Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3634F1B/A133C32A299511F0B2F717B2DAE4EC9C/SbTWGQldlDKvZGCFPhR7710cSLA.mft
File:                     SbTWGQldlDKvZGCFPhR7710cSLA.mft (raw, json)
Hash identifier:          HzowMJTfpu/yPy1iy3YWOLHAFLMOILEKjRhDRAsgVe0=
Subject key identifier:   AF:D5:F7:9F:31:AD:1C:C2:D1:CE:25:A3:80:76:49:23:05:0D:4E:7F
Authority key identifier: 49:B4:D6:19:09:5D:94:32:AF:64:60:85:3E:14:7B:EF:5D:1C:48:B0
Certificate issuer:       /CN=F3634F1BAF/serialNumber=49B4D619095D9432AF6460853E147BEF5D1C48B0
Certificate serial:       0161
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SbTWGQldlDKvZGCFPhR7710cSLA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3634F1B/A133C32A299511F0B2F717B2DAE4EC9C/SbTWGQldlDKvZGCFPhR7710cSLA.mft
Manifest number:          0156
Signing time:             Wed 25 Mar 2026 05:50:09 +0000
Manifest this update:     Wed 25 Mar 2026 05:50:08 +0000
Manifest next update:     Fri 27 Mar 2026 05:50:08 +0000
Files and hashes:         1: SbTWGQldlDKvZGCFPhR7710cSLA.crl (hash: nAFnH0AWF8Ge0wcwuc/mTOD4kMB1FoingVXTls6DLS4=)
                          2: 5CCD6440299D11F0AD38AFE3DAE4EC9C.roa (hash: v4mhR83sjeZ2vAC+mHBy4f+8KOxUX5jeOYSaA7j55RU=)
                          3: A16D1040299E11F0A0371BECDAE4EC9C.roa (hash: ZIN6qTu+myOk/8/Xm5JH6ilbBdHCnz+M7KKnKepnBtM=)
                          4: 61D2FD9229B111F0B5081FE6DAE4EC9C.roa (hash: Brop1ncWpX/uNNO0gkigSNxXGhoMQh9wWM/lUreXu7I=)
                          5: 1B78052229B111F0A88218E6DAE4EC9C.roa (hash: lTtW4+RgQEGUJjKPbZNiHvs7ergbcAvfTNYM91hQFPM=)
                          6: 4C7A7612299A11F0B84321CFDAE4EC9C.roa (hash: Nlw1hIVnnrnHZycVHji07xpZ7hIoViBxXu2uxKW1+Ms=)
                          7: E383333E299D11F0A8FCB4E5DAE4EC9C.roa (hash: WNjVtEQEJnEB14WwlXqxjZdHQ29UrTDBkSgpJfcS8fE=)
                          8: 8B97C97C29B211F0BE9210EFDAE4EC9C.roa (hash: YWliehZSLVKOUVOtFDH1Zw4P9bTGn6VPsgJOpr2PpdI=)
                          9: C5A5AC4229B211F0881C16EFDAE4EC9C.roa (hash: 2J30cLTQTWAiY7lgicRA7cWnsPM0f3v7LmXj0giF2nM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3634F1B/A133C32A299511F0B2F717B2DAE4EC9C/SbTWGQldlDKvZGCFPhR7710cSLA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3634F1B/A133C32A299511F0B2F717B2DAE4EC9C/SbTWGQldlDKvZGCFPhR7710cSLA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SbTWGQldlDKvZGCFPhR7710cSLA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 27 Mar 2026 05:50:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 353 (0x161)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3634F1BAF, serialNumber=49B4D619095D9432AF6460853E147BEF5D1C48B0
        Validity
            Not Before: Mar 25 05:50:08 2026 GMT
            Not After : Mar 27 05:50:08 2026 GMT
        Subject: CN=69c37790-c5aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d8:74:08:53:b4:35:b9:4c:bc:e1:b1:ad:12:
                    f5:66:02:55:d1:64:5c:bd:db:cd:52:c3:78:c5:90:
                    d6:24:9d:37:2e:58:0b:c3:0d:2a:18:76:74:9b:79:
                    ea:7c:59:35:87:85:aa:77:0e:a7:2d:05:57:5a:9a:
                    c3:04:c5:99:bb:28:b2:05:96:22:b4:5e:d9:84:b4:
                    1b:da:c3:25:23:65:a8:71:b7:c4:80:e5:c0:34:4a:
                    a6:aa:c8:fb:19:ac:b7:c6:3e:7d:53:aa:3a:a7:27:
                    d8:10:19:29:01:14:ab:6c:af:61:21:fa:2c:c6:32:
                    f8:b3:ac:b9:a1:b8:91:1f:90:0e:b8:37:58:fd:a0:
                    50:c0:b2:12:70:52:7b:6a:f4:6a:f7:99:51:7f:53:
                    22:69:74:89:08:bf:40:51:d3:19:14:43:95:b0:c6:
                    9c:86:58:45:41:0d:c0:50:a0:e5:20:23:33:76:b7:
