Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D4684/8E89028ACDA511EB92DBCF3CF8AEA228/udc5FHcPXzji8Xi1dPaVYhlOiwQ.mft
File:                     udc5FHcPXzji8Xi1dPaVYhlOiwQ.mft (raw, json)
Hash identifier:          vcAsuKzWoelJ/2+vze5/GJDsUn528S6mDJvZp8JFlXs=
Subject key identifier:   38:BA:65:79:31:C5:6C:E7:9A:93:E4:18:75:F0:3A:96:08:C4:28:88
Authority key identifier: B9:D7:39:14:77:0F:5F:38:E2:F1:78:B5:74:F6:95:62:19:4E:8B:04
Certificate issuer:       /CN=F36D4684AF/serialNumber=B9D73914770F5F38E2F178B574F69562194E8B04
Certificate serial:       0721
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/udc5FHcPXzji8Xi1dPaVYhlOiwQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D4684/8E89028ACDA511EB92DBCF3CF8AEA228/udc5FHcPXzji8Xi1dPaVYhlOiwQ.mft
Manifest number:          071E
Signing time:             Fri 17 Apr 2026 02:11:54 +0000
Manifest this update:     Fri 17 Apr 2026 02:11:53 +0000
Manifest next update:     Sun 19 Apr 2026 02:11:53 +0000
Files and hashes:         1: udc5FHcPXzji8Xi1dPaVYhlOiwQ.crl (hash: GsEyagPOlF6OLPJQJNtYN0qhTAUhGM8isKygKvEQpI4=)
                          2: 7E8D503E195411F1A25C2AB8DAE4EC9C.roa (hash: LndX4htGhh1sJgeBAywfbXKEn72T5/YVdtcKjiz/a2g=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D4684/8E89028ACDA511EB92DBCF3CF8AEA228/udc5FHcPXzji8Xi1dPaVYhlOiwQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D4684/8E89028ACDA511EB92DBCF3CF8AEA228/udc5FHcPXzji8Xi1dPaVYhlOiwQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/udc5FHcPXzji8Xi1dPaVYhlOiwQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1825 (0x721)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D4684AF, serialNumber=B9D73914770F5F38E2F178B574F69562194E8B04
        Validity
            Not Before: Apr 17 02:11:53 2026 GMT
            Not After : Apr 19 02:11:53 2026 GMT
        Subject: CN=69e196ea-9eb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:cb:cb:22:22:67:69:fa:ad:43:5d:4e:50:d0:
                    e2:5d:1c:4a:ee:1d:05:fa:c9:f3:5c:05:9d:dc:4e:
                    ac:5e:9e:5f:61:be:8d:c4:04:e3:c0:54:8e:1a:0c:
                    32:88:9d:05:be:4f:61:a4:a5:c9:a1:2b:e8:6f:11:
                    98:b7:fa:e8:46:18:eb:c5:f6:f5:80:75:5d:8d:8b:
                    10:f6:db:4b:7b:96:78:71:fd:9d:8f:8f:a8:59:47:
                    a5:9f:47:57:c4:64:ca:c2:53:8e:4a:f2:42:d7:f2:
                    0a:f3:16:a8:88:ca:98:d7:9e:a1:ea:81:36:16:81:
                    ff:0a:e1:43:86:1e:e0:a7:5a:f8:62:7c:4d:d4:f3:
                    c3:ec:29:ce:65:01:86:d7:55:82:bc:7e:8c:c4:ba:
                    04:3d:14:cb:44:07:bb:92:5a:cc:5d:e8:74:e3:dc:
                    f8:06:ca:78:28:98:bd:17:a4:6d:71:5a:af:8f:c4:
                    de:3a:90:2a:4c:a5:ef:00:d4:76:f2:a5:00:aa:89:
                    d8:15:46:c7:69:7d:0a:dc:5e:16:3f:1b:b1:b9:25:
                    2c:d0:3b:1d:21:b1:50:b6:3d:28:60:67:96:92:5e:
                    10:fa:7c:47:f1:05:fd:b1:83:b2:5f:c6:5b:00:60:
                    12:a3:03:7f:b4:d8:55:63:7b:d7:d2:3e:ef:7b:82:
                    de:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:BA:65:79:31:C5:6C:E7:9A:93:E4:18:75:F0:3A:96:08:C4:28:88
