Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B6ED4/7FEB5078746511F0B88F0E83DAE4EC9C/s14-lHqUdaFnx9_wp9CQLIZFgy0.mft
File:                     s14-lHqUdaFnx9_wp9CQLIZFgy0.mft (raw, json)
Hash identifier:          Ez7q54ooesrA9MMATve5vRZViD8dUP/Ip9bu3Ti8emg=
Subject key identifier:   99:1C:0E:18:0F:2A:22:7D:C6:70:11:65:03:FD:AF:81:D2:BA:BD:E7
Authority key identifier: B3:5E:3E:94:7A:94:75:A1:67:C7:DF:F0:A7:D0:90:2C:86:45:83:2D
Certificate issuer:       /CN=F36B6ED4AF/serialNumber=B35E3E947A9475A167C7DFF0A7D0902C8645832D
Certificate serial:       0139
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/s14-lHqUdaFnx9_wp9CQLIZFgy0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B6ED4/7FEB5078746511F0B88F0E83DAE4EC9C/s14-lHqUdaFnx9_wp9CQLIZFgy0.mft
Manifest number:          0138
Signing time:             Fri 12 Jun 2026 05:03:37 +0000
Manifest this update:     Fri 12 Jun 2026 05:03:37 +0000
Manifest next update:     Sun 14 Jun 2026 05:03:37 +0000
Files and hashes:         1: s14-lHqUdaFnx9_wp9CQLIZFgy0.crl (hash: pOybzgDDgpwF7h6DryLnC9paDIg9ir6tyu+mPFjlLvs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B6ED4/7FEB5078746511F0B88F0E83DAE4EC9C/s14-lHqUdaFnx9_wp9CQLIZFgy0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B6ED4/7FEB5078746511F0B88F0E83DAE4EC9C/s14-lHqUdaFnx9_wp9CQLIZFgy0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/s14-lHqUdaFnx9_wp9CQLIZFgy0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 14 Jun 2026 05:03:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 313 (0x139)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B6ED4AF, serialNumber=B35E3E947A9475A167C7DFF0A7D0902C8645832D
        Validity
            Not Before: Jun 12 05:03:37 2026 GMT
            Not After : Jun 14 05:03:37 2026 GMT
        Subject: CN=6a2b9329-c801
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:0d:89:00:6a:3d:aa:dc:ae:dd:b8:10:46:66:
                    ff:1a:70:20:69:08:2d:6f:cf:9b:c5:b2:48:f8:0d:
                    49:9f:66:83:a5:64:d0:f6:f4:96:05:03:f7:15:9b:
                    ba:75:80:ee:06:58:df:66:d2:00:10:1b:b6:d3:2d:
                    7d:c1:5a:73:cb:21:be:6f:1e:41:64:ac:19:87:c3:
                    fe:53:8e:04:88:67:24:c2:71:5a:29:de:be:3b:f0:
                    28:ce:f6:9c:53:da:6c:73:98:ce:84:6c:92:f4:84:
                    27:87:7b:30:33:92:1a:a1:19:ea:86:ff:55:43:1c:
                    3d:51:bd:17:45:75:7d:56:79:11:d1:f0:7d:a0:4c:
                    8e:c1:fb:08:6b:43:65:68:f6:5a:8e:79:13:4c:3b:
                    18:0d:6b:e4:9c:24:f7:66:d1:64:21:6e:87:bc:ea:
                    35:d0:59:71:0f:cf:e9:9e:4d:2c:6d:59:12:a0:47:
                    c1:a4:2b:f6:6a:28:ad:c4:24:26:39:25:28:bb:c7:
                    fb:58:18:af:05:c7:02:1a:0f:a0:86:1a:10:e0:f3:
                    56:41:fc:5a:93:49:e5:4c:69:43:e1:a5:d7:64:24:
                    4b:06:fb:e2:09:dd:fe:5d:2e:d7:bf:cb:69:ba:77:
                    bc:ba:fa:f6:52:c5:83:fb:3d:8b:51:ea:de:e0:87:
                    50:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:1C:0E:18:0F:2A:22:7D:C6:70:11:65:03:FD:AF:81:D2:BA:BD:E7
