Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C5C48/902C8B843C6411F0ADBE878DDAE4EC9C/yD_Q4V0UPDf5lHSXz4Zvj650cLk.mft
File:                     yD_Q4V0UPDf5lHSXz4Zvj650cLk.mft (raw, json)
Hash identifier:          lwxX+zFDTOOuWOs8VPA/tt2DwW0YrDHz/3uy1bHIMvg=
Subject key identifier:   C9:B3:38:49:A3:BA:52:69:3B:6F:1F:08:F0:2E:2E:86:1A:DB:91:BC
Authority key identifier: C8:3F:D0:E1:5D:14:3C:37:F9:94:74:97:CF:86:6F:8F:AE:74:70:B9
Certificate issuer:       /CN=F36C5C48AF/serialNumber=C83FD0E15D143C37F9947497CF866F8FAE7470B9
Certificate serial:       014B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/yD_Q4V0UPDf5lHSXz4Zvj650cLk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C5C48/902C8B843C6411F0ADBE878DDAE4EC9C/yD_Q4V0UPDf5lHSXz4Zvj650cLk.mft
Manifest number:          014A
Signing time:             Fri 17 Apr 2026 04:52:46 +0000
Manifest this update:     Fri 17 Apr 2026 04:52:45 +0000
Manifest next update:     Sun 19 Apr 2026 04:52:45 +0000
Files and hashes:         1: yD_Q4V0UPDf5lHSXz4Zvj650cLk.crl (hash: JaCRQCEjkHPXx8ByuXxCHqbX0M1+biUlMTMP/6uSBu4=)
                          2: 7810FC3C3C6511F09E134B93DAE4EC9C.roa (hash: f1/GvpZGuXTR7gHR1RFHDPtCJrb5runsWbtXK95Q83A=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C5C48/902C8B843C6411F0ADBE878DDAE4EC9C/yD_Q4V0UPDf5lHSXz4Zvj650cLk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C5C48/902C8B843C6411F0ADBE878DDAE4EC9C/yD_Q4V0UPDf5lHSXz4Zvj650cLk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/yD_Q4V0UPDf5lHSXz4Zvj650cLk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 331 (0x14b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C5C48AF, serialNumber=C83FD0E15D143C37F9947497CF866F8FAE7470B9
        Validity
            Not Before: Apr 17 04:52:45 2026 GMT
            Not After : Apr 19 04:52:45 2026 GMT
        Subject: CN=69e1bc9d-3eb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1c:fd:5d:3e:cd:e1:85:82:74:ee:26:3f:a7:
                    21:67:c4:99:8d:95:ce:e5:de:df:3b:d5:6c:c4:5a:
                    56:fc:2e:f5:66:42:e7:70:f3:76:62:96:32:5c:00:
                    ff:5b:aa:b3:92:9c:d7:18:d1:0f:6f:70:fb:58:4c:
                    39:9e:b3:41:e7:16:d0:ff:32:ab:05:91:40:8f:83:
                    65:df:8f:dd:58:a0:3f:d5:33:63:30:ae:b6:72:86:
                    3a:07:27:29:0a:67:8c:7b:34:ce:cf:1e:e1:dd:fa:
                    69:c6:ae:e0:6b:41:28:48:cd:35:b1:28:5c:f3:43:
                    e9:ba:3e:46:f6:a2:53:ab:a5:d9:3b:b1:24:cc:b2:
                    88:7c:79:2a:2f:3a:61:a5:f5:c4:81:7a:cf:88:1e:
                    65:98:24:12:87:93:84:da:e2:cf:2f:33:cc:a8:12:
                    d6:85:e7:4d:6e:7d:b7:2e:d0:db:ef:be:51:28:e1:
                    60:a4:12:6a:c6:9b:41:19:ec:e9:50:0f:95:9b:35:
                    f2:61:d6:77:c3:45:b1:15:cc:9d:38:a8:3a:e6:a7:
                    9a:a1:3a:d6:2d:42:fb:52:58:44:f0:a8:5d:52:2a:
                    a3:b4:ed:6f:71:8f:69:0c:c1:2c:50:23:9d:52:0a:
                    db:2d:87:32:49:d3:77:6d:04:08:0b:2b:e4:3d:ab:
                    7a:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:B3:38:49:A3:BA:52:69:3B:6F:1F:08:F0:2E:2E:86:1A:DB:91:BC
            X509v3 Authority Key Identifier:
                keyid:C8:3F:D0:E1:5D:14:3C:37:F9:94:74:97:CF:86:6F:8F:AE:74:70:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C5C48/902C8B843C6411F0ADBE878DDAE4EC9C/yD_Q4V0UPDf5lHSXz4Zvj650cLk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/yD_Q4V0UPDf5lHSXz4Zvj650cLk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C5C48/902C8B843C6411F0ADBE878DDAE4EC9C/yD_Q4V0UPDf5lHSXz4Zvj650cLk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:0b:45:8c:24:0e:67:11:da:6f:88:53:42:81:78:59:08:2d:
         cf:ac:21:f6:e6:09:71:d4:0a:a9:3a:90:b7:e1:ef:96:73:f5:
         dc:df:c1:4e:a4:5a:15:46:3b:e9:20:e7:42:6b:9f:9e:0b:08:
         c2:e5:56:9e:ca:b6:4c:fb:57:ac:0a:8a:9b:30:5c:27:ed:61:
         6f:e4:cb:70:4d:d6:4b:c0:da:76:a2:4f:94:40:16:72:ac:3e:
         cb:87:96:cb:e7:66:19:6b:79:43:66:ed:cf:72:ba:a1:f7:e1:
         33:14:fc:55:f7:e6:a8:ac:e4:93:fd:e9:e4:05:11:21:86:77:
         ac:45:e5:37:55:34:10:a1:76:52:cd:6b:c6:5c:78:16:80:a9:
         c7:fd:ca:6d:0e:65:5c:9e:f6:50:0e:ee:45:29:e8:80:65:a5:
         05:50:f8:a2:cf:36:67:16:88:b7:9f:b8:3e:4a:03:0f:51:e0:
         fa:00:5a:43:7d:ab:ad:7a:98:07:f7:47:e8:13:7a:5f:8b:12:
         fc:62:ed:cc:42:64:d2:b7:08:22:66:24:80:5f:7b:df:22:a2:
         6f:cf:2a:fc:be:b1:48:39:e5:16:0e:72:5c:1f:e9:87:75:bb:
         12:b0:43:ba:94:ef:ed:06:ac:1c:8c:4e:b9:c4:1c:6d:6b:9b:
         a4:f3:3f:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:20:18 2026 by rpki-client