Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3644EA8/C396ACEE60A811F0B48991E5DAE4EC9C/2cDlwkl6yIv_-87Z9V1goiiYkn8.mft
File:                     2cDlwkl6yIv_-87Z9V1goiiYkn8.mft (raw, json)
Hash identifier:          ZuiLwmR5eBmhVmToHWI7B7zdMXyz5F3IrYnNOYTKa1w=
Subject key identifier:   6B:9C:2B:3A:A1:36:AA:02:5A:CC:22:EC:A3:2E:9B:75:C6:C2:D9:E1
Authority key identifier: D9:C0:E5:C2:49:7A:C8:8B:FF:FB:CE:D9:F5:5D:60:A2:28:98:92:7F
Certificate issuer:       /CN=F3644EA8AF/serialNumber=D9C0E5C2497AC88BFFFBCED9F55D60A22898927F
Certificate serial:       0106
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/2cDlwkl6yIv_-87Z9V1goiiYkn8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3644EA8/C396ACEE60A811F0B48991E5DAE4EC9C/2cDlwkl6yIv_-87Z9V1goiiYkn8.mft
Manifest number:          0105
Signing time:             Thu 26 Mar 2026 06:01:24 +0000
Manifest this update:     Thu 26 Mar 2026 06:01:23 +0000
Manifest next update:     Sat 28 Mar 2026 06:01:23 +0000
Files and hashes:         1: 2cDlwkl6yIv_-87Z9V1goiiYkn8.crl (hash: 4wTsUBgQ9XduJKMePm+jqr5EVtXUzppPM4GPvCAnrRw=)
                          2: 696CD0C060B411F0907E96B2DAE4EC9C.roa (hash: 5bAy/PZpHx90ghvP8O3g7YznUOeX+iyLW+PI1ddCQfo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3644EA8/C396ACEE60A811F0B48991E5DAE4EC9C/2cDlwkl6yIv_-87Z9V1goiiYkn8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3644EA8/C396ACEE60A811F0B48991E5DAE4EC9C/2cDlwkl6yIv_-87Z9V1goiiYkn8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/2cDlwkl6yIv_-87Z9V1goiiYkn8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 262 (0x106)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3644EA8AF, serialNumber=D9C0E5C2497AC88BFFFBCED9F55D60A22898927F
        Validity
            Not Before: Mar 26 06:01:23 2026 GMT
            Not After : Mar 28 06:01:23 2026 GMT
        Subject: CN=69c4cbb4-c8e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d0:f4:9f:bd:b8:c7:92:49:33:93:f3:a9:74:
                    fc:eb:e7:97:21:06:3d:a7:4b:5f:f3:d0:b9:98:8f:
                    0c:a8:46:d5:14:77:39:e2:e8:c7:78:b7:65:d3:55:
                    8d:5d:e8:00:34:37:0d:e6:95:f2:23:e5:61:dd:e8:
                    79:5b:f4:97:41:5a:16:bb:91:d2:4c:ed:97:94:44:
                    b8:69:e8:71:9f:ea:4c:97:75:ce:a8:42:46:8b:3b:
                    4b:22:63:00:13:20:ee:b7:f7:cf:44:bd:9a:8c:49:
                    e7:47:3b:81:e9:05:e5:86:c0:6d:27:2e:34:83:75:
                    6a:65:8b:ab:3f:f6:d4:c2:e4:5c:8f:ea:53:b3:f1:
                    a7:41:e3:ff:8d:4b:6d:63:72:12:52:f0:e3:27:2e:
                    70:f7:c9:a1:84:94:ac:ab:48:86:01:9e:f6:b7:6b:
                    f7:08:fa:51:13:3f:a7:dc:ae:68:eb:b6:44:ab:6f:
                    f1:62:f4:fe:2f:19:90:92:4e:f6:61:69:fd:6a:71:
                    72:03:09:f7:32:43:5e:da:ed:9b:fd:df:b2:66:52:
                    35:20:82:3c:ac:c0:e8:f8:b9:16:7c:f6:15:85:3c:
                    07:49:9f:10:6a:17:ba:19:7b:93:3f:41:93:dc:83:
                    d0:70:71:d4:1e:0a:bd:b2:04:f1:6c:f3:bd:90:c8:
                    e3:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:9C:2B:3A:A1:36:AA:02:5A:CC:22:EC:A3:2E:9B:75:C6:C2:D9:E1
            X509v3 Authority Key Identifier:
                keyid:D9:C0:E5:C2:49:7A:C8:8B:FF:FB:CE:D9:F5:5D:60:A2:28:98:92:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3644EA8/C396ACEE60A811F0B48991E5DAE4EC9C/2cDlwkl6yIv_-87Z9V1goiiYkn8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2cDlwkl6yIv_-87Z9V1goiiYkn8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3644EA8/C396ACEE60A811F0B48991E5DAE4EC9C/2cDlwkl6yIv_-87Z9V1goiiYkn8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:d5:39:35:92:98:4d:73:fb:d2:83:6d:43:c4:a3:7c:18:ca:
         94:71:56:32:07:6a:95:80:83:bf:40:70:62:69:d9:43:53:5f:
         58:e1:5a:7f:97:ab:59:a6:aa:f6:a4:19:58:ae:f5:67:5c:d8:
         08:3f:d1:b4:04:01:02:91:7a:1a:2d:7d:e6:1e:a7:b5:df:d2:
         1f:9d:a1:51:fc:98:6e:02:18:e0:4d:3f:08:53:d6:e1:ae:ed:
         e1:d7:d0:91:d2:23:b0:e9:af:34:18:d8:2d:a8:1d:7b:2c:9a:
         a7:cc:d9:6f:15:8c:88:2a:d6:96:d2:3d:8d:67:4c:00:3f:c3:
         96:92:a9:11:d7:20:48:4e:f4:74:04:10:7e:e2:86:88:ed:e4:
         e0:da:92:15:a4:e6:aa:cc:9b:5f:c9:5e:19:9e:6f:60:07:fd:
         14:46:2b:fd:f7:c0:35:85:8b:5d:89:d5:b8:2e:d5:65:bc:9e:
         c4:db:29:a3:a5:4e:e0:be:c4:25:ae:cf:7f:fb:43:47:ae:20:
         13:c8:6c:be:8f:dc:b4:e3:42:a6:85:a2:f2:92:d7:02:4a:7f:
         99:6f:e3:2f:07:23:72:5c:46:8c:a4:5f:eb:dc:66:9e:95:77:
         ae:d4:6a:34:db:d1:d4:ed:c8:0e:bd:c1:50:e1:66:96:02:77:
         87:dd:ac:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:30:43 2026 by rpki-client