            X509v3 Authority Key Identifier:
                keyid:B9:D7:39:14:77:0F:5F:38:E2:F1:78:B5:74:F6:95:62:19:4E:8B:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D4684/8E89028ACDA511EB92DBCF3CF8AEA228/udc5FHcPXzji8Xi1dPaVYhlOiwQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/udc5FHcPXzji8Xi1dPaVYhlOiwQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D4684/8E89028ACDA511EB92DBCF3CF8AEA228/udc5FHcPXzji8Xi1dPaVYhlOiwQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:35:c2:9c:1d:df:80:fc:b2:1e:e1:39:22:3f:38:3e:b0:84:
         d6:7b:66:51:ed:7c:b0:f5:1d:6c:8a:42:91:00:e5:7f:fc:57:
         37:4e:9d:2d:37:b8:14:82:1e:c4:9c:54:18:82:e8:77:42:90:
         d6:4e:06:f7:af:b8:e6:5d:05:db:4a:a0:1e:8e:61:6d:bf:ef:
         cd:d5:2d:11:08:4f:94:f0:a8:71:fb:f1:cc:2d:e1:59:53:1c:
         c3:94:c1:4e:fc:fb:c6:c5:74:4e:82:a3:fb:9f:1c:81:b5:d7:
         cd:a5:43:13:ad:92:1a:2a:87:d5:3b:c8:da:5c:c6:5d:b4:b1:
         c5:de:08:b9:84:78:21:a5:b6:66:6b:78:1e:80:28:86:3c:ff:
         f5:1c:f7:73:6d:4f:af:ad:12:6f:c2:cc:49:a9:c3:c2:40:94:
         47:ca:15:97:5e:c5:ee:36:ff:83:33:c9:68:7f:dd:40:15:5a:
         c0:bb:21:dd:27:c7:07:31:b2:45:ce:9c:b3:f5:8e:27:86:0d:
         a9:ce:31:26:c8:c9:3c:8a:22:03:e5:09:95:37:b9:80:4d:d1:
         1b:58:07:76:fa:e8:0f:3d:eb:5a:f3:d5:d1:40:e5:98:ba:f4:
         6f:e1:47:2f:22:11:a0:c9:e4:63:8d:ad:78:91:ce:57:92:45:
         74:15:02:97
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICByEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RDQ2ODRBRjExMC8GA1UEBRMoQjlENzM5MTQ3NzBGNUYzOEUyRjE3OEI1NzRGNjk1
NjIxOTRFOEIwNDAeFw0yNjA0MTcwMjExNTNaFw0yNjA0MTkwMjExNTNaMBgxFjAU
BgNVBAMTDTY5ZTE5NmVhLTllYjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCwy8siImdp+q1DXU5Q0OJdHEruHQX6yfNcBZ3cTqxenl9hvo3EBOPAVI4a
DDKInQW+T2GkpcmhK+hvEZi3+uhGGOvF9vWAdV2NixD220t7lnhx/Z2Pj6hZR6Wf
R1fEZMrCU45K8kLX8grzFqiIypjXnqHqgTYWgf8K4UOGHuCnWvhifE3U88PsKc5l
AYbXVYK8fozEugQ9FMtEB7uSWsxd6HTj3PgGyngomL0XpG1xWq+PxN46kCpMpe8A
1HbypQCqidgVRsdpfQrcXhY/G7G5JSzQOx0hsVC2PShgZ5aSXhD6fEfxBf2xg7Jf
xlsAYBKjA3+02FVje9fSPu97gt5LAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUOLpl
eTHFbOeak+QYdfA6lgjEKIgwHwYDVR0jBBgwFoAUudc5FHcPXzji8Xi1dPaVYhlO
iwQwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkQ0Njg0LzhFODkwMjhBQ0RBNTExRUI5MkRCQ0YzQ0Y4QUVBMjI4L3VkYzVG
SGNQWHpqaThYaTFkUGFWWWhsT2l3US5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3VkYzVGSGNQWHpqaThYaTFkUGFWWWhsT2l3US5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RDQ2ODQvOEU4OTAyOEFDREE1MTFFQjkyREJDRjNDRjhB
RUEyMjgvdWRjNUZIY1BYemppOFhpMWRQYVZZaGxPaXdRLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCUNcKcHd+A/LIe4TkiPzg+sITWe2ZR
7Xyw9R1sikKRAOV//Fc3Tp0tN7gUgh7EnFQYguh3QpDWTgb3r7jmXQXbSqAejmFt
v+/N1S0RCE+U8Khx+/HMLeFZUxzDlMFO/PvGxXROgqP7nxyBtdfNpUMTrZIaKofV
O8jaXMZdtLHF3gi5hHghpbZma3gegCiGPP/1HPdzbU+vrRJvwsxJqcPCQJRHyhWX
XsXuNv+DM8lof91AFVrAuyHdJ8cHMbJFzpyz9Y4nhg2pzjEmyMk8iiID5QmVN7mA
TdEbWAd2+ugPPeta89XRQOWYuvRv4UcvIhGgyeRjja14kc5XkkV0FQKX
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:37:22 2026 by rpki-client