Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BB47/516A5BAA810511ED9206F6BDF1222468/m_y6aYsm3TRhDEr9Rx4kGteUUaM.mft
File:                     m_y6aYsm3TRhDEr9Rx4kGteUUaM.mft (raw, json)
Hash identifier:          +1CTQtWLGxsmp9yHw7AIDNuTTyo9YkeHiVH1i+tF+kk=
Subject key identifier:   62:8D:36:69:FB:2F:9D:21:C7:5B:CB:5A:89:9A:16:6C:E8:FD:78:02
Authority key identifier: 9B:FC:BA:69:8B:26:DD:34:61:0C:4A:FD:47:1E:24:1A:D7:94:51:A3
Certificate issuer:       /CN=F363BB47AF/serialNumber=9BFCBA698B26DD34610C4AFD471E241AD79451A3
Certificate serial:       04D1
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/m_y6aYsm3TRhDEr9Rx4kGteUUaM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BB47/516A5BAA810511ED9206F6BDF1222468/m_y6aYsm3TRhDEr9Rx4kGteUUaM.mft
Manifest number:          04CF
Signing time:             Thu 26 Mar 2026 03:39:30 +0000
Manifest this update:     Thu 26 Mar 2026 03:39:29 +0000
Manifest next update:     Sat 28 Mar 2026 03:39:29 +0000
Files and hashes:         1: m_y6aYsm3TRhDEr9Rx4kGteUUaM.crl (hash: eR90ysZjceoxVgrf+WmxGqInG4E7R36GDCZcpYstOng=)
                          2: B311D97E811811ED9059D9F0F1222468.roa (hash: T/9/kgIJfkgNm3iGQQTLRPyMN2Fx4H3uoVTcKlpTAn0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363BB47/516A5BAA810511ED9206F6BDF1222468/m_y6aYsm3TRhDEr9Rx4kGteUUaM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363BB47/516A5BAA810511ED9206F6BDF1222468/m_y6aYsm3TRhDEr9Rx4kGteUUaM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/m_y6aYsm3TRhDEr9Rx4kGteUUaM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1233 (0x4d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BB47AF, serialNumber=9BFCBA698B26DD34610C4AFD471E241AD79451A3
        Validity
            Not Before: Mar 26 03:39:29 2026 GMT
            Not After : Mar 28 03:39:29 2026 GMT
        Subject: CN=69c4aa72-f45a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5c:67:3b:ab:5c:1d:18:3b:82:6a:62:c1:da:
                    21:6f:81:31:9a:f0:eb:42:db:b7:50:c0:ff:fc:90:
                    19:a9:20:31:07:45:89:f9:24:d7:56:39:fd:f9:95:
                    4a:a9:b9:05:32:75:10:0e:48:ca:57:f9:70:bf:aa:
                    04:17:74:ee:45:85:69:75:b7:ec:39:6a:6a:86:e0:
                    52:4a:18:b6:f3:f8:56:af:a5:55:2a:2d:a9:81:e1:
                    93:1c:b6:34:54:51:5d:08:d1:31:a9:98:ee:57:90:
                    76:cd:a9:58:d5:31:90:41:3a:6f:ca:1c:d7:40:8d:
                    ef:cc:33:e7:cd:a5:f0:19:ae:be:d8:1e:76:24:1d:
                    f5:fb:53:ac:c0:a6:ab:50:0e:33:ca:7d:55:50:0d:
                    56:20:27:9d:89:87:ab:60:7c:3e:30:f7:da:d1:e2:
                    93:cc:5a:9f:4f:a2:f2:47:03:f1:f1:fd:6a:9c:60:
                    79:46:4a:47:27:4e:ac:09:a8:11:85:64:15:d9:7d:
                    e9:c4:65:7b:c1:89:4f:0f:93:c2:35:bb:4a:e8:30:
                    88:e6:82:c2:fe:b0:a7:3e:d9:34:88:31:8a:a1:e2:
                    03:a0:5b:75:50:23:51:bc:a3:91:11:25:b7:34:aa:
                    83:12:0e:0c:6c:c9:bd:9a:c1:44:9c:85:91:24:c5:
                    83:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:8D:36:69:FB:2F:9D:21:C7:5B:CB:5A:89:9A:16:6C:E8:FD:78:02
            X509v3 Authority Key Identifier:
                keyid:9B:FC:BA:69:8B:26:DD:34:61:0C:4A:FD:47:1E:24:1A:D7:94:51:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BB47/516A5BAA810511ED9206F6BDF1222468/m_y6aYsm3TRhDEr9Rx4kGteUUaM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/m_y6aYsm3TRhDEr9Rx4kGteUUaM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BB47/516A5BAA810511ED9206F6BDF1222468/m_y6aYsm3TRhDEr9Rx4kGteUUaM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:1a:ff:01:bf:9f:75:ef:25:c5:5a:a8:05:75:22:59:76:43:
         5a:af:dc:12:4a:1a:52:ad:34:f1:44:56:22:7a:fd:90:bb:0c:
         2a:10:40:e0:c9:fa:b8:fb:8f:f2:fd:9b:56:b0:e6:d3:b8:71:
         a2:be:c1:82:db:19:2a:aa:e7:00:b1:9f:31:9c:2c:37:2e:42:
         d8:f7:40:8f:3f:fb:88:e1:d7:ab:c1:81:68:6c:ef:fc:cb:47:
         d9:f9:82:48:a9:49:87:9a:e2:90:87:67:b4:a1:59:55:91:b7:
         bb:b1:5b:17:64:f8:53:c7:17:1e:71:95:bc:68:72:07:4e:69:
         32:09:8d:92:0c:0e:ed:52:1a:30:a9:17:ba:b3:fe:15:11:6d:
         e4:72:c6:e9:e7:61:8a:a3:fe:86:ff:44:ad:36:37:7f:8a:e1:
         d5:c5:c6:10:b4:75:7e:01:a7:c2:a7:0e:f3:3d:7a:fe:66:b9:
         0c:12:36:82:87:8a:61:6c:63:75:55:18:59:64:82:77:e7:e0:
         d6:34:43:63:c3:be:a2:71:59:31:d2:70:25:7e:58:c2:9e:97:
         af:b0:6d:3c:e9:b4:9f:6b:43:34:78:cc:44:1d:a9:e6:a8:f6:
         02:af:ed:26:f8:70:16:7d:c7:7f:22:df:ed:0c:f7:80:6a:6c:
         f2:d3:3c:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:29:13 2026 by rpki-client