Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C5799/0CA10C04331C11F18D401AB9CE1D38B0/Mh-BR7LBGZaoFo69bpeb7goWDSg.mft
File:                     Mh-BR7LBGZaoFo69bpeb7goWDSg.mft (raw, json)
Hash identifier:          L/87NeUQNX4jTl0hj4QAgeTI/T8XhLZkU9nY7EB8R4E=
Subject key identifier:   24:9B:AE:36:C7:C5:35:86:8A:D7:7F:DA:90:C7:D8:F6:5F:2C:4F:C0
Authority key identifier: 32:1F:81:47:B2:C1:19:96:A8:16:8E:BD:6E:97:9B:EE:0A:16:0D:28
Certificate issuer:       /CN=F36C5799AF/serialNumber=321F8147B2C11996A8168EBD6E979BEE0A160D28
Certificate serial:       0C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Mh-BR7LBGZaoFo69bpeb7goWDSg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C5799/0CA10C04331C11F18D401AB9CE1D38B0/Mh-BR7LBGZaoFo69bpeb7goWDSg.mft
Manifest number:          0B
Signing time:             Fri 17 Apr 2026 05:30:29 +0000
Manifest this update:     Fri 17 Apr 2026 05:30:29 +0000
Manifest next update:     Sun 19 Apr 2026 05:30:29 +0000
Files and hashes:         1: Mh-BR7LBGZaoFo69bpeb7goWDSg.crl (hash: uhii3R0bDT56h1b3RhSx9XAxHPJRlkXmt2l+KA/SS3s=)
                          2: 6EB787A833E211F19A2B66F0CE1D38B0.roa (hash: khl45c9kCg+cPXJc6/8UvAcq1OtRKhjfiq9hfCULuv0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C5799/0CA10C04331C11F18D401AB9CE1D38B0/Mh-BR7LBGZaoFo69bpeb7goWDSg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C5799/0CA10C04331C11F18D401AB9CE1D38B0/Mh-BR7LBGZaoFo69bpeb7goWDSg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Mh-BR7LBGZaoFo69bpeb7goWDSg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12 (0xc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C5799AF, serialNumber=321F8147B2C11996A8168EBD6E979BEE0A160D28
        Validity
            Not Before: Apr 17 05:30:29 2026 GMT
            Not After : Apr 19 05:30:29 2026 GMT
        Subject: CN=69e1c575-88e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e9:e1:b7:c3:16:c0:45:c6:f3:87:ab:16:04:
                    a9:6b:2d:c6:3f:02:47:0e:0b:cb:cb:82:54:69:98:
                    9a:e7:40:f0:46:e1:b5:2b:cc:0f:95:69:6f:30:9c:
                    a0:1f:b6:cd:8b:6e:a2:b1:3e:07:8a:53:9f:ae:9c:
                    93:57:5e:eb:d0:49:9e:f8:7a:c6:59:9c:d8:28:f6:
                    85:6a:33:22:32:58:c7:51:8e:bf:1c:ee:da:5f:b2:
                    75:18:60:45:e2:38:8a:50:fc:75:63:90:fd:69:d8:
                    cf:cf:b5:c0:10:1f:94:e7:91:8b:e0:48:af:c2:73:
                    69:b3:62:60:58:a6:16:ec:96:43:ec:4a:8a:2d:b7:
                    de:d7:96:aa:88:ca:be:93:9a:b5:f5:d4:87:51:b0:
                    a2:15:25:bc:be:d0:5b:e9:fa:8e:54:0a:50:06:5d:
                    5d:f0:82:2f:48:af:a0:03:ef:d9:6a:6c:9e:d0:ec:
                    16:1c:02:37:19:e1:78:56:34:74:be:8c:f7:3d:96:
                    b4:f5:6e:6d:a9:5a:64:84:8d:2e:c6:dd:04:23:2f:
                    70:01:5b:e6:6c:a5:84:b2:62:11:7b:01:79:07:ed:
                    e6:a9:a5:95:ac:fb:f7:63:f2:04:19:f5:86:4d:fe:
                    2d:f6:e0:c9:a4:99:8b:da:bf:00:86:5b:1f:b3:7b:
                    cf:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:9B:AE:36:C7:C5:35:86:8A:D7:7F:DA:90:C7:D8:F6:5F:2C:4F:C0
            X509v3 Authority Key Identifier:
                keyid:32:1F:81:47:B2:C1:19:96:A8:16:8E:BD:6E:97:9B:EE:0A:16:0D:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C5799/0CA10C04331C11F18D401AB9CE1D38B0/Mh-BR7LBGZaoFo69bpeb7goWDSg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Mh-BR7LBGZaoFo69bpeb7goWDSg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C5799/0CA10C04331C11F18D401AB9CE1D38B0/Mh-BR7LBGZaoFo69bpeb7goWDSg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:78:2d:82:d7:b8:32:9c:f8:17:de:d4:e5:c2:7a:7b:9e:66:
         1b:2e:ef:18:ab:d0:70:3b:ad:69:52:86:4a:25:12:b8:a7:0d:
         6f:b6:ad:a7:a7:cb:15:a8:15:34:0f:d7:9c:e9:18:c3:b7:35:
         6d:1c:5a:62:58:aa:55:fb:4d:47:67:a6:a9:79:db:d3:08:19:
         44:dc:f4:dc:14:18:2f:ee:86:83:a6:38:73:4a:9b:8b:9f:40:
         e7:16:55:cd:94:4e:c8:f8:73:2b:48:6f:51:1a:16:81:96:d5:
         8a:9f:03:d2:4b:a5:97:ff:9f:93:ba:59:7a:66:a8:15:c2:c9:
         51:40:e4:51:ff:b5:ad:bc:42:4a:58:5b:5a:a2:a5:45:bb:3c:
         cf:aa:10:31:73:9b:ec:f6:25:c2:20:eb:2a:51:34:c1:e9:95:
         8b:26:3d:4b:fd:38:22:06:b8:0a:42:35:e6:be:c3:4d:0a:40:
         09:f5:d5:92:b8:2c:5a:7b:54:1e:ca:a5:aa:07:2a:d0:54:76:
         b4:69:b0:dc:94:62:f1:a2:f5:90:3f:3d:b9:07:78:8f:23:55:
         cf:0c:65:51:6d:b3:da:39:5d:eb:0f:a7:6a:86:e8:c5:7d:98:
         30:b1:7a:7b:65:a6:0a:ee:bf:3f:1a:79:6b:4f:c7:3d:b6:ef:
         dc:50:89:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:25:19 2026 by rpki-client