Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36180A1/4EB508143F5A11EFB5925070762E951A/0JparVoXc9hrHSbdXRxET8ys9uQ.mft
File:                     0JparVoXc9hrHSbdXRxET8ys9uQ.mft (raw, json)
Hash identifier:          F5oehioeJm5nqzuVWcmzYCQE13F9Zh9LxeuxTC7D3Aw=
Subject key identifier:   16:BB:C4:B4:8D:37:89:67:18:FE:41:EC:76:DF:CC:8C:D4:5C:C7:85
Authority key identifier: D0:9A:5A:AD:5A:17:73:D8:6B:1D:26:DD:5D:1C:44:4F:CC:AC:F6:E4
Certificate issuer:       /CN=F36180A1AF/serialNumber=D09A5AAD5A1773D86B1D26DD5D1C444FCCACF6E4
Certificate serial:       027C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/0JparVoXc9hrHSbdXRxET8ys9uQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36180A1/4EB508143F5A11EFB5925070762E951A/0JparVoXc9hrHSbdXRxET8ys9uQ.mft
Manifest number:          027C
Signing time:             Thu 26 Mar 2026 05:08:11 +0000
Manifest this update:     Thu 26 Mar 2026 05:08:10 +0000
Manifest next update:     Sat 28 Mar 2026 05:08:10 +0000
Files and hashes:         1: 0JparVoXc9hrHSbdXRxET8ys9uQ.crl (hash: ZtN9jOZYOLzzycbslt6UKsD0fyw00G29uigm05suW3o=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36180A1/4EB508143F5A11EFB5925070762E951A/0JparVoXc9hrHSbdXRxET8ys9uQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36180A1/4EB508143F5A11EFB5925070762E951A/0JparVoXc9hrHSbdXRxET8ys9uQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/0JparVoXc9hrHSbdXRxET8ys9uQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 636 (0x27c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36180A1AF, serialNumber=D09A5AAD5A1773D86B1D26DD5D1C444FCCACF6E4
        Validity
            Not Before: Mar 26 05:08:10 2026 GMT
            Not After : Mar 28 05:08:10 2026 GMT
        Subject: CN=69c4bf3b-2486
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:28:6d:59:1e:36:a3:0f:d2:94:72:d7:eb:4c:
                    03:e0:45:8b:9a:12:1b:6f:66:1a:56:38:3e:17:bd:
                    d8:11:a5:d6:a3:92:a3:2a:df:b3:22:c4:13:57:1f:
                    f4:9b:44:8f:f9:47:05:cb:c2:32:fc:a2:69:5f:32:
                    6b:68:e3:9f:fa:dd:1d:40:98:62:f3:41:8c:5a:5d:
                    cd:54:05:8b:d3:16:16:dc:e9:c3:b2:cf:b0:d0:ba:
                    13:ad:20:1a:a6:e5:96:02:53:07:8d:60:07:55:8a:
                    b8:6e:04:f1:20:e9:e2:65:a3:1b:69:5f:d2:6d:7b:
                    3f:5a:0b:6e:73:f0:ad:0e:66:0d:cf:a8:a7:44:78:
                    ec:b2:71:4c:23:85:7c:da:30:19:64:52:b2:ab:fd:
                    b6:84:79:64:03:7c:5c:cd:60:52:64:a8:6b:75:bf:
                    bc:dc:03:01:b4:af:85:b7:4a:c9:17:ee:7c:45:ff:
                    66:2b:d5:46:2a:fc:cd:15:63:b4:c5:ba:4e:bf:87:
                    8b:15:b8:f2:9c:8d:72:c9:cc:74:b8:53:f8:b2:95:
                    98:e4:c3:fc:fb:2e:99:7e:2e:f2:59:0d:e1:24:19:
                    1a:51:d0:64:43:b7:0a:24:ff:f1:9f:7e:6c:44:6d:
                    14:46:95:4f:36:c8:8e:32:34:61:1b:5e:67:d5:ae:
                    da:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:BB:C4:B4:8D:37:89:67:18:FE:41:EC:76:DF:CC:8C:D4:5C:C7:85
            X509v3 Authority Key Identifier:
                keyid:D0:9A:5A:AD:5A:17:73:D8:6B:1D:26:DD:5D:1C:44:4F:CC:AC:F6:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36180A1/4EB508143F5A11EFB5925070762E951A/0JparVoXc9hrHSbdXRxET8ys9uQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0JparVoXc9hrHSbdXRxET8ys9uQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36180A1/4EB508143F5A11EFB5925070762E951A/0JparVoXc9hrHSbdXRxET8ys9uQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:43:fc:12:a0:bd:ab:a2:40:12:cc:cf:99:50:01:1f:53:dd:
         a6:2f:51:b8:04:4a:a2:30:a7:0b:a0:8e:92:7d:d2:6b:32:b5:
         19:33:0e:ff:d9:87:13:14:7d:4d:d6:55:88:a6:98:26:ba:d0:
         bb:fe:1a:c6:d6:52:ec:b7:68:dd:d6:87:93:04:9c:06:eb:69:
         3a:a8:59:a7:60:2d:ab:92:0a:96:23:2f:e8:8a:17:cc:ae:2a:
         78:71:85:08:d1:b8:d8:fd:4b:16:70:67:bb:4d:58:47:d5:09:
         1b:f3:67:d7:10:5d:3e:80:cd:c0:12:b7:e8:c0:fd:1f:b3:a6:
         4c:05:2e:7f:75:27:44:a7:77:dc:ba:44:6d:8a:0d:5a:30:c2:
         87:b8:e8:98:c5:13:df:0b:5c:52:94:12:f7:8c:3a:63:92:14:
         62:d0:0a:0f:bc:aa:6a:16:78:a6:04:cc:e9:38:55:2f:39:5f:
         fc:16:4e:e6:6b:5f:b0:d8:48:6c:cb:95:73:53:fd:d9:02:8e:
         7f:a8:57:17:cc:bc:66:71:b5:13:08:48:98:8b:e8:a2:c2:0b:
         ba:1d:89:a7:2c:1a:54:7b:0f:c5:7d:dd:16:0d:7e:e1:86:eb:
         54:e5:20:fd:91:89:b6:0b:63:dd:f7:ad:87:d6:5e:3e:ef:33:
         63:5c:2f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:50:29 2026 by rpki-client