Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363CC24/F12D22986CCF11ED858882A2F1222468/IlhakHPb2Nx6VQRFf_nceJcpdE4.mft
File:                     IlhakHPb2Nx6VQRFf_nceJcpdE4.mft (raw, json)
Hash identifier:          /PYQTxwJ2oySbQr6fsFdRf7pX+VMV4xeX6Hw2SwPm6k=
Subject key identifier:   8D:9A:EF:C9:F8:BE:E4:9F:1A:2A:30:3B:06:ED:42:57:F4:E0:93:40
Authority key identifier: 22:58:5A:90:73:DB:D8:DC:7A:55:04:45:7F:F9:DC:78:97:29:74:4E
Certificate issuer:       /CN=F363CC24AF/serialNumber=22585A9073DBD8DC7A5504457FF9DC789729744E
Certificate serial:       04EF
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/IlhakHPb2Nx6VQRFf_nceJcpdE4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363CC24/F12D22986CCF11ED858882A2F1222468/IlhakHPb2Nx6VQRFf_nceJcpdE4.mft
Manifest number:          04EC
Signing time:             Thu 26 Mar 2026 03:37:45 +0000
Manifest this update:     Thu 26 Mar 2026 03:37:44 +0000
Manifest next update:     Sat 28 Mar 2026 03:37:44 +0000
Files and hashes:         1: IlhakHPb2Nx6VQRFf_nceJcpdE4.crl (hash: /aAs5aJUxdK9TYM4hYQe5Ze2p3TPVrjkSwZAwY5f+KE=)
                          2: C77901BE410D11F0A96504DADAE4EC9C.roa (hash: h5Q5khYZzTnat8k7l8n6jpmEewInGfW9hyutxls28Qc=)
                          3: 224FE6786CD311EDB88049ABF1222468.roa (hash: ngBqwzoWf1U22IRdw9sMrCAgllF9dt3JOK+klM8EtcI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363CC24/F12D22986CCF11ED858882A2F1222468/IlhakHPb2Nx6VQRFf_nceJcpdE4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363CC24/F12D22986CCF11ED858882A2F1222468/IlhakHPb2Nx6VQRFf_nceJcpdE4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/IlhakHPb2Nx6VQRFf_nceJcpdE4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1263 (0x4ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363CC24AF, serialNumber=22585A9073DBD8DC7A5504457FF9DC789729744E
        Validity
            Not Before: Mar 26 03:37:44 2026 GMT
            Not After : Mar 28 03:37:44 2026 GMT
        Subject: CN=69c4aa09-f604
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:44:98:c6:56:93:bf:7e:ce:11:69:77:57:b7:
                    6f:87:85:97:63:07:26:f9:b8:40:91:9c:7b:bf:9d:
                    a5:6d:9f:33:a5:0b:b0:af:c8:a3:fa:b4:d7:b6:b8:
                    de:94:ba:5f:5d:a7:96:18:97:b8:c1:f9:d0:9a:d2:
                    4b:25:d2:1d:17:37:59:65:03:ff:00:0b:22:aa:8d:
                    9c:08:b7:2d:6f:fe:09:cc:f7:79:c7:1f:73:a2:1c:
                    a8:10:9b:d5:c3:43:f8:46:1a:cb:99:22:7a:bd:41:
                    20:77:77:a8:2c:70:a9:1e:c0:f4:77:f6:a4:8c:24:
                    d7:e6:5a:b3:b9:f6:17:8a:1e:14:0c:80:7f:b4:a6:
                    37:26:5e:c6:11:f7:4b:54:e9:9b:f3:f1:17:fd:b3:
                    0c:69:5b:5d:f8:b6:85:0d:a2:c9:2b:22:5b:5a:3c:
                    95:4d:69:dc:80:64:a1:79:ff:5b:6f:aa:5e:ee:e8:
                    dd:b0:a8:c3:b1:78:53:d0:a5:9c:d7:88:6f:c2:d9:
                    0f:8c:43:06:b8:90:b2:3c:75:c7:0e:af:54:02:52:
                    ad:48:60:0f:73:50:f1:69:05:39:a9:92:b2:b0:e8:
                    ac:4a:4c:2c:ad:bf:8f:b7:b8:05:bb:ac:56:39:66:
                    91:94:3f:a0:24:85:39:a4:dc:d9:db:ee:73:e1:35:
