Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3646008/785175CA088D11EBAAD1BC5BF8AEA228/XudwaWdbdcoke_xc0zALF7WznDQ.mft
File:                     XudwaWdbdcoke_xc0zALF7WznDQ.mft (raw, json)
Hash identifier:          HqK1pL314beF5QBY4XvWWHgV2DIE9ICdZdX/5KB6gk4=
Subject key identifier:   35:A5:A5:38:35:E6:E8:37:81:C6:95:0E:EA:F0:BD:1F:B0:91:FC:6C
Authority key identifier: 5E:E7:70:69:67:5B:75:CA:24:7B:FC:5C:D3:30:0B:17:B5:B3:9C:34
Certificate issuer:       /CN=F3646008AF/serialNumber=5EE77069675B75CA247BFC5CD3300B17B5B39C34
Certificate serial:       07FB
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/XudwaWdbdcoke_xc0zALF7WznDQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3646008/785175CA088D11EBAAD1BC5BF8AEA228/XudwaWdbdcoke_xc0zALF7WznDQ.mft
Manifest number:          07FB
Signing time:             Thu 26 Mar 2026 02:09:38 +0000
Manifest this update:     Thu 26 Mar 2026 02:09:37 +0000
Manifest next update:     Sat 28 Mar 2026 02:09:37 +0000
Files and hashes:         1: XudwaWdbdcoke_xc0zALF7WznDQ.crl (hash: x7rJVcWMGRBlunDknxFAliXl+TfuLv9szzOt6bUnoEs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3646008/785175CA088D11EBAAD1BC5BF8AEA228/XudwaWdbdcoke_xc0zALF7WznDQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3646008/785175CA088D11EBAAD1BC5BF8AEA228/XudwaWdbdcoke_xc0zALF7WznDQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/XudwaWdbdcoke_xc0zALF7WznDQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2043 (0x7fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3646008AF, serialNumber=5EE77069675B75CA247BFC5CD3300B17B5B39C34
        Validity
            Not Before: Mar 26 02:09:37 2026 GMT
            Not After : Mar 28 02:09:37 2026 GMT
        Subject: CN=69c49562-9f3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:10:59:06:f0:3b:a7:05:d5:fb:46:ee:0c:72:
                    4c:62:2c:1c:1a:0d:a7:60:35:30:e9:3c:46:20:e7:
                    b8:cc:c8:3e:f5:ce:d1:56:84:84:a5:e3:c2:bb:1f:
                    e4:bd:70:4b:8c:71:1c:b5:ee:65:f2:de:67:ab:d6:
                    fb:48:8a:47:9e:4b:df:4d:06:02:d5:59:5b:cf:f7:
                    d2:26:e6:71:36:f1:54:2a:8d:44:49:eb:55:67:59:
                    54:99:b8:83:70:d0:35:5d:b2:74:7b:aa:e4:6a:96:
                    32:3a:d7:a3:3c:a5:c7:68:6d:d5:39:59:32:d1:ec:
                    53:3c:3e:38:22:dd:b1:39:24:c5:e3:cf:fb:fe:68:
                    3d:2e:30:8c:86:56:dd:61:7d:41:be:b9:d9:17:46:
                    2c:38:af:9f:f4:d1:65:0b:bc:97:b3:0e:1f:50:d1:
                    f2:54:09:8e:f4:9f:58:3f:c3:7b:33:95:9d:da:03:
                    bd:d5:3b:4f:4a:bb:61:b0:06:24:7f:e8:bc:aa:16:
                    0e:b1:3e:8b:21:1a:bc:bb:a7:57:6b:53:31:df:c6:
                    e1:5c:b7:85:28:88:22:3f:4a:46:80:18:34:eb:e9:
                    ef:e0:2f:24:16:6e:74:08:9c:1e:5b:5c:a9:0e:8c:
                    ea:9f:a8:b6:0d:ee:c3:99:d5:0f:3d:19:9e:7e:9a:
                    a1:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:A5:A5:38:35:E6:E8:37:81:C6:95:0E:EA:F0:BD:1F:B0:91:FC:6C
            X509v3 Authority Key Identifier:
                keyid:5E:E7:70:69:67:5B:75:CA:24:7B:FC:5C:D3:30:0B:17:B5:B3:9C:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3646008/785175CA088D11EBAAD1BC5BF8AEA228/XudwaWdbdcoke_xc0zALF7WznDQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XudwaWdbdcoke_xc0zALF7WznDQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3646008/785175CA088D11EBAAD1BC5BF8AEA228/XudwaWdbdcoke_xc0zALF7WznDQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:74:d7:a9:66:a1:c9:82:96:51:05:02:ae:fb:f9:65:57:7a:
         5c:8a:c0:ac:95:59:f0:a7:13:ab:9d:44:2d:fb:ab:e3:25:4a:
         16:bc:f9:af:41:43:1c:9a:38:a5:eb:07:9c:77:ee:b1:89:a8:
         1b:fe:bb:e3:e8:b0:ea:f0:f1:f3:58:e2:cb:ad:2e:12:2d:79:
         4a:18:16:be:a3:c6:f7:45:0a:bf:14:b2:52:b4:7b:cd:d8:89:
         a3:81:31:45:04:14:31:4f:f3:02:d2:94:38:b1:4b:4d:c8:da:
         2e:2b:36:ee:10:a8:22:b1:b4:c5:32:f3:5f:fe:72:ed:58:fd:
         75:4f:ef:72:11:8a:74:09:d9:b3:5e:16:29:13:53:69:af:56:
         66:d4:05:74:31:65:af:77:29:eb:47:a9:38:c0:8e:a3:dd:cb:
         01:4e:f0:3a:51:95:9a:66:38:6d:cc:7d:58:93:07:62:36:7c:
         97:e3:cd:d5:8b:ff:b0:9a:09:b6:9b:40:39:96:f2:64:35:a2:
         63:97:dc:86:1d:09:1b:21:53:b0:ab:7c:52:b9:d8:df:ee:05:
         59:6b:b3:74:2e:38:f0:fc:be:ba:08:f4:71:47:8b:e2:43:88:
         96:86:e1:da:bf:78:ad:9d:e8:1f:ec:31:51:a8:39:2b:c0:11:
         81:8c:cd:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:12:12 2026 by rpki-client