Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F6E4A/9D594F7241A611EA88863E28F8AEA228/T-4SnQmrhQ2gOef1uyS2aZoPgXk.mft
File:                     T-4SnQmrhQ2gOef1uyS2aZoPgXk.mft (raw, json)
Hash identifier:          dRtaWkMjXoD1utMo8hiD5sC0UCwAPssMrZv2QmOFiMc=
Subject key identifier:   4A:94:7F:8B:30:2E:63:95:88:52:0F:9A:86:26:33:A6:6C:6E:E3:70
Authority key identifier: 4F:EE:12:9D:09:AB:85:0D:A0:39:E7:F5:BB:24:B6:69:9A:0F:81:79
Certificate issuer:       /CN=F36F6E4AAF/serialNumber=4FEE129D09AB850DA039E7F5BB24B6699A0F8179
Certificate serial:       093A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/T-4SnQmrhQ2gOef1uyS2aZoPgXk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F6E4A/9D594F7241A611EA88863E28F8AEA228/T-4SnQmrhQ2gOef1uyS2aZoPgXk.mft
Manifest number:          0929
Signing time:             Fri 17 Apr 2026 01:40:09 +0000
Manifest this update:     Fri 17 Apr 2026 01:40:08 +0000
Manifest next update:     Sun 19 Apr 2026 01:40:08 +0000
Files and hashes:         1: T-4SnQmrhQ2gOef1uyS2aZoPgXk.crl (hash: QEnfg5AJcxNm6KLFcnf4XmPLaO869Uz2nCHHIiBOqPc=)
                          2: D2CA8558427911EAA3FED044F8AEA228.roa (hash: wurkYmqla/v4WBGYx1KQBTG96SHI4XZxvbfOZjy6dDc=)
                          3: 63CD6D381C6F11F1A8701690DAE4EC9C.roa (hash: c9onQMQ9ZUC32jP7lmDEH4I1JLO7mXPuFSF2QEzOxqk=)
                          4: B6B99F861C6E11F18CC2268CDAE4EC9C.roa (hash: Nk9KcupgaFrT9HYjwhwayvcsckASnFKmSYP5X4ruEFg=)
                          5: FDA49C78427911EABA58F344F8AEA228.roa (hash: eNItvTIs3jbqReG8otIUPR5mjUnULKzx6gvlJCH+hbE=)
                          6: 582A85201C6E11F196474E8ADAE4EC9C.roa (hash: tXQNq5anGZuKI/N3ls0PiguA4/6L6XRyM0QYo8OFjRw=)
                          7: 41B6AD86469C11EA81469227F8AEA228.roa (hash: GFpsTEOd32IACxfCYv+4g0rk0Bgklgcuemi0F5TjBIo=)
                          8: C856574C41AB11EA9C27F52BF8AEA228.roa (hash: bz5TA1squK7Ifl9jqtLCRwvkOyW8Qa1kaJWgUXUsT5Y=)
                          9: 57CE8E244FFF11EF959DB964762E951A.roa (hash: fyxQpuVFjDxsdPdxESeE+9woq7cT+VNLSx/q/+d4MIo=)
                          10: F7DDD5EA1C6E11F19C8F3F8EDAE4EC9C.roa (hash: PW/BAXgHvih22srJgbVXfOqpna8bQSUwnKdkd55yiKw=)
                          11: 3281CE182B7211EEAF2893194AD9E6FC.roa (hash: fkff7v1iK+AxXqvd4C6nSAa4nFagy3GTQ4X7UfCbswc=)
                          12: FEE338541C6D11F196022388DAE4EC9C.roa (hash: LVUzPTIff1K9PHg6hyLX45CbcDuYQrRZVEGZDDm6Rkg=)
                          13: D3167F64BBA311EA84581016F8AEA228.roa (hash: olteyMOY4v7fnBH8LXpkJqIEF+laR8HIc07JsyM+o9Y=)
                          14: 482F6A4C583F11EDA5C92AB4F1222468.roa (hash: 1bNHg5hR2N1EwB0UNF89B2hLunHKeyd9Nx1pg6+rORw=)
