Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C72A2/BA0C023ADFD511F0A7B90CCEDAE4EC9C/BFtSUEPLQ-6r2n8kY39AQIkZtvU.mft
File:                     BFtSUEPLQ-6r2n8kY39AQIkZtvU.mft (raw, json)
Hash identifier:          VzRcAMSt3TzIT9vX1f8z4hBfG1V3wFMGawQCvk0kcCA=
Subject key identifier:   83:47:ED:6A:90:B4:A1:47:50:49:4A:A2:9D:FF:BE:48:02:BB:7A:93
Authority key identifier: 04:5B:52:50:43:CB:43:EE:AB:DA:7F:24:63:7F:40:40:89:19:B6:F5
Certificate issuer:       /CN=F36C72A2AF/serialNumber=045B525043CB43EEABDA7F24637F40408919B6F5
Certificate serial:       75
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/BFtSUEPLQ-6r2n8kY39AQIkZtvU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C72A2/BA0C023ADFD511F0A7B90CCEDAE4EC9C/BFtSUEPLQ-6r2n8kY39AQIkZtvU.mft
Manifest number:          74
Signing time:             Thu 16 Apr 2026 05:19:36 +0000
Manifest this update:     Thu 16 Apr 2026 05:19:36 +0000
Manifest next update:     Sat 18 Apr 2026 05:19:36 +0000
Files and hashes:         1: BFtSUEPLQ-6r2n8kY39AQIkZtvU.crl (hash: 9T59bmXIrhvXIZIMjBvSDVcKlT22ISOnR9dK8f28qS0=)
                          2: 8EAA7E36DFD611F0BA2968D3DAE4EC9C.roa (hash: mhjtBp/gVSpcPcvCT9mQUfotVZ3SIRjPfe6SWCs+5dE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C72A2/BA0C023ADFD511F0A7B90CCEDAE4EC9C/BFtSUEPLQ-6r2n8kY39AQIkZtvU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C72A2/BA0C023ADFD511F0A7B90CCEDAE4EC9C/BFtSUEPLQ-6r2n8kY39AQIkZtvU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/BFtSUEPLQ-6r2n8kY39AQIkZtvU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 18 Apr 2026 05:19:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117 (0x75)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C72A2AF, serialNumber=045B525043CB43EEABDA7F24637F40408919B6F5
        Validity
            Not Before: Apr 16 05:19:36 2026 GMT
            Not After : Apr 18 05:19:36 2026 GMT
        Subject: CN=69e07168-3e2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:87:bf:05:c1:48:fc:a8:51:63:4e:b3:01:3b:
                    54:30:89:15:66:25:2b:bf:d7:0e:79:80:ca:9d:b5:
                    21:93:fc:a8:4c:6b:d0:52:93:5c:b3:ad:f4:cd:9c:
                    26:ed:7f:30:f2:88:ef:f1:80:f6:94:8f:ff:fe:53:
                    84:d5:9a:27:99:d8:63:09:df:af:4e:8a:7f:ee:65:
                    59:82:8b:de:48:8d:b5:e0:a6:74:ec:dd:0e:27:56:
                    a3:86:19:34:22:ee:25:89:b4:5a:5a:19:5f:ed:29:
                    b5:df:04:e9:3d:86:12:74:c4:d5:fb:73:a3:b3:bc:
                    fe:79:ff:a3:2a:42:93:6c:36:f3:ec:4c:46:c2:e8:
                    b7:0d:2d:d9:89:7e:30:8b:56:5c:3b:b1:a1:80:43:
                    4b:72:a7:61:69:c6:74:66:64:2d:32:a9:4a:b0:26:
                    b2:f4:22:91:39:19:f3:7f:4c:51:00:99:32:66:6c:
                    3d:fe:b5:f0:dd:68:1c:59:d8:aa:f5:75:01:8f:4a:
                    52:ad:15:7d:57:96:19:d5:a0:1c:97:08:4f:3a:24:
                    06:77:18:e6:a5:eb:ba:49:7a:1e:cf:4b:a2:97:92:
                    f3:93:52:8e:3d:6e:48:b7:ee:94:24:82:30:bc:94:
                    cb:06:8d:de:b2:c7:bf:1d:81:95:63:ce:94:3c:f5:
                    0e:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:47:ED:6A:90:B4:A1:47:50:49:4A:A2:9D:FF:BE:48:02:BB:7A:93
            X509v3 Authority Key Identifier:
                keyid:04:5B:52:50:43:CB:43:EE:AB:DA:7F:24:63:7F:40:40:89:19:B6:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C72A2/BA0C023ADFD511F0A7B90CCEDAE4EC9C/BFtSUEPLQ-6r2n8kY39AQIkZtvU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/BFtSUEPLQ-6r2n8kY39AQIkZtvU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C72A2/BA0C023ADFD511F0A7B90CCEDAE4EC9C/BFtSUEPLQ-6r2n8kY39AQIkZtvU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:c4:3f:99:b5:27:64:3b:6b:a5:58:22:ed:98:b1:e5:0e:36:
         de:52:41:a5:81:48:17:cb:74:d1:a6:80:27:5c:09:9a:43:aa:
         03:df:4b:8e:49:bb:38:6d:14:08:bd:ea:bf:13:4e:2b:56:fd:
         05:ee:88:69:eb:b8:73:2a:9e:98:e2:0c:df:24:55:6f:71:7d:
         47:31:57:6b:17:27:c0:22:54:04:c2:36:66:83:76:32:0e:bc:
         fa:9c:e7:4b:58:58:d2:43:43:8f:a2:b7:80:3b:1b:2d:d2:18:
         35:27:82:97:cd:4d:2e:22:e2:8f:7a:ef:ef:3c:fc:a2:fc:e0:
         19:45:d1:d1:dd:e7:15:6f:95:59:72:44:06:df:70:9e:98:b8:
         86:ac:82:c6:75:a9:52:fd:5d:ed:32:d6:79:bc:bf:a6:42:da:
         be:ac:ba:a6:07:4d:0d:b2:0a:a5:84:eb:e7:1b:b8:ab:db:66:
         c9:df:9c:f9:aa:fa:69:7b:ca:7f:55:4a:f9:31:4b:5c:eb:b0:
         eb:8f:b7:ee:08:93:a9:2f:7a:d9:5a:bf:16:88:98:c3:2c:22:
         ee:c7:33:04:08:bc:07:1d:0f:e5:2b:bc:02:9e:ff:f6:dc:47:
         08:4b:fb:4f:0c:6a:c2:2a:c5:a4:35:1b:38:6b:b0:b7:3e:ef:
         57:a6:07:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:53:40 2026 by rpki-client