Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C06DF/3600B3AA856811EF8C875646762E951A/i_RKORmwHdVFpRN9yW2Ih8FElMQ.mft
File:                     i_RKORmwHdVFpRN9yW2Ih8FElMQ.mft (raw, json)
Hash identifier:          IBS1zE9o8eP0VYgCYnmkCSKXGRGKOzLqLzxN/TVHOSI=
Subject key identifier:   A2:A0:5B:C1:D5:74:67:95:D9:2A:9D:73:FC:99:F4:31:A9:2B:0E:D4
Authority key identifier: 8B:F4:4A:39:19:B0:1D:D5:45:A5:13:7D:C9:6D:88:87:C1:44:94:C4
Certificate issuer:       /CN=F36C06DFAF/serialNumber=8BF44A3919B01DD545A5137DC96D8887C14494C4
Certificate serial:       0243
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/i_RKORmwHdVFpRN9yW2Ih8FElMQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C06DF/3600B3AA856811EF8C875646762E951A/i_RKORmwHdVFpRN9yW2Ih8FElMQ.mft
Manifest number:          023F
Signing time:             Fri 17 Apr 2026 04:32:36 +0000
Manifest this update:     Fri 17 Apr 2026 04:32:35 +0000
Manifest next update:     Sun 19 Apr 2026 04:32:35 +0000
Files and hashes:         1: i_RKORmwHdVFpRN9yW2Ih8FElMQ.crl (hash: gITZbB7FbssaX57YdVi4YEhu1iRYu0E2E5ncGMejhHs=)
                          2: A50DEF3A8A1B11EF86B3879F762E951A.roa (hash: 6S2eWQOAsB1C05yblXJP2r9a9WQgQ6FEOxOlJb4U21M=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C06DF/3600B3AA856811EF8C875646762E951A/i_RKORmwHdVFpRN9yW2Ih8FElMQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C06DF/3600B3AA856811EF8C875646762E951A/i_RKORmwHdVFpRN9yW2Ih8FElMQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/i_RKORmwHdVFpRN9yW2Ih8FElMQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 579 (0x243)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C06DFAF, serialNumber=8BF44A3919B01DD545A5137DC96D8887C14494C4
        Validity
            Not Before: Apr 17 04:32:35 2026 GMT
            Not After : Apr 19 04:32:35 2026 GMT
        Subject: CN=69e1b7e4-1216
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f0:7b:05:c7:25:73:82:c9:d7:7f:8d:d4:23:
                    bd:18:99:d1:a9:db:63:34:7a:f6:b9:0a:6e:97:36:
                    fd:0a:ea:cb:68:d9:eb:4b:6b:1a:d2:ce:b3:5b:39:
                    93:0d:15:c6:c2:4b:54:d5:95:91:61:72:26:d3:9f:
                    26:d2:f3:59:54:57:70:08:c2:ba:bf:52:64:f1:c2:
                    2d:c1:82:d7:2f:e7:31:d5:5c:56:db:4e:cc:8b:f7:
                    53:68:ab:a8:37:64:97:22:a1:3c:bf:14:a7:35:95:
                    de:6f:14:e2:3c:7c:71:07:98:3d:90:ea:d2:a3:6e:
                    a8:28:ea:bc:43:70:13:19:9f:19:c0:b2:c2:61:d3:
                    86:57:c7:aa:14:46:4d:98:ec:f9:68:64:28:cc:2d:
                    15:5b:99:41:80:80:f5:72:41:a8:8f:64:d7:48:fb:
                    b4:4a:c2:26:56:08:18:38:eb:b5:33:09:04:9b:a4:
                    b4:32:30:6c:d1:db:f5:b6:83:76:a0:e5:74:ba:5e:
                    19:2d:a0:98:89:22:01:e6:d9:33:70:c8:24:17:be:
                    57:1f:40:b5:1d:dd:52:4d:67:05:16:48:29:2a:c6:
                    7d:12:02:2f:5a:d5:e7:34:bb:4e:06:da:f7:6d:47:
                    28:19:3f:c4:71:4d:c4:ca:6f:16:44:02:b7:08:d7:
                    cd:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:A0:5B:C1:D5:74:67:95:D9:2A:9D:73:FC:99:F4:31:A9:2B:0E:D4
            X509v3 Authority Key Identifier:
                keyid:8B:F4:4A:39:19:B0:1D:D5:45:A5:13:7D:C9:6D:88:87:C1:44:94:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C06DF/3600B3AA856811EF8C875646762E951A/i_RKORmwHdVFpRN9yW2Ih8FElMQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/i_RKORmwHdVFpRN9yW2Ih8FElMQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C06DF/3600B3AA856811EF8C875646762E951A/i_RKORmwHdVFpRN9yW2Ih8FElMQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:27:a4:f0:af:b0:6b:da:33:4f:79:44:e6:93:a8:62:86:6c:
         5d:22:1d:b9:5a:f0:df:c4:bc:3b:1b:54:ca:03:a9:2a:2d:c7:
         c6:9e:93:2a:aa:af:dd:a9:23:5a:67:6a:e7:0a:6d:7d:2b:e5:
         3a:f4:08:9a:52:4d:d7:a2:dd:57:08:2e:0b:08:99:1b:26:8b:
         24:4c:7c:35:c2:ce:ee:90:4b:d0:ec:46:fa:65:de:c3:61:c1:
         22:1a:03:0e:da:c2:d3:31:db:98:c7:2e:d2:7c:dd:9e:bd:fb:
         8d:b8:7e:7e:11:51:52:7a:86:e7:3b:20:ff:dc:15:27:1c:a5:
         73:09:b6:95:15:7b:b5:07:5b:98:77:f0:ce:98:4d:33:5d:fe:
         92:35:01:80:92:15:99:5d:84:3c:6f:60:eb:f2:f6:4e:85:3f:
         bc:53:a0:cd:b9:e6:9c:9b:a4:d7:f3:44:9c:df:ed:1a:29:6f:
         cc:10:9b:d4:e1:bc:3c:a1:ca:41:5c:6f:90:2a:a1:96:d4:7f:
         0d:d9:ee:ce:7b:62:f7:da:d8:11:d0:0e:04:56:24:71:51:ca:
         1c:9d:7c:ff:24:b7:03:4d:e1:8a:60:af:f0:f4:18:a0:77:6e:
         bf:86:85:a3:f8:8d:7d:24:4b:d2:72:1d:c0:63:77:90:23:a3:
         b9:13:eb:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:57:05 2026 by rpki-client