                          15: 7576B97E4FFF11EF84A6EB64762E951A.roa (hash: 33ok2yqrTl57C64Sr4/sUY8EF0IDi0i5pKehUOrq0+s=)
                          16: 168D8CF6BBA411EA82D06016F8AEA228.roa (hash: GX7T680/ieOsGwBZtEWumw47ki7Ge95lGqYGrmNJnos=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F6E4A/9D594F7241A611EA88863E28F8AEA228/T-4SnQmrhQ2gOef1uyS2aZoPgXk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F6E4A/9D594F7241A611EA88863E28F8AEA228/T-4SnQmrhQ2gOef1uyS2aZoPgXk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/T-4SnQmrhQ2gOef1uyS2aZoPgXk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2362 (0x93a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F6E4AAF, serialNumber=4FEE129D09AB850DA039E7F5BB24B6699A0F8179
        Validity
            Not Before: Apr 17 01:40:08 2026 GMT
            Not After : Apr 19 01:40:08 2026 GMT
        Subject: CN=69e18f79-bd48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d0:e8:a9:d3:2b:0d:09:d7:16:7b:9e:d9:0b:
                    99:9d:7b:69:d5:15:f1:3a:06:9b:e4:fa:f1:05:8a:
                    b6:78:df:41:89:5b:09:12:15:5e:a3:8a:4a:2c:b9:
                    9b:b5:87:1e:5e:bd:2e:c4:a2:65:6c:67:6b:e1:63:
                    ce:7f:57:c8:1a:84:3b:f0:9a:af:6b:1e:e8:bd:5e:
                    9a:f8:68:64:5c:ca:87:a7:96:b4:e5:bd:da:2d:21:
                    2b:c2:21:6c:02:a0:92:18:2f:1f:f0:2b:ea:5f:62:
                    ef:ac:4a:a4:86:d4:89:fa:8a:ab:ec:76:c4:3f:46:
                    e1:04:b4:9c:25:70:85:46:b8:0b:53:f2:e4:6e:7d:
                    95:fb:6e:ed:13:1d:83:43:23:65:47:e0:b3:79:6c:
                    b5:7e:16:d3:a3:76:34:6e:05:49:c2:bb:7e:72:2d:
                    3b:c5:13:77:81:ca:66:58:01:b4:8e:50:ad:d3:f5:
                    67:78:30:93:3a:29:df:a0:e1:90:8d:4c:cb:56:f2:
                    58:b3:a8:54:67:42:52:52:e6:5b:af:c5:ee:f5:e8:
                    e9:18:d9:f2:58:7e:57:f4:f2:b9:2d:7e:78:ae:28:
                    d9:d6:5f:c5:6e:1b:31:a3:a0:c8:8a:1b:e9:d0:1c:
                    36:2d:9d:d1:63:90:a6:78:75:d3:92:71:1c:6d:e9:
                    5f:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:94:7F:8B:30:2E:63:95:88:52:0F:9A:86:26:33:A6:6C:6E:E3:70
            X509v3 Authority Key Identifier:
                keyid:4F:EE:12:9D:09:AB:85:0D:A0:39:E7:F5:BB:24:B6:69:9A:0F:81:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F6E4A/9D594F7241A611EA88863E28F8AEA228/T-4SnQmrhQ2gOef1uyS2aZoPgXk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/T-4SnQmrhQ2gOef1uyS2aZoPgXk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F6E4A/9D594F7241A611EA88863E28F8AEA228/T-4SnQmrhQ2gOef1uyS2aZoPgXk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:cc:a2:d9:40:54:89:51:a0:37:8a:96:e8:62:3f:4c:81:c1:
