Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EB6AE/381289B283DC11EA96D3CC4EF8AEA228/NzwYJ-JwTD_cFqh4mA-tyINfpII.mft
File:                     NzwYJ-JwTD_cFqh4mA-tyINfpII.mft (raw, json)
Hash identifier:          ejKWXbdrjYbV2fJ5nxfg8ttrirOUWx8T/T0sZD0a3UM=
Subject key identifier:   6C:A9:8C:70:F3:E5:C3:6D:82:98:B9:B0:E7:EF:CD:AE:3A:2C:9F:03
Authority key identifier: 37:3C:18:27:E2:70:4C:3F:DC:16:A8:78:98:0F:AD:C8:83:5F:A4:82
Certificate issuer:       /CN=F36EB6AEAF/serialNumber=373C1827E2704C3FDC16A878980FADC8835FA482
Certificate serial:       08C4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/NzwYJ-JwTD_cFqh4mA-tyINfpII.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EB6AE/381289B283DC11EA96D3CC4EF8AEA228/NzwYJ-JwTD_cFqh4mA-tyINfpII.mft
Manifest number:          08C2
Signing time:             Fri 17 Apr 2026 01:44:57 +0000
Manifest this update:     Fri 17 Apr 2026 01:44:57 +0000
Manifest next update:     Sun 19 Apr 2026 01:44:57 +0000
Files and hashes:         1: NzwYJ-JwTD_cFqh4mA-tyINfpII.crl (hash: jQA/l/bkYo9MRX4p9vS+cDBIQjjRaRvZcg9CFBxmrUk=)
                          2: 194DF7D868FB11EFB7429B90762E951A.roa (hash: NFQt82rMb7NWbYXB4Ts4sK7O+uFyIpzTw3E2kXEqFmc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EB6AE/381289B283DC11EA96D3CC4EF8AEA228/NzwYJ-JwTD_cFqh4mA-tyINfpII.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EB6AE/381289B283DC11EA96D3CC4EF8AEA228/NzwYJ-JwTD_cFqh4mA-tyINfpII.mft
                          rsync://rpki.afrinic.net/repository/afrinic/NzwYJ-JwTD_cFqh4mA-tyINfpII.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 01:44:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2244 (0x8c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EB6AEAF, serialNumber=373C1827E2704C3FDC16A878980FADC8835FA482
        Validity
            Not Before: Apr 17 01:44:57 2026 GMT
            Not After : Apr 19 01:44:57 2026 GMT
        Subject: CN=69e19099-58a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8b:45:cd:ba:26:4e:1a:4b:33:4e:3f:cc:3f:
                    d3:0f:a9:45:c7:d6:88:88:dc:42:2f:10:fc:ad:4c:
                    cf:87:db:bc:f4:a7:9e:39:bb:60:93:13:be:56:5f:
                    48:35:bb:50:58:99:ce:a5:e2:a9:ed:b1:80:ec:7d:
                    27:c0:35:0a:1c:45:4b:a1:b3:ce:a3:00:ad:a8:7a:
                    20:1e:9d:5a:25:d6:13:a3:0a:7a:e7:98:51:52:36:
                    89:b7:33:79:bf:f5:b2:8e:e2:7c:62:e2:6a:06:bf:
                    e7:d8:15:f7:30:b3:4c:af:58:44:3c:4b:f5:43:e5:
                    69:cb:ba:c0:32:34:22:8b:c6:49:2c:ea:eb:10:8f:
                    50:67:cc:e8:6e:53:c2:d2:14:8b:ea:70:d9:29:5a:
                    21:14:e9:34:ff:37:c8:fa:66:01:fc:49:73:4e:cb:
                    fb:bf:ab:8a:2b:c9:c1:d9:f0:8e:a8:d9:df:e2:60:
                    29:00:a7:78:da:c5:a5:28:5c:fe:b4:04:32:de:72:
                    26:4f:91:37:b6:ea:49:13:2c:e9:90:f9:1b:41:6e:
                    c6:71:50:cb:41:1c:e1:ea:49:37:13:f1:d9:7b:a0:
                    9f:a0:75:88:51:c3:a3:81:60:d3:2c:b7:94:48:55:
                    a5:e1:d9:1b:f7:2a:d3:62:ee:43:a3:35:2d:bb:35:
                    0b:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:A9:8C:70:F3:E5:C3:6D:82:98:B9:B0:E7:EF:CD:AE:3A:2C:9F:03
            X509v3 Authority Key Identifier:
                keyid:37:3C:18:27:E2:70:4C:3F:DC:16:A8:78:98:0F:AD:C8:83:5F:A4:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EB6AE/381289B283DC11EA96D3CC4EF8AEA228/NzwYJ-JwTD_cFqh4mA-tyINfpII.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/NzwYJ-JwTD_cFqh4mA-tyINfpII.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EB6AE/381289B283DC11EA96D3CC4EF8AEA228/NzwYJ-JwTD_cFqh4mA-tyINfpII.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:9e:87:45:d8:a4:5b:e3:9a:70:0f:03:a1:b4:bc:22:2a:e7:
         4b:e6:23:21:20:40:cf:db:09:aa:b6:02:cc:2b:17:17:6e:64:
         f1:9d:fe:0f:35:17:21:51:21:a3:6d:44:f4:ee:c1:c5:38:eb:
         52:a6:d0:9c:1f:58:ce:46:f5:2a:a6:83:26:48:be:a3:b0:f8:
         d3:05:57:26:59:20:39:cb:c7:94:06:88:f0:21:02:fd:08:6a:
         db:3d:20:b8:9e:66:c3:69:17:d4:09:fa:7d:db:10:b9:81:da:
         83:f3:0e:8a:59:95:8f:18:9b:8a:b2:c5:2a:18:b2:3d:ab:4d:
         77:4f:c7:5a:10:9c:37:f2:55:24:bb:fd:6a:4b:35:9c:74:7e:
         ad:30:8e:9c:be:f6:70:c7:ce:e1:37:59:cd:69:e6:6e:dd:df:
         c8:e0:80:45:33:1b:a0:b3:00:05:8a:07:10:5e:67:4b:7a:71:
         bd:a8:8b:e8:1c:09:4d:e4:11:7b:0b:95:e6:33:0b:b0:09:b7:
         cc:7f:5e:85:84:d8:d8:73:6b:51:f9:5a:bf:0b:1d:b5:35:3b:
         d4:5f:b3:f6:b9:36:36:91:bb:82:17:08:29:52:e1:ad:06:e3:
         9e:46:97:c4:9f:1f:d8:ea:b0:fa:32:27:60:5f:00:c7:2e:c5:
         62:5a:ff:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:52:39 2026 by rpki-client