Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EBB83/1F3BA6F2F13C11F09C267DECDAE4EC9C/zFDm0Igy-da0ktsaCun0dMNadjo.mft
File:                     zFDm0Igy-da0ktsaCun0dMNadjo.mft (raw, json)
Hash identifier:          1919EY6SQ78dGkQcijep09FpeBuHNCHwNfVbdYFzIhw=
Subject key identifier:   F8:34:24:8A:E5:FD:A2:99:19:65:AC:DA:80:6E:E3:8B:40:CA:0B:30
Authority key identifier: CC:50:E6:D0:88:32:F9:D6:B4:92:DB:1A:0A:E9:F4:74:C3:5A:76:3A
Certificate issuer:       /CN=F36EBB83AF/serialNumber=CC50E6D08832F9D6B492DB1A0AE9F474C35A763A
Certificate serial:       5F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/zFDm0Igy-da0ktsaCun0dMNadjo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EBB83/1F3BA6F2F13C11F09C267DECDAE4EC9C/zFDm0Igy-da0ktsaCun0dMNadjo.mft
Manifest number:          5E
Signing time:             Fri 17 Apr 2026 05:21:07 +0000
Manifest this update:     Fri 17 Apr 2026 05:21:06 +0000
Manifest next update:     Sun 19 Apr 2026 05:21:06 +0000
Files and hashes:         1: zFDm0Igy-da0ktsaCun0dMNadjo.crl (hash: T4e3h0PxLAWPSLX9IzfnhuJDsXbccTtZfGx0IjfkGEs=)
                          2: 890714D6F13C11F0A8B5B8EEDAE4EC9C.roa (hash: jpMzBp+XA2OT7GpKVUf61L9TEAnmUra8ZP6BY3MSD60=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EBB83/1F3BA6F2F13C11F09C267DECDAE4EC9C/zFDm0Igy-da0ktsaCun0dMNadjo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EBB83/1F3BA6F2F13C11F09C267DECDAE4EC9C/zFDm0Igy-da0ktsaCun0dMNadjo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/zFDm0Igy-da0ktsaCun0dMNadjo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 95 (0x5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EBB83AF, serialNumber=CC50E6D08832F9D6B492DB1A0AE9F474C35A763A
        Validity
            Not Before: Apr 17 05:21:06 2026 GMT
            Not After : Apr 19 05:21:06 2026 GMT
        Subject: CN=69e1c343-3a29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c4:b7:5b:99:fd:47:02:38:5c:41:43:c9:e5:
                    ee:80:6b:85:bb:b1:6d:49:b6:9a:02:69:ee:86:93:
                    9e:4a:e5:05:71:1f:7b:07:6a:22:f1:04:07:34:37:
                    ef:de:bf:61:47:9f:7e:4c:ba:dc:96:db:c0:46:e0:
                    31:3a:48:d6:aa:e5:0b:0a:21:5b:af:0f:9c:ae:b3:
                    5a:be:1b:2b:2e:a3:0f:c1:7c:1e:56:34:4e:67:f9:
                    20:11:48:ae:40:88:9a:44:32:96:dd:26:88:72:bf:
                    df:df:87:d1:b5:30:4c:1b:4b:c6:e4:1a:2e:d5:e5:
                    e5:d4:34:53:08:a6:45:7a:b3:fa:39:35:ea:05:60:
                    50:3d:c6:76:58:47:69:9b:35:b0:cd:98:fc:15:84:
                    c7:cb:36:a6:f3:cf:b7:16:89:8e:2e:5e:e8:51:fd:
                    5f:00:a1:8b:f3:39:82:ed:53:a0:22:6f:c9:1f:cb:
                    43:fd:69:2a:1c:c2:cf:ca:f8:d6:aa:a0:ab:02:d4:
                    aa:ba:92:d8:24:78:1f:ea:2a:0d:ce:94:bc:78:b0:
                    7e:d5:53:df:21:59:92:46:7e:4d:35:f4:30:60:bc:
                    66:f2:6c:d3:f9:6b:d7:95:01:3d:f1:9d:37:b8:4c:
                    3e:7e:d1:6f:e1:eb:56:76:3c:2b:56:6a:9c:73:3f:
                    1a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:34:24:8A:E5:FD:A2:99:19:65:AC:DA:80:6E:E3:8B:40:CA:0B:30
