Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3615A48/460D3588043211EE9946265C4AD9E6FC/2GE7731yVWdaZKmo4qXSb98uXG4.mft
File:                     2GE7731yVWdaZKmo4qXSb98uXG4.mft (raw, json)
Hash identifier:          AJDzgjoowOQCOyoTFxA46ecb/BAenWMOyZOcRjF5KzQ=
Subject key identifier:   07:3E:F9:B8:CA:5B:12:4F:6C:78:EA:DD:57:3C:4D:C8:2F:A1:55:12
Authority key identifier: D8:61:3B:EF:7D:72:55:67:5A:64:A9:A8:E2:A5:D2:6F:DF:2E:5C:6E
Certificate issuer:       /CN=F3615A48AF/serialNumber=D8613BEF7D7255675A64A9A8E2A5D26FDF2E5C6E
Certificate serial:       041C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/2GE7731yVWdaZKmo4qXSb98uXG4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3615A48/460D3588043211EE9946265C4AD9E6FC/2GE7731yVWdaZKmo4qXSb98uXG4.mft
Manifest number:          041B
Signing time:             Thu 26 Mar 2026 04:04:34 +0000
Manifest this update:     Thu 26 Mar 2026 04:04:33 +0000
Manifest next update:     Sat 28 Mar 2026 04:04:33 +0000
Files and hashes:         1: 2GE7731yVWdaZKmo4qXSb98uXG4.crl (hash: 3PLB0XzW1nlUsSmtHvto4f9cNuIfp4NCEcS1M7Ri7Us=)
                          2: A4E38B880D4211EFBFAE0F6C017001B1.roa (hash: U373km8ThmQ4tEdHpVbSUiU0V187z85GTRJnfELwn7k=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3615A48/460D3588043211EE9946265C4AD9E6FC/2GE7731yVWdaZKmo4qXSb98uXG4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3615A48/460D3588043211EE9946265C4AD9E6FC/2GE7731yVWdaZKmo4qXSb98uXG4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/2GE7731yVWdaZKmo4qXSb98uXG4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1052 (0x41c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3615A48AF, serialNumber=D8613BEF7D7255675A64A9A8E2A5D26FDF2E5C6E
        Validity
            Not Before: Mar 26 04:04:33 2026 GMT
            Not After : Mar 28 04:04:33 2026 GMT
        Subject: CN=69c4b052-5fb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ae:f8:c4:7b:3d:9b:aa:02:59:c4:a7:2f:94:
                    71:e6:71:18:04:76:82:30:d9:68:2f:ae:37:ef:61:
                    8f:20:a1:9a:fd:0c:07:36:ce:67:3e:a1:f0:4a:bd:
                    c0:75:8f:1b:d4:67:18:f2:61:8f:9a:6f:cf:d5:19:
                    9e:cd:c6:c7:07:d7:b6:b0:ba:e9:2e:97:66:b3:70:
                    81:38:5d:cd:f5:6f:b2:0d:aa:86:13:3c:fe:d4:c4:
                    24:5d:01:c4:4b:ae:2f:4b:16:9e:8d:6d:1d:eb:3d:
                    f7:2e:43:67:0f:45:f3:fa:60:23:55:72:5d:41:9b:
                    43:ce:9c:6b:b7:c0:19:08:2d:45:cc:ef:00:70:0b:
                    f1:1a:a5:16:1f:27:4b:71:18:c1:8d:a4:1c:8a:ff:
                    19:7b:b7:bd:6a:c6:30:02:23:66:ef:ec:cf:28:ce:
                    fd:1a:52:66:d5:84:4f:7f:93:01:71:14:2d:73:ef:
                    84:eb:d8:db:ed:55:44:e1:d6:fa:c0:ff:c7:4a:8f:
                    5c:38:e8:eb:1e:28:00:12:f6:8c:aa:ce:f8:97:11:
                    d8:b8:73:c2:37:d8:1f:fb:4e:12:8d:8c:a9:9c:dc:
                    6e:eb:40:66:0e:2d:4e:49:78:3e:48:19:94:00:a5:
                    93:32:d2:14:82:4f:89:45:4b:85:36:f4:74:dd:3d:
                    05:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:3E:F9:B8:CA:5B:12:4F:6C:78:EA:DD:57:3C:4D:C8:2F:A1:55:12
            X509v3 Authority Key Identifier:
                keyid:D8:61:3B:EF:7D:72:55:67:5A:64:A9:A8:E2:A5:D2:6F:DF:2E:5C:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3615A48/460D3588043211EE9946265C4AD9E6FC/2GE7731yVWdaZKmo4qXSb98uXG4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2GE7731yVWdaZKmo4qXSb98uXG4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3615A48/460D3588043211EE9946265C4AD9E6FC/2GE7731yVWdaZKmo4qXSb98uXG4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:13:af:4b:86:3c:b4:0a:c2:21:d5:da:14:e9:ff:7f:e4:6f:
         2b:2b:91:e2:56:f0:81:9b:6c:f8:0e:6e:d7:3b:bc:b1:6e:72:
         93:4c:38:f9:f9:e3:d0:12:4a:36:18:c8:21:7f:04:73:c0:58:
         01:d0:ce:8a:06:86:3e:dc:18:87:0e:de:26:16:af:05:6d:ca:
         48:5a:d7:20:3a:4f:7a:fd:f4:c0:0f:b0:36:28:3d:4b:2e:61:
         75:54:3c:70:2d:54:7d:e8:74:03:4a:f6:6a:05:60:c5:f3:00:
         c5:33:0c:e7:b6:68:02:7d:cd:1a:8c:ca:40:17:47:c5:b7:2e:
         ae:36:76:05:33:db:29:94:5c:3f:1e:17:80:5d:ab:92:be:58:
         40:aa:09:77:81:f1:e6:9e:0e:ec:a7:46:18:f1:26:ac:f8:1c:
         c8:7f:3f:8e:26:e3:6d:24:be:d7:cc:20:fb:2d:e5:98:a4:f4:
         b4:07:f4:fe:2f:6a:23:05:2b:f5:10:35:b5:83:94:52:10:f5:
         94:3c:25:9b:cd:25:42:79:b4:ca:17:fb:c2:0e:ad:c2:98:15:
         02:65:2f:02:e9:48:96:90:cd:fe:09:12:06:02:69:7d:42:b5:
         f3:47:86:73:9d:fd:df:f1:4a:d2:d0:34:47:ee:f2:33:70:62:
         c2:fc:0f:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:38:19 2026 by rpki-client