Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.mft
File:                     lHfw5HWnR_lsVhYhZ_DBb5nEg7s.mft (raw, json)
Hash identifier:          b7tvIvsARq4Olj0p/Asqz2ZhqWB+LYDWEWnDrrbyaz8=
Subject key identifier:   78:CE:23:B5:68:CA:6B:DC:E9:73:6F:41:89:DC:9F:FB:D0:36:0B:FE
Authority key identifier: 94:77:F0:E4:75:A7:47:F9:6C:56:16:21:67:F0:C1:6F:99:C4:83:BB
Certificate issuer:       /CN=F36FA5EAAR/serialNumber=9477F0E475A747F96C56162167F0C16F99C483BB
Certificate serial:       0542
Authority info access:    rsync://rpki.afrinic.net/repository/arin/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.mft
Manifest number:          0541
Signing time:             Fri 17 Apr 2026 02:59:32 +0000
Manifest this update:     Fri 17 Apr 2026 02:59:32 +0000
Manifest next update:     Sun 19 Apr 2026 02:59:32 +0000
Files and hashes:         1: lHfw5HWnR_lsVhYhZ_DBb5nEg7s.crl (hash: E3VLMmdwJ2X5JkHRvDPrd3BEwpIiNIuXb9zg3AkVG1Y=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.mft
                          rsync://rpki.afrinic.net/repository/arin/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 00:26:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1346 (0x542)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA5EAAR, serialNumber=9477F0E475A747F96C56162167F0C16F99C483BB
        Validity
            Not Before: Apr 17 02:59:32 2026 GMT
            Not After : Apr 19 02:59:32 2026 GMT
        Subject: CN=69e1a214-c104
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:43:0d:d1:c9:9c:c6:e0:83:84:aa:5f:5b:d2:
                    01:a0:b2:13:98:bd:4d:a6:20:87:18:bd:0e:63:43:
                    56:9d:22:54:6a:88:92:8f:64:80:d2:ba:14:fd:ac:
                    c0:9b:e5:0d:22:95:af:37:46:a7:14:64:49:1f:3c:
                    05:68:b8:06:72:99:7d:f7:c5:95:cf:85:d8:fe:3f:
                    d9:f0:0a:b8:80:84:71:c8:5e:35:af:66:da:51:f1:
                    00:fb:4f:8a:e9:e6:66:b7:9a:69:18:27:b9:6f:c6:
                    fb:98:c3:65:b9:88:db:31:28:48:f4:ba:ba:d2:42:
                    24:d2:83:ae:df:e2:49:0c:11:68:72:b3:10:7a:0d:
                    fa:35:ae:88:3e:e1:0a:96:b2:80:1b:ce:07:18:b2:
                    0f:35:f8:0b:20:75:d5:58:db:ba:30:15:1d:79:ef:
                    3e:29:6d:7f:30:9a:0d:a8:11:91:d3:57:14:51:db:
                    fc:b8:d6:27:86:c3:cb:8d:2a:5a:67:bd:9f:41:e2:
                    f3:24:5e:37:9b:76:95:04:f5:30:8f:65:20:bc:35:
                    5b:85:b6:81:ce:71:d3:d6:2b:04:ad:6d:f0:dd:d6:
                    47:64:f3:2a:5f:09:12:d7:ba:a0:79:a3:62:92:e9:
                    9a:bc:fb:db:09:68:31:3f:99:95:f6:e8:df:72:0d:
                    40:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:CE:23:B5:68:CA:6B:DC:E9:73:6F:41:89:DC:9F:FB:D0:36:0B:FE
            X509v3 Authority Key Identifier:
                keyid:94:77:F0:E4:75:A7:47:F9:6C:56:16:21:67:F0:C1:6F:99:C4:83:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:05:c0:14:13:68:cd:a2:52:72:d6:dd:3b:16:e7:84:24:a1:
         98:19:b6:41:63:be:cf:fd:40:ad:64:c2:9d:fd:8b:2c:c4:dd:
         cf:fe:b7:62:7d:0a:d9:d2:05:4c:4b:59:45:e6:1d:d7:c8:c6:
         8a:1a:8a:bf:70:9c:bd:3c:cb:b3:2a:8a:d3:68:2d:cf:8a:2d:
         4d:5e:87:a2:01:04:7a:96:38:41:aa:dd:d7:91:cd:b2:f2:fb:
         a0:c7:54:65:7c:4c:b9:87:05:7a:8e:2f:f5:26:74:b6:d7:cd:
         f4:59:be:84:da:a2:cb:d7:49:67:93:b5:fa:41:00:c1:a8:bd:
         70:c6:20:54:f6:c2:7b:f9:44:57:2b:48:38:8e:8f:48:35:18:
         6d:53:30:84:b9:5f:40:c3:93:2b:5b:cd:b2:6f:bf:c3:1b:16:
         9f:5e:82:0f:f9:4e:47:aa:cc:20:ef:2c:ff:23:be:b3:84:61:
         77:bd:11:5f:f0:d6:84:e0:99:b2:68:a3:05:f2:45:de:8f:92:
         0c:b4:04:7f:14:25:15:6b:51:56:89:6e:5e:6c:f9:cc:a6:47:
         66:e4:13:82:71:10:6b:7f:f4:bb:d1:0a:83:7a:b7:fd:df:54:
         80:7c:2a:86:a5:93:bf:5b:e8:ec:cd:c3:f9:ee:eb:4a:3c:ad:
         32:6e:d3:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:39:36 2026 by rpki-client