9
Certificate serial:       0213
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/IPoazDHazMuDL9LUtfzXWC-kIsk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B2CCC/62285B28A35311EF9929879A762E951A/IPoazDHazMuDL9LUtfzXWC-kIsk.mft
Manifest number:          0212
Signing time:             Fri 17 Apr 2026 04:36:23 +0000
Manifest this update:     Fri 17 Apr 2026 04:36:22 +0000
Manifest next update:     Sun 19 Apr 2026 04:36:22 +0000
Files and hashes:         1: IPoazDHazMuDL9LUtfzXWC-kIsk.crl (hash: Z89cNWBG9Kb7oDFIERQ4uyWdZgUijq0SIlxaHwOYHyM=)
                          2: 8327C434A35411EF974E14A1762E951A.roa (hash: TgV6J8OnLK9ODPkaOzrwonQ7ArSo3b7jgatmRvGo6BI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B2CCC/62285B28A35311EF9929879A762E951A/IPoazDHazMuDL9LUtfzXWC-kIsk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B2CCC/62285B28A35311EF9929879A762E951A/IPoazDHazMuDL9LUtfzXWC-kIsk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/IPoazDHazMuDL9LUtfzXWC-kIsk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 531 (0x213)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B2CCCAF, serialNumber=20FA1ACC31DACCCB832FD2D4B5FCD7582FA422C9
        Validity
            Not Before: Apr 17 04:36:22 2026 GMT
            Not After : Apr 19 04:36:22 2026 GMT
        Subject: CN=69e1b8c7-9035
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ef:c3:77:12:7d:1d:c6:89:3b:f6:fc:da:c1:
                    37:cd:55:f4:9d:00:d5:9b:ab:8b:fe:60:92:04:8a:
                    a9:fe:5d:ed:08:a1:10:2e:16:79:66:87:e1:49:7d:
                    12:8c:46:90:cd:81:67:31:bf:80:b6:50:dd:9b:73:
                    5f:bc:38:31:0e:7e:49:b0:05:ca:24:9f:3e:af:83:
                    1a:1c:00:ca:04:c2:12:0a:ae:08:a3:f2:0a:76:2b:
                    2c:0b:20:fc:46:7e:37:a4:fb:cf:fe:66:4f:4d:a1:
                    1c:af:8d:23:e1:eb:c2:8e:3a:f0:c7:8e:8c:16:91:
                    a7:97:58:d9:3e:cc:7f:f5:c4:31:d9:7e:fc:75:cd:
                    60:1f:ae:c5:b9:7b:ee:b1:10:50:af:3f:94:e4:bd:
                    06:dc:3f:eb:2f:9b:a4:34:38:b5:40:71:90:d4:7a:
                    4b:9b:79:47:94:00:bb:9a:6d:59:de:bb:fc:64:10:
                    0f:78:2f:ab:8e:c7:e6:65:45:a9:fa:b2:cd:60:0d:
                    c6:f1:1c:50:13:31:36:1e:21:73:9d:ca:86:a3:13:
                    47:d6:77:d8:c9:51:b9:02:cd:23:06:8d:3c:33:78:
                    18:7f:67:f8:5a:da:51:c1:3b:46:fa:e8:66:71:9b:
                    c3:f9:2a:88:fd:1f:5c:1d:61:5f:31:a6:59:ef:48:
                    11:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:1D:27:7F:64:A7:BB:EA:48:A8:C6:91:A5:41:83:B6:8C:AF:C9:F5
            X509v3 Authority Key Identifier:
