Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E8DA8/4C970B5E495C11ED9E7604E8F1222468/Po64WOYVOSGtsL9fC8lbTQbHw-8.mft
File:                     Po64WOYVOSGtsL9fC8lbTQbHw-8.mft (raw, json)
Hash identifier:          GeaUczkFeErgbQ6q259KtS1e8J/uruLLAY6XqJHGFDM=
Subject key identifier:   B1:AB:05:69:17:F9:77:D8:DB:20:94:01:B5:54:68:85:ED:C8:FB:77
Authority key identifier: 3E:8E:B8:58:E6:15:39:21:AD:B0:BF:5F:0B:C9:5B:4D:06:C7:C3:EF
Certificate issuer:       /CN=F36E8DA8AF/serialNumber=3E8EB858E6153921ADB0BF5F0BC95B4D06C7C3EF
Certificate serial:       0531
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Po64WOYVOSGtsL9fC8lbTQbHw-8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E8DA8/4C970B5E495C11ED9E7604E8F1222468/Po64WOYVOSGtsL9fC8lbTQbHw-8.mft
Manifest number:          052F
Signing time:             Fri 17 Apr 2026 03:00:56 +0000
Manifest this update:     Fri 17 Apr 2026 03:00:55 +0000
Manifest next update:     Sun 19 Apr 2026 03:00:55 +0000
Files and hashes:         1: Po64WOYVOSGtsL9fC8lbTQbHw-8.crl (hash: d8RZtDY5T7VcT4P9r76TlyJ29jPowSYzeaxNseyzaZM=)
                          2: CC3720D6188111F197F8BFABDAE4EC9C.roa (hash: +QgPl8TD1nfFzmVUj7KB6S1al9ZfPHgMAGHnCFB4BHU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E8DA8/4C970B5E495C11ED9E7604E8F1222468/Po64WOYVOSGtsL9fC8lbTQbHw-8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E8DA8/4C970B5E495C11ED9E7604E8F1222468/Po64WOYVOSGtsL9fC8lbTQbHw-8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Po64WOYVOSGtsL9fC8lbTQbHw-8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1329 (0x531)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E8DA8AF, serialNumber=3E8EB858E6153921ADB0BF5F0BC95B4D06C7C3EF
        Validity
            Not Before: Apr 17 03:00:55 2026 GMT
            Not After : Apr 19 03:00:55 2026 GMT
        Subject: CN=69e1a268-fe27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e8:d7:bd:4c:15:a8:7b:06:45:98:32:56:5d:
                    a4:4c:a9:7b:2d:39:b7:05:98:a3:71:c2:f3:d7:26:
                    e9:43:fb:c5:e9:e2:1e:b0:35:1f:73:3a:ae:08:a7:
                    11:10:51:d4:eb:f1:c7:3d:c0:4b:e3:fd:46:2d:cd:
                    b4:6f:32:c1:4d:77:db:f1:46:d1:44:58:24:6d:44:
                    d2:1a:68:b1:96:f7:0d:c9:ba:79:3b:0f:b3:b0:80:
                    38:5d:bb:6b:a2:95:bd:f3:fc:29:38:2d:33:14:2b:
                    26:0a:7e:12:d6:31:9a:50:cf:00:56:ea:02:52:b7:
                    3b:d0:5c:c7:cf:bf:02:47:91:8e:9b:0a:e0:f9:2d:
                    f4:de:de:09:6c:66:8a:31:d0:ea:61:f9:f6:6d:8c:
                    8f:13:b7:56:13:1a:15:af:cf:6b:55:29:fa:92:0b:
                    64:d4:da:ae:33:6e:dc:90:60:04:13:da:0f:d0:5b:
                    41:f1:e0:0a:b7:b7:74:17:13:7a:4c:3f:fc:ec:07:
                    7c:31:1e:6b:d9:8c:00:69:b5:85:8e:c8:79:e8:4e:
                    fe:48:4c:cb:3d:40:fe:72:ab:27:f3:41:f6:9b:b1:
                    07:ef:a0:78:d8:74:54:01:08:26:11:85:97:e0:f9:
                    d3:78:d1:b6:14:e5:1a:13:fc:af:a7:56:dc:04:fb:
                    69:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:AB:05:69:17:F9:77:D8:DB:20:94:01:B5:54:68:85:ED:C8:FB:77
            X509v3 Authority Key Identifier:
                keyid:3E:8E:B8:58:E6:15:39:21:AD:B0:BF:5F:0B:C9:5B:4D:06:C7:C3:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E8DA8/4C970B5E495C11ED9E7604E8F1222468/Po64WOYVOSGtsL9fC8lbTQbHw-8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Po64WOYVOSGtsL9fC8lbTQbHw-8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E8DA8/4C970B5E495C11ED9E7604E8F1222468/Po64WOYVOSGtsL9fC8lbTQbHw-8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:40:50:e0:e3:31:3c:e7:c7:c7:b2:da:7f:df:54:d9:0b:a5:
         42:d2:d9:73:2f:05:d4:7b:f6:fb:86:00:43:dd:5b:54:fd:7c:
         29:e6:da:f5:70:36:ee:b0:b9:ce:ba:39:2c:a5:3b:98:71:57:
         98:7b:85:60:45:b7:61:a6:c8:d6:96:68:0f:dd:6f:2d:34:dc:
         a2:15:bb:b2:b4:6d:ce:98:f8:84:e7:68:f8:fc:05:7e:81:d6:
         53:77:ee:48:87:6f:94:a8:54:ae:9c:e4:e9:52:55:7a:75:8d:
         ab:a4:82:a9:de:33:0f:cc:0e:9a:fe:de:06:57:60:ea:49:8b:
         2d:34:47:92:9b:15:b0:c9:1e:63:80:fc:58:f5:b3:f9:ec:36:
         47:4c:11:d0:61:45:64:20:ee:55:a6:a8:f7:cd:85:7f:82:ac:
         80:1f:89:ae:c9:4d:2a:3b:99:67:5a:ba:4e:74:07:de:f9:16:
         87:08:58:85:b6:4b:9b:47:3f:c7:7d:de:d9:08:02:fa:78:f0:
         90:97:2d:b2:37:8d:c0:cd:44:a2:6d:d6:f4:19:4c:21:ca:67:
         05:3d:70:11:df:2b:3f:cd:9f:18:7b:4e:2a:e7:ab:6c:45:02:
         a7:b3:75:c7:ff:c1:62:60:26:89:4e:5c:cb:ef:74:62:75:fb:
         d2:45:f4:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:34:12 2026 by rpki-client