Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E558E/8AD037A48CEF11F091627E7CDAE4EC9C/9e2RvGqsS_b5N0e41TmTDZwMAis.mft
File:                     9e2RvGqsS_b5N0e41TmTDZwMAis.mft (raw, json)
Hash identifier:          C4H7Uqc4WTmkpq6cPEeG2qpYKtLX37bYoO/+bepSFaQ=
Subject key identifier:   D8:58:50:43:A0:EF:EC:A7:B2:A1:27:2C:2F:10:F2:E5:BE:A0:32:D6
Authority key identifier: F5:ED:91:BC:6A:AC:4B:F6:F9:37:47:B8:D5:39:93:0D:9C:0C:02:2B
Certificate issuer:       /CN=F36E558EAF/serialNumber=F5ED91BC6AAC4BF6F93747B8D539930D9C0C022B
Certificate serial:       E1
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/9e2RvGqsS_b5N0e41TmTDZwMAis.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E558E/8AD037A48CEF11F091627E7CDAE4EC9C/9e2RvGqsS_b5N0e41TmTDZwMAis.mft
Manifest number:          E1
Signing time:             Fri 17 Apr 2026 05:07:21 +0000
Manifest this update:     Fri 17 Apr 2026 05:07:20 +0000
Manifest next update:     Sun 19 Apr 2026 05:07:20 +0000
Files and hashes:         1: 9e2RvGqsS_b5N0e41TmTDZwMAis.crl (hash: BDz7xz1HujKGxbqT9pNvjNt1zIgFjhfL+aaJN3mh0vA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E558E/8AD037A48CEF11F091627E7CDAE4EC9C/9e2RvGqsS_b5N0e41TmTDZwMAis.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E558E/8AD037A48CEF11F091627E7CDAE4EC9C/9e2RvGqsS_b5N0e41TmTDZwMAis.mft
                          rsync://rpki.afrinic.net/repository/afrinic/9e2RvGqsS_b5N0e41TmTDZwMAis.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 225 (0xe1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E558EAF, serialNumber=F5ED91BC6AAC4BF6F93747B8D539930D9C0C022B
        Validity
            Not Before: Apr 17 05:07:20 2026 GMT
            Not After : Apr 19 05:07:20 2026 GMT
        Subject: CN=69e1c009-da95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:42:44:8c:90:f4:69:cc:77:92:d4:fa:82:6f:
                    8c:f0:a3:9b:4e:d9:46:59:dd:d5:35:ad:62:53:1c:
                    a1:97:8f:d7:22:e0:59:5c:89:e9:13:82:24:0a:28:
                    f1:85:d3:ab:52:8d:9f:61:7f:1a:73:7f:6f:1b:fb:
                    43:a2:93:bf:e2:0c:f0:be:f4:d0:f1:7c:b7:d9:21:
                    1e:2a:32:85:c7:d9:b8:ce:d4:9f:0d:ea:58:24:3f:
                    0b:38:29:2d:54:d5:7d:7f:5a:c4:38:97:f5:65:d8:
                    32:1c:34:b3:a2:f9:23:36:68:88:37:27:a5:01:1d:
                    34:bc:6c:1d:cb:77:74:f8:be:68:9a:20:25:5c:af:
                    48:f5:55:65:fe:58:16:4f:97:8f:4e:73:b6:d5:4f:
                    3f:74:f0:3a:27:a7:16:c0:13:3c:3f:7f:71:87:2b:
                    a8:96:82:7f:ef:da:e2:87:56:57:d2:f3:0f:61:b2:
                    12:fb:e3:ac:fc:ac:f8:35:c7:3f:5d:35:ad:69:a2:
                    fd:88:68:89:a1:21:b7:dc:34:53:d2:27:ec:84:b3:
                    61:8f:63:dd:21:75:19:17:f5:4d:c1:71:0c:b4:2d:
                    fa:bd:03:17:fd:e9:de:2b:32:2a:9d:95:f8:a4:d1:
                    48:81:29:99:ff:d5:ae:85:6e:83:35:c3:9a:a8:08:
                    ad:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:58:50:43:A0:EF:EC:A7:B2:A1:27:2C:2F:10:F2:E5:BE:A0:32:D6
            X509v3 Authority Key Identifier:
                keyid:F5:ED:91:BC:6A:AC:4B:F6:F9:37:47:B8:D5:39:93:0D:9C:0C:02:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E558E/8AD037A48CEF11F091627E7CDAE4EC9C/9e2RvGqsS_b5N0e41TmTDZwMAis.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9e2RvGqsS_b5N0e41TmTDZwMAis.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E558E/8AD037A48CEF11F091627E7CDAE4EC9C/9e2RvGqsS_b5N0e41TmTDZwMAis.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:31:eb:cc:72:52:fc:46:cd:79:fd:d6:4a:ae:74:0a:ec:97:
         9e:29:91:e6:2f:cc:e9:de:70:5e:f2:04:83:ff:f5:39:5b:7c:
         25:1b:e8:8b:37:d8:af:e6:86:96:c8:ae:86:c8:29:fd:28:ba:
         8f:99:8e:f3:ac:65:a0:f1:42:9c:4b:e1:c3:6b:20:0c:83:ac:
         34:45:fb:b3:b3:55:2a:09:54:dc:62:cc:90:33:92:c8:d7:a1:
         29:e9:ae:da:ae:2f:d1:d1:ae:5f:3f:ec:de:dd:df:fc:b5:75:
         59:4e:ce:66:88:b1:e4:50:4b:d5:67:91:b9:da:37:73:b5:e1:
         eb:9d:3b:df:04:52:d4:2a:71:c6:5b:80:3f:d0:0a:6e:0c:0e:
         14:8b:e7:7f:e1:35:87:83:2b:ae:2b:c2:1e:26:7e:f3:a1:86:
         ef:eb:71:b9:e8:54:07:95:eb:7e:9f:e5:e7:a0:f0:74:bb:e3:
         cd:10:97:92:31:16:f1:33:d2:b5:73:9f:9e:e5:ee:df:5f:d6:
         f3:79:f9:b6:c8:d6:c9:a3:fd:d9:ef:b4:d1:34:dc:b7:08:bf:
         0f:45:2f:2b:e4:9e:14:a2:03:67:01:ee:12:d8:6b:9f:39:ae:
         d5:79:8a:55:bb:47:30:e3:d3:75:d0:c7:a4:b6:31:81:d3:0a:
         52:94:5f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:14:35 2026 by rpki-client