Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E1EE5/C3A862D6934111ED944CED8CF1222468/1_pzTirYg6eruOt2mcdBlN3zfqM.mft
File:                     1_pzTirYg6eruOt2mcdBlN3zfqM.mft (raw, json)
Hash identifier:          Ppvfa+DeS3ByghcsQ3zqJ9Os7GZEokhfwJSMDiuD0E8=
Subject key identifier:   9B:07:93:6F:EE:1C:90:4A:F8:6A:E8:C1:3C:4B:A7:42:21:4D:B8:7F
Authority key identifier: D7:FA:73:4E:2A:D8:83:A7:AB:B8:EB:76:99:C7:41:94:DD:F3:7E:A3
Certificate issuer:       /CN=F36E1EE5AF/serialNumber=D7FA734E2AD883A7ABB8EB7699C74194DDF37EA3
Certificate serial:       04CC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/1_pzTirYg6eruOt2mcdBlN3zfqM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E1EE5/C3A862D6934111ED944CED8CF1222468/1_pzTirYg6eruOt2mcdBlN3zfqM.mft
Manifest number:          04CB
Signing time:             Fri 17 Apr 2026 03:08:46 +0000
Manifest this update:     Fri 17 Apr 2026 03:08:46 +0000
Manifest next update:     Sun 19 Apr 2026 03:08:46 +0000
Files and hashes:         1: 1_pzTirYg6eruOt2mcdBlN3zfqM.crl (hash: Fomh3aUE/Ys1hvJ/qWsYv0J1QbVv7RXIdmw5tu/ddhQ=)
                          2: 46F2D560934511ED92A7B996F1222468.roa (hash: nGUyvzk/a5+GFzWKOpMkRUu0fAOKcVAtnLG++SWQPm0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E1EE5/C3A862D6934111ED944CED8CF1222468/1_pzTirYg6eruOt2mcdBlN3zfqM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E1EE5/C3A862D6934111ED944CED8CF1222468/1_pzTirYg6eruOt2mcdBlN3zfqM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/1_pzTirYg6eruOt2mcdBlN3zfqM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1228 (0x4cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E1EE5AF, serialNumber=D7FA734E2AD883A7ABB8EB7699C74194DDF37EA3
        Validity
            Not Before: Apr 17 03:08:46 2026 GMT
            Not After : Apr 19 03:08:46 2026 GMT
        Subject: CN=69e1a43e-3e2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:72:c5:6a:1b:6a:98:f3:b2:98:d5:97:7c:19:
                    ba:a1:b5:7a:9f:59:8d:13:41:66:1d:49:20:55:9f:
                    21:92:97:f8:07:6d:64:e8:36:c7:5d:a2:9a:dd:7a:
                    c2:64:c9:22:c8:ca:e2:17:7c:36:67:1b:ac:03:2c:
                    b1:8b:d2:fb:bd:37:c1:8e:b7:17:a6:fe:ad:07:19:
                    74:4a:b0:2b:f1:91:97:e7:7a:d0:5b:78:85:67:61:
                    dc:99:c1:33:eb:91:bc:e1:93:96:0a:28:30:0d:98:
                    f3:a2:f1:fa:4c:75:d9:a5:36:ae:e9:96:5b:df:39:
                    8c:60:e8:52:18:7f:e5:f3:68:24:70:b8:e5:06:f8:
                    df:15:36:68:8f:1a:bd:34:84:b3:8f:6a:f1:61:25:
                    af:eb:b6:e2:7c:97:69:4d:ea:bf:6e:6c:a6:69:7b:
                    8e:7e:74:8a:64:df:bb:f6:5a:30:c4:a0:06:e9:5f:
                    1d:f2:40:79:77:79:57:fb:b9:e3:bd:de:f6:fb:6f:
                    c1:cc:78:59:2f:fa:e8:1f:a7:20:2c:e4:f7:7c:cc:
                    30:fe:5b:81:c5:9f:73:28:3c:4a:5b:0f:af:70:6b:
                    6a:32:79:4c:80:4a:98:69:03:ca:0e:15:73:ff:5d:
                    cc:10:8f:2f:b3:9f:dc:8e:ab:9a:32:10:75:83:6a:
                    cd:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:07:93:6F:EE:1C:90:4A:F8:6A:E8:C1:3C:4B:A7:42:21:4D:B8:7F
            X509v3 Authority Key Identifier:
                keyid:D7:FA:73:4E:2A:D8:83:A7:AB:B8:EB:76:99:C7:41:94:DD:F3:7E:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E1EE5/C3A862D6934111ED944CED8CF1222468/1_pzTirYg6eruOt2mcdBlN3zfqM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/1_pzTirYg6eruOt2mcdBlN3zfqM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E1EE5/C3A862D6934111ED944CED8CF1222468/1_pzTirYg6eruOt2mcdBlN3zfqM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:2c:e2:71:38:1a:5e:1a:02:ba:fd:ee:3e:8f:ad:65:a9:06:
         c6:d9:c7:66:f9:8e:19:83:de:02:6e:72:d2:5d:3e:6b:83:9d:
         e0:9a:bc:8e:a4:27:53:f3:1b:56:2b:3a:c9:da:c4:43:e6:d2:
         a3:90:38:5b:ef:e7:e6:70:7f:9c:80:c7:2e:5f:b4:8a:72:7a:
         81:e6:c7:64:9d:5b:f2:b3:05:f4:7b:a5:f9:7a:04:61:b5:db:
         0c:8f:73:4e:5e:ac:1f:b2:eb:f4:f0:5b:db:92:a3:81:c6:a6:
         b7:56:bc:34:9b:38:c5:48:a2:f2:5c:ec:6c:33:e6:99:03:55:
         5e:8e:d5:97:36:30:1b:c3:3f:95:13:16:f0:49:b1:89:6f:ea:
         ae:fd:68:de:72:d0:39:43:3f:ec:4a:de:43:04:c9:60:d0:f2:
         eb:a1:22:44:dd:0b:96:10:5d:3d:a3:60:c0:32:a0:ed:ab:54:
         8a:f6:52:22:38:09:fc:f5:b0:32:34:65:d5:27:6d:c1:0b:b7:
         e9:e6:65:84:1f:0d:94:01:6b:64:79:a2:73:06:3c:48:1e:1e:
         0b:8c:0c:fd:63:1c:0f:ed:8b:66:0c:73:cc:52:24:85:14:72:
         f1:b2:62:4f:02:fa:46:03:77:62:12:3e:60:99:0f:b0:18:2b:
         7f:2c:02:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:42:44 2026 by rpki-client