Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D8DFA/0E9B19BA140A11E5A7F5FC4CF8AEA228/1mi-yvPLFNtiSjQl1mZgm_J7Uu4.mft
File:                     1mi-yvPLFNtiSjQl1mZgm_J7Uu4.mft (raw, json)
Hash identifier:          MnaNCqc9uDsY00YperlCHxQtVkQNaeFZd9lhnq5KbHY=
Subject key identifier:   3E:C8:2A:61:39:38:FA:D9:2B:B3:96:D0:31:75:E6:CA:9D:4A:18:BD
Authority key identifier: D6:68:BE:CA:F3:CB:14:DB:62:4A:34:25:D6:66:60:9B:F2:7B:52:EE
Certificate issuer:       /CN=F36D8DFAAF/serialNumber=D668BECAF3CB14DB624A3425D666609BF27B52EE
Certificate serial:       0FCA
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/1mi-yvPLFNtiSjQl1mZgm_J7Uu4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D8DFA/0E9B19BA140A11E5A7F5FC4CF8AEA228/1mi-yvPLFNtiSjQl1mZgm_J7Uu4.mft
Manifest number:          0FC5
Signing time:             Fri 17 Apr 2026 00:51:37 +0000
Manifest this update:     Fri 17 Apr 2026 00:51:36 +0000
Manifest next update:     Sun 19 Apr 2026 00:51:36 +0000
Files and hashes:         1: 1mi-yvPLFNtiSjQl1mZgm_J7Uu4.crl (hash: 0ARqr1KxVr/82ABIOZmXYatrv8zuadAi6z3JcISHpac=)
                          2: 88EE59C2520511F0838F9DC4DAE4EC9C.roa (hash: FNAcobe0yOGwnLd0ymzGwbW/jHGE2cTudiyiweVPang=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D8DFA/0E9B19BA140A11E5A7F5FC4CF8AEA228/1mi-yvPLFNtiSjQl1mZgm_J7Uu4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D8DFA/0E9B19BA140A11E5A7F5FC4CF8AEA228/1mi-yvPLFNtiSjQl1mZgm_J7Uu4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/1mi-yvPLFNtiSjQl1mZgm_J7Uu4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4042 (0xfca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D8DFAAF, serialNumber=D668BECAF3CB14DB624A3425D666609BF27B52EE
        Validity
            Not Before: Apr 17 00:51:36 2026 GMT
            Not After : Apr 19 00:51:36 2026 GMT
        Subject: CN=69e18419-e96e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:fd:aa:33:f3:ea:08:13:05:db:d9:b2:96:f9:
                    d7:b8:87:7c:15:68:fe:91:4d:3e:8b:72:7d:2f:25:
                    64:a5:fa:e7:2a:83:fa:54:a8:81:cb:84:7a:0c:e1:
                    72:dc:ac:c6:31:5b:d2:af:3b:43:5a:15:54:dd:37:
                    c2:a9:88:6d:0e:43:1c:97:25:08:0c:e7:2b:c1:3d:
                    6a:00:36:c5:3d:1e:9b:a4:de:f5:3f:d2:df:a4:27:
                    0b:21:9c:5e:01:2e:0f:7a:97:05:4f:e6:f8:e6:fb:
                    1b:bc:35:fb:85:9d:30:cc:5f:e6:c5:4d:81:7e:ef:
                    75:06:0b:a5:d5:8b:fb:2b:64:3d:26:81:da:46:48:
                    13:b1:3d:39:a9:a8:04:c9:d3:25:27:b2:3d:68:93:
                    44:11:0e:b4:41:c5:29:59:8f:a3:81:6a:f2:c4:4a:
                    2e:b1:f4:55:16:32:1a:5c:9e:ba:89:ca:99:76:f4:
                    99:3f:82:bc:99:d9:db:dd:14:e6:f0:8b:87:c0:68:
                    81:c4:6a:93:76:65:f3:43:91:c1:01:56:0d:15:f9:
                    e1:10:be:29:89:f4:14:35:ee:d7:bf:33:1d:3e:f4:
                    cc:09:2c:2d:0d:d0:f1:65:68:e1:d2:cc:17:31:60:
                    f6:f4:ad:3c:0d:2c:e7:01:69:29:d7:bb:74:ef:88:
                    89:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:C8:2A:61:39:38:FA:D9:2B:B3:96:D0:31:75:E6:CA:9D:4A:18:BD
            X509v3 Authority Key Identifier:
                keyid:D6:68:BE:CA:F3:CB:14:DB:62:4A:34:25:D6:66:60:9B:F2:7B:52:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8DFA/0E9B19BA140A11E5A7F5FC4CF8AEA228/1mi-yvPLFNtiSjQl1mZgm_J7Uu4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/1mi-yvPLFNtiSjQl1mZgm_J7Uu4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8DFA/0E9B19BA140A11E5A7F5FC4CF8AEA228/1mi-yvPLFNtiSjQl1mZgm_J7Uu4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:4e:cb:ec:22:ae:87:49:d1:e6:93:f7:19:43:a0:74:06:22:
         d3:21:57:7f:b6:6f:27:7c:95:a7:61:ba:27:5d:55:eb:22:82:
         09:62:e2:92:3c:65:cb:a6:93:4c:5b:0b:31:8d:59:73:da:6c:
         fc:c8:e6:1a:ed:f1:2c:46:34:ef:a2:ec:a8:7d:bc:fc:51:9c:
         77:ad:22:0f:10:b1:c7:7c:01:09:33:32:df:c8:a8:8b:51:aa:
         b6:35:ad:5e:3f:c6:a3:17:92:76:af:52:50:cc:65:cf:b5:a4:
         df:19:88:3e:7d:e3:a8:b0:af:ae:ba:d2:ca:d8:e2:f6:5b:40:
         97:6f:37:ec:37:40:3a:04:10:69:58:e6:cc:6e:58:11:d2:e8:
         8b:7a:66:8a:f2:38:e9:94:da:81:b1:bf:ef:0d:ad:82:11:cd:
         28:f7:a2:0d:1e:4a:16:21:10:eb:24:1a:94:f7:f8:ae:1d:c4:
         62:77:99:4f:33:32:35:b8:46:37:22:c0:d2:52:53:ff:60:d5:
         81:2e:d2:c5:d1:3e:0c:fc:0a:93:ca:5b:94:ce:53:da:21:8d:
         67:0c:a1:f4:bd:49:8a:d2:69:b9:87:b5:f2:22:0e:3d:ce:d1:
         d9:30:8b:fb:85:b9:a2:ba:fe:ff:6b:3b:14:a8:70:73:36:ff:
         e9:f4:f1:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:45:53 2026 by rpki-client