Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363212D/1E968F6051B711ECBFC54543D8A014CE/68SoUZfDK0JWOKbH5YYLWWTmV_4.mft
File:                     68SoUZfDK0JWOKbH5YYLWWTmV_4.mft (raw, json)
Hash identifier:          fVojCG+gg3HZnVfJvQpDcsP0i4ywXW6WVrWYLKty764=
Subject key identifier:   F3:F2:A3:AD:C2:78:0F:CE:6F:F2:3C:58:C5:20:CD:89:C0:CD:5A:CF
Authority key identifier: EB:C4:A8:51:97:C3:2B:42:56:38:A6:C7:E5:86:0B:59:64:E6:57:FE
Certificate issuer:       /CN=F363212DAF/serialNumber=EBC4A85197C32B425638A6C7E5860B5964E657FE
Certificate serial:       0671
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/68SoUZfDK0JWOKbH5YYLWWTmV_4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363212D/1E968F6051B711ECBFC54543D8A014CE/68SoUZfDK0JWOKbH5YYLWWTmV_4.mft
Manifest number:          0665
Signing time:             Thu 26 Mar 2026 02:55:00 +0000
Manifest this update:     Thu 26 Mar 2026 02:54:59 +0000
Manifest next update:     Sat 28 Mar 2026 02:54:59 +0000
Files and hashes:         1: 68SoUZfDK0JWOKbH5YYLWWTmV_4.crl (hash: 7+1N5kaQihiOnEXHzzaV2lvfNHfGnpJ9Rd7EzlZAHPo=)
                          2: 6B8C1F5C1CFF11F1AEC2C7DBDAE4EC9C.roa (hash: vVsoBzOgmQJsVgZ4eiWG42vtCjrBwkXB68PKgcK7ZzA=)
                          3: EDDA3E501C6211F1AAA4E2C7DAE4EC9C.roa (hash: lUvvBVjsEjqfAsAmA0WnRzU1lqUEU7lO27ZrISQKKFs=)
                          4: 3A76263A1C6211F1ADDFF9C3DAE4EC9C.roa (hash: REuAOlE2BNzgo7YoEU2hdXZQivK8fOJn7CrtB/+yhKw=)
                          5: 22E9A04A1B8211F18A6803A7DAE4EC9C.roa (hash: o2oSmT5XMRceQB7vvUJ62zJZyK7qqtUp831xxa7NGwE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363212D/1E968F6051B711ECBFC54543D8A014CE/68SoUZfDK0JWOKbH5YYLWWTmV_4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363212D/1E968F6051B711ECBFC54543D8A014CE/68SoUZfDK0JWOKbH5YYLWWTmV_4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/68SoUZfDK0JWOKbH5YYLWWTmV_4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1649 (0x671)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363212DAF, serialNumber=EBC4A85197C32B425638A6C7E5860B5964E657FE
        Validity
            Not Before: Mar 26 02:54:59 2026 GMT
            Not After : Mar 28 02:54:59 2026 GMT
        Subject: CN=69c4a004-a5d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:3c:f5:3b:88:8a:27:8b:01:8c:14:e1:0e:6f:
                    72:f5:5f:f4:2f:c8:f0:41:ef:78:e4:20:68:6a:ae:
                    d4:98:64:46:93:14:14:78:73:76:e0:0b:44:72:36:
                    25:1f:6e:1a:e9:f7:c3:6a:0d:fe:b9:57:ea:43:3b:
                    d6:ed:65:48:98:47:c2:14:72:77:f6:62:6e:b7:f0:
                    bf:38:cd:74:26:48:54:e8:24:04:46:ec:1e:a5:11:
                    d9:2c:b7:01:2a:f8:bc:09:f9:12:06:ad:4b:e4:95:
                    7e:53:d9:9e:24:a6:a0:42:aa:ff:5b:c8:b3:f7:0a:
                    5b:64:05:f5:01:8c:46:d8:10:b0:57:f6:4c:f8:59:
                    7e:6f:d6:8f:a2:3c:3b:0f:06:6f:22:ce:c2:6d:a4:
                    1f:a0:4a:42:f7:2e:1b:a7:9a:64:a6:87:ba:1f:58:
                    32:0f:f6:00:e6:41:4a:29:46:c6:39:98:11:2a:a8:
                    4c:63:40:36:cb:c1:c0:20:b6:3b:ae:23:ad:ca:6c:
                    9b:08:18:08:63:b5:25:4b:48:48:71:69:3f:9a:3e:
                    96:e5:e7:29:65:63:21:12:1b:f8:ba:93:ae:9e:d2:
                    f4:ec:cd:cb:7d:d6:8a:0e:f3:0c:b5:35:b7:30:01:
                    d3:5c:f3:8e:78:79:86:48:5e:17:4a:1f:04:0d:88:
                    6a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:F2:A3:AD:C2:78:0F:CE:6F:F2:3C:58:C5:20:CD:89:C0:CD:5A:CF
            X509v3 Authority Key Identifier:
                keyid:EB:C4:A8:51:97:C3:2B:42:56:38:A6:C7:E5:86:0B:59:64:E6:57:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363212D/1E968F6051B711ECBFC54543D8A014CE/68SoUZfDK0JWOKbH5YYLWWTmV_4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/68SoUZfDK0JWOKbH5YYLWWTmV_4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363212D/1E968F6051B711ECBFC54543D8A014CE/68SoUZfDK0JWOKbH5YYLWWTmV_4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:94:0c:88:18:10:98:60:5e:91:33:94:75:bf:47:fe:e9:d4:
         a3:a7:d4:77:7a:59:f6:d9:cc:0e:10:29:95:5d:bb:0d:82:03:
         2e:7c:2f:0e:5d:fc:50:4e:4e:4b:c8:1b:f0:1f:36:13:ae:dd:
         1e:54:20:03:bb:05:ac:52:60:23:b9:c7:de:27:2c:53:74:cf:
         b6:18:29:8c:f2:0c:5a:dc:85:1a:87:42:b4:f2:d9:5a:41:db:
         55:d2:9d:d9:6f:24:5e:53:1a:4f:49:f2:ab:bc:0f:3d:26:8a:
         84:e8:15:4d:a5:5f:7f:f0:ff:ce:f6:91:8d:11:71:5a:b6:36:
         79:3d:00:e3:d3:0e:de:6c:d1:58:f8:0a:eb:cb:23:51:35:c6:
         d7:9c:b0:32:cf:bf:7a:87:b5:67:0b:2c:81:62:f6:94:a7:d2:
         36:87:a9:15:d1:29:56:bf:24:e6:eb:84:3d:06:65:d3:0f:1a:
         4f:19:ee:dc:e0:3d:90:2a:94:3d:01:cc:3b:c7:8c:e7:d4:ce:
         34:b8:9e:a8:38:9f:02:b3:59:d4:fe:13:7f:17:0e:4d:29:f8:
         16:56:76:f4:a2:e2:d0:c3:b0:2e:17:ec:96:c7:f1:7d:5f:f2:
         b0:39:41:87:52:00:14:f5:e7:c5:14:01:6b:7b:2b:3d:77:e7:
         b1:f6:1d:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:22:05 2026 by rpki-client