                    23:0e:05:99:0e:56:b1:f1:cf:25:84:a9:66:8d:fc:
                    8e:e6:2a:53:ed:cf:31:e2:2f:95:57:6a:d8:43:95:
                    4c:1c:d5:1f:22:8c:78:6b:7d:04:e6:7b:ba:92:16:
                    24:19:02:fe:e3:24:2e:c2:b9:50:02:3c:9c:40:02:
                    35:5a:2a:41:34:df:63:23:4f:03:17:31:0a:81:50:
                    68:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:D5:F7:9F:31:AD:1C:C2:D1:CE:25:A3:80:76:49:23:05:0D:4E:7F
            X509v3 Authority Key Identifier:
                keyid:49:B4:D6:19:09:5D:94:32:AF:64:60:85:3E:14:7B:EF:5D:1C:48:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3634F1B/A133C32A299511F0B2F717B2DAE4EC9C/SbTWGQldlDKvZGCFPhR7710cSLA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SbTWGQldlDKvZGCFPhR7710cSLA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3634F1B/A133C32A299511F0B2F717B2DAE4EC9C/SbTWGQldlDKvZGCFPhR7710cSLA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:ae:c5:c5:96:84:2a:c4:66:bf:c2:c3:de:81:d1:12:3b:e9:
         77:94:b3:bc:49:ff:a9:09:08:9d:12:f3:54:a5:87:e4:0e:f4:
         e2:cd:51:da:08:27:89:66:4a:63:67:f9:ec:9c:e0:8b:74:c1:
         0a:32:b2:00:37:93:9f:5b:a2:1e:81:01:bd:a9:d9:d2:7b:cf:
         81:98:e7:60:b4:19:4e:f9:4a:27:85:96:2b:aa:da:c4:a5:21:
         9f:d9:e4:40:25:04:06:40:70:10:53:c1:c8:88:6d:63:fc:35:
         06:21:79:0f:a0:67:06:02:57:ce:ef:ed:7b:52:7b:28:ae:52:
         3b:13:66:73:d9:83:db:0f:45:7d:3f:fd:6b:5b:85:a8:2d:cb:
         0b:1b:d2:51:b1:33:43:59:20:6e:02:54:7b:68:92:db:86:4b:
         ed:a6:7d:a2:d6:83:1f:46:d9:84:f4:1f:60:4d:96:68:e1:58:
         d1:09:44:cf:65:dd:f6:55:66:13:c7:73:07:53:b9:86:62:a0:
         0b:1d:03:4b:d1:4c:a1:8f:b5:71:5b:82:84:43:3e:8c:7b:90:
         10:49:ad:71:a0:37:c4:fc:66:58:c7:8a:47:f6:44:ba:82:a3:
         64:79:87:35:45:12:f0:54:72:74:2d:3a:27:3e:fd:1e:c6:0e:
         09:a7:bb:20
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAWEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MzRGMUJBRjExMC8GA1UEBRMoNDlCNEQ2MTkwOTVEOTQzMkFGNjQ2MDg1M0UxNDdC
RUY1RDFDNDhCMDAeFw0yNjAzMjUwNTUwMDhaFw0yNjAzMjcwNTUwMDhaMBgxFjAU
BgNVBAMTDTY5YzM3NzkwLWM1YWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC42HQIU7Q1uUy84bGtEvVmAlXRZFy9281Sw3jFkNYknTcuWAvDDSoYdnSb
eep8WTWHhap3DqctBVdamsMExZm7KLIFliK0XtmEtBvawyUjZahxt8SA5cA0Sqaq
yPsZrLfGPn1TqjqnJ9gQGSkBFKtsr2Eh+izGMvizrLmhuJEfkA64N1j9oFDAshJw
Untq9Gr3mVF/UyJpdIkIv0BR0xkUQ5WwxpyGWEVBDcBQoOUgIzN2tyMOBZkOVrHx
zyWEqWaN/I7mKlPtzzHiL5VXathDlUwc1R8ijHhrfQTme7qSFiQZAv7jJC7CuVAC
PJxAAjVaKkE032MjTwMXMQqBUGgxAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUr9X3
nzGtHMLRziWjgHZJIwUNTn8wHwYDVR0jBBgwFoAUSbTWGQldlDKvZGCFPhR7710c
SLAwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjM0RjFCL0ExMzNDMzJBMjk5NTExRjBCMkY3MTdCMkRBRTRFQzlDL1NiVFdH
UWxkbERLdlpHQ0ZQaFI3NzEwY1NMQS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NiVFdHUWxkbERLdlpHQ0ZQaFI3NzEwY1NMQS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MzRGMUIvQTEzM0MzMkEyOTk1MTFGMEIyRjcxN0IyREFF
NEVDOUMvU2JUV0dRbGRsREt2WkdDRlBoUjc3MTBjU0xBLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBorsXFloQqxGa/wsPegdESO+l3lLO8
Sf+pCQidEvNUpYfkDvTizVHaCCeJZkpjZ/nsnOCLdMEKMrIAN5OfW6IegQG9qdnS
e8+BmOdgtBlO+UonhZYrqtrEpSGf2eRAJQQGQHAQU8HIiG1j/DUGIXkPoGcGAlfO
7+17UnsorlI7E2Zz2YPbD0V9P/1rW4WoLcsLG9JRsTNDWSBuAlR7aJLbhkvtpn2i
1oMfRtmE9B9gTZZo4VjRCUTPZd32VWYTx3MHU7mGYqALHQNL0Uyhj7VxW4KEQz6M
e5AQSa1xoDfE/GZYx4pH9kS6gqNkeYc1RRLwVHJ0LTonPv0exg4Jp7sg
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:28:25 2026 by rpki-client