Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363C4A6/82599DF6AD5011EFB697D675762E951A/98YIN8gMV8TbybsBYAgwPJT7oqk.mft
File:                     98YIN8gMV8TbybsBYAgwPJT7oqk.mft (raw, json)
Hash identifier:          XGzeUZwvD1fVe/yFMMjnnDpC83Z0WOHb8nLT1oK5iig=
Subject key identifier:   01:D1:06:1A:4C:4E:3E:06:97:4E:7A:F4:D5:D9:E2:00:10:49:F1:B0
Authority key identifier: F7:C6:08:37:C8:0C:57:C4:DB:C9:BB:01:60:08:30:3C:94:FB:A2:A9
Certificate issuer:       /CN=F363C4A6AF/serialNumber=F7C60837C80C57C4DBC9BB016008303C94FBA2A9
Certificate serial:       01F0
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/98YIN8gMV8TbybsBYAgwPJT7oqk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363C4A6/82599DF6AD5011EFB697D675762E951A/98YIN8gMV8TbybsBYAgwPJT7oqk.mft
Manifest number:          01EF
Signing time:             Thu 26 Mar 2026 05:35:19 +0000
Manifest this update:     Thu 26 Mar 2026 05:35:18 +0000
Manifest next update:     Sat 28 Mar 2026 05:35:18 +0000
Files and hashes:         1: 98YIN8gMV8TbybsBYAgwPJT7oqk.crl (hash: mhGtvPEAUm7AjDf2YUVoILSyQm+zP6FVe5zqzoTHT3g=)
                          2: 7DDDEAB0AD5111EFA8CB627A762E951A.roa (hash: dvM01EkOXh9FWTfE/7UMNp1k9IOWCI+KkRyoJeJVDAA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363C4A6/82599DF6AD5011EFB697D675762E951A/98YIN8gMV8TbybsBYAgwPJT7oqk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363C4A6/82599DF6AD5011EFB697D675762E951A/98YIN8gMV8TbybsBYAgwPJT7oqk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/98YIN8gMV8TbybsBYAgwPJT7oqk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 496 (0x1f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363C4A6AF, serialNumber=F7C60837C80C57C4DBC9BB016008303C94FBA2A9
        Validity
            Not Before: Mar 26 05:35:18 2026 GMT
            Not After : Mar 28 05:35:18 2026 GMT
        Subject: CN=69c4c597-494c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:71:82:ac:d3:e9:6c:4a:f3:21:b5:95:c0:9e:
                    61:08:05:58:0c:39:4f:2e:99:08:c9:c8:a5:bf:80:
                    ec:10:b6:7d:58:ff:9e:3c:2b:1e:2a:99:40:46:6b:
                    e5:90:0d:9a:06:4b:ab:73:23:dd:5c:25:cd:77:c2:
                    ca:0b:e5:1f:95:db:cd:39:7e:e3:09:1b:87:c5:32:
                    2b:f3:47:24:2b:86:3e:58:ef:8c:ce:f8:b7:31:02:
                    56:cb:94:2b:e9:ab:4c:8a:4f:34:9a:f8:36:10:e8:
                    8d:3d:6f:8d:e3:ab:c4:94:ee:00:2f:03:da:b2:54:
                    8e:db:1f:d4:15:f3:02:5a:75:b7:3b:96:50:67:5e:
                    10:f9:8c:42:bc:4d:f3:ef:16:42:c4:72:b6:fa:4b:
                    40:b8:e4:6c:20:e3:a7:00:51:df:63:29:30:fe:8f:
                    c0:49:29:91:f9:53:ad:18:10:98:9c:07:74:02:19:
                    ee:12:ee:89:71:1d:78:ca:db:c3:75:b9:72:ec:14:
                    9d:9e:09:91:a0:ef:01:b3:8c:cb:ab:ff:8f:63:b9:
                    74:96:fd:2c:3d:aa:26:c5:cf:7b:a8:67:bd:ba:07:
                    ac:ad:15:65:08:bd:83:29:66:af:23:bb:b2:3a:94:
                    4a:97:e3:fe:9b:80:a0:fd:71:2b:9b:e1:14:d2:9e:
                    20:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:D1:06:1A:4C:4E:3E:06:97:4E:7A:F4:D5:D9:E2:00:10:49:F1:B0
            X509v3 Authority Key Identifier:
                keyid:F7:C6:08:37:C8:0C:57:C4:DB:C9:BB:01:60:08:30:3C:94:FB:A2:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363C4A6/82599DF6AD5011EFB697D675762E951A/98YIN8gMV8TbybsBYAgwPJT7oqk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/98YIN8gMV8TbybsBYAgwPJT7oqk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363C4A6/82599DF6AD5011EFB697D675762E951A/98YIN8gMV8TbybsBYAgwPJT7oqk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:04:d1:4f:46:cf:fd:78:8d:32:c5:a3:aa:ad:55:bd:a2:7b:
         a0:36:4d:93:5f:3f:5b:e0:f7:0d:91:84:ee:9c:37:b9:34:9f:
         b3:49:95:15:f3:f1:c0:28:07:b0:2a:20:da:9e:cc:15:e0:b3:
         e8:39:52:5e:c0:f6:e0:0b:b6:6b:5e:f1:67:4b:a2:66:40:cb:
         c2:82:0a:07:f5:74:13:87:54:64:db:b1:ca:86:77:46:1b:e3:
         75:9c:43:f9:77:eb:ff:9f:68:8d:78:27:ba:6e:e5:7b:44:70:
         25:57:4d:6b:29:46:99:cd:60:99:d8:a6:d1:98:f5:01:5a:a8:
         63:fb:67:5e:8b:dd:7b:49:2d:e5:8a:9c:95:3a:ec:b7:9a:ea:
         67:c4:61:50:74:11:41:18:49:25:89:16:0f:df:4d:95:57:9b:
         24:2a:cf:77:b6:6d:5c:7a:64:a4:18:d5:7e:4e:65:1e:71:9f:
         93:27:03:2f:9d:be:28:49:4b:6d:be:e1:c2:fc:59:30:85:ae:
         2b:47:54:67:1b:87:5c:40:f8:f7:74:1d:da:77:dc:19:43:34:
         5c:1b:4b:45:80:82:27:a4:a5:1f:3b:66:9a:a4:78:a7:74:12:
         0c:1c:03:0d:d9:28:9f:d9:d0:f1:de:3f:85:0a:c8:b9:cd:b9:
         b2:ba:79:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:55:38 2026 by rpki-client