Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B4580/E19B7B22E21711EEA18E8ABF775412E6/LO0lCJLZepCqEzI6yk5F0lF2klg.mft
File:                     LO0lCJLZepCqEzI6yk5F0lF2klg.mft (raw, json)
Hash identifier:          LcAssbaxZeV/B+KSGuH8s69shGQMXTD4fWPa0I/JIx4=
Subject key identifier:   A9:87:66:36:B9:C8:4D:08:C6:43:EE:C1:2D:AE:02:63:C1:15:6A:1B
Authority key identifier: 2C:ED:25:08:92:D9:7A:90:AA:13:32:3A:CA:4E:45:D2:51:76:92:58
Certificate issuer:       /CN=F36B4580AF/serialNumber=2CED250892D97A90AA13323ACA4E45D251769258
Certificate serial:       030E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/LO0lCJLZepCqEzI6yk5F0lF2klg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B4580/E19B7B22E21711EEA18E8ABF775412E6/LO0lCJLZepCqEzI6yk5F0lF2klg.mft
Manifest number:          030D
Signing time:             Fri 17 Apr 2026 04:04:03 +0000
Manifest this update:     Fri 17 Apr 2026 04:04:02 +0000
Manifest next update:     Sun 19 Apr 2026 04:04:02 +0000
Files and hashes:         1: LO0lCJLZepCqEzI6yk5F0lF2klg.crl (hash: JJ/Ckn/yr1895nR9/JKtj6MoIrw4Nt8ZG0q7zATJQsg=)
                          2: 33CDD534E21811EEADAEADC1775412E6.roa (hash: zBCcaHSSJiFVaqIDbPbS61APz7NmOnVb/26SMlWLcvQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B4580/E19B7B22E21711EEA18E8ABF775412E6/LO0lCJLZepCqEzI6yk5F0lF2klg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B4580/E19B7B22E21711EEA18E8ABF775412E6/LO0lCJLZepCqEzI6yk5F0lF2klg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/LO0lCJLZepCqEzI6yk5F0lF2klg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 04:04:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 782 (0x30e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B4580AF, serialNumber=2CED250892D97A90AA13323ACA4E45D251769258
        Validity
            Not Before: Apr 17 04:04:02 2026 GMT
            Not After : Apr 19 04:04:02 2026 GMT
        Subject: CN=69e1b133-3d0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:93:cd:2b:04:b5:24:2a:56:20:0c:c0:64:9a:
                    5c:27:96:dc:d4:48:aa:00:2e:0b:e6:7d:38:86:58:
                    9c:5d:6b:45:43:8c:7b:c8:9b:e8:7b:d1:dd:b4:eb:
                    15:c7:3e:41:9e:ed:76:14:f3:65:7a:0e:df:c9:47:
                    57:26:7a:bb:73:9f:45:12:91:ec:25:eb:21:08:cd:
                    7f:30:ff:0e:7b:b0:3a:d3:bc:3a:1f:94:77:49:53:
                    48:fe:e4:c7:5d:6c:70:b6:b9:40:fc:95:4d:be:0c:
                    a2:eb:3c:d8:79:e3:e3:12:84:10:95:17:13:e8:85:
                    c2:1a:ee:ff:10:10:25:29:b5:78:ca:65:31:d4:70:
                    b9:e3:44:b0:be:6a:61:23:2a:5f:41:c3:4b:3f:36:
                    36:6e:2f:f8:e4:16:e5:70:96:40:ad:13:cc:38:3f:
                    83:4b:af:b4:5c:21:74:b6:99:fb:2e:06:ed:2b:f2:
                    33:68:f1:a3:bd:db:f0:bb:d9:3d:31:c9:8e:8a:d9:
                    41:ea:72:06:f0:38:49:91:be:14:e2:dd:83:60:ba:
                    3e:2f:77:48:71:64:c3:82:5d:85:00:d4:84:56:f6:
                    07:85:fa:f0:43:be:8a:26:81:68:b3:c4:d4:d2:c0:
                    c0:c0:de:66:63:38:94:49:59:72:60:fa:94:94:62:
                    7b:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:87:66:36:B9:C8:4D:08:C6:43:EE:C1:2D:AE:02:63:C1:15:6A:1B
            X509v3 Authority Key Identifier:
                keyid:2C:ED:25:08:92:D9:7A:90:AA:13:32:3A:CA:4E:45:D2:51:76:92:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B4580/E19B7B22E21711EEA18E8ABF775412E6/LO0lCJLZepCqEzI6yk5F0lF2klg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LO0lCJLZepCqEzI6yk5F0lF2klg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B4580/E19B7B22E21711EEA18E8ABF775412E6/LO0lCJLZepCqEzI6yk5F0lF2klg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:c8:91:6a:11:f0:6b:87:f7:8e:31:1e:65:e7:25:43:aa:d5:
         45:52:43:06:65:f8:30:7b:34:6b:fb:49:b1:e4:3d:f5:53:3e:
         f0:94:a9:75:72:dd:02:cd:77:dd:54:1f:de:db:6f:95:6e:61:
         1e:4e:3a:8d:db:d9:4c:28:0a:b3:2e:3b:e9:99:0a:44:27:04:
         ee:a2:00:91:cf:63:97:c5:02:e7:0e:05:76:4d:96:01:5c:31:
         71:01:81:e0:76:0a:7a:b8:eb:34:70:51:7e:75:ba:8f:f6:c9:
         74:ce:1f:f3:3a:d1:58:aa:99:47:96:97:26:45:d9:ee:4b:50:
         6e:af:17:25:23:20:5e:b3:73:54:29:78:51:5d:fe:67:27:53:
         bc:7a:6e:62:00:26:ee:8c:a8:61:99:a9:99:4d:cd:2a:7f:d4:
         6b:26:af:26:22:15:76:7f:ec:1a:3b:13:89:d8:75:ab:be:33:
         86:25:b1:2d:6b:19:c1:ea:34:b0:64:76:25:e5:89:3f:23:5d:
         53:be:de:dc:5d:70:41:bc:4b:fb:14:de:13:6b:91:f5:0d:28:
         e5:73:ac:ef:5c:9f:d0:be:c7:ec:34:f4:d4:ba:34:93:27:82:
         b0:9c:ec:9d:8e:f1:80:40:37:bf:5f:96:82:b2:95:5a:0d:19:
         3d:6b:9b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:35:35 2026 by rpki-client