            X509v3 Authority Key Identifier:
                keyid:B3:5E:3E:94:7A:94:75:A1:67:C7:DF:F0:A7:D0:90:2C:86:45:83:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B6ED4/7FEB5078746511F0B88F0E83DAE4EC9C/s14-lHqUdaFnx9_wp9CQLIZFgy0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/s14-lHqUdaFnx9_wp9CQLIZFgy0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B6ED4/7FEB5078746511F0B88F0E83DAE4EC9C/s14-lHqUdaFnx9_wp9CQLIZFgy0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:5a:3a:07:58:c6:40:de:6c:ca:bc:ba:fc:1b:77:9a:d2:71:
         13:37:33:b5:3a:17:76:ce:6e:bf:8e:ca:59:0c:c1:c9:1a:d8:
         33:ff:86:70:0e:9f:c8:de:3b:05:b8:7c:6f:a9:99:4b:cb:99:
         bb:7b:5a:86:d1:62:93:c8:53:0a:16:5c:c6:3e:ad:93:4b:1c:
         44:84:47:9d:4b:5a:14:f1:20:b2:8c:ce:ac:d8:94:69:14:87:
         a5:11:cf:d8:68:d9:9f:48:86:35:87:8a:35:6a:48:e4:05:44:
         f2:7a:1b:4d:0c:58:ad:90:d2:99:d7:52:88:99:98:4e:13:73:
         22:f5:f4:7a:d1:17:44:3f:50:d3:f3:53:e1:e0:5a:df:0d:66:
         eb:9e:33:ed:c5:81:aa:ac:62:98:b4:06:2e:a2:e6:06:24:7d:
         b6:ea:7b:5d:19:29:20:57:40:00:33:27:4e:b1:0f:96:73:6f:
         9c:d3:bf:09:07:bd:5f:08:9e:77:9c:d6:6c:e6:de:25:2d:78:
         76:bf:54:0d:55:ba:74:97:8f:44:f5:7e:26:f8:dc:40:91:87:
         35:68:82:a4:21:ca:90:64:52:78:f7:1d:9d:12:14:34:65:e3:
         91:20:bb:71:7a:8e:cb:08:8b:d2:c4:62:6f:f6:41:cc:cb:6c:
         20:51:84:54
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICATkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QjZFRDRBRjExMC8GA1UEBRMoQjM1RTNFOTQ3QTk0NzVBMTY3QzdERkYwQTdEMDkw
MkM4NjQ1ODMyRDAeFw0yNjA2MTIwNTAzMzdaFw0yNjA2MTQwNTAzMzdaMBgxFjAU
BgNVBAMTDTZhMmI5MzI5LWM4MDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQD1DYkAaj2q3K7duBBGZv8acCBpCC1vz5vFskj4DUmfZoOlZND29JYFA/cV
m7p1gO4GWN9m0gAQG7bTLX3BWnPLIb5vHkFkrBmHw/5TjgSIZyTCcVop3r478CjO
9pxT2mxzmM6EbJL0hCeHezAzkhqhGeqG/1VDHD1RvRdFdX1WeRHR8H2gTI7B+whr
Q2Vo9lqOeRNMOxgNa+ScJPdm0WQhboe86jXQWXEPz+meTSxtWRKgR8GkK/ZqKK3E
JCY5JSi7x/tYGK8FxwIaD6CGGhDg81ZB/FqTSeVMaUPhpddkJEsG++IJ3f5dLte/
y2m6d7y6+vZSxYP7PYtR6t7gh1CHAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUmRwO
GA8qIn3GcBFlA/2vgdK6vecwHwYDVR0jBBgwFoAUs14+lHqUdaFnx9/wp9CQLIZF
gy0wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkI2RUQ0LzdGRUI1MDc4NzQ2NTExRjBCODhGMEU4M0RBRTRFQzlDL3MxNC1s
SHFVZGFGbng5X3dwOUNRTElaRmd5MC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3MxNC1sSHFVZGFGbng5X3dwOUNRTElaRmd5MC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QjZFRDQvN0ZFQjUwNzg3NDY1MTFGMEI4OEYwRTgzREFF
NEVDOUMvczE0LWxIcVVkYUZueDlfd3A5Q1FMSVpGZ3kwLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBwWjoHWMZA3mzKvLr8G3ea0nETNzO1
Ohd2zm6/jspZDMHJGtgz/4ZwDp/I3jsFuHxvqZlLy5m7e1qG0WKTyFMKFlzGPq2T
SxxEhEedS1oU8SCyjM6s2JRpFIelEc/YaNmfSIY1h4o1akjkBUTyehtNDFitkNKZ
11KImZhOE3Mi9fR60RdEP1DT81Ph4FrfDWbrnjPtxYGqrGKYtAYuouYGJH226ntd
GSkgV0AAMydOsQ+Wc2+c078JB71fCJ53nNZs5t4lLXh2v1QNVbp0l49E9X4m+NxA
kYc1aIKkIcqQZFJ49x2dEhQ0ZeORILtxeo7LCIvSxGJv9kHMy2wgUYRU
-----END CERTIFICATE-----
Generated at Sat Jun 13 04:28:56 2026 by rpki-client