         8f:46:39:f2:57:5d:8e:af:bf:a6:0e:c7:90:e8:0c:1b:37:99:
         57:ba:8a:2d:64:6f:55:dc:b2:66:dd:85:79:f5:15:47:c4:77:
         31:70:e2:37:19:15:0a:56:a7:ac:8f:bd:83:78:d6:b5:81:21:
         b9:27:8b:98:03:de:b5:17:55:de:4a:4b:80:57:33:c8:6f:20:
         11:0c:58:1b:d7:e8:48:48:02:df:9a:46:cb:9f:c9:0e:99:8f:
         ed:2b:1a:44:e5:3f:5d:48:3d:0b:3c:e9:29:91:15:71:d7:d9:
         7b:d9:90:ca:ab:95:21:62:52:4a:0c:b9:cd:29:dd:b5:c1:7c:
         8e:59:cc:28:8a:dd:96:5d:dc:05:e1:08:5f:d4:7f:b7:0f:b0:
         b9:fd:12:39:d6:b0:71:e9:c9:a6:d3:f5:08:6c:1a:3b:07:a9:
         64:dc:e8:0a:84:10:fc:66:88:b3:3d:5c:1c:50:e9:20:1e:c8:
         6b:6b:be:89:3d:b2:9c:80:c6:ea:07:14:6f:17:cb:a9:d0:4c:
         79:c6:1e:20:22:98:8b:36:7d:cc:b4:29:4f:d2:14:51:25:ad:
         bd:72:fa:8b:18:c6:96:54:47:21:c8:72:d8:59:87:2b:95:57:
         55:59:83:01
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCTowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RjZFNEFBRjExMC8GA1UEBRMoNEZFRTEyOUQwOUFCODUwREEwMzlFN0Y1QkIyNEI2
Njk5QTBGODE3OTAeFw0yNjA0MTcwMTQwMDhaFw0yNjA0MTkwMTQwMDhaMBgxFjAU
BgNVBAMTDTY5ZTE4Zjc5LWJkNDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCn0Oip0ysNCdcWe57ZC5mde2nVFfE6Bpvk+vEFirZ430GJWwkSFV6jikos
uZu1hx5evS7EomVsZ2vhY85/V8gahDvwmq9rHui9Xpr4aGRcyoenlrTlvdotISvC
IWwCoJIYLx/wK+pfYu+sSqSG1In6iqvsdsQ/RuEEtJwlcIVGuAtT8uRufZX7bu0T
HYNDI2VH4LN5bLV+FtOjdjRuBUnCu35yLTvFE3eBymZYAbSOUK3T9Wd4MJM6Kd+g
4ZCNTMtW8lizqFRnQlJS5luvxe716OkY2fJYflf08rktfniuKNnWX8VuGzGjoMiK
G+nQHDYtndFjkKZ4ddOScRxt6V/jAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUSpR/
izAuY5WIUg+ahiYzpmxu43AwHwYDVR0jBBgwFoAUT+4SnQmrhQ2gOef1uyS2aZoP
gXkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkY2RTRBLzlENTk0RjcyNDFBNjExRUE4ODg2M0UyOEY4QUVBMjI4L1QtNFNu
UW1yaFEyZ09lZjF1eVMyYVpvUGdYay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1QtNFNuUW1yaFEyZ09lZjF1eVMyYVpvUGdYay5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RjZFNEEvOUQ1OTRGNzI0MUE2MTFFQTg4ODYzRTI4RjhB
RUEyMjgvVC00U25RbXJoUTJnT2VmMXV5UzJhWm9QZ1hrLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQASzKLZQFSJUaA3ipboYj9MgcGPRjny
V12Or7+mDseQ6AwbN5lXuootZG9V3LJm3YV59RVHxHcxcOI3GRUKVqesj72DeNa1
gSG5J4uYA961F1XeSkuAVzPIbyARDFgb1+hISALfmkbLn8kOmY/tKxpE5T9dSD0L
POkpkRVx19l72ZDKq5UhYlJKDLnNKd21wXyOWcwoit2WXdwF4Qhf1H+3D7C5/RI5
1rBx6cmm0/UIbBo7B6lk3OgKhBD8ZoizPVwcUOkgHshra76JPbKcgMbqBxRvF8up
0Ex5xh4gIpiLNn3MtClP0hRRJa29cvqLGMaWVEchyHLYWYcrlVdVWYMB
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:19:14 2026 by rpki-client