Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E75A9/55520340C40611EE8F4A288D775412E6/tcdCRu5ePI-pmYQd3EQ2U_hUun0.mft
File:                     tcdCRu5ePI-pmYQd3EQ2U_hUun0.mft (raw, json)
Hash identifier:          Jn7XbCMeF3NIi/zJCxDMPyRuANgSUMcMhPZJUNq6sMs=
Subject key identifier:   6C:26:AC:7D:2D:7F:09:F2:14:A6:B9:D5:AD:FF:A7:17:A6:44:EE:8B
Authority key identifier: B5:C7:42:46:EE:5E:3C:8F:A9:99:84:1D:DC:44:36:53:F8:54:BA:7D
Certificate issuer:       /CN=F36E75A9AF/serialNumber=B5C74246EE5E3C8FA999841DDC443653F854BA7D
Certificate serial:       0338
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/tcdCRu5ePI-pmYQd3EQ2U_hUun0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E75A9/55520340C40611EE8F4A288D775412E6/tcdCRu5ePI-pmYQd3EQ2U_hUun0.mft
Manifest number:          0337
Signing time:             Fri 17 Apr 2026 03:58:27 +0000
Manifest this update:     Fri 17 Apr 2026 03:58:26 +0000
Manifest next update:     Sun 19 Apr 2026 03:58:26 +0000
Files and hashes:         1: tcdCRu5ePI-pmYQd3EQ2U_hUun0.crl (hash: q4JmGTp/S6edzAhIZtnEjBcxLo4UdXUqZ1BXroJ7N80=)
                          2: A95C3E7CC46711EE9DAAFFA7775412E6.roa (hash: 5YGMUo45vZOEsVw7rxMl98qm2QPWhnBn5cPNqxBly50=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E75A9/55520340C40611EE8F4A288D775412E6/tcdCRu5ePI-pmYQd3EQ2U_hUun0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E75A9/55520340C40611EE8F4A288D775412E6/tcdCRu5ePI-pmYQd3EQ2U_hUun0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/tcdCRu5ePI-pmYQd3EQ2U_hUun0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 824 (0x338)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E75A9AF, serialNumber=B5C74246EE5E3C8FA999841DDC443653F854BA7D
        Validity
            Not Before: Apr 17 03:58:26 2026 GMT
            Not After : Apr 19 03:58:26 2026 GMT
        Subject: CN=69e1afe3-0227
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:fc:2e:52:60:6b:de:9f:ed:e5:96:b5:b4:75:
                    4c:13:d3:db:18:a5:9a:50:35:20:b6:a4:3b:9f:3f:
                    1d:a4:4e:34:70:f1:e3:d3:bc:ff:93:c1:f1:e0:47:
                    ed:dc:5f:0d:b4:75:7b:58:79:9a:d4:39:40:8b:fa:
                    6f:63:4e:d8:77:56:a5:86:ce:19:5e:68:d4:58:64:
                    e2:9a:71:b3:91:41:b2:8b:5d:92:e9:6c:81:34:f2:
                    06:c0:d6:3f:fe:64:a8:47:e2:27:17:2b:66:a2:83:
                    69:04:fb:13:de:03:81:48:fc:49:5f:c7:4d:9e:e0:
                    51:ce:44:0f:24:e6:f2:aa:d4:38:cc:b9:0e:38:cd:
                    61:9f:9c:33:e0:fb:a7:3e:95:16:d4:d9:92:5d:af:
                    6a:1a:80:4a:60:c0:09:92:fb:9e:28:7f:ea:79:4c:
                    98:2c:e4:e5:7c:5c:72:9a:72:38:85:a4:97:7f:8e:
                    fd:ae:3f:fa:7a:55:42:97:5a:7e:9d:e8:cd:01:8c:
                    2d:0f:8e:22:f6:15:07:d3:33:43:04:74:21:41:10:
                    e1:a7:45:66:f5:e1:66:8d:f2:27:ce:69:53:8d:cb:
                    47:34:b7:90:17:5a:32:16:a6:ef:6d:aa:e3:27:1e:
                    21:3d:c3:2b:fc:c1:ad:53:5d:d8:50:11:9a:05:39:
                    20:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:26:AC:7D:2D:7F:09:F2:14:A6:B9:D5:AD:FF:A7:17:A6:44:EE:8B
            X509v3 Authority Key Identifier:
                keyid:B5:C7:42:46:EE:5E:3C:8F:A9:99:84:1D:DC:44:36:53:F8:54:BA:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E75A9/55520340C40611EE8F4A288D775412E6/tcdCRu5ePI-pmYQd3EQ2U_hUun0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/tcdCRu5ePI-pmYQd3EQ2U_hUun0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E75A9/55520340C40611EE8F4A288D775412E6/tcdCRu5ePI-pmYQd3EQ2U_hUun0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:dc:65:21:5a:de:40:f3:eb:41:ee:e0:5a:e6:7e:dd:46:86:
         fa:42:2f:25:bf:68:d6:1f:91:18:97:b4:33:e2:ad:36:3c:07:
         d5:cc:d6:73:0a:45:9d:6f:c0:46:28:1d:71:05:2f:60:1f:6c:
         09:a0:cf:37:b3:ef:ea:a7:2b:ed:9a:95:98:61:6a:8b:f0:80:
         30:a5:a7:f8:08:7e:7d:bb:f9:3f:b2:a6:b5:0a:30:7f:f7:73:
         f2:1f:2d:0c:8e:5c:50:76:f6:61:07:e8:cc:76:9a:f2:39:a4:
         f1:ae:a7:bc:df:2c:27:64:04:e0:d8:c5:84:61:39:2d:3d:f0:
         e2:7e:46:02:b3:68:fb:ec:5a:38:95:77:02:03:1f:f2:5c:1d:
         c9:61:c8:ba:3f:ff:2a:88:85:51:94:e9:6a:97:dc:dd:eb:1e:
         90:b6:9d:7b:50:83:28:fe:65:ea:ad:78:2a:c1:66:c1:e0:63:
         b6:b6:38:fd:5b:4c:79:ab:8c:3b:cd:da:12:51:2c:0d:09:01:
         ef:3d:3b:b1:65:1c:96:b1:e2:28:ae:2f:78:3a:a9:28:b3:62:
         26:d4:b7:41:ab:0f:50:c1:1c:23:b0:5c:40:10:19:1a:7c:2e:
         d2:74:ff:4b:43:1d:64:9a:1a:73:3c:75:87:f5:90:5f:63:88:
         a4:86:9c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:20:38 2026 by rpki-client