                keyid:20:FA:1A:CC:31:DA:CC:CB:83:2F:D2:D4:B5:FC:D7:58:2F:A4:22:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B2CCC/62285B28A35311EF9929879A762E951A/IPoazDHazMuDL9LUtfzXWC-kIsk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/IPoazDHazMuDL9LUtfzXWC-kIsk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B2CCC/62285B28A35311EF9929879A762E951A/IPoazDHazMuDL9LUtfzXWC-kIsk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d8:54:ef:ea:f1:47:89:60:70:da:b4:18:44:58:c6:5b:a9:7d:
         83:fb:77:fe:cd:e5:8b:a9:f9:89:a0:25:19:a1:c7:8d:6c:74:
         2f:48:4b:aa:b9:c9:c9:d8:6b:bb:d2:f8:64:62:f6:49:97:46:
         73:80:6e:21:86:4a:f5:ea:d5:85:8d:3a:f4:9c:86:1a:91:5f:
         e5:82:b8:df:68:b0:b2:a0:27:1f:d3:ad:a3:ec:0d:dc:5f:7e:
         14:40:1c:be:9b:0f:c0:87:59:cd:a0:85:3f:f7:b9:a6:4e:e9:
         65:a5:25:b8:95:b0:8e:18:98:29:02:e0:95:fb:e9:16:77:59:
         ee:12:c0:12:7a:04:07:b6:91:54:96:27:db:55:62:99:14:58:
         65:d0:e7:97:1f:8d:01:aa:e9:4d:c5:6e:c0:dc:f8:89:4e:48:
         37:a4:80:03:d5:2e:44:fd:6f:bf:13:0f:f4:fa:5b:ad:cd:3b:
         ea:3a:36:df:1a:09:31:99:c3:56:c3:e9:6f:96:9c:4b:4e:2b:
         cb:a2:33:a1:95:49:55:ff:43:e6:1a:ae:f7:92:83:08:26:20:
         20:0f:f0:60:bb:2e:2d:51:d9:7d:79:52:8e:50:58:58:ab:ad:
         f0:cd:6c:68:1e:b1:da:c5:eb:fc:6e:ab:13:c5:c1:e1:20:06:
         e8:10:fe:fa
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAhMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QjJDQ0NBRjExMC8GA1UEBRMoMjBGQTFBQ0MzMURBQ0NDQjgzMkZEMkQ0QjVGQ0Q3
NTgyRkE0MjJDOTAeFw0yNjA0MTcwNDM2MjJaFw0yNjA0MTkwNDM2MjJaMBgxFjAU
BgNVBAMTDTY5ZTFiOGM3LTkwMzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC178N3En0dxok79vzawTfNVfSdANWbq4v+YJIEiqn+Xe0IoRAuFnlmh+FJ
fRKMRpDNgWcxv4C2UN2bc1+8ODEOfkmwBcoknz6vgxocAMoEwhIKrgij8gp2KywL
IPxGfjek+8/+Zk9NoRyvjSPh68KOOvDHjowWkaeXWNk+zH/1xDHZfvx1zWAfrsW5
e+6xEFCvP5TkvQbcP+svm6Q0OLVAcZDUekubeUeUALuabVneu/xkEA94L6uOx+Zl
Ran6ss1gDcbxHFATMTYeIXOdyoajE0fWd9jJUbkCzSMGjTwzeBh/Z/ha2lHBO0b6
6GZxm8P5Koj9H1wdYV8xplnvSBEbAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUyR0n
f2Snu+pIqMaRpUGDtoyvyfUwHwYDVR0jBBgwFoAUIPoazDHazMuDL9LUtfzXWC+k
IskwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkIyQ0NDLzYyMjg1QjI4QTM1MzExRUY5OTI5ODc5QTc2MkU5NTFBL0lQb2F6
REhhek11REw5TFV0ZnpYV0Mta0lzay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0lQb2F6REhhek11REw5TFV0ZnpYV0Mta0lzay5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QjJDQ0MvNjIyODVCMjhBMzUzMTFFRjk5Mjk4NzlBNzYy
RTk1MUEvSVBvYXpESGF6TXVETDlMVXRmelhXQy1rSXNrLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDYVO/q8UeJYHDatBhEWMZbqX2D+3f+
zeWLqfmJoCUZoceNbHQvSEuqucnJ2Gu70vhkYvZJl0ZzgG4hhkr16tWFjTr0nIYa
kV/lgrjfaLCyoCcf062j7A3cX34UQBy+mw/Ah1nNoIU/97mmTullpSW4lbCOGJgp
AuCV++kWd1nuEsASegQHtpFUlifbVWKZFFhl0OeXH40BqulNxW7A3PiJTkg3pIAD
1S5E/W+/Ew/0+lutzTvqOjbfGgkxmcNWw+lvlpxLTivLojOhlUlV/0PmGq73koMI
JiAgD/Bguy4tUdl9eVKOUFhYq63wzWxoHrHaxev8bqsTxcHhIAboEP76
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:00:34 2026 by rpki-client