Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3645590/95C1A38A27F811EFA48126167DDC24C2/PdV0GGdrVqud5W-qgMJ4h5vZRc4.mft
File:                     PdV0GGdrVqud5W-qgMJ4h5vZRc4.mft (raw, json)
Hash identifier:          7kft5mQvKOPkgFo3hIY5qhmctSM1Dc8r+w+hoiw9Zjg=
Subject key identifier:   12:76:5D:AC:6D:D9:01:55:F8:C2:58:8C:C9:D2:37:ED:81:9B:66:7A
Authority key identifier: 3D:D5:74:18:67:6B:56:AB:9D:E5:6F:AA:80:C2:78:87:9B:D9:45:CE
Certificate issuer:       /CN=F3645590AF/serialNumber=3DD57418676B56AB9DE56FAA80C278879BD945CE
Certificate serial:       029F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PdV0GGdrVqud5W-qgMJ4h5vZRc4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3645590/95C1A38A27F811EFA48126167DDC24C2/PdV0GGdrVqud5W-qgMJ4h5vZRc4.mft
Manifest number:          029D
Signing time:             Thu 26 Mar 2026 05:03:08 +0000
Manifest this update:     Thu 26 Mar 2026 05:03:07 +0000
Manifest next update:     Sat 28 Mar 2026 05:03:07 +0000
Files and hashes:         1: PdV0GGdrVqud5W-qgMJ4h5vZRc4.crl (hash: oEgGfBkevg91lhGTmI4NWAkyaJwLAni02geTKf+azLw=)
                          2: CC282C02DCA911F0B66908E9DAE4EC9C.roa (hash: aHMu4MSEjVffihBbMLwP18F/HBK4HKpDI2L3Hm8bfrQ=)
                          3: 098CB55C27F911EF9DB4BD167DDC24C2.roa (hash: MnuSnmQB8rdokjiI++mFKj9UCdOQLKSSBfHFFf46+p0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3645590/95C1A38A27F811EFA48126167DDC24C2/PdV0GGdrVqud5W-qgMJ4h5vZRc4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3645590/95C1A38A27F811EFA48126167DDC24C2/PdV0GGdrVqud5W-qgMJ4h5vZRc4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PdV0GGdrVqud5W-qgMJ4h5vZRc4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 671 (0x29f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3645590AF, serialNumber=3DD57418676B56AB9DE56FAA80C278879BD945CE
        Validity
            Not Before: Mar 26 05:03:07 2026 GMT
            Not After : Mar 28 05:03:07 2026 GMT
        Subject: CN=69c4be0c-a378
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a2:a3:c4:0e:a6:4b:b9:b5:70:0b:fe:cd:06:
                    e1:46:52:30:50:5b:d0:14:b3:dd:28:8c:d1:5e:bc:
                    1d:b7:39:23:4b:1d:3a:f9:ca:2a:c0:94:c1:84:91:
                    e6:37:7c:88:05:90:77:88:12:a7:d7:30:28:ae:16:
                    ed:dd:fd:56:60:da:a8:63:55:5d:b6:3e:e8:93:25:
                    e8:b1:c6:5e:22:f6:9c:b3:32:6a:7e:89:d7:bd:9b:
                    d1:d0:af:45:a5:d3:88:3a:e1:0c:c4:18:ee:39:d2:
                    85:fa:24:bc:92:e9:18:6c:69:10:7a:04:df:04:47:
                    bc:1a:0e:32:a9:a9:6a:ff:ce:bf:4c:ca:ea:51:55:
                    49:44:68:46:4d:94:f4:bc:4d:2f:7c:c0:bd:cf:e6:
                    4b:79:b7:7c:24:db:ab:3f:f3:2e:75:46:6e:c7:32:
                    2b:37:e5:c9:cc:3a:2c:65:80:c4:58:6b:ac:08:d9:
                    ef:ce:3a:36:18:eb:19:19:29:70:e5:2d:6e:94:b7:
                    cf:4d:64:25:8c:9e:e1:98:7b:2e:9f:0d:e0:24:ec:
                    c5:65:ac:36:fc:d6:26:9f:ff:fd:4c:b4:34:4b:d3:
                    1e:ca:a0:6b:bc:73:a4:37:33:3c:0b:74:1b:a0:22:
                    fa:07:be:9f:5e:2d:94:f4:a6:5d:a9:e3:e6:f0:bf:
