Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F8F86/43159886192911EFA70CC06E017001B1/sbo9fH2OzVEf2kvw7Cn2qZssMbs.mft
File:                     sbo9fH2OzVEf2kvw7Cn2qZssMbs.mft (raw, json)
Hash identifier:          A53ixkrMRHMfpC+FurNdV9eOXIbfGCYr+DpPt9jNank=
Subject key identifier:   18:60:2A:48:9E:54:8E:5E:07:FD:5D:4F:37:80:07:E2:75:A1:56:AF
Authority key identifier: B1:BA:3D:7C:7D:8E:CD:51:1F:DA:4B:F0:EC:29:F6:A9:9B:2C:31:BB
Certificate issuer:       /CN=F36F8F86AF/serialNumber=B1BA3D7C7D8ECD511FDA4BF0EC29F6A99B2C31BB
Certificate serial:       02D4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/sbo9fH2OzVEf2kvw7Cn2qZssMbs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F8F86/43159886192911EFA70CC06E017001B1/sbo9fH2OzVEf2kvw7Cn2qZssMbs.mft
Manifest number:          02CE
Signing time:             Fri 17 Apr 2026 04:10:29 +0000
Manifest this update:     Fri 17 Apr 2026 04:10:28 +0000
Manifest next update:     Sun 19 Apr 2026 04:10:28 +0000
Files and hashes:         1: sbo9fH2OzVEf2kvw7Cn2qZssMbs.crl (hash: 2RBflG9hhDzRVSwc4l7SDy++i/zk8DLgKi0bhVzLEzE=)
                          2: 0EB2B67C8FAE11EFB0C6F19A762E951A.roa (hash: dRhtvM/2t47z2JwA9sfqbVs7olYpopo1AghyJCkiJnU=)
                          3: A3E369B88FAD11EF84E8C298762E951A.roa (hash: KHj93NQJWTZ8oMi0gw+QEnklPoZI/vRnCOYhgqAuDO0=)
                          4: 7017818A912B11EFA858BC80762E951A.roa (hash: 8BIH5JeOynzixiDGrMvrW3MY/Y2dPuOtFBanjsebARk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F8F86/43159886192911EFA70CC06E017001B1/sbo9fH2OzVEf2kvw7Cn2qZssMbs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F8F86/43159886192911EFA70CC06E017001B1/sbo9fH2OzVEf2kvw7Cn2qZssMbs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/sbo9fH2OzVEf2kvw7Cn2qZssMbs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 04:10:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 724 (0x2d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F8F86AF, serialNumber=B1BA3D7C7D8ECD511FDA4BF0EC29F6A99B2C31BB
        Validity
            Not Before: Apr 17 04:10:28 2026 GMT
            Not After : Apr 19 04:10:28 2026 GMT
        Subject: CN=69e1b2b5-9290
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b7:d9:53:b2:9b:4d:91:f6:6d:5e:83:e2:0e:
                    c1:ee:b9:43:f4:54:bf:7b:7d:e2:d1:8e:0a:01:31:
                    61:1f:98:40:43:2b:5e:b4:c8:70:44:89:37:2a:50:
                    ee:48:6f:3c:8f:a4:fa:42:59:8e:59:4b:66:45:70:
                    a2:02:07:83:1a:c3:85:32:4d:17:88:de:68:46:db:
                    26:ba:72:8c:c3:ea:c4:de:2b:77:9a:d8:3d:29:10:
                    1f:7b:a4:75:e9:72:6b:02:f1:27:19:ff:6d:68:2a:
                    1b:38:41:76:4d:ac:b4:f7:d4:8b:fd:ca:b5:f0:95:
                    18:ec:30:bc:de:d4:ff:a8:fb:0d:b2:67:55:c4:10:
                    e9:45:c7:60:55:cd:fb:3c:ab:f6:76:d1:b0:40:65:
                    84:5f:82:f7:f9:af:6b:85:ec:c5:86:a7:2b:7f:7a:
                    93:50:c8:46:6b:7c:16:53:a3:7d:39:b5:4e:1a:06:
                    2f:d8:fe:ed:42:64:be:49:51:be:8b:57:b4:e1:0a:
                    71:31:7b:16:b6:08:d8:78:0d:2c:c6:15:5b:70:79:
                    32:f5:3c:28:77:28:e6:8b:9f:f0:f5:c7:5f:e2:4a:
                    a4:9e:cb:03:f3:78:95:4b:70:13:2e:5a:4e:11:2e:
                    d6:d2:28:6a:b7:35:fe:ce:bb:da:fb:34:01:0c:94:
                    f0:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:60:2A:48:9E:54:8E:5E:07:FD:5D:4F:37:80:07:E2:75:A1:56:AF
            X509v3 Authority Key Identifier:
                keyid:B1:BA:3D:7C:7D:8E:CD:51:1F:DA:4B:F0:EC:29:F6:A9:9B:2C:31:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8F86/43159886192911EFA70CC06E017001B1/sbo9fH2OzVEf2kvw7Cn2qZssMbs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/sbo9fH2OzVEf2kvw7Cn2qZssMbs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8F86/43159886192911EFA70CC06E017001B1/sbo9fH2OzVEf2kvw7Cn2qZssMbs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:9c:48:01:1b:08:ab:9d:5c:72:d7:ea:ee:e1:60:5b:c7:4a:
         b7:bb:dc:34:d1:90:1e:53:25:b6:2c:61:4b:02:5d:7b:99:b5:
         18:b2:39:43:b0:ae:88:d4:5a:a2:5b:dd:b5:87:fb:21:af:72:
         c6:88:64:99:d6:6d:30:99:e0:a7:21:db:bf:c9:4e:25:29:d4:
         32:7a:92:6e:d9:a4:b8:ee:fa:2f:cb:26:7b:51:1c:7b:8b:d8:
         eb:e2:04:9a:35:e8:bf:8d:7f:30:f3:8e:5d:67:97:7e:f1:cf:
         77:1d:54:fe:a4:a3:04:51:6c:87:67:91:a6:a8:36:2c:ac:f0:
         a5:34:3f:78:e1:40:58:18:20:64:a5:96:1a:21:85:c7:e1:05:
         67:8e:eb:d5:73:c4:86:a1:be:7c:15:5a:25:09:aa:d6:2d:f7:
         09:75:09:fb:72:cb:dd:90:b0:0e:34:07:68:7a:d3:40:6b:ce:
         28:36:a2:04:44:6d:e6:99:af:11:bb:be:b5:9d:f0:62:7a:83:
         f0:42:30:d6:f9:71:20:a8:3a:6c:d9:08:87:d7:cc:d8:82:bf:
         62:f8:15:b6:74:f9:2a:26:e1:99:21:6e:d6:9e:b7:1f:93:44:
         e7:61:71:57:29:92:cc:88:03:af:99:df:31:19:c2:89:ff:94:
         e5:64:d0:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:52:08 2026 by rpki-client