Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36252A7/89497A60E38311E99E55F585F8AEA228/An4aRGPGhfvWOGP507I7rC2TsWg.mft
File:                     An4aRGPGhfvWOGP507I7rC2TsWg.mft (raw, json)
Hash identifier:          QFpevAsgoqBfBmakolsC+nV8jhCPYQOnZcFSNbqcLbI=
Subject key identifier:   2B:1A:D5:EB:7D:04:4D:3B:F4:F0:8F:03:56:C9:9A:1B:8A:3C:04:C0
Authority key identifier: 02:7E:1A:44:63:C6:85:FB:D6:38:63:F9:D3:B2:3B:AC:2D:93:B1:68
Certificate issuer:       /CN=F36252A7AF/serialNumber=027E1A4463C685FBD63863F9D3B23BAC2D93B168
Certificate serial:       0982
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/An4aRGPGhfvWOGP507I7rC2TsWg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36252A7/89497A60E38311E99E55F585F8AEA228/An4aRGPGhfvWOGP507I7rC2TsWg.mft
Manifest number:          097E
Signing time:             Thu 26 Mar 2026 01:47:20 +0000
Manifest this update:     Thu 26 Mar 2026 01:47:19 +0000
Manifest next update:     Sat 28 Mar 2026 01:47:19 +0000
Files and hashes:         1: An4aRGPGhfvWOGP507I7rC2TsWg.crl (hash: 7Iu69W//pJjW43HmBKIbI6Vse2fbaoJPZeSLos4NrsA=)
                          2: B2E0450EE3A911E99D048322F8AEA228.roa (hash: 9hAcLh1dvKVs2136J7HCIPg/BmbZ3SUhxACWArab3Io=)
                          3: E9F7B7D4E3A911E9BF86B122F8AEA228.roa (hash: 9COidhiFaVCAPV0UHswnXt+QzIn+TW+J/QQrjMlznyw=)
                          4: 34BC8634C70711ED87A7AD9EF1222468.roa (hash: jLffPLsCVmDn3eu+ZH7RN7a2yuNgI7fFi99PH05ncKE=)
                          5: CE979090E3A911E982D79922F8AEA228.roa (hash: ZUuGDNl5OtIqVt3JPAYRM2b5xFa0dAXmMX0QV9sXPf0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36252A7/89497A60E38311E99E55F585F8AEA228/An4aRGPGhfvWOGP507I7rC2TsWg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36252A7/89497A60E38311E99E55F585F8AEA228/An4aRGPGhfvWOGP507I7rC2TsWg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/An4aRGPGhfvWOGP507I7rC2TsWg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2434 (0x982)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36252A7AF, serialNumber=027E1A4463C685FBD63863F9D3B23BAC2D93B168
        Validity
            Not Before: Mar 26 01:47:19 2026 GMT
            Not After : Mar 28 01:47:19 2026 GMT
        Subject: CN=69c49028-da1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:af:d3:4c:7f:1e:66:8f:03:e1:27:f6:62:15:
                    a7:66:87:e8:a1:30:81:b5:3c:74:c5:70:94:92:ee:
                    e2:8c:5a:7e:bf:23:93:53:51:dc:c6:ed:17:14:e3:
                    77:3e:0e:0d:95:16:e6:05:08:6e:8f:d3:99:4a:0f:
                    70:38:02:a4:7a:17:1f:85:cb:38:57:d8:ec:6d:f9:
                    56:16:fc:e1:b3:22:6c:71:f5:7c:7c:6c:35:05:29:
                    c9:9e:ee:65:08:da:bd:fc:ae:2e:72:4f:97:a2:cd:
                    0e:61:de:8d:16:17:c3:90:0e:77:f1:d7:d8:f6:a4:
                    0e:62:eb:01:4a:f6:66:de:ad:34:a6:a0:2e:9c:f1:
                    1a:a2:14:8e:60:26:42:33:51:82:23:fd:28:dc:84:
                    de:5c:39:e5:13:a4:a5:3b:60:69:f7:a4:56:cc:18:
                    9c:ea:a8:98:58:f7:8d:c2:dc:ff:6c:02:5b:4a:9c:
                    b8:bc:c9:a1:34:4b:1a:32:de:7e:5f:e1:82:e4:9a:
                    b3:62:91:bd:5f:ac:a9:6c:70:b1:f1:3f:53:66:eb:
                    65:ea:fa:a5:ff:89:e9:0a:40:64:40:24:dd:55:93:
                    b1:b9:3f:bf:bc:ea:7b:19:c3:d2:18:dc:d3:a6:b6:
