Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3645501/9CDFC738915111EAA5A73044F8AEA228/C7pA9VDeSe7FcpFxJO4AiiTETQ8.mft
File:                     C7pA9VDeSe7FcpFxJO4AiiTETQ8.mft (raw, json)
Hash identifier:          JY3F7AK45rKjRAASgxPKIdTMj3YhXjL1Tz6TctT+F4E=
Subject key identifier:   7E:DC:1B:9A:67:A9:DC:C7:76:D5:BA:14:00:3E:99:EA:AC:99:FD:37
Authority key identifier: 0B:BA:40:F5:50:DE:49:EE:C5:72:91:71:24:EE:00:8A:24:C4:4D:0F
Certificate issuer:       /CN=F3645501AF/serialNumber=0BBA40F550DE49EEC572917124EE008A24C44D0F
Certificate serial:       08A7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/C7pA9VDeSe7FcpFxJO4AiiTETQ8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3645501/9CDFC738915111EAA5A73044F8AEA228/C7pA9VDeSe7FcpFxJO4AiiTETQ8.mft
Manifest number:          08A2
Signing time:             Thu 26 Mar 2026 02:01:36 +0000
Manifest this update:     Thu 26 Mar 2026 02:01:35 +0000
Manifest next update:     Sat 28 Mar 2026 02:01:35 +0000
Files and hashes:         1: C7pA9VDeSe7FcpFxJO4AiiTETQ8.crl (hash: dtIc8HVRKAtywnppEvIFEljzbkb5WBvXVXOT0V+O8FY=)
                          2: C69507C6303111F08DE721DEDAE4EC9C.roa (hash: n1LnT/xuX8ossK6e1Qu5ErVwbY8lo9OUKGVmWsM35RE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3645501/9CDFC738915111EAA5A73044F8AEA228/C7pA9VDeSe7FcpFxJO4AiiTETQ8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3645501/9CDFC738915111EAA5A73044F8AEA228/C7pA9VDeSe7FcpFxJO4AiiTETQ8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/C7pA9VDeSe7FcpFxJO4AiiTETQ8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2215 (0x8a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3645501AF, serialNumber=0BBA40F550DE49EEC572917124EE008A24C44D0F
        Validity
            Not Before: Mar 26 02:01:35 2026 GMT
            Not After : Mar 28 02:01:35 2026 GMT
        Subject: CN=69c49380-4549
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:62:76:98:ae:9b:ea:16:8e:fd:e1:fe:48:a9:
                    45:24:9c:3e:80:d8:2a:bd:cb:8f:8e:65:e5:a4:96:
                    63:69:50:4c:79:6b:ee:15:47:d3:ff:e9:7d:18:ff:
                    c6:98:d4:ee:e8:53:8b:8f:bf:93:d8:66:c2:08:5d:
                    a8:c8:02:1f:c0:8e:db:45:4b:a2:38:70:23:4d:87:
                    30:36:54:d7:ae:bd:52:87:b5:e8:93:22:63:40:c3:
                    9e:51:1b:41:6b:b5:e4:90:2d:a8:13:c2:49:01:a5:
                    a8:29:7e:7f:c8:46:3c:4e:58:d6:c8:1e:7e:57:1c:
                    d0:85:81:08:eb:04:31:b8:4c:7f:21:2e:a2:8c:25:
                    33:5e:e1:14:a4:56:65:bf:aa:e9:f2:25:69:9f:b4:
                    f2:3f:8b:3f:d5:d3:13:71:34:4b:90:7b:f8:c3:39:
                    97:e2:6f:3b:b2:e3:3d:8d:07:b0:10:de:4f:45:dd:
                    df:59:2a:e8:fe:ac:94:bd:fe:28:a1:6d:a4:1b:98:
                    50:0a:01:cd:fa:70:dd:e2:01:eb:32:8d:5d:0f:4b:
                    06:26:2c:34:47:d6:74:e6:7d:21:9c:20:ff:b7:f0:
                    34:7e:d3:4c:eb:2c:b6:20:0e:14:2c:18:6b:20:70:
                    bf:2f:1b:99:a7:ee:34:e4:37:f1:27:ec:cc:84:87:
                    07:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:DC:1B:9A:67:A9:DC:C7:76:D5:BA:14:00:3E:99:EA:AC:99:FD:37
            X509v3 Authority Key Identifier:
                keyid:0B:BA:40:F5:50:DE:49:EE:C5:72:91:71:24:EE:00:8A:24:C4:4D:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3645501/9CDFC738915111EAA5A73044F8AEA228/C7pA9VDeSe7FcpFxJO4AiiTETQ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/C7pA9VDeSe7FcpFxJO4AiiTETQ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3645501/9CDFC738915111EAA5A73044F8AEA228/C7pA9VDeSe7FcpFxJO4AiiTETQ8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:95:b2:b2:15:85:60:b8:92:14:af:e7:53:af:f4:70:13:f4:
         41:ae:0a:15:4c:af:83:e0:b2:64:a3:3c:7d:34:e3:42:ea:d8:
         fc:31:4c:60:94:ba:aa:e7:69:1d:62:4c:8f:bf:11:93:1a:20:
         f2:a7:e7:bc:15:c7:37:35:a5:8c:54:27:42:f4:a4:27:77:e3:
         2f:65:3a:a6:53:17:ba:68:b9:c9:d9:07:ac:5a:b9:bf:1c:1a:
         f8:ee:62:d3:2b:e4:05:1d:4c:33:cd:3c:da:ae:e1:da:a7:2d:
         70:31:d4:bb:54:1d:52:5a:ea:73:0b:80:c8:25:01:f7:16:c9:
         7a:bb:44:51:8f:aa:32:fc:6f:31:50:dd:08:b8:76:ae:14:eb:
         f3:ab:67:5b:04:77:d9:12:a4:76:3f:06:3c:eb:34:9c:8e:75:
         f6:47:7c:01:53:89:f2:0c:de:e7:32:70:a4:74:4a:3b:f9:23:
         8a:95:59:92:f9:4d:b5:1b:fe:f1:4b:db:35:62:77:f2:59:ef:
         fd:a0:71:ca:6a:91:ae:d5:0b:73:77:1c:74:22:a0:5f:17:f6:
         b6:e6:4d:89:d4:d6:3b:18:ae:42:33:18:19:59:ab:22:73:1b:
         4e:d7:db:b8:79:4a:27:c2:39:61:36:a7:cc:15:45:20:5e:ab:
         2f:1e:23:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:02:55 2026 by rpki-client