Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FBB68/DEFB17F0767311EBBA1F686DF8AEA228/DRUACGUUibpRRLPxfr7M37lFZAs.mft
File:                     DRUACGUUibpRRLPxfr7M37lFZAs.mft (raw, json)
Hash identifier:          VnTspfvIgaPDS7PrEhoBw+dVeYgS+5LvO6/prPu7T1Y=
Subject key identifier:   2A:40:39:1A:AB:99:8A:24:D0:52:31:B6:31:04:7F:7B:1A:F3:C0:87
Authority key identifier: 0D:15:00:08:65:14:89:BA:51:44:B3:F1:7E:BE:CC:DF:B9:45:64:0B
Certificate issuer:       /CN=F36FBB68AF/serialNumber=0D150008651489BA5144B3F17EBECCDFB945640B
Certificate serial:       07A8
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/DRUACGUUibpRRLPxfr7M37lFZAs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FBB68/DEFB17F0767311EBBA1F686DF8AEA228/DRUACGUUibpRRLPxfr7M37lFZAs.mft
Manifest number:          07A3
Signing time:             Sun 19 Apr 2026 02:00:49 +0000
Manifest this update:     Sun 19 Apr 2026 02:00:48 +0000
Manifest next update:     Tue 21 Apr 2026 02:00:48 +0000
Files and hashes:         1: DRUACGUUibpRRLPxfr7M37lFZAs.crl (hash: gtYXTN9xKJ3Gd8ZT0mTKjwKyGAit4LuXMLX77MDXlp4=)
                          2: C7A8EB58767411EBA6B0766EF8AEA228.roa (hash: GWda8GOSrIMVnjZRMSaotXSgFivJyI4WaCZCa+WMK0A=)
                          3: F3595C487D9E11EBB0CF4425F8AEA228.roa (hash: 13YoJMcN+dmv+b0H3AQ2M8ild3BcGQ6ON48XMKrEX5o=)
                          4: 89DF6E2A767711EBB4347171F8AEA228.roa (hash: RdloHLAK4gQJgsID0wnpZ6wew4Gn1opmX/BleJBr/IY=)
                          5: 1A0BC3C08B1A11EBA3BE1F71F8AEA228.roa (hash: CDicO0MqFxvbqD7XBDkV7o1kgQGQHL9fYvIZb+N7K30=)
                          6: A3872CCA767511EBAC7F576FF8AEA228.roa (hash: hmLqvNXuyAn9YBf05pAIuD+kdW8/EhKCnZYOAEKh1yU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FBB68/DEFB17F0767311EBBA1F686DF8AEA228/DRUACGUUibpRRLPxfr7M37lFZAs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FBB68/DEFB17F0767311EBBA1F686DF8AEA228/DRUACGUUibpRRLPxfr7M37lFZAs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/DRUACGUUibpRRLPxfr7M37lFZAs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 21 Apr 2026 00:07:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1960 (0x7a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FBB68AF, serialNumber=0D150008651489BA5144B3F17EBECCDFB945640B
        Validity
            Not Before: Apr 19 02:00:48 2026 GMT
            Not After : Apr 21 02:00:48 2026 GMT
        Subject: CN=69e43751-e9ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b3:18:97:52:70:d3:c2:9c:fd:7e:76:79:e7:
                    e7:2a:4e:99:53:59:30:03:81:26:4f:74:04:be:61:
                    d6:94:41:a7:90:cc:23:56:8d:23:e9:31:d6:0a:89:
                    3d:31:bc:66:b9:65:15:39:f9:1c:88:5c:ae:87:52:
                    4f:0c:5c:be:6b:8e:c2:3c:46:8f:8b:9b:39:87:11:
                    b9:e7:fd:7c:66:74:49:4a:47:10:4c:da:c3:bd:c0:
                    72:e7:69:97:70:5e:63:9f:05:81:09:e1:8b:d0:22:
                    df:02:8d:71:db:a2:a2:26:11:c3:20:c4:46:9c:78:
                    a4:fa:a9:58:1f:29:7f:1e:22:24:1d:1c:31:8a:e9:
                    f5:15:d6:60:12:62:2b:a3:1b:3a:81:c5:84:bf:62:
                    db:a5:e6:b1:7f:c2:ea:f9:23:60:d9:c6:b8:be:49:
                    6c:3e:f1:99:9a:fa:f2:a2:d3:bb:07:4b:37:40:2f:
                    2c:57:ea:ca:3a:78:57:85:3c:42:98:60:ec:e1:da:
                    f6:82:08:49:bf:dd:21:e5:f6:dc:4a:16:8d:76:c8:
                    62:a9:f9:8d:c0:0f:f4:52:3a:5e:4d:df:1e:95:f9:
                    a3:20:ed:bc:74:5a:a7:aa:29:6e:47:d0:bc:24:30:
                    b8:d0:4e:5f:7f:33:a9:2f:22:ae:ca:13:25:4e:4a:
                    a2:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:40:39:1A:AB:99:8A:24:D0:52:31:B6:31:04:7F:7B:1A:F3:C0:87
            X509v3 Authority Key Identifier:
                keyid:0D:15:00:08:65:14:89:BA:51:44:B3:F1:7E:BE:CC:DF:B9:45:64:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FBB68/DEFB17F0767311EBBA1F686DF8AEA228/DRUACGUUibpRRLPxfr7M37lFZAs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DRUACGUUibpRRLPxfr7M37lFZAs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FBB68/DEFB17F0767311EBBA1F686DF8AEA228/DRUACGUUibpRRLPxfr7M37lFZAs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:0f:83:4a:12:f2:9c:ef:71:b4:93:0b:36:c6:d6:fe:d3:79:
         26:1e:8f:b4:e2:c4:d3:e6:c8:07:68:76:8e:ee:74:2c:d1:a9:
         39:d4:d2:52:ee:76:e4:17:c4:e7:44:af:f1:a4:99:d7:3d:8d:
         cf:91:55:4a:14:76:8d:26:25:da:3f:90:73:cd:b2:4e:1c:3e:
         eb:f5:cc:a5:a8:40:c7:1e:16:8e:4d:72:33:51:6f:07:e5:58:
         35:48:1c:48:79:04:0a:58:15:15:dd:b5:09:d8:f0:49:83:53:
         50:21:64:d2:80:e0:75:90:9e:d8:69:87:54:b0:cb:2e:e0:c1:
         54:bb:e9:e9:22:06:d1:cd:20:c3:f5:0e:08:8f:01:db:18:73:
         82:be:3d:f3:4a:da:e5:9e:b9:f3:50:79:59:fa:51:af:da:ed:
         53:f5:d4:24:74:10:1b:5f:ee:61:4c:8d:40:70:48:27:d7:0c:
         b9:f0:47:4d:3b:e5:5d:36:80:3f:f8:56:14:15:c4:70:f6:d1:
         73:fa:b0:41:19:29:32:ba:39:20:33:d1:ca:73:bd:3c:48:2f:
         d7:4f:81:ba:4f:71:9a:91:2c:1a:09:97:43:59:88:b3:09:b6:
         33:38:b2:6a:90:5d:f2:9f:96:3a:bd:a0:50:f5:cd:6e:34:c4:
         91:73:9a:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:52:32 2026 by rpki-client