                    02:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:76:5D:AC:6D:D9:01:55:F8:C2:58:8C:C9:D2:37:ED:81:9B:66:7A
            X509v3 Authority Key Identifier:
                keyid:3D:D5:74:18:67:6B:56:AB:9D:E5:6F:AA:80:C2:78:87:9B:D9:45:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3645590/95C1A38A27F811EFA48126167DDC24C2/PdV0GGdrVqud5W-qgMJ4h5vZRc4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PdV0GGdrVqud5W-qgMJ4h5vZRc4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3645590/95C1A38A27F811EFA48126167DDC24C2/PdV0GGdrVqud5W-qgMJ4h5vZRc4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d3:4d:10:69:bc:2c:0d:ba:9d:c1:0d:46:7f:25:db:d0:78:35:
         31:5b:74:da:cc:cb:75:48:65:e8:e5:55:52:e9:90:94:05:1d:
         0c:8b:f7:28:b1:0e:5d:a4:d8:4f:e7:1c:13:48:55:3f:a8:fb:
         47:74:5f:ba:51:ad:a0:e8:ab:d5:e9:92:80:8e:74:9d:ec:e2:
         90:22:fd:f4:9d:4a:28:75:05:f3:d8:72:62:93:3c:25:da:77:
         db:d6:67:56:37:d8:7d:84:94:71:6c:fb:97:18:44:bd:f4:33:
         82:df:44:3a:d0:fb:f1:25:12:4b:c4:31:bc:28:2b:bb:cb:ef:
         42:c7:a0:7d:91:e8:7f:e0:99:ca:97:d4:cf:07:a1:35:18:4f:
         ed:1f:7e:6c:bd:c5:92:60:e9:e4:68:f4:c0:73:0f:f7:c8:de:
         eb:1c:21:00:fa:bf:27:cd:af:ab:ba:65:73:3f:52:9f:ba:d0:
         2b:3d:cc:58:57:d5:2b:f2:f0:bf:aa:94:c3:91:ba:49:1c:47:
         64:cb:5c:95:29:75:7a:b4:eb:4e:66:68:93:d2:67:56:a9:05:
         cf:9b:df:bb:3d:ee:db:fb:fb:17:0e:b6:6f:49:99:90:0e:eb:
         0f:c8:65:f1:98:15:a9:03:b4:86:3b:38:09:19:b1:2d:bb:4e:
         6c:2d:09:50
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAp8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NDU1OTBBRjExMC8GA1UEBRMoM0RENTc0MTg2NzZCNTZBQjlERTU2RkFBODBDMjc4
ODc5QkQ5NDVDRTAeFw0yNjAzMjYwNTAzMDdaFw0yNjAzMjgwNTAzMDdaMBgxFjAU
BgNVBAMTDTY5YzRiZTBjLWEzNzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDQoqPEDqZLubVwC/7NBuFGUjBQW9AUs90ojNFevB23OSNLHTr5yirAlMGE
keY3fIgFkHeIEqfXMCiuFu3d/VZg2qhjVV22PuiTJeixxl4i9pyzMmp+ide9m9HQ
r0Wl04g64QzEGO450oX6JLyS6RhsaRB6BN8ER7waDjKpqWr/zr9MyupRVUlEaEZN
lPS8TS98wL3P5kt5t3wk26s/8y51Rm7HMis35cnMOixlgMRYa6wI2e/OOjYY6xkZ
KXDlLW6Ut89NZCWMnuGYey6fDeAk7MVlrDb81iaf//1MtDRL0x7KoGu8c6Q3MzwL
dBugIvoHvp9eLZT0pl2p4+bwvwKhAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUEnZd
rG3ZAVX4wliMydI37YGbZnowHwYDVR0jBBgwFoAUPdV0GGdrVqud5W+qgMJ4h5vZ
Rc4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjQ1NTkwLzk1QzFBMzhBMjdGODExRUZBNDgxMjYxNjdEREMyNEMyL1BkVjBH
R2RyVnF1ZDVXLXFnTUo0aDV2WlJjNC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1BkVjBHR2RyVnF1ZDVXLXFnTUo0aDV2WlJjNC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NDU1OTAvOTVDMUEzOEEyN0Y4MTFFRkE0ODEyNjE2N0RE
QzI0QzIvUGRWMEdHZHJWcXVkNVctcWdNSjRoNXZaUmM0Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDTTRBpvCwNup3BDUZ/JdvQeDUxW3Ta
zMt1SGXo5VVS6ZCUBR0Mi/cosQ5dpNhP5xwTSFU/qPtHdF+6Ua2g6KvV6ZKAjnSd
7OKQIv30nUoodQXz2HJikzwl2nfb1mdWN9h9hJRxbPuXGES99DOC30Q60PvxJRJL
xDG8KCu7y+9Cx6B9keh/4JnKl9TPB6E1GE/tH35svcWSYOnkaPTAcw/3yN7rHCEA
+r8nza+rumVzP1KfutArPcxYV9Ur8vC/qpTDkbpJHEdky1yVKXV6tOtOZmiT0mdW
qQXPm9+7Pe7b+/sXDrZvSZmQDusPyGXxmBWpA7SGOzgJGbEtu05sLQlQ
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:44:21 2026 by rpki-client