Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361D9FB/0B03F3D696D011F0857559ACDAE4EC9C/25_jdH_rhCaNYEmeC74Pm_Q7LqM.mft
File:                     25_jdH_rhCaNYEmeC74Pm_Q7LqM.mft (raw, json)
Hash identifier:          zMej2vW3mHzcqPsn8Qoy0ZE8OS3X3jUnkW1IDZNTEiY=
Subject key identifier:   9C:AC:28:C4:CB:D9:F8:17:28:EF:57:62:68:96:8E:B2:50:89:3F:BA
Authority key identifier: DB:9F:E3:74:7F:EB:84:26:8D:60:49:9E:0B:BE:0F:9B:F4:3B:2E:A3
Certificate issuer:       /CN=F361D9FBAF/serialNumber=DB9FE3747FEB84268D60499E0BBE0F9BF43B2EA3
Certificate serial:       C0
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/25_jdH_rhCaNYEmeC74Pm_Q7LqM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361D9FB/0B03F3D696D011F0857559ACDAE4EC9C/25_jdH_rhCaNYEmeC74Pm_Q7LqM.mft
Manifest number:          BF
Signing time:             Thu 26 Mar 2026 06:13:40 +0000
Manifest this update:     Thu 26 Mar 2026 06:13:39 +0000
Manifest next update:     Sat 28 Mar 2026 06:13:39 +0000
Files and hashes:         1: 25_jdH_rhCaNYEmeC74Pm_Q7LqM.crl (hash: De+IWcFyTbHzQorM5KxTyvio//tgI6csWoyK9czzZ6o=)
                          2: F0E25D4296D111F0B15D59B9DAE4EC9C.roa (hash: vnm/ifaL7Ebf2vByDeiWlvUsn0dciMWBz8R2eRYAChk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361D9FB/0B03F3D696D011F0857559ACDAE4EC9C/25_jdH_rhCaNYEmeC74Pm_Q7LqM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361D9FB/0B03F3D696D011F0857559ACDAE4EC9C/25_jdH_rhCaNYEmeC74Pm_Q7LqM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/25_jdH_rhCaNYEmeC74Pm_Q7LqM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 192 (0xc0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361D9FBAF, serialNumber=DB9FE3747FEB84268D60499E0BBE0F9BF43B2EA3
        Validity
            Not Before: Mar 26 06:13:39 2026 GMT
            Not After : Mar 28 06:13:39 2026 GMT
        Subject: CN=69c4ce94-e653
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d5:0c:b6:9d:39:53:cb:6e:ce:94:92:82:0f:
                    4b:e0:0e:3c:b4:28:e8:aa:30:68:84:88:fb:63:c7:
                    90:f2:27:92:80:e1:03:8a:01:12:d5:d7:a7:03:15:
                    d4:82:e5:d1:51:cb:7b:9b:53:a1:85:62:67:18:24:
                    06:05:cb:7a:66:d4:8d:a5:c6:2a:ce:6c:01:e4:f8:
                    03:75:82:85:2c:c8:29:11:94:86:9d:c9:0a:06:3b:
                    3d:68:f1:56:e9:15:d4:6a:9e:83:12:b4:3f:75:1f:
                    f1:cb:88:dc:48:c4:1a:b6:c7:4a:bb:54:59:de:ad:
                    91:6d:d3:d5:d4:da:54:18:49:75:67:40:ff:b7:6a:
                    c4:9b:da:f9:34:f2:14:85:54:ec:f4:c6:af:82:ba:
                    32:f1:42:fb:a2:fe:13:3f:b5:1b:ca:99:a8:0b:56:
                    e6:cf:a4:ff:da:b9:87:d7:0f:c4:1c:59:fc:9e:47:
                    7e:79:4f:64:07:35:c5:8f:f2:14:10:a4:a3:ec:4e:
                    b1:62:28:2a:45:da:0c:a6:19:c4:58:aa:74:48:07:
                    91:32:52:e4:16:60:24:84:6d:9f:8a:fd:1f:f5:d0:
                    12:c1:c3:4e:02:bf:77:f0:bc:81:9e:72:f1:f9:d2:
                    82:96:ad:20:26:3c:4c:d8:3f:cb:56:83:af:cf:30:
                    22:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:AC:28:C4:CB:D9:F8:17:28:EF:57:62:68:96:8E:B2:50:89:3F:BA
            X509v3 Authority Key Identifier:
                keyid:DB:9F:E3:74:7F:EB:84:26:8D:60:49:9E:0B:BE:0F:9B:F4:3B:2E:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361D9FB/0B03F3D696D011F0857559ACDAE4EC9C/25_jdH_rhCaNYEmeC74Pm_Q7LqM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/25_jdH_rhCaNYEmeC74Pm_Q7LqM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361D9FB/0B03F3D696D011F0857559ACDAE4EC9C/25_jdH_rhCaNYEmeC74Pm_Q7LqM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:ae:6e:4b:fb:bc:04:43:30:cc:bb:55:32:3e:45:68:8f:54:
         ec:16:aa:51:be:50:1f:f4:b2:f6:30:ec:a2:e5:74:db:e6:67:
         09:4e:43:b3:b8:15:ff:58:48:83:56:ce:92:a6:0d:2a:98:e2:
         ca:1d:fe:2f:21:30:e5:54:ba:35:2c:65:15:03:85:b3:9e:79:
         11:7c:bc:3a:66:a9:0d:5b:e1:df:b2:43:67:c8:78:25:4a:74:
         be:2a:2e:a4:2e:22:cb:5a:5e:4a:9d:c9:8b:33:a8:82:7e:b2:
         91:cc:af:7d:f7:37:51:ee:7a:04:b0:bb:c0:10:17:ee:c8:69:
         87:a2:37:69:d5:80:f4:d7:91:11:d3:7a:46:49:95:bd:39:e9:
         4b:6a:04:c8:73:38:1a:31:5f:cc:88:7c:aa:6b:8f:ca:c5:ab:
         cc:38:e4:67:62:2b:c7:c8:31:2a:c4:df:04:a9:b1:b7:fc:23:
         d9:b1:1b:6c:61:32:5a:f3:d4:96:a7:31:c4:f5:97:81:0a:62:
         57:1d:f5:b0:4f:52:ab:10:0f:36:35:42:36:79:73:3a:b3:13:
         f9:8d:fc:6b:b8:48:b3:d9:d4:58:5b:f0:a0:9e:97:2f:0d:ea:
         ef:30:0d:f2:35:a0:b6:37:9d:d7:95:60:2b:db:1c:ed:1d:38:
         fb:9b:38:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:58:13 2026 by rpki-client