Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3625D4A/03EFFC9EBF3F11EEA6B40954775412E6/ebDAcmJ2iSrXTH0TD5nweuDmeko.mft
File:                     ebDAcmJ2iSrXTH0TD5nweuDmeko.mft (raw, json)
Hash identifier:          pcuH285pWbvE7SCMAwXT8TwPukSzWkMOlTXp/D4dQos=
Subject key identifier:   A7:F4:E8:E4:2B:E8:A4:B2:9B:0D:7E:CB:E0:D8:21:00:65:F9:DE:8C
Authority key identifier: 79:B0:C0:72:62:76:89:2A:D7:4C:7D:13:0F:99:F0:7A:E0:E6:7A:4A
Certificate issuer:       /CN=F3625D4AAF/serialNumber=79B0C0726276892AD74C7D130F99F07AE0E67A4A
Certificate serial:       0332
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ebDAcmJ2iSrXTH0TD5nweuDmeko.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3625D4A/03EFFC9EBF3F11EEA6B40954775412E6/ebDAcmJ2iSrXTH0TD5nweuDmeko.mft
Manifest number:          032D
Signing time:             Thu 26 Mar 2026 04:43:31 +0000
Manifest this update:     Thu 26 Mar 2026 04:43:30 +0000
Manifest next update:     Sat 28 Mar 2026 04:43:30 +0000
Files and hashes:         1: ebDAcmJ2iSrXTH0TD5nweuDmeko.crl (hash: y1m+dqfKvO6gR+OHpiDMLhY1OH6qsy6jHjBQz8GYY+w=)
                          2: 87EA2752EF1E11F08B7866E1DAE4EC9C.roa (hash: Q4yvfJ2PRd3f4hAg3X9HjuGU4CPdrmiZC3xQ6gffVvs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3625D4A/03EFFC9EBF3F11EEA6B40954775412E6/ebDAcmJ2iSrXTH0TD5nweuDmeko.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3625D4A/03EFFC9EBF3F11EEA6B40954775412E6/ebDAcmJ2iSrXTH0TD5nweuDmeko.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ebDAcmJ2iSrXTH0TD5nweuDmeko.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 818 (0x332)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3625D4AAF, serialNumber=79B0C0726276892AD74C7D130F99F07AE0E67A4A
        Validity
            Not Before: Mar 26 04:43:30 2026 GMT
            Not After : Mar 28 04:43:30 2026 GMT
        Subject: CN=69c4b973-7202
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f0:d4:71:38:33:4a:98:eb:88:08:84:54:52:
                    aa:d6:cf:3c:93:51:45:ee:e8:7a:3b:91:12:88:08:
                    48:45:e0:ff:e1:1a:d8:35:2c:6f:79:1c:9c:c5:9e:
                    21:f6:00:9d:8d:80:5e:76:9e:1a:b6:7a:22:7d:39:
                    85:3c:c9:c2:34:6f:a3:2f:69:aa:fb:9d:ee:a6:22:
                    4e:2c:8a:e4:df:bb:e7:2e:4a:95:26:86:e0:77:f2:
                    87:8c:c8:1e:b2:76:76:0b:7f:47:cf:f7:3f:ae:4d:
                    18:d8:55:b6:63:22:1e:68:29:96:18:36:f5:2a:17:
                    e8:2a:a7:fc:44:df:4e:c3:83:cc:ec:c8:52:fd:f6:
                    73:ac:8e:df:93:7d:8f:0a:8c:61:32:a0:ec:0b:3c:
                    db:98:f7:e1:d7:58:4e:90:5d:93:90:c0:7b:05:1b:
                    c9:8c:9c:10:95:4c:5c:b1:a8:40:e9:9d:4d:45:f1:
                    47:d3:c0:b1:0f:4a:35:be:02:ed:43:b4:9e:96:57:
                    c9:3d:05:9a:3e:d1:fb:52:1a:3a:b5:76:7d:52:44:
                    68:9e:9a:85:33:73:04:44:b0:42:8b:30:f6:02:ee:
                    1c:5b:9c:97:04:92:16:7e:0d:f6:10:59:5e:be:43:
                    16:30:6f:68:a7:f6:a4:3d:e9:19:3b:76:1a:20:d8:
                    33:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:F4:E8:E4:2B:E8:A4:B2:9B:0D:7E:CB:E0:D8:21:00:65:F9:DE:8C
            X509v3 Authority Key Identifier:
                keyid:79:B0:C0:72:62:76:89:2A:D7:4C:7D:13:0F:99:F0:7A:E0:E6:7A:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D4A/03EFFC9EBF3F11EEA6B40954775412E6/ebDAcmJ2iSrXTH0TD5nweuDmeko.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ebDAcmJ2iSrXTH0TD5nweuDmeko.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D4A/03EFFC9EBF3F11EEA6B40954775412E6/ebDAcmJ2iSrXTH0TD5nweuDmeko.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:aa:04:67:2a:2e:8c:f4:dc:4f:7a:6d:e7:6e:d1:94:f0:aa:
         ed:04:65:72:ab:bb:0c:56:fe:7e:86:6d:36:14:ef:7b:5e:c3:
         29:ce:2d:8b:99:1d:23:1c:29:a5:52:7a:7f:90:f4:cf:f8:51:
         3b:55:f8:ea:b8:2c:6a:19:2d:97:de:99:cb:df:1f:3d:51:50:
         bb:00:22:11:46:64:6e:24:f3:7a:16:40:7a:ae:1c:2f:6f:dd:
         29:fa:3f:59:36:e4:a1:bd:52:81:56:f9:8b:ad:7f:bc:83:b9:
         d6:97:0e:c5:af:47:68:0c:8c:e8:15:c6:a6:60:b7:27:b3:2d:
         99:b7:c2:51:61:62:68:94:23:0d:51:b4:6a:a7:50:62:e1:59:
         a2:39:45:d9:35:fd:7c:10:1d:29:9c:d4:06:6e:bb:46:3a:b0:
         0f:68:88:8e:55:35:7d:b3:42:fa:56:97:91:5d:3d:23:02:c2:
         6d:66:0b:86:13:88:ee:a1:2c:3c:a3:63:9e:8f:35:ad:f8:ac:
         b6:f7:5a:c4:40:8a:65:8f:3d:74:28:35:5b:63:22:ac:68:b1:
         fb:13:49:fb:32:68:b0:72:9c:80:37:8b:58:5c:cf:dd:ed:ac:
         6b:19:db:3b:b4:5b:ef:c4:d8:bc:12:93:08:a3:7d:1e:7d:5a:
         82:c7:ff:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:04:31 2026 by rpki-client