Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D104B/6977A4BA9BD511ED9F8809CCF1222468/8N_7--IrTkOYavhggOjb0m5nNXs.mft
File:                     8N_7--IrTkOYavhggOjb0m5nNXs.mft (raw, json)
Hash identifier:          uTg0GMHLKAhEGzBZKi99FyeTKqkwLXkXcHO+ttFpc7k=
Subject key identifier:   D1:BA:1A:99:AF:FD:37:BF:5A:91:0B:CF:AB:C1:16:E9:A7:64:30:3A
Authority key identifier: F0:DF:FB:FB:E2:2B:4E:43:98:6A:F8:60:80:E8:DB:D2:6E:67:35:7B
Certificate issuer:       /CN=F36D104BAF/serialNumber=F0DFFBFBE22B4E43986AF86080E8DBD26E67357B
Certificate serial:       04BF
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/8N_7--IrTkOYavhggOjb0m5nNXs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D104B/6977A4BA9BD511ED9F8809CCF1222468/8N_7--IrTkOYavhggOjb0m5nNXs.mft
Manifest number:          04BE
Signing time:             Fri 17 Apr 2026 03:10:58 +0000
Manifest this update:     Fri 17 Apr 2026 03:10:58 +0000
Manifest next update:     Sun 19 Apr 2026 03:10:58 +0000
Files and hashes:         1: 8N_7--IrTkOYavhggOjb0m5nNXs.crl (hash: zu5hb8GeFwf16zSK7pmqFIXbWCQqTYHTeKSFYPg3w+k=)
                          2: 788B31649BD611ED8E8A06CFF1222468.roa (hash: /DoapaGd3eagMu4E2GG71poz4ouCwc0M0wO9yu8zX6c=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D104B/6977A4BA9BD511ED9F8809CCF1222468/8N_7--IrTkOYavhggOjb0m5nNXs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D104B/6977A4BA9BD511ED9F8809CCF1222468/8N_7--IrTkOYavhggOjb0m5nNXs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/8N_7--IrTkOYavhggOjb0m5nNXs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 03:10:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1215 (0x4bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D104BAF, serialNumber=F0DFFBFBE22B4E43986AF86080E8DBD26E67357B
        Validity
            Not Before: Apr 17 03:10:58 2026 GMT
            Not After : Apr 19 03:10:58 2026 GMT
        Subject: CN=69e1a4c2-e812
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d9:b0:e9:6b:f8:3d:ad:d3:fa:5e:ca:30:17:
                    d5:42:54:f2:07:99:e7:76:b4:43:6f:6e:26:ff:cc:
                    0b:60:aa:ae:8b:67:e4:cb:d5:1f:b5:a4:6d:2e:7f:
                    b8:32:15:40:fc:54:08:d6:c5:5a:55:9e:be:72:7a:
                    24:40:0b:f9:ad:f2:7b:b3:b0:f5:d3:ef:2f:d4:4f:
                    12:fc:f6:e5:f4:f4:eb:0f:36:77:8e:fb:56:4b:29:
                    52:4c:b7:d6:2d:0a:1e:d9:03:0e:d8:28:9b:ee:9a:
                    84:8c:c5:32:0b:59:85:79:98:08:e5:78:9a:52:02:
                    0e:a1:8a:97:76:e0:f4:3b:c5:8f:8f:44:2e:ed:c0:
                    9d:7a:6e:05:09:f6:3a:8a:7c:21:7a:d5:59:15:28:
                    8e:72:8d:f4:72:10:d0:82:35:a5:c5:2b:92:13:8f:
                    e9:92:55:57:53:0c:ae:98:f9:6c:fb:c1:d4:3e:32:
                    23:2b:ef:f7:f3:db:c4:eb:2e:4a:ba:83:e4:d3:79:
                    44:05:72:68:39:80:07:23:76:54:67:f0:cb:a9:40:
                    6b:cd:c1:dd:97:7b:b3:a2:5a:6b:ed:50:7d:e1:b7:
                    c0:82:7e:65:77:61:f3:e5:b8:73:3e:30:99:52:ac:
                    1e:c6:e1:26:a5:a2:d2:c6:e5:37:f8:e5:94:bf:16:
                    79:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:BA:1A:99:AF:FD:37:BF:5A:91:0B:CF:AB:C1:16:E9:A7:64:30:3A
            X509v3 Authority Key Identifier:
                keyid:F0:DF:FB:FB:E2:2B:4E:43:98:6A:F8:60:80:E8:DB:D2:6E:67:35:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D104B/6977A4BA9BD511ED9F8809CCF1222468/8N_7--IrTkOYavhggOjb0m5nNXs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/8N_7--IrTkOYavhggOjb0m5nNXs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D104B/6977A4BA9BD511ED9F8809CCF1222468/8N_7--IrTkOYavhggOjb0m5nNXs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:02:40:71:b7:8f:8c:11:ed:69:29:e9:3a:3f:06:08:39:ee:
         ac:4e:2c:94:3d:c8:1c:a5:80:70:11:f5:97:1d:ab:44:1b:fd:
         77:ec:f4:76:77:5d:a9:67:59:4d:43:e6:ff:47:7c:b3:9c:87:
         f2:ab:05:20:7a:75:46:17:73:ff:2b:61:21:9f:f9:ad:fa:81:
         f9:d5:b5:59:9b:74:61:02:68:a8:28:91:10:f0:8a:4f:34:57:
         bb:f8:f9:29:4c:4c:09:2a:06:7a:12:7a:ce:a5:4c:62:52:11:
         67:48:a7:d5:4d:b0:ad:83:0a:83:c2:ea:a7:9a:27:82:51:09:
         cf:48:da:1d:c7:43:8a:ea:29:72:e5:da:05:77:f3:74:8f:02:
         c0:6f:b7:58:e8:c4:cd:a4:7d:20:d0:8a:fb:e9:e8:63:19:9c:
         f7:c4:4a:5d:65:42:c6:d6:3c:3c:d4:a0:65:a4:c1:87:54:37:
         9e:01:e1:4b:8b:4a:61:7a:fe:4a:36:37:fa:de:28:1c:54:16:
         49:06:de:db:56:52:71:43:bd:62:8d:35:52:ce:a2:e6:1a:90:
         cd:17:b7:09:68:f2:ed:fd:f5:26:1e:be:51:9d:83:b5:1f:db:
         a8:42:4c:eb:31:54:dc:81:67:88:dd:34:af:ac:36:d3:8c:c6:
         00:b3:f9:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:43:24 2026 by rpki-client