Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.mft
File:                     QS0Z-aThegTQm63JAqsLCQgk6tc.mft (raw, json)
Hash identifier:          m3/JtrKAMsveMDsKFgzHS2kEO8d910l+/SkPowAUwEM=
Subject key identifier:   F3:C7:50:C0:42:BC:13:08:55:8B:D7:35:34:71:E9:1F:72:FD:D0:C3
Authority key identifier: 41:2D:19:F9:A4:E1:7A:04:D0:9B:AD:C9:02:AB:0B:09:08:24:EA:D7
Certificate issuer:       /CN=F36FFD1EAF/serialNumber=412D19F9A4E17A04D09BADC902AB0B090824EAD7
Certificate serial:       0F9C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QS0Z-aThegTQm63JAqsLCQgk6tc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.mft
Manifest number:          0F9B
Signing time:             Fri 17 Apr 2026 00:52:44 +0000
Manifest this update:     Fri 17 Apr 2026 00:52:43 +0000
Manifest next update:     Sun 19 Apr 2026 00:52:43 +0000
Files and hashes:         1: QS0Z-aThegTQm63JAqsLCQgk6tc.crl (hash: MuRQeVaULU+GyUXfC02e3UA8heQicJOX86H+Ga/4ttg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/QS0Z-aThegTQm63JAqsLCQgk6tc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 00:52:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3996 (0xf9c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FFD1EAF, serialNumber=412D19F9A4E17A04D09BADC902AB0B090824EAD7
        Validity
            Not Before: Apr 17 00:52:43 2026 GMT
            Not After : Apr 19 00:52:43 2026 GMT
        Subject: CN=69e1845c-4839
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:98:51:0a:c0:ca:01:ca:53:13:94:82:0d:fb:
                    38:37:d9:b9:01:d5:97:92:f0:e8:8d:46:ad:7d:9a:
                    40:96:22:cd:f7:55:8d:38:7b:a3:2e:a6:e1:f5:6a:
                    0f:0e:79:44:4a:fd:53:b2:d2:da:91:ec:6b:b9:ce:
                    78:b5:7a:a6:38:b5:b2:5d:85:e2:36:64:fb:dc:fa:
                    4f:98:e4:c0:f2:46:f6:41:b5:f6:5e:7f:7d:bb:d0:
                    eb:07:d5:2c:ef:5c:a8:75:a7:b7:ca:29:14:a4:a7:
                    7b:01:5b:61:ca:c1:c2:16:18:f6:72:f6:bb:bf:dc:
                    30:a8:d5:05:54:1e:ac:80:61:45:60:38:49:d8:0a:
                    93:85:70:8d:60:58:18:ff:4d:f7:fd:47:62:da:1c:
                    d3:f7:3b:31:60:e9:07:b6:42:0c:1b:76:be:85:1a:
                    b1:24:c4:22:92:f9:70:30:07:d9:13:e2:45:4a:df:
                    33:ee:71:89:15:b9:fb:6c:d6:7a:79:69:98:0d:a4:
                    a7:ac:d1:c9:be:a8:ed:31:05:98:40:9b:db:ef:b9:
                    42:36:63:0d:e0:f5:cc:59:08:27:fe:26:68:6a:a1:
                    44:a7:3e:26:59:04:51:10:d7:d8:fa:25:15:cf:60:
                    f7:56:58:52:0a:e2:97:8a:03:ff:8a:40:4d:a7:1d:
                    ad:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:C7:50:C0:42:BC:13:08:55:8B:D7:35:34:71:E9:1F:72:FD:D0:C3
            X509v3 Authority Key Identifier:
                keyid:41:2D:19:F9:A4:E1:7A:04:D0:9B:AD:C9:02:AB:0B:09:08:24:EA:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QS0Z-aThegTQm63JAqsLCQgk6tc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:73:59:40:00:fb:5f:9c:ca:95:ea:bb:3b:e6:fc:a4:64:a1:
         9b:52:e9:28:bf:3c:13:96:a1:32:bb:55:8d:96:cd:75:14:fd:
         b2:9c:94:7c:78:39:95:b5:25:df:8c:7a:3e:fd:c5:d2:0b:83:
         4d:ae:1d:23:2f:75:6b:50:53:a4:bc:98:a7:1b:0d:d3:4c:0f:
         72:a0:96:0e:0e:7d:71:21:d6:ac:64:3f:f8:0c:fc:43:b7:e1:
         26:d0:e2:bd:5e:75:d9:a5:9c:a4:5c:78:e1:cf:c4:c3:f8:d6:
         df:7d:8d:56:68:f9:69:d3:21:9f:85:17:0f:27:50:73:d4:01:
         ed:27:a8:d7:d5:2d:16:1c:ed:2e:35:ce:4e:5e:cf:c2:dd:94:
         d9:61:0c:5d:9a:70:7d:ce:51:20:8e:0d:43:25:e7:6a:71:09:
         24:80:ab:14:16:b6:be:fe:b8:d8:f4:9e:eb:27:0e:d3:7c:86:
         32:ef:65:be:88:68:61:27:c1:64:eb:1d:34:2e:c0:e4:b3:19:
         9c:5c:33:1d:9d:05:03:2d:c8:8a:8c:2d:b3:ac:f0:d4:c8:8c:
         54:50:06:b9:79:0a:e2:cf:72:77:d1:81:9c:4a:30:c9:5f:9d:
         ee:58:64:4e:69:65:0f:fe:b2:1e:07:45:27:16:e9:20:32:ec:
         1e:95:a4:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:07:18 2026 by rpki-client