Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3644FCC/B140A4FCD12A11EC92B385EAF1222468/tqq1AixPm4Kp_ukaPUxdheRtiR8.mft
File:                     tqq1AixPm4Kp_ukaPUxdheRtiR8.mft (raw, json)
Hash identifier:          9jnMav9MV7NmysCck8+cKdak0pDWsjVydl/TA64vo3A=
Subject key identifier:   3E:33:D0:B2:A6:F5:50:73:A2:7C:19:34:C7:B9:CF:0C:E6:85:5D:B7
Authority key identifier: B6:AA:B5:02:2C:4F:9B:82:A9:FE:E9:1A:3D:4C:5D:85:E4:6D:89:1F
Certificate issuer:       /CN=F3644FCCAF/serialNumber=B6AAB5022C4F9B82A9FEE91A3D4C5D85E46D891F
Certificate serial:       05AF
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/tqq1AixPm4Kp_ukaPUxdheRtiR8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3644FCC/B140A4FCD12A11EC92B385EAF1222468/tqq1AixPm4Kp_ukaPUxdheRtiR8.mft
Manifest number:          05AF
Signing time:             Thu 26 Mar 2026 03:09:45 +0000
Manifest this update:     Thu 26 Mar 2026 03:09:44 +0000
Manifest next update:     Sat 28 Mar 2026 03:09:44 +0000
Files and hashes:         1: tqq1AixPm4Kp_ukaPUxdheRtiR8.crl (hash: 95p8KqJVe17+J4P7O52VLWWebPnklwncjuykfGPr3/8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3644FCC/B140A4FCD12A11EC92B385EAF1222468/tqq1AixPm4Kp_ukaPUxdheRtiR8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3644FCC/B140A4FCD12A11EC92B385EAF1222468/tqq1AixPm4Kp_ukaPUxdheRtiR8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/tqq1AixPm4Kp_ukaPUxdheRtiR8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1455 (0x5af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3644FCCAF, serialNumber=B6AAB5022C4F9B82A9FEE91A3D4C5D85E46D891F
        Validity
            Not Before: Mar 26 03:09:44 2026 GMT
            Not After : Mar 28 03:09:44 2026 GMT
        Subject: CN=69c4a379-e949
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f9:43:8a:67:c3:38:19:58:65:82:ab:a6:66:
                    d8:5c:96:3f:b1:a2:61:93:5c:6a:c0:1c:de:93:49:
                    a2:13:d3:72:8b:09:eb:76:33:79:0f:c4:c2:af:9d:
                    2b:15:d8:77:ff:26:9c:fd:97:34:64:95:f6:d4:24:
                    77:cc:b4:81:d3:6c:fb:cd:26:a6:6a:15:b8:2a:e0:
                    67:da:8a:af:c3:b4:4d:95:88:48:c3:4f:ba:e4:b5:
                    c9:79:00:2c:51:48:31:75:73:f8:ea:f6:d0:d7:7a:
                    2c:12:b3:cf:ca:63:a9:08:9e:05:7d:e8:21:76:d3:
                    bc:7a:b2:0c:61:a4:df:94:bf:89:3e:08:07:e5:fa:
                    f0:03:65:6c:b3:d7:6c:a9:d2:37:88:66:b1:36:23:
                    a9:9f:7a:3a:a0:1a:7e:ec:9d:a4:e7:a4:f0:9f:9c:
                    13:b4:7d:ca:56:2e:db:37:b6:88:67:fd:f2:dd:d7:
                    01:e5:d3:40:04:19:d7:b9:41:18:32:90:97:06:e3:
                    a5:f7:ef:f9:4b:e0:2c:a4:40:63:9e:59:3b:6b:31:
                    63:e5:6c:7a:29:fe:bf:fa:94:91:48:08:47:75:e2:
                    74:af:2e:bb:3e:f2:b2:5f:f1:27:d6:70:41:59:89:
                    41:1d:c1:3d:93:c7:ed:b0:cf:7b:81:95:39:7d:56:
                    76:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:33:D0:B2:A6:F5:50:73:A2:7C:19:34:C7:B9:CF:0C:E6:85:5D:B7
            X509v3 Authority Key Identifier:
                keyid:B6:AA:B5:02:2C:4F:9B:82:A9:FE:E9:1A:3D:4C:5D:85:E4:6D:89:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3644FCC/B140A4FCD12A11EC92B385EAF1222468/tqq1AixPm4Kp_ukaPUxdheRtiR8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/tqq1AixPm4Kp_ukaPUxdheRtiR8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3644FCC/B140A4FCD12A11EC92B385EAF1222468/tqq1AixPm4Kp_ukaPUxdheRtiR8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:ca:cb:38:c6:66:c6:4e:6f:c3:d1:bf:c8:36:ca:29:89:aa:
         2f:f1:a5:6d:36:e6:a0:25:cd:83:12:4c:09:97:fb:94:20:4e:
         22:f6:51:60:85:fd:0d:34:45:af:88:ee:0b:0e:db:cd:70:3e:
         20:65:25:2e:62:26:ac:28:4c:13:37:9d:a8:58:7c:dd:6b:24:
         c4:8c:6c:dc:80:7b:4b:d5:0d:a7:61:bc:00:e5:ad:bf:3e:03:
         9d:d7:5d:7a:a0:3a:b9:1c:83:3f:ef:bc:c3:2a:55:3b:6f:8e:
         4b:cb:a3:d6:09:f4:22:04:ac:b5:13:a1:5d:25:89:52:86:81:
         b8:69:f6:1a:45:83:bd:f2:18:c7:88:59:2c:b4:76:c8:14:72:
         3c:d8:6c:fb:e0:47:4a:e8:10:5b:54:2f:ad:18:ec:d8:67:c4:
         93:4a:61:7f:cd:af:c9:cd:b7:a4:ad:66:7d:8f:75:70:47:97:
         4d:b9:ac:a1:0e:85:98:0e:6d:a2:7d:31:63:7e:bd:de:d1:c6:
         57:79:10:08:4f:5a:46:f1:20:80:14:f0:ff:ed:03:a6:25:eb:
         e4:49:ea:b1:c7:b8:be:01:b3:80:ca:42:99:86:1b:97:07:97:
         af:d4:d9:c5:22:93:b7:3c:9d:29:b9:e7:93:8d:e5:e9:87:92:
         f3:93:7e:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:35:29 2026 by rpki-client