Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36217DF/54BDBB24E93811EF998A6679762E951A/OE9qPQyKkcXy3zehH1p7nFJb7hY.mft
File:                     OE9qPQyKkcXy3zehH1p7nFJb7hY.mft (raw, json)
Hash identifier:          GC3v6UNDZ9LZ4YTe2IzT7EYMa1Kw0+2artUodua1wKo=
Subject key identifier:   2B:A0:21:2F:A5:8E:9E:09:11:4F:79:95:10:F4:40:11:53:8B:55:D6
Authority key identifier: 38:4F:6A:3D:0C:8A:91:C5:F2:DF:37:A1:1F:5A:7B:9C:52:5B:EE:16
Certificate issuer:       /CN=F36217DFAF/serialNumber=384F6A3D0C8A91C5F2DF37A11F5A7B9C525BEE16
Certificate serial:       01A8
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/OE9qPQyKkcXy3zehH1p7nFJb7hY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36217DF/54BDBB24E93811EF998A6679762E951A/OE9qPQyKkcXy3zehH1p7nFJb7hY.mft
Manifest number:          01A4
Signing time:             Thu 26 Mar 2026 05:45:50 +0000
Manifest this update:     Thu 26 Mar 2026 05:45:49 +0000
Manifest next update:     Sat 28 Mar 2026 05:45:49 +0000
Files and hashes:         1: OE9qPQyKkcXy3zehH1p7nFJb7hY.crl (hash: /vEViFCy4bjz4DR75fYBTIguEd7uoSG2C6il30vTBnE=)
                          2: 6A185994FCEB11F0A5BF2AA7DAE4EC9C.roa (hash: HbhtB0uC4Bt3yw5ALLFqBczkyPmNpkmfX/VyCDRCkCo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36217DF/54BDBB24E93811EF998A6679762E951A/OE9qPQyKkcXy3zehH1p7nFJb7hY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36217DF/54BDBB24E93811EF998A6679762E951A/OE9qPQyKkcXy3zehH1p7nFJb7hY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/OE9qPQyKkcXy3zehH1p7nFJb7hY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 424 (0x1a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36217DFAF, serialNumber=384F6A3D0C8A91C5F2DF37A11F5A7B9C525BEE16
        Validity
            Not Before: Mar 26 05:45:49 2026 GMT
            Not After : Mar 28 05:45:49 2026 GMT
        Subject: CN=69c4c80e-0a49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d4:43:19:b9:15:be:d3:d6:c1:cb:91:c1:af:
                    a4:92:f1:5c:7b:e5:31:17:16:34:4c:5d:45:01:b1:
                    bc:f6:32:3a:b8:2e:70:82:8d:05:4b:60:b7:9b:8f:
                    27:a3:24:14:7d:7e:19:08:e2:9a:9d:08:b2:5b:4a:
                    3d:e2:91:47:07:52:a7:e1:e5:91:b9:b2:79:b0:95:
                    03:e5:33:04:bb:5a:41:5d:34:72:0c:2d:53:cc:e4:
                    1a:64:8b:61:b4:9b:a5:ac:db:26:6a:a4:ad:0f:30:
                    92:52:d4:7c:ad:bf:97:69:5d:ad:83:16:1f:05:81:
                    f4:56:46:2b:c6:05:01:16:7e:2e:03:ac:e0:66:58:
                    93:02:fe:4e:1b:87:d9:9d:63:e4:28:5b:19:c1:0b:
                    7c:1b:90:bf:08:9d:c6:bd:18:d7:63:9e:27:e2:a3:
                    0e:68:be:ea:ed:05:56:11:d2:a8:9d:57:74:c4:ba:
                    a0:57:e6:62:d8:64:28:56:4b:91:6a:b6:88:3a:22:
                    53:18:fb:30:d6:40:60:bc:18:3d:53:f7:96:8c:10:
                    31:54:63:81:89:00:f2:f6:a8:26:1f:ae:cc:a9:c8:
                    da:d0:1a:9e:19:36:65:61:29:fb:8d:35:78:df:ec:
                    ae:64:09:ec:8d:fa:5d:c2:32:6c:75:38:08:bb:49:
                    51:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:A0:21:2F:A5:8E:9E:09:11:4F:79:95:10:F4:40:11:53:8B:55:D6
            X509v3 Authority Key Identifier:
                keyid:38:4F:6A:3D:0C:8A:91:C5:F2:DF:37:A1:1F:5A:7B:9C:52:5B:EE:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36217DF/54BDBB24E93811EF998A6679762E951A/OE9qPQyKkcXy3zehH1p7nFJb7hY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OE9qPQyKkcXy3zehH1p7nFJb7hY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36217DF/54BDBB24E93811EF998A6679762E951A/OE9qPQyKkcXy3zehH1p7nFJb7hY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:d3:d6:ea:e2:83:c5:67:2e:3d:80:98:d0:9c:97:a6:8d:83:
         f1:c6:63:f9:c1:4c:7a:a2:ba:83:62:df:9a:4a:8b:ab:f7:d0:
         f4:c4:ae:68:36:2c:74:ce:7d:29:bd:33:fb:b0:21:9f:d0:f6:
         49:8c:79:5f:b8:04:2d:a4:cb:83:d9:9f:cd:47:a2:d6:af:d9:
         7c:46:bd:f3:b2:9c:34:62:e2:60:8f:f0:11:54:5a:82:45:1f:
         4b:96:2e:41:52:50:43:85:2d:91:54:5c:e2:e7:93:64:b9:cf:
         ca:0d:db:72:34:85:9c:1d:a6:26:b2:88:d7:d1:31:e8:ad:56:
         23:94:f5:c8:5b:d3:8f:79:55:1c:19:f5:8d:f5:8c:49:fd:1f:
         4e:aa:67:13:29:9d:c2:ab:74:70:ce:e3:cc:ab:ce:86:57:55:
         01:9e:9b:ed:c5:46:fe:4d:bb:fc:d5:7a:63:79:e6:50:0b:a2:
         da:72:bc:38:04:07:d6:8f:42:79:b4:08:48:4c:f7:72:a4:8b:
         c6:59:ab:99:9d:37:2c:36:16:6e:6c:cc:5d:bc:f3:e2:4d:21:
         07:f8:3f:23:53:d7:be:b5:d0:bd:3d:dc:ba:b6:73:8a:3a:10:
         36:bc:76:d8:c9:d0:77:a8:29:25:df:32:5d:c2:59:c1:49:2a:
         d5:47:45:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:52:28 2026 by rpki-client