            X509v3 Authority Key Identifier:
                keyid:CC:50:E6:D0:88:32:F9:D6:B4:92:DB:1A:0A:E9:F4:74:C3:5A:76:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EBB83/1F3BA6F2F13C11F09C267DECDAE4EC9C/zFDm0Igy-da0ktsaCun0dMNadjo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zFDm0Igy-da0ktsaCun0dMNadjo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EBB83/1F3BA6F2F13C11F09C267DECDAE4EC9C/zFDm0Igy-da0ktsaCun0dMNadjo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:b3:ee:09:62:ae:4a:73:16:52:19:7a:79:81:b6:db:72:6d:
         a5:75:ac:5d:ee:e5:22:7a:2b:2b:1f:ac:1a:9c:cb:08:a5:a6:
         21:9a:cc:ff:30:43:65:96:73:b6:aa:aa:be:ea:a5:11:ea:fd:
         e6:fd:82:e2:57:6c:bf:17:be:98:3f:bf:83:97:b0:8b:be:f2:
         8c:5a:b4:00:ef:c7:c1:99:ab:ad:ca:f2:1d:fc:97:d1:32:dc:
         4b:fd:8a:c4:5c:7d:d6:63:9f:2c:05:58:c9:50:b8:39:fc:8d:
         c7:11:75:fb:01:65:62:8c:72:33:b0:74:a0:f0:26:7a:ed:cb:
         1d:cb:f0:28:21:97:3f:59:a3:4e:97:a0:98:69:cd:48:df:a9:
         bf:cb:91:08:6c:e5:83:df:e7:4d:3c:9b:88:4a:e5:f8:a8:65:
         9b:f0:21:71:fb:e6:83:af:c6:e2:0b:30:ee:6a:89:2d:3b:e8:
         7c:97:46:95:e4:d1:83:67:b7:4f:02:b8:72:ab:e8:cd:c7:7a:
         9d:a3:79:9e:e1:70:de:65:58:85:6a:e1:3c:6b:33:70:52:df:
         d3:2c:f4:30:cc:60:44:4f:96:42:23:91:d9:35:6e:27:11:fb:
         7d:27:4a:cd:5b:de:ac:c1:68:60:ba:35:5e:0b:e6:67:51:59:
         f3:a1:1d:db
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIBXzANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZF
QkI4M0FGMTEwLwYDVQQFEyhDQzUwRTZEMDg4MzJGOUQ2QjQ5MkRCMUEwQUU5RjQ3
NEMzNUE3NjNBMB4XDTI2MDQxNzA1MjEwNloXDTI2MDQxOTA1MjEwNlowGDEWMBQG
A1UEAxMNNjllMWMzNDMtM2EyOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAK/Et1uZ/UcCOFxBQ8nl7oBrhbuxbUm2mgJp7oaTnkrlBXEfewdqIvEEBzQ3
796/YUeffky63JbbwEbgMTpI1qrlCwohW68PnK6zWr4bKy6jD8F8HlY0Tmf5IBFI
rkCImkQylt0miHK/39+H0bUwTBtLxuQaLtXl5dQ0UwimRXqz+jk16gVgUD3GdlhH
aZs1sM2Y/BWEx8s2pvPPtxaJji5e6FH9XwChi/M5gu1ToCJvyR/LQ/1pKhzCz8r4
1qqgqwLUqrqS2CR4H+oqDc6UvHiwftVT3yFZkkZ+TTX0MGC8ZvJs0/lr15UBPfGd
N7hMPn7Rb+HrVnY8K1ZqnHM/GssCAwEAAaOCArgwggK0MB0GA1UdDgQWBBT4NCSK
5f2imRllrNqAbuOLQMoLMDAfBgNVHSMEGDAWgBTMUObQiDL51rSS2xoK6fR0w1p2
OjAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2RUJCODMvMUYzQkE2RjJGMTNDMTFGMDlDMjY3REVDREFFNEVDOUMvekZEbTBJ
Z3ktZGEwa3RzYUN1bjBkTU5hZGpvLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvekZEbTBJZ3ktZGEwa3RzYUN1bjBkTU5hZGpvLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUF
BzALhn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzZFQkI4My8xRjNCQTZGMkYxM0MxMUYwOUMyNjdERUNEQUU0
RUM5Qy96RkRtMElneS1kYTBrdHNhQ3VuMGRNTmFkam8ubWZ0MDUGCCsGAQUFBzAN
hilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBADKz7glirkpzFlIZenmBtttybaV1rF3u
5SJ6KysfrBqcywilpiGazP8wQ2WWc7aqqr7qpRHq/eb9guJXbL8Xvpg/v4OXsIu+
8oxatADvx8GZq63K8h38l9Ey3Ev9isRcfdZjnywFWMlQuDn8jccRdfsBZWKMcjOw
dKDwJnrtyx3L8Cghlz9Zo06XoJhpzUjfqb/LkQhs5YPf5008m4hK5fioZZvwIXH7
5oOvxuILMO5qiS076HyXRpXk0YNnt08CuHKr6M3Hep2jeZ7hcN5lWIVq4TxrM3BS
39Ms9DDMYERPlkIjkdk1bicR+30nSs1b3qzBaGC6NV4L5mdRWfOhHds=
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:59:50 2026 by rpki-client