Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EC460/ACEC2D22898111EC95D350B45A40D577/-fFqivVlH4qYTwMxRWULP55dioY.mft
File:                     -fFqivVlH4qYTwMxRWULP55dioY.mft (raw, json)
Hash identifier:          oY4GT/ptfU6G0i4a83hMonbtdy/eM8NF/hSX4yZ7diA=
Subject key identifier:   DF:64:94:1F:43:21:15:52:02:7C:1D:90:F8:88:06:D9:E5:D6:D3:87
Authority key identifier: F9:F1:6A:8A:F5:65:1F:8A:98:4F:03:31:45:65:0B:3F:9E:5D:8A:86
Certificate issuer:       /CN=F36EC460AF/serialNumber=F9F16A8AF5651F8A984F033145650B3F9E5D8A86
Certificate serial:       062B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/-fFqivVlH4qYTwMxRWULP55dioY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EC460/ACEC2D22898111EC95D350B45A40D577/-fFqivVlH4qYTwMxRWULP55dioY.mft
Manifest number:          0629
Signing time:             Fri 17 Apr 2026 02:35:17 +0000
Manifest this update:     Fri 17 Apr 2026 02:35:16 +0000
Manifest next update:     Sun 19 Apr 2026 02:35:16 +0000
Files and hashes:         1: -fFqivVlH4qYTwMxRWULP55dioY.crl (hash: uLCYrYyx+jQU20PmmRxDwHAeYHhI4yUJk69e/Huj4TU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EC460/ACEC2D22898111EC95D350B45A40D577/-fFqivVlH4qYTwMxRWULP55dioY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EC460/ACEC2D22898111EC95D350B45A40D577/-fFqivVlH4qYTwMxRWULP55dioY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/-fFqivVlH4qYTwMxRWULP55dioY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1579 (0x62b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EC460AF, serialNumber=F9F16A8AF5651F8A984F033145650B3F9E5D8A86
        Validity
            Not Before: Apr 17 02:35:16 2026 GMT
            Not After : Apr 19 02:35:16 2026 GMT
        Subject: CN=69e19c65-7af8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:12:32:4c:e4:5b:65:20:5a:5d:c0:34:b0:3f:
                    72:7f:03:65:57:5f:93:d4:de:14:60:c8:ac:e2:8d:
                    df:cf:53:86:46:de:4f:b5:85:c0:4c:84:a7:28:a7:
                    6d:5e:f7:05:79:0e:ad:a8:16:73:ee:c6:2f:58:ab:
                    b6:8f:7d:83:c4:71:86:fb:f2:09:4b:cb:c8:11:b0:
                    48:aa:ec:ca:60:6e:f5:c2:2c:fc:d1:8a:aa:80:35:
                    42:73:ef:94:6d:64:07:5f:29:9f:ed:c5:94:b9:20:
                    3d:81:28:d2:e8:7c:6a:c7:e1:5e:c4:09:13:71:73:
                    0d:fa:9c:74:7a:e8:b8:05:5b:ad:3d:b9:09:60:e2:
                    68:08:7b:b5:34:07:84:3f:55:d8:b7:c9:c1:b2:9c:
                    fb:1e:e3:1c:19:42:c4:a1:a7:86:9e:ef:9b:26:25:
                    a1:87:dc:9c:d9:85:f0:cc:33:37:e7:4f:3a:e1:24:
                    b7:f1:cd:2d:22:ac:a8:50:8f:2c:90:29:43:4c:dc:
                    7c:24:ee:19:0e:0c:5f:55:7f:91:3e:e1:b8:c2:24:
                    31:15:61:91:52:de:74:d6:32:37:0b:29:ee:72:74:
                    a1:a1:7c:20:67:46:c1:ec:2f:fe:e7:58:a7:ea:bd:
                    eb:01:45:d1:52:60:a8:1b:20:95:43:99:53:ee:fa:
                    c6:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:64:94:1F:43:21:15:52:02:7C:1D:90:F8:88:06:D9:E5:D6:D3:87
            X509v3 Authority Key Identifier:
                keyid:F9:F1:6A:8A:F5:65:1F:8A:98:4F:03:31:45:65:0B:3F:9E:5D:8A:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EC460/ACEC2D22898111EC95D350B45A40D577/-fFqivVlH4qYTwMxRWULP55dioY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-fFqivVlH4qYTwMxRWULP55dioY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EC460/ACEC2D22898111EC95D350B45A40D577/-fFqivVlH4qYTwMxRWULP55dioY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:ea:e1:97:cc:06:70:54:a3:9b:ce:8f:dc:d8:82:57:a3:83:
         7f:ea:da:a7:01:20:98:3c:1b:08:e7:0e:1e:cf:2a:d4:1b:ca:
         95:2e:54:d9:82:a0:44:60:b4:51:44:6b:13:d5:c6:88:b8:c0:
         ca:aa:8a:cd:4f:aa:3c:8e:d6:60:4a:4a:f4:23:ba:37:83:45:
         81:f1:6f:3f:86:46:58:44:f3:f2:37:d5:1a:71:35:49:3d:1d:
         9d:b5:c0:d6:2d:b4:47:00:fa:74:2f:e9:e3:8b:37:2c:be:7b:
         73:e1:95:05:7a:cc:c8:41:a9:a1:18:11:a7:fc:6e:b8:97:43:
         17:3d:c5:0f:ff:e2:1e:a2:43:70:97:be:09:54:57:ca:3e:5b:
         3e:f6:fc:f2:f2:bf:42:93:d5:fa:d5:ac:f4:17:a1:2e:d7:b3:
         39:b6:49:8a:ed:66:d8:f6:5c:20:cb:87:f4:3c:9a:e0:a7:3d:
         d4:8d:55:27:53:b6:09:d4:06:fd:f1:b7:8b:22:88:cb:91:51:
         e8:b1:fc:b7:d0:00:52:4f:19:77:fd:d1:77:c6:6c:4c:34:23:
         7d:a9:e0:21:1c:0a:2b:f3:3c:71:01:7f:b5:05:8d:d3:ff:6f:
         9c:c0:54:58:d5:8e:6f:d4:85:49:aa:4c:40:6d:f2:41:46:6d:
         c3:3a:4f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:56:40 2026 by rpki-client