                    81:4e:56:b4:25:af:3e:68:56:e8:14:9d:13:b1:bf:
                    a0:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:1A:D5:EB:7D:04:4D:3B:F4:F0:8F:03:56:C9:9A:1B:8A:3C:04:C0
            X509v3 Authority Key Identifier:
                keyid:02:7E:1A:44:63:C6:85:FB:D6:38:63:F9:D3:B2:3B:AC:2D:93:B1:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36252A7/89497A60E38311E99E55F585F8AEA228/An4aRGPGhfvWOGP507I7rC2TsWg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/An4aRGPGhfvWOGP507I7rC2TsWg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36252A7/89497A60E38311E99E55F585F8AEA228/An4aRGPGhfvWOGP507I7rC2TsWg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:7f:9a:5f:2a:93:ba:84:ef:61:a3:28:1e:00:82:fc:e5:43:
         ae:d6:68:6d:f3:e0:e6:55:1e:d2:96:76:82:28:27:2d:06:51:
         db:c0:80:89:b1:72:0e:b7:4f:44:d8:86:68:91:16:ea:0f:58:
         52:b0:55:ff:bb:6d:90:72:db:cf:8e:a4:30:2a:3d:42:f6:69:
         97:ad:ee:84:7d:2a:88:6b:48:92:92:d1:08:6f:00:a6:b7:8b:
         1c:d5:3d:bb:27:30:52:a0:17:7c:69:69:a7:e3:29:1a:6e:51:
         71:ae:c8:6e:ab:2e:50:ef:2a:15:1e:0a:53:16:70:5b:4c:01:
         1d:f0:6c:15:7a:00:e0:38:ae:af:15:08:55:72:7e:06:79:a0:
         a6:06:38:5b:36:bd:cf:83:3c:5b:38:a7:ff:bc:8c:7b:bf:92:
         ad:8c:2d:fd:ac:5d:7b:85:d5:88:ee:56:65:df:d3:f7:35:2a:
         12:7f:ce:48:16:4a:d9:f4:20:c5:b5:c8:77:a1:cf:c1:9f:6e:
         d4:fc:9b:46:ba:6f:d0:87:e4:e4:08:79:e4:09:00:96:9a:38:
         fa:1d:b4:89:45:21:b3:42:e3:bc:b9:d6:90:5a:79:34:ed:d0:
         ca:a0:c8:75:45:a6:70:9a:5c:a2:12:3b:d2:7b:5e:91:ef:61:
         04:f4:70:9f
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCYIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MjUyQTdBRjExMC8GA1UEBRMoMDI3RTFBNDQ2M0M2ODVGQkQ2Mzg2M0Y5RDNCMjNC
QUMyRDkzQjE2ODAeFw0yNjAzMjYwMTQ3MTlaFw0yNjAzMjgwMTQ3MTlaMBgxFjAU
BgNVBAMTDTY5YzQ5MDI4LWRhMWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC3r9NMfx5mjwPhJ/ZiFadmh+ihMIG1PHTFcJSS7uKMWn6/I5NTUdzG7RcU
43c+Dg2VFuYFCG6P05lKD3A4AqR6Fx+FyzhX2Oxt+VYW/OGzImxx9Xx8bDUFKcme
7mUI2r38ri5yT5eizQ5h3o0WF8OQDnfx19j2pA5i6wFK9mberTSmoC6c8RqiFI5g
JkIzUYIj/SjchN5cOeUTpKU7YGn3pFbMGJzqqJhY943C3P9sAltKnLi8yaE0Sxoy
3n5f4YLkmrNikb1frKlscLHxP1Nm62Xq+qX/iekKQGRAJN1Vk7G5P7+86nsZw9IY
3NOmtoFOVrQlrz5oVugUnROxv6CxAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUKxrV
630ETTv08I8DVsmaG4o8BMAwHwYDVR0jBBgwFoAUAn4aRGPGhfvWOGP507I7rC2T
sWgwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjI1MkE3Lzg5NDk3QTYwRTM4MzExRTk5RTU1RjU4NUY4QUVBMjI4L0FuNGFS
R1BHaGZ2V09HUDUwN0k3ckMyVHNXZy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0FuNGFSR1BHaGZ2V09HUDUwN0k3ckMyVHNXZy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MjUyQTcvODk0OTdBNjBFMzgzMTFFOTlFNTVGNTg1RjhB
RUEyMjgvQW40YVJHUEdoZnZXT0dQNTA3STdyQzJUc1dnLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAhf5pfKpO6hO9hoygeAIL85UOu1mht
8+DmVR7SlnaCKCctBlHbwICJsXIOt09E2IZokRbqD1hSsFX/u22QctvPjqQwKj1C
9mmXre6EfSqIa0iSktEIbwCmt4sc1T27JzBSoBd8aWmn4ykablFxrshuqy5Q7yoV
HgpTFnBbTAEd8GwVegDgOK6vFQhVcn4GeaCmBjhbNr3PgzxbOKf/vIx7v5KtjC39
rF17hdWI7lZl39P3NSoSf85IFkrZ9CDFtch3oc/Bn27U/JtGum/Qh+TkCHnkCQCW
mjj6HbSJRSGzQuO8udaQWnk07dDKoMh1RaZwmlyiEjvSe16R72EE9HCf
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:59:08 2026 by rpki-client