Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BDB53/5453645A799711E6986B7147F8AEA228/4a66tLHvdNsvpuf2sMhhKwzhv9s.mft
File:                     4a66tLHvdNsvpuf2sMhhKwzhv9s.mft (raw, json)
Hash identifier:          Q/ZxSwXuAFOR1Qlw4ya24GmUy1KJ0ZO2wJg3Ue3QdH0=
Subject key identifier:   57:C2:DB:64:B5:4D:03:28:D4:11:5D:7D:16:B7:99:43:B5:C7:EC:52
Authority key identifier: E1:AE:BA:B4:B1:EF:74:DB:2F:A6:E7:F6:B0:C8:61:2B:0C:E1:BF:DB
Certificate issuer:       /CN=F36BDB53AF/serialNumber=E1AEBAB4B1EF74DB2FA6E7F6B0C8612B0CE1BFDB
Certificate serial:       0DFE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/4a66tLHvdNsvpuf2sMhhKwzhv9s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BDB53/5453645A799711E6986B7147F8AEA228/4a66tLHvdNsvpuf2sMhhKwzhv9s.mft
Manifest number:          0DFC
Signing time:             Fri 17 Apr 2026 01:04:14 +0000
Manifest this update:     Fri 17 Apr 2026 01:04:14 +0000
Manifest next update:     Sun 19 Apr 2026 01:04:14 +0000
Files and hashes:         1: 4a66tLHvdNsvpuf2sMhhKwzhv9s.crl (hash: rWvyVzYOfvBw0zbkRrbS1Fmum/ULfpktKxUTzgtrU8U=)
                          2: A9CE075A727B11EBB196600DF8AEA228.roa (hash: 2lOEEWfkem+GQmI+FhB9pSh9A8qYyCMy8BSlQP5EokY=)
                          3: BEBDF2D279B111E6830FCB69F8AEA228.roa (hash: EouzcL5tOeyVAza9Ny4WgUhhP+v0Y2hxWM5v0/DIPwk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BDB53/5453645A799711E6986B7147F8AEA228/4a66tLHvdNsvpuf2sMhhKwzhv9s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BDB53/5453645A799711E6986B7147F8AEA228/4a66tLHvdNsvpuf2sMhhKwzhv9s.mft
                          rsync://rpki.afrinic.net/repository/afrinic/4a66tLHvdNsvpuf2sMhhKwzhv9s.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 01:04:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3582 (0xdfe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BDB53AF, serialNumber=E1AEBAB4B1EF74DB2FA6E7F6B0C8612B0CE1BFDB
        Validity
            Not Before: Apr 17 01:04:14 2026 GMT
            Not After : Apr 19 01:04:14 2026 GMT
        Subject: CN=69e1870e-5d51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8e:99:1b:d1:4d:bd:c6:fe:35:ab:60:8a:6e:
                    72:0f:4b:84:7e:7c:cd:29:86:7a:c6:78:c5:4b:d4:
                    31:9c:63:c4:78:2e:c3:b5:70:7c:90:cb:ab:3e:fd:
                    a6:72:d1:c9:26:f5:4e:3a:25:09:84:42:5e:41:60:
                    10:ad:84:20:a4:c3:73:4c:7e:d6:3b:1d:7b:b4:aa:
                    45:bd:ae:4a:38:b7:26:d5:75:be:01:d7:4c:d1:d1:
                    71:a7:04:b6:c5:c4:ab:eb:c3:37:fe:c9:22:01:a4:
                    2a:1a:fc:62:13:42:66:c7:9a:8a:f5:af:9c:d5:d1:
                    03:56:3a:6b:31:19:4e:aa:9d:0a:0a:0a:ec:7e:54:
                    dd:f3:d1:cb:89:be:61:92:68:c9:de:0a:e2:ce:d6:
                    95:df:67:a7:76:fd:49:65:3e:0f:a3:cd:fc:d4:19:
                    52:18:fc:ae:73:28:be:06:d3:0a:3c:89:80:14:ec:
                    e6:8b:c2:c5:ab:44:41:4d:39:73:91:83:c6:2d:6d:
                    6f:29:79:d7:8a:9a:6a:a0:dc:0f:62:98:47:ff:bd:
                    86:05:e8:f3:aa:7d:a8:d9:d1:36:5e:d9:94:cb:55:
                    96:db:33:aa:76:b9:d1:d2:ee:3b:2c:0d:3d:2a:3b:
                    5d:2a:fc:f5:1a:36:7c:03:ef:d4:4d:89:09:52:18:
                    3c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:C2:DB:64:B5:4D:03:28:D4:11:5D:7D:16:B7:99:43:B5:C7:EC:52
            X509v3 Authority Key Identifier:
                keyid:E1:AE:BA:B4:B1:EF:74:DB:2F:A6:E7:F6:B0:C8:61:2B:0C:E1:BF:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BDB53/5453645A799711E6986B7147F8AEA228/4a66tLHvdNsvpuf2sMhhKwzhv9s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4a66tLHvdNsvpuf2sMhhKwzhv9s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BDB53/5453645A799711E6986B7147F8AEA228/4a66tLHvdNsvpuf2sMhhKwzhv9s.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:a9:01:a9:a5:da:8f:ae:7d:59:53:39:04:72:bd:a6:54:82:
         aa:79:e0:35:62:43:c9:28:aa:af:c5:d0:24:3d:87:40:91:11:
         cc:a8:9a:23:c3:e2:03:e7:bd:ba:75:57:2c:b3:81:35:50:a2:
         df:f3:57:bc:2b:93:6b:d1:f5:23:82:67:66:ac:83:5f:b0:df:
         7e:2f:77:a3:61:c9:65:a5:64:6b:0a:28:57:1e:90:f1:4a:18:
         76:6c:76:36:ee:7b:d2:d7:1f:cb:40:44:53:84:64:00:9a:be:
         8f:72:bd:4f:c9:2a:6a:81:ba:3b:55:47:87:3e:95:30:87:b4:
         09:53:f9:56:0c:b8:4b:4e:da:60:c0:e3:72:c4:1f:6a:e3:42:
         83:3b:6f:d3:b8:ec:09:72:8a:70:4d:28:3d:e3:1c:70:67:ee:
         35:33:5c:eb:8f:be:c9:bd:f8:31:2b:c0:36:1b:a9:0c:3f:de:
         7d:ee:9d:a8:49:29:82:5a:fa:de:92:b1:8c:54:c7:a5:35:bc:
         81:43:2f:3e:12:7e:37:54:e7:41:1c:d9:66:fe:e2:67:55:63:
         f9:7e:32:6f:df:98:e0:f7:0b:fe:53:bd:e9:49:e7:6f:44:ee:
         fd:1c:18:17:a5:8f:30:11:7d:34:d4:70:31:b8:54:fa:3d:ac:
         ac:74:46:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:07:09 2026 by rpki-client