Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FC75C/9E14B5BE983611EFB97BD164762E951A/snY9UExa-ft12a62ByQi-Hoaa_Y.mft
File:                     snY9UExa-ft12a62ByQi-Hoaa_Y.mft (raw, json)
Hash identifier:          Cr068M4LFOuW9Y9q0RAWI+CQ3QRShZnJmESgZF0xiLY=
Subject key identifier:   8A:5C:3B:74:FB:5E:CD:46:B5:C9:66:22:5B:28:80:C8:34:F9:9C:A4
Authority key identifier: B2:76:3D:50:4C:5A:F9:FB:75:D9:AE:B6:07:24:22:F8:7A:1A:6B:F6
Certificate issuer:       /CN=F36FC75CAF/serialNumber=B2763D504C5AF9FB75D9AEB6072422F87A1A6BF6
Certificate serial:       0222
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/snY9UExa-ft12a62ByQi-Hoaa_Y.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FC75C/9E14B5BE983611EFB97BD164762E951A/snY9UExa-ft12a62ByQi-Hoaa_Y.mft
Manifest number:          0221
Signing time:             Fri 17 Apr 2026 04:35:11 +0000
Manifest this update:     Fri 17 Apr 2026 04:35:10 +0000
Manifest next update:     Sun 19 Apr 2026 04:35:10 +0000
Files and hashes:         1: snY9UExa-ft12a62ByQi-Hoaa_Y.crl (hash: mFAYW8plgUaEwk8zDvmcKeA1WQaViAcfzTCAMPIC6qo=)
                          2: 2836E3E2983811EFB48AAD6F762E951A.roa (hash: ilc1+7HG6/OhpNZjczTeMOkT7vcZALpZGaGEFuomW1E=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FC75C/9E14B5BE983611EFB97BD164762E951A/snY9UExa-ft12a62ByQi-Hoaa_Y.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FC75C/9E14B5BE983611EFB97BD164762E951A/snY9UExa-ft12a62ByQi-Hoaa_Y.mft
                          rsync://rpki.afrinic.net/repository/afrinic/snY9UExa-ft12a62ByQi-Hoaa_Y.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 04:35:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 546 (0x222)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FC75CAF, serialNumber=B2763D504C5AF9FB75D9AEB6072422F87A1A6BF6
        Validity
            Not Before: Apr 17 04:35:10 2026 GMT
            Not After : Apr 19 04:35:10 2026 GMT
        Subject: CN=69e1b87f-4e43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:9a:6a:a4:55:40:7a:f0:75:50:bc:4f:65:71:
                    eb:b5:35:d9:f0:83:1b:7f:e8:87:03:b6:d8:79:9c:
                    65:8c:92:25:37:81:26:a9:22:4d:1d:88:bc:71:d1:
                    c3:67:e7:74:90:e7:39:e3:9d:d6:33:3f:e7:e0:5f:
                    66:af:24:95:77:9b:49:2f:c3:0c:e4:13:bd:c9:e2:
                    2b:f7:7a:29:40:1e:a6:d6:6f:4e:b0:96:62:88:37:
                    27:93:33:de:bf:ac:4c:96:51:12:ea:3e:b1:17:cd:
                    71:b5:c4:62:a0:71:19:43:f6:58:30:72:b3:dc:15:
                    a0:f3:44:23:2a:10:05:fc:b5:c1:32:91:ec:15:ce:
                    8c:57:80:31:5a:1e:4c:f7:73:29:df:6e:3a:c9:e0:
                    ba:df:b1:ae:08:fe:48:e9:cc:96:f0:2c:bb:31:33:
                    0b:e8:18:b8:e8:29:96:61:e5:23:25:c1:67:d9:18:
                    99:b0:f0:ac:e1:38:4a:2f:01:2d:15:f0:d9:70:b1:
                    f8:e0:48:f4:ea:d4:01:e0:b0:b0:3b:ac:c7:b3:ec:
                    b4:91:21:96:3e:6b:69:c9:53:31:0d:cc:4b:3c:87:
                    0a:bb:9e:6e:0e:8c:4d:0e:38:e5:68:fb:c3:9b:27:
                    09:95:7b:43:2e:f0:28:f9:5e:80:0c:07:47:db:57:
                    b6:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:5C:3B:74:FB:5E:CD:46:B5:C9:66:22:5B:28:80:C8:34:F9:9C:A4
            X509v3 Authority Key Identifier:
                keyid:B2:76:3D:50:4C:5A:F9:FB:75:D9:AE:B6:07:24:22:F8:7A:1A:6B:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FC75C/9E14B5BE983611EFB97BD164762E951A/snY9UExa-ft12a62ByQi-Hoaa_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/snY9UExa-ft12a62ByQi-Hoaa_Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FC75C/9E14B5BE983611EFB97BD164762E951A/snY9UExa-ft12a62ByQi-Hoaa_Y.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:eb:a4:8e:c7:51:d4:8b:92:67:45:5c:e2:b5:01:ca:4c:d4:
         1c:b3:cc:94:d6:2a:e1:39:0e:bb:79:b9:85:6f:c8:9f:e8:c6:
         d3:01:42:f0:b4:26:f0:97:b9:de:38:bb:64:28:00:c6:4b:93:
         b8:dd:02:ca:e2:a4:e7:55:a9:fc:0b:ed:0b:26:33:fa:f8:47:
         b2:0e:b9:1e:86:07:12:68:1e:bc:50:13:a5:c2:79:69:31:ba:
         c9:e7:b5:06:b5:38:ae:29:7d:35:99:d8:88:8e:ee:e5:ce:95:
         a3:71:e4:75:21:05:b1:7f:f2:5b:8a:4f:8b:96:4a:42:1b:86:
         7c:24:91:91:c6:94:87:6e:df:8f:88:47:5c:20:34:06:c5:3f:
         e1:48:e6:b2:85:47:9b:f4:18:84:24:61:27:cf:b5:7d:92:0b:
         b9:20:85:10:0d:83:7b:09:5f:be:aa:73:23:eb:6f:f8:32:65:
         d9:7e:f6:0f:41:1c:7d:37:06:70:97:83:de:1d:48:06:8f:c5:
         9f:55:6c:56:af:8e:27:39:80:03:a4:e0:03:d9:f0:34:48:1f:
         53:b3:74:a9:19:9c:2e:84:75:0a:34:a5:48:c2:64:d0:13:5f:
         9d:de:04:60:61:be:14:68:2f:72:5d:aa:d8:1e:8f:60:bb:fe:
         7a:a5:d1:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:29:05 2026 by rpki-client