Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FB1A3/3C789C6ED12611ECB70663DDF1222468/xfjkPM0fcvciuyN0u3q9C4iwVz8.mft
File:                     xfjkPM0fcvciuyN0u3q9C4iwVz8.mft (raw, json)
Hash identifier:          YcqkSkN4XZGtsEYVLO0Cn2oJY8M1DKrkpzN4KsPjEhg=
Subject key identifier:   71:FB:C0:77:69:11:AF:3E:C1:F4:8A:2B:06:45:AD:EC:1B:19:E6:79
Authority key identifier: C5:F8:E4:3C:CD:1F:72:F7:22:BB:23:74:BB:7A:BD:0B:88:B0:57:3F
Certificate issuer:       /CN=F36FB1A3AF/serialNumber=C5F8E43CCD1F72F722BB2374BB7ABD0B88B0573F
Certificate serial:       05C4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/xfjkPM0fcvciuyN0u3q9C4iwVz8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FB1A3/3C789C6ED12611ECB70663DDF1222468/xfjkPM0fcvciuyN0u3q9C4iwVz8.mft
Manifest number:          05C4
Signing time:             Fri 17 Apr 2026 02:41:18 +0000
Manifest this update:     Fri 17 Apr 2026 02:41:18 +0000
Manifest next update:     Sun 19 Apr 2026 02:41:18 +0000
Files and hashes:         1: xfjkPM0fcvciuyN0u3q9C4iwVz8.crl (hash: gW0gve+aLLl56X4rwhSk+j0pVkg6rTNuhMsF7mBv3kE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FB1A3/3C789C6ED12611ECB70663DDF1222468/xfjkPM0fcvciuyN0u3q9C4iwVz8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FB1A3/3C789C6ED12611ECB70663DDF1222468/xfjkPM0fcvciuyN0u3q9C4iwVz8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/xfjkPM0fcvciuyN0u3q9C4iwVz8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 02:41:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1476 (0x5c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FB1A3AF, serialNumber=C5F8E43CCD1F72F722BB2374BB7ABD0B88B0573F
        Validity
            Not Before: Apr 17 02:41:18 2026 GMT
            Not After : Apr 19 02:41:18 2026 GMT
        Subject: CN=69e19dce-1777
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:e1:fd:1f:1d:ca:d3:85:ed:9e:78:d7:3e:b8:
                    d1:be:5f:ee:31:6a:8e:ba:d5:ef:f8:2e:23:9a:49:
                    d7:b8:b6:fd:ae:59:72:b9:95:98:aa:62:22:59:6d:
                    fb:06:9d:c9:e5:c4:f5:d9:7c:02:72:18:42:d0:fc:
                    24:40:de:45:63:ea:b6:82:9e:10:c0:2f:5f:d8:01:
                    06:a0:8e:2a:02:32:90:37:e8:01:3a:59:1b:66:6b:
                    e6:d3:1b:57:a2:ab:94:17:8a:0e:88:55:ac:0e:29:
                    e6:91:e6:97:68:46:59:4e:47:2a:7f:23:b4:8c:0c:
                    d9:cd:27:81:5e:61:39:be:d0:32:95:0f:a8:1b:18:
                    47:03:d5:65:e9:92:fd:f9:5a:7a:e1:8d:20:7e:fb:
                    fb:9a:f7:82:bc:ef:03:14:f9:b0:78:90:ac:81:e0:
                    e6:69:1d:0f:05:f1:40:ef:9e:f6:0e:13:14:6d:62:
                    9c:35:79:1b:27:7c:db:af:f4:df:ee:8b:aa:99:9d:
                    38:4f:42:47:40:fc:84:54:1f:ac:79:02:5a:6e:d8:
                    88:38:ff:e0:f3:f5:0b:96:06:9f:61:26:a1:4d:aa:
                    1a:03:53:49:dc:60:fd:f1:3d:61:42:1f:27:66:45:
                    f3:3a:ac:c7:8c:9b:ad:fc:a6:8a:4f:49:70:0d:78:
                    d8:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:FB:C0:77:69:11:AF:3E:C1:F4:8A:2B:06:45:AD:EC:1B:19:E6:79
            X509v3 Authority Key Identifier:
                keyid:C5:F8:E4:3C:CD:1F:72:F7:22:BB:23:74:BB:7A:BD:0B:88:B0:57:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FB1A3/3C789C6ED12611ECB70663DDF1222468/xfjkPM0fcvciuyN0u3q9C4iwVz8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xfjkPM0fcvciuyN0u3q9C4iwVz8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FB1A3/3C789C6ED12611ECB70663DDF1222468/xfjkPM0fcvciuyN0u3q9C4iwVz8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:57:6f:c8:e7:9d:50:94:93:22:a1:b7:40:ed:03:60:2d:b7:
         92:89:70:35:7f:8c:7e:d9:6c:1c:2d:85:4e:51:20:b3:ff:33:
         48:ef:35:22:4b:cc:bb:f3:36:7c:97:50:42:9f:1a:22:b2:8c:
         04:17:1a:9a:a0:cd:63:86:11:30:b9:7e:d2:25:f3:2d:c5:d6:
         d4:a4:c5:66:c6:bb:a8:5d:91:d4:2e:29:79:1f:f4:a8:12:f2:
         4b:b5:f5:80:42:28:94:13:24:1a:81:91:46:63:f3:06:ba:05:
         de:82:48:16:72:21:7b:67:a0:7d:9c:ab:26:f1:e6:66:60:d4:
         ec:19:6c:64:7e:47:96:94:22:85:67:7b:26:bd:da:d0:cb:a0:
         3b:87:c9:77:06:63:99:19:13:80:05:66:7f:df:33:0a:ba:37:
         cd:d9:93:a7:97:53:7c:e4:fe:47:f0:c4:ae:3f:49:3f:1a:dd:
         df:ae:e2:83:48:da:08:1d:57:2c:1a:86:a9:ff:b4:2a:34:e6:
         6d:5c:07:e5:f8:3f:8c:2b:23:11:de:a0:64:87:5c:18:42:29:
         62:c8:25:f8:57:cb:d1:c6:7e:3a:04:5d:10:2c:cc:51:96:60:
         9f:03:c3:ae:14:c5:70:27:60:f4:ab:b1:cf:a4:5a:9d:3b:47:
         d2:7c:7e:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:31:32 2026 by rpki-client