Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36145DB/5530F6D8CA2811ED94556695F1222468/BzRbRCXqohbQO3DogD88w6vhdRw.mft
File:                     BzRbRCXqohbQO3DogD88w6vhdRw.mft (raw, json)
Hash identifier:          Kr0/f5E8qBVBs+xW2oyiuYfEmGyDb0qDp+V33iSBVBk=
Subject key identifier:   76:3C:41:15:CB:4F:68:BF:8B:F2:C8:1F:05:09:D2:CB:3D:AD:17:39
Authority key identifier: 07:34:5B:44:25:EA:A2:16:D0:3B:70:E8:80:3F:3C:C3:AB:E1:75:1C
Certificate issuer:       /CN=F36145DBAF/serialNumber=07345B4425EAA216D03B70E8803F3CC3ABE1751C
Certificate serial:       0470
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/BzRbRCXqohbQO3DogD88w6vhdRw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36145DB/5530F6D8CA2811ED94556695F1222468/BzRbRCXqohbQO3DogD88w6vhdRw.mft
Manifest number:          046D
Signing time:             Thu 26 Mar 2026 03:55:53 +0000
Manifest this update:     Thu 26 Mar 2026 03:55:52 +0000
Manifest next update:     Sat 28 Mar 2026 03:55:52 +0000
Files and hashes:         1: BzRbRCXqohbQO3DogD88w6vhdRw.crl (hash: yzecIdiU2pqT03aRp2PB6C0XnCuGFUyjnbHORUm7IPw=)
                          2: E2E0E31406A011F1B28491C7DAE4EC9C.roa (hash: zfZ7SQHe7ntDVmEKHJbxTZVYNg5h50utum1HjMBco0w=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36145DB/5530F6D8CA2811ED94556695F1222468/BzRbRCXqohbQO3DogD88w6vhdRw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36145DB/5530F6D8CA2811ED94556695F1222468/BzRbRCXqohbQO3DogD88w6vhdRw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/BzRbRCXqohbQO3DogD88w6vhdRw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1136 (0x470)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36145DBAF, serialNumber=07345B4425EAA216D03B70E8803F3CC3ABE1751C
        Validity
            Not Before: Mar 26 03:55:52 2026 GMT
            Not After : Mar 28 03:55:52 2026 GMT
        Subject: CN=69c4ae48-bd3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:cc:17:6e:21:b1:ec:80:48:cc:69:f7:c1:86:
                    3f:78:9a:1f:26:4d:be:0f:a2:d6:64:c1:21:c5:7f:
                    43:ce:cb:59:f8:f6:9f:2c:b6:c3:76:ef:2d:e4:7f:
                    cb:2f:6d:c9:e0:09:ee:f2:db:16:bf:e4:cc:32:7a:
                    2c:ae:1a:ba:a5:c1:97:ec:15:18:15:a9:c2:a5:5c:
                    ad:e6:5b:f2:8c:bf:9c:6f:a8:4e:7b:dc:e1:dc:d3:
                    c6:00:9b:da:5c:d1:50:86:90:de:86:d9:ae:0c:c8:
                    b3:52:67:2d:b3:e0:d1:b1:c7:fb:5f:22:79:29:4b:
                    11:52:cc:d3:b2:f0:1f:32:fc:a6:78:6c:cd:66:da:
                    6b:17:92:e8:7a:a2:b2:bf:38:c1:47:d1:e0:59:7f:
                    d4:ed:4d:a3:ff:82:8f:ed:a0:b5:4a:4c:59:1b:73:
                    c7:e8:a8:e4:fc:d2:de:46:19:ba:97:08:b4:7e:e8:
                    2d:14:ad:79:58:fd:7d:2f:6a:19:0c:47:69:2f:12:
                    c1:b5:d7:d6:af:d3:66:7b:58:10:9a:26:70:b9:d4:
                    b4:4d:90:61:ac:f5:0a:36:d7:b9:b8:6c:63:f0:28:
                    32:56:17:3a:f1:4b:2c:7a:bb:00:d9:8e:f3:51:79:
                    ed:df:2b:8b:a4:62:b8:d6:b9:59:6f:c9:df:9b:14:
                    f4:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:3C:41:15:CB:4F:68:BF:8B:F2:C8:1F:05:09:D2:CB:3D:AD:17:39
            X509v3 Authority Key Identifier:
                keyid:07:34:5B:44:25:EA:A2:16:D0:3B:70:E8:80:3F:3C:C3:AB:E1:75:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36145DB/5530F6D8CA2811ED94556695F1222468/BzRbRCXqohbQO3DogD88w6vhdRw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/BzRbRCXqohbQO3DogD88w6vhdRw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36145DB/5530F6D8CA2811ED94556695F1222468/BzRbRCXqohbQO3DogD88w6vhdRw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:b8:52:e7:9a:f8:dd:d1:59:ac:c3:82:ae:c2:58:c5:2f:25:
         f9:2c:69:f3:3a:e7:3a:a3:b0:99:fd:ef:d5:f2:e6:c4:ef:04:
         47:e1:ee:65:7f:b2:67:46:a5:cd:39:33:3e:59:5f:98:a9:89:
         e6:95:e1:e7:e4:6e:c1:f7:f2:a7:0b:0c:f7:05:c3:a1:39:62:
         15:82:5b:b4:a1:55:e0:71:3d:57:3e:e3:ff:97:f3:49:26:ba:
         70:87:1b:7f:33:85:42:eb:12:e2:28:04:3a:c9:38:b8:be:4d:
         d1:9c:17:41:67:16:c1:af:2a:f3:62:02:66:6d:6d:62:50:6d:
         e9:95:6b:7a:1e:26:f8:d1:86:ec:19:e2:ce:88:e1:a3:30:ce:
         3a:e8:6a:54:19:c2:40:ae:00:f3:3d:f5:29:fa:99:ca:48:91:
         ae:2d:d5:25:05:a6:dc:94:1c:9c:36:9f:9a:6e:dc:2d:a0:ba:
         f8:86:5f:6b:b4:31:d1:48:57:dd:42:99:b9:78:71:0c:a6:b5:
         24:5d:f8:3e:f6:24:29:71:3c:d9:8b:14:6a:a9:ce:ac:3a:02:
         af:f9:af:98:5f:73:4d:54:46:01:37:06:5c:8d:44:75:7c:eb:
         94:77:22:b8:40:73:34:83:ab:4e:d3:43:86:be:44:8e:40:27:
         e4:95:cb:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:48:47 2026 by rpki-client