Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C01B9/AFDA9FDCDA2E11EEA6D125A7775412E6/OWSdY4-MUgk4TWK4gN9_jH5G4fs.mft
File:                     OWSdY4-MUgk4TWK4gN9_jH5G4fs.mft (raw, json)
Hash identifier:          2SIA/JdWBByUB45r9QErHUd4UaNCp/EiS6EL2euX9YU=
Subject key identifier:   75:8E:EF:B9:9A:9E:CD:ED:7A:03:A8:8D:7C:46:81:01:0D:0C:1F:7E
Authority key identifier: 39:64:9D:63:8F:8C:52:09:38:4D:62:B8:80:DF:7F:8C:7E:46:E1:FB
Certificate issuer:       /CN=F36C01B9RI/serialNumber=39649D638F8C5209384D62B880DF7F8C7E46E1FB
Certificate serial:       031D
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/OWSdY4-MUgk4TWK4gN9_jH5G4fs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C01B9/AFDA9FDCDA2E11EEA6D125A7775412E6/OWSdY4-MUgk4TWK4gN9_jH5G4fs.mft
Manifest number:          031B
Signing time:             Sun 19 Apr 2026 04:03:18 +0000
Manifest this update:     Sun 19 Apr 2026 04:03:17 +0000
Manifest next update:     Tue 21 Apr 2026 04:03:17 +0000
Files and hashes:         1: OWSdY4-MUgk4TWK4gN9_jH5G4fs.crl (hash: YwmfwcnlKASEOzr8y3Mwqd6QJDrBpyZGm4ST4J9uRIE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C01B9/AFDA9FDCDA2E11EEA6D125A7775412E6/OWSdY4-MUgk4TWK4gN9_jH5G4fs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C01B9/AFDA9FDCDA2E11EEA6D125A7775412E6/OWSdY4-MUgk4TWK4gN9_jH5G4fs.mft
                          rsync://rpki.afrinic.net/repository/ripe/OWSdY4-MUgk4TWK4gN9_jH5G4fs.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 21 Apr 2026 00:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 797 (0x31d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C01B9RI, serialNumber=39649D638F8C5209384D62B880DF7F8C7E46E1FB
        Validity
            Not Before: Apr 19 04:03:17 2026 GMT
            Not After : Apr 21 04:03:17 2026 GMT
        Subject: CN=69e45406-6e10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f3:b1:74:82:c7:60:7a:d0:72:f6:d1:ab:eb:
                    b2:ba:02:28:24:0e:ae:c4:7f:bd:66:d5:db:10:1c:
                    21:e5:18:25:be:5c:53:93:f1:70:19:07:3b:30:bf:
                    b4:c4:5c:c3:fc:25:38:72:15:f2:7e:10:df:a3:93:
                    51:17:64:93:07:45:22:36:6e:41:5d:d2:1d:ee:26:
                    d2:c9:7d:1f:a5:d1:20:e8:50:2b:8c:74:d4:5e:0d:
                    8b:1f:a8:2a:4b:58:86:a9:56:62:aa:22:df:3a:e3:
                    b1:1f:3d:cc:dd:81:63:17:e4:b5:87:e4:4b:de:93:
                    0f:f0:1f:bc:6f:bb:65:10:c7:24:f6:6f:bb:0e:31:
                    00:48:3a:fc:e2:48:60:0e:90:e5:8d:87:5b:4a:f8:
                    13:c0:e2:a7:43:1d:6e:cb:4c:2a:ed:42:2d:01:b3:
                    d0:13:ce:73:e2:20:35:c4:7e:75:db:df:bc:b1:6a:
                    68:71:22:61:f1:b8:6f:ee:1b:1b:e3:95:41:92:5e:
                    0e:39:57:c4:f1:fb:78:b4:a1:c7:63:c6:19:e9:87:
                    ba:82:fd:c0:40:da:12:e7:c1:ff:42:a2:b9:51:90:
                    31:39:a1:13:34:84:9e:fc:33:d6:4c:ae:f0:b0:96:
                    e4:4e:d9:8b:56:f0:c1:c2:b2:64:99:6e:95:2d:27:
                    16:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:8E:EF:B9:9A:9E:CD:ED:7A:03:A8:8D:7C:46:81:01:0D:0C:1F:7E
            X509v3 Authority Key Identifier:
                keyid:39:64:9D:63:8F:8C:52:09:38:4D:62:B8:80:DF:7F:8C:7E:46:E1:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C01B9/AFDA9FDCDA2E11EEA6D125A7775412E6/OWSdY4-MUgk4TWK4gN9_jH5G4fs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/OWSdY4-MUgk4TWK4gN9_jH5G4fs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C01B9/AFDA9FDCDA2E11EEA6D125A7775412E6/OWSdY4-MUgk4TWK4gN9_jH5G4fs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:a8:8d:dc:06:5c:31:d6:ff:20:5d:54:dd:ba:4e:00:74:9d:
         57:e4:bc:6b:43:ef:f4:ed:12:bc:d8:97:ac:6e:7c:fa:b5:99:
         b9:5f:d5:90:04:be:d7:99:9e:99:8b:57:28:bc:c1:9f:61:21:
         43:cf:97:d9:f6:7b:a4:0c:7b:cd:da:61:36:fd:ee:81:16:b6:
         8a:cf:ff:ba:69:a8:c2:46:9e:d5:bd:0f:3c:5f:82:fa:da:44:
         81:09:61:b3:69:8e:29:60:6e:67:09:7f:38:93:fe:1a:e4:57:
         cf:99:35:5c:ac:38:65:da:47:76:db:2b:f4:10:a7:bf:b5:de:
         7e:6d:99:b2:76:49:9a:53:fd:2c:7f:45:d1:f8:5a:1d:90:0c:
         91:19:be:a4:fd:a8:3d:cb:8c:02:e5:76:cd:09:65:09:2d:74:
         04:1c:4d:9a:d9:fb:93:f7:84:57:d2:00:4d:25:08:2e:f9:5a:
         74:38:45:92:66:61:53:cb:e7:65:81:e4:3b:75:c2:db:b4:ce:
         19:b8:61:7d:ef:7f:56:8c:e1:e8:90:98:e9:e8:df:65:d9:c3:
         b1:f8:62:56:91:be:7e:5f:32:93:77:82:27:bf:a9:0e:1b:5c:
         b5:cc:f2:8a:da:a6:39:22:e8:bf:6e:75:70:80:05:f2:1e:a3:
         cb:73:11:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:06:31 2026 by rpki-client