Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361F0D8/DFB88F80A3BC11F0AC8272E5DAE4EC9C/yDmJhjJn0TZLxz9143zW0rf-yYc.mft
File:                     yDmJhjJn0TZLxz9143zW0rf-yYc.mft (raw, json)
Hash identifier:          aT5YD/Du5ginUNgQpvAE+dLxAa8MarOenmqedxFZKbI=
Subject key identifier:   46:57:8D:04:88:FB:5E:CE:27:C8:26:09:4D:C3:09:61:A2:F3:52:87
Authority key identifier: C8:39:89:86:32:67:D1:36:4B:C7:3F:75:E3:7C:D6:D2:B7:FE:C9:87
Certificate issuer:       /CN=F361F0D8AF/serialNumber=C83989863267D1364BC73F75E37CD6D2B7FEC987
Certificate serial:       B3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/yDmJhjJn0TZLxz9143zW0rf-yYc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361F0D8/DFB88F80A3BC11F0AC8272E5DAE4EC9C/yDmJhjJn0TZLxz9143zW0rf-yYc.mft
Manifest number:          B1
Signing time:             Thu 26 Mar 2026 06:14:56 +0000
Manifest this update:     Thu 26 Mar 2026 06:14:55 +0000
Manifest next update:     Sat 28 Mar 2026 06:14:55 +0000
Files and hashes:         1: yDmJhjJn0TZLxz9143zW0rf-yYc.crl (hash: 0sFz7TmcHhrUicFMC+XGfVZDIiy4aUy802kYZM/1mV4=)
                          2: 8FDC3D26A3BD11F0B640C8E9DAE4EC9C.roa (hash: z+EMCGVRvbS1M60Ygkphk04UU0Xnx+NfxQ7EP0ilmi0=)
                          3: 5598B34AA8D311F09951D4DFDAE4EC9C.roa (hash: ekkmLGUII3HkbjQJ5DqbrnE5zNaEvepsyMeJezGqRJY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361F0D8/DFB88F80A3BC11F0AC8272E5DAE4EC9C/yDmJhjJn0TZLxz9143zW0rf-yYc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361F0D8/DFB88F80A3BC11F0AC8272E5DAE4EC9C/yDmJhjJn0TZLxz9143zW0rf-yYc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/yDmJhjJn0TZLxz9143zW0rf-yYc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 179 (0xb3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361F0D8AF, serialNumber=C83989863267D1364BC73F75E37CD6D2B7FEC987
        Validity
            Not Before: Mar 26 06:14:55 2026 GMT
            Not After : Mar 28 06:14:55 2026 GMT
        Subject: CN=69c4cee0-b4dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:05:31:cd:5b:ce:d1:9b:51:35:f8:57:84:48:
                    87:af:19:81:88:89:0c:3e:07:30:b2:66:95:0c:fe:
                    b0:74:14:0f:23:1a:65:b6:72:01:64:da:3f:b5:8c:
                    14:96:57:ba:b7:33:6a:7b:e8:5e:40:a7:21:0e:db:
                    dd:4a:1f:b7:2e:1e:d8:67:54:86:48:d9:f0:77:b0:
                    8a:fd:1d:d4:46:59:f2:33:71:cc:aa:ab:eb:08:54:
                    88:9e:c0:46:c7:e7:62:69:c8:49:a2:5c:81:c8:0f:
                    08:1d:64:a2:d7:2a:db:e5:ed:4c:d7:d4:a5:52:ae:
                    84:60:64:28:c1:fc:f1:4f:bf:5a:81:cf:a8:f6:53:
                    ae:c1:87:62:72:eb:54:b6:e6:b7:08:5b:a2:e7:3b:
                    fb:a3:aa:c6:d2:69:87:d2:2d:f4:1f:85:38:1d:2d:
                    24:77:a7:1b:7c:d2:0b:e9:0a:3e:f7:c7:0a:7f:b0:
                    1c:65:eb:c0:e8:ac:9d:d0:47:82:7e:7c:b7:df:9a:
                    93:17:c3:f1:60:27:2a:57:ea:07:20:4d:65:19:a4:
                    89:40:65:0c:bf:9b:51:6d:45:d0:3b:b6:3a:fa:60:
                    b8:72:83:0f:bb:3d:1f:6e:7b:c3:84:3d:81:36:22:
                    b0:b2:05:e7:d7:19:66:47:40:04:f8:5f:7c:6f:66:
                    dd:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:57:8D:04:88:FB:5E:CE:27:C8:26:09:4D:C3:09:61:A2:F3:52:87
            X509v3 Authority Key Identifier:
                keyid:C8:39:89:86:32:67:D1:36:4B:C7:3F:75:E3:7C:D6:D2:B7:FE:C9:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361F0D8/DFB88F80A3BC11F0AC8272E5DAE4EC9C/yDmJhjJn0TZLxz9143zW0rf-yYc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/yDmJhjJn0TZLxz9143zW0rf-yYc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361F0D8/DFB88F80A3BC11F0AC8272E5DAE4EC9C/yDmJhjJn0TZLxz9143zW0rf-yYc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:46:13:04:26:c4:65:36:cf:72:ec:89:c4:6c:45:b8:0d:7d:
         e5:48:03:55:4a:04:69:28:c3:3e:ad:42:85:93:f1:d7:09:fc:
         c0:43:61:76:2a:05:1f:e1:8e:61:69:2f:88:84:f3:bf:44:12:
         26:cd:2a:d4:53:13:fc:87:62:fa:de:a3:11:e7:d9:91:9e:bf:
         79:22:3d:3f:20:df:dc:7c:37:29:17:2f:6b:94:8d:44:83:5b:
         0a:08:a8:45:6d:8b:a3:d5:44:67:e2:70:42:ff:a4:78:7d:68:
         fb:c5:03:f9:f0:d4:ec:3e:de:7e:88:36:c9:1d:cc:8e:ae:a8:
         91:fd:94:48:6f:f5:41:dc:be:44:7e:9c:6c:5e:54:6e:33:15:
         fd:45:d8:44:1b:43:95:a2:08:26:41:6b:20:b4:27:b0:5a:8a:
         38:88:57:28:25:5d:91:ba:cb:7f:1a:bb:b7:c6:ea:50:bf:04:
         50:44:bf:dd:11:3a:4e:15:54:a1:60:b8:6f:07:ce:15:4e:3b:
         1d:25:48:ed:c9:3a:01:8e:0b:43:7f:47:53:3e:61:48:03:27:
         d0:88:f4:28:97:03:d3:c3:59:3f:7d:2e:95:b7:61:cc:39:3b:
         74:d4:b1:59:05:de:3d:98:e4:e7:3a:6b:6a:6e:17:3f:ee:a9:
         cc:06:a5:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:56:58 2026 by rpki-client