                    01:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:9A:EF:C9:F8:BE:E4:9F:1A:2A:30:3B:06:ED:42:57:F4:E0:93:40
            X509v3 Authority Key Identifier:
                keyid:22:58:5A:90:73:DB:D8:DC:7A:55:04:45:7F:F9:DC:78:97:29:74:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363CC24/F12D22986CCF11ED858882A2F1222468/IlhakHPb2Nx6VQRFf_nceJcpdE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/IlhakHPb2Nx6VQRFf_nceJcpdE4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363CC24/F12D22986CCF11ED858882A2F1222468/IlhakHPb2Nx6VQRFf_nceJcpdE4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:87:35:86:6b:f8:c1:84:90:d0:f0:e8:19:23:8e:51:e2:9d:
         11:cf:5d:c5:99:ac:c6:60:4f:9a:25:7e:1c:b2:59:ff:4a:b9:
         7f:be:4a:47:55:09:86:8f:ea:d5:e3:e3:5a:68:2c:c5:73:19:
         cb:55:4a:be:61:d5:e1:89:31:33:93:87:72:2a:d6:61:cd:9b:
         f0:78:d2:d3:e3:78:aa:b2:a5:52:1e:34:11:bb:ef:79:d6:0f:
         e6:9a:cb:74:8d:ea:9b:16:70:09:68:24:e4:29:3a:27:c6:62:
         40:fc:1a:62:7d:3b:87:cc:7c:59:19:96:31:90:9d:e5:41:9d:
         9b:e3:84:64:5d:5b:95:08:33:e7:3f:31:f7:40:5e:4e:77:5d:
         4d:d0:60:af:6e:c5:0b:27:ee:57:0f:e3:2c:c9:05:8e:e7:bc:
         34:9f:f2:12:b6:b0:73:70:a0:9c:f7:42:df:3e:86:bb:d7:37:
         03:70:63:be:70:08:b0:5c:bc:fa:c1:eb:e2:32:38:45:4f:d3:
         60:dc:0e:42:c4:fb:ec:fe:f1:db:46:1b:1d:73:09:66:69:b3:
         bd:99:1a:19:c0:cf:af:e3:41:52:50:6c:99:06:96:b0:52:57:
         f2:58:6c:e3:a4:97:ad:97:97:32:da:a6:cc:12:50:b2:2c:8e:
         a5:0b:2b:00
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBO8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0NDMjRBRjExMC8GA1UEBRMoMjI1ODVBOTA3M0RCRDhEQzdBNTUwNDQ1N0ZGOURD
Nzg5NzI5NzQ0RTAeFw0yNjAzMjYwMzM3NDRaFw0yNjAzMjgwMzM3NDRaMBgxFjAU
BgNVBAMTDTY5YzRhYTA5LWY2MDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDCRJjGVpO/fs4RaXdXt2+HhZdjByb5uECRnHu/naVtnzOlC7CvyKP6tNe2
uN6Uul9dp5YYl7jB+dCa0ksl0h0XN1llA/8ACyKqjZwIty1v/gnM93nHH3OiHKgQ
m9XDQ/hGGsuZInq9QSB3d6gscKkewPR39qSMJNfmWrO59heKHhQMgH+0pjcmXsYR
90tU6Zvz8Rf9swxpW134toUNoskrIltaPJVNadyAZKF5/1tvql7u6N2wqMOxeFPQ
pZzXiG/C2Q+MQwa4kLI8dccOr1QCUq1IYA9zUPFpBTmpkrKw6KxKTCytv4+3uAW7
rFY5ZpGUP6AkhTmk3Nnb7nPhNQGPAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUjZrv
yfi+5J8aKjA7Bu1CV/Tgk0AwHwYDVR0jBBgwFoAUIlhakHPb2Nx6VQRFf/nceJcp
dE4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNDQzI0L0YxMkQyMjk4NkNDRjExRUQ4NTg4ODJBMkYxMjIyNDY4L0lsaGFr
SFBiMk54NlZRUkZmX25jZUpjcGRFNC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0lsaGFrSFBiMk54NlZRUkZmX25jZUpjcGRFNC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2M0NDMjQvRjEyRDIyOTg2Q0NGMTFFRDg1ODg4MkEyRjEy
MjI0NjgvSWxoYWtIUGIyTng2VlFSRmZfbmNlSmNwZEU0Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDChzWGa/jBhJDQ8OgZI45R4p0Rz13F
mazGYE+aJX4csln/Srl/vkpHVQmGj+rV4+NaaCzFcxnLVUq+YdXhiTEzk4dyKtZh
zZvweNLT43iqsqVSHjQRu+951g/mmst0jeqbFnAJaCTkKTonxmJA/BpifTuHzHxZ
GZYxkJ3lQZ2b44RkXVuVCDPnPzH3QF5Od11N0GCvbsULJ+5XD+MsyQWO57w0n/IS
trBzcKCc90LfPoa71zcDcGO+cAiwXLz6weviMjhFT9Ng3A5CxPvs/vHbRhsdcwlm
abO9mRoZwM+v40FSUGyZBpawUlfyWGzjpJetl5cy2qbMElCyLI6lCysA
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:52:18 2026 by rpki-client