Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E6B77/3CFFA38042CB11EF8B9A37AE762E951A/9d_2SjnYAHBE12ccvKqh4WFXRaA.mft
File:                     9d_2SjnYAHBE12ccvKqh4WFXRaA.mft (raw, json)
Hash identifier:          vANRWRMPq6te2bfvvNNRAhLyXHIwyq4LGHPLBqRUfms=
Subject key identifier:   C0:01:DA:24:3A:26:AB:80:8C:E9:26:1C:98:68:61:6D:27:54:25:96
Authority key identifier: F5:DF:F6:4A:39:D8:00:70:44:D7:67:1C:BC:AA:A1:E1:61:57:45:A0
Certificate issuer:       /CN=F36E6B77AF/serialNumber=F5DFF64A39D8007044D7671CBCAAA1E1615745A0
Certificate serial:       029E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/9d_2SjnYAHBE12ccvKqh4WFXRaA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E6B77/3CFFA38042CB11EF8B9A37AE762E951A/9d_2SjnYAHBE12ccvKqh4WFXRaA.mft
Manifest number:          0299
Signing time:             Fri 17 Apr 2026 04:18:08 +0000
Manifest this update:     Fri 17 Apr 2026 04:18:07 +0000
Manifest next update:     Sun 19 Apr 2026 04:18:07 +0000
Files and hashes:         1: 9d_2SjnYAHBE12ccvKqh4WFXRaA.crl (hash: r15+vDBsPNU12GrM9i+aQiPOOf1Z5svaSjYr0kARSWM=)
                          2: 5B4C788042CC11EFA79C21B7762E951A.roa (hash: 8MsvdpCURh5U1VeikZh21FkxiH+o3yXC4kGGOZX4kQo=)
                          3: 8AE0C950CC5211F08901D0F0DAE4EC9C.roa (hash: p6vdnsJDN6upI5W/Ww4HUUN2q0hJo9P4coEtR26YSjc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E6B77/3CFFA38042CB11EF8B9A37AE762E951A/9d_2SjnYAHBE12ccvKqh4WFXRaA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E6B77/3CFFA38042CB11EF8B9A37AE762E951A/9d_2SjnYAHBE12ccvKqh4WFXRaA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/9d_2SjnYAHBE12ccvKqh4WFXRaA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 04:18:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 670 (0x29e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E6B77AF, serialNumber=F5DFF64A39D8007044D7671CBCAAA1E1615745A0
        Validity
            Not Before: Apr 17 04:18:07 2026 GMT
            Not After : Apr 19 04:18:07 2026 GMT
        Subject: CN=69e1b480-5f71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:00:10:48:cc:86:97:7d:b5:22:8a:f5:7d:04:
                    3e:fa:01:99:02:1f:3b:8e:ad:08:56:68:57:24:16:
                    fc:a6:50:df:c0:d2:8b:57:11:06:f7:cd:38:4a:7f:
                    0d:a3:d9:17:50:32:83:7c:9e:76:f3:e4:9f:67:d1:
                    d3:a2:5d:cc:bd:eb:78:c3:af:c4:be:5c:57:13:b4:
                    87:05:d1:c8:a3:b1:39:d4:23:00:7a:99:cb:4e:83:
                    5b:0f:f6:9b:78:32:d7:fb:58:78:da:84:66:db:3c:
                    a6:ca:35:34:cf:bf:24:4f:e7:79:d7:f4:5c:30:c8:
                    50:5c:4f:e1:77:d9:37:57:40:59:8d:b5:74:00:46:
                    3b:8e:54:f8:ba:55:0f:78:02:b4:c7:59:87:b0:9f:
                    37:c4:85:35:2f:7b:21:f3:9e:da:b6:4c:57:11:5a:
                    df:af:d0:17:0c:62:c5:63:2c:15:c0:ba:da:b6:4f:
                    79:8f:ff:0a:14:e7:f2:dc:d6:5a:9d:16:2f:54:f8:
                    a1:77:82:26:4f:55:fa:d4:c8:57:9a:51:76:ff:6b:
                    71:c2:75:77:e5:ab:ed:71:0b:42:31:4a:1e:e9:a6:
                    da:fb:ec:01:f9:1e:1f:33:db:73:e5:36:70:c5:09:
                    52:71:21:9d:27:58:3e:54:b4:a3:5c:38:9a:e0:be:
                    e9:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:01:DA:24:3A:26:AB:80:8C:E9:26:1C:98:68:61:6D:27:54:25:96
            X509v3 Authority Key Identifier:
                keyid:F5:DF:F6:4A:39:D8:00:70:44:D7:67:1C:BC:AA:A1:E1:61:57:45:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E6B77/3CFFA38042CB11EF8B9A37AE762E951A/9d_2SjnYAHBE12ccvKqh4WFXRaA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9d_2SjnYAHBE12ccvKqh4WFXRaA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E6B77/3CFFA38042CB11EF8B9A37AE762E951A/9d_2SjnYAHBE12ccvKqh4WFXRaA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:ca:b9:7b:89:dc:b9:4c:cf:32:0d:7f:8c:f5:02:64:3e:64:
         fc:49:b9:2c:67:9d:2f:87:8e:91:20:a8:fe:1c:e4:2f:08:65:
         a9:f4:e3:94:19:76:0a:2c:46:08:fb:f5:41:48:c8:4d:1b:5f:
         e0:db:e3:b5:7c:da:d6:6b:20:58:bf:3a:13:5b:89:4a:89:cc:
         38:6d:5f:81:07:a8:64:5a:12:43:f2:f7:3d:c7:d8:e4:4b:1f:
         ea:96:1f:66:00:fa:e4:ac:cb:12:29:19:8c:b8:95:da:2d:15:
         09:e2:fc:ce:09:23:03:da:29:2c:34:8d:98:b1:3d:35:25:84:
         c7:de:e9:67:e1:0f:63:58:7b:43:46:20:23:da:ab:dc:44:67:
         64:56:0e:af:1c:f0:a3:88:5b:5e:8f:b0:2f:41:6b:29:92:33:
         1f:ab:2d:6b:6e:4e:9e:75:35:75:61:88:3f:ba:7b:68:92:67:
         76:87:9c:9b:e3:16:ef:4a:2d:ac:3f:34:80:58:be:c7:08:f6:
         15:27:a0:51:db:49:bf:17:d8:74:c4:50:fe:cd:d6:cd:2a:42:
         2a:9a:8e:91:16:9c:d4:3d:cc:40:8a:29:3f:63:3f:fa:85:29:
         d7:bc:8c:f0:e4:ad:80:f7:f9:bc:91:25:65:da:5e:14:32:14:
         53:29:a3:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:05:19 2026 by rpki-client