Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3646DCF/DA9D1FCE773611E59B2FF40DF8AEA228/5_z-A6OF76F0KyB_rsnT3GwDl50.mft
File:                     5_z-A6OF76F0KyB_rsnT3GwDl50.mft (raw, json)
Hash identifier:          IblxFz4UX4CnrtCvjXDPbnjSSBVLDjwaTu5w4Oxo5nM=
Subject key identifier:   AF:D9:DC:EA:A3:60:82:4B:97:CD:01:96:73:05:D1:44:EC:02:6D:C1
Authority key identifier: E7:FC:FE:03:A3:85:EF:A1:74:2B:20:7F:AE:C9:D3:DC:6C:03:97:9D
Certificate issuer:       /CN=F3646DCFAF/serialNumber=E7FCFE03A385EFA1742B207FAEC9D3DC6C03979D
Certificate serial:       0F2D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/5_z-A6OF76F0KyB_rsnT3GwDl50.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3646DCF/DA9D1FCE773611E59B2FF40DF8AEA228/5_z-A6OF76F0KyB_rsnT3GwDl50.mft
Manifest number:          0F2B
Signing time:             Thu 26 Mar 2026 00:59:52 +0000
Manifest this update:     Thu 26 Mar 2026 00:59:51 +0000
Manifest next update:     Sat 28 Mar 2026 00:59:51 +0000
Files and hashes:         1: 5_z-A6OF76F0KyB_rsnT3GwDl50.crl (hash: HD830jjlLDIWfo56exbPkB4kSijmcWdWggeKSjCAV8o=)
                          2: 97EFF9FE41C911E6974C3715F8AEA228.roa (hash: PV1x2NuqP503+6sU0r3JzrSccMtiDFB0mgrEAngyzh8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3646DCF/DA9D1FCE773611E59B2FF40DF8AEA228/5_z-A6OF76F0KyB_rsnT3GwDl50.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3646DCF/DA9D1FCE773611E59B2FF40DF8AEA228/5_z-A6OF76F0KyB_rsnT3GwDl50.mft
                          rsync://rpki.afrinic.net/repository/afrinic/5_z-A6OF76F0KyB_rsnT3GwDl50.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3885 (0xf2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3646DCFAF, serialNumber=E7FCFE03A385EFA1742B207FAEC9D3DC6C03979D
        Validity
            Not Before: Mar 26 00:59:51 2026 GMT
            Not After : Mar 28 00:59:51 2026 GMT
        Subject: CN=69c48508-14c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:0b:d0:7d:7b:23:87:db:5c:77:a9:ca:e3:62:
                    5d:20:61:c4:9d:9a:4d:de:3c:43:41:05:64:5e:97:
                    69:26:68:1c:83:cd:f6:56:b6:73:41:bf:15:bd:f1:
                    3a:14:76:b6:ba:71:2c:39:8d:88:7e:d7:d8:b8:7b:
                    1d:7c:58:78:63:ff:eb:77:6d:ce:b7:a8:fb:88:cf:
                    a3:8d:4c:18:63:f1:ce:61:ce:11:70:9b:04:59:74:
                    3e:9d:18:21:6c:67:af:60:c8:e8:5e:35:a6:3d:97:
                    2b:59:d2:03:d3:e5:a0:a8:87:31:a6:64:05:8a:9a:
                    29:cf:89:a0:d6:01:ce:78:5b:7b:be:8f:e5:5e:39:
                    a4:9e:3d:c6:20:24:b8:4e:be:af:f1:af:38:21:b8:
                    5d:34:87:71:3d:ce:2d:f4:c8:4c:f1:db:d4:5f:a7:
                    9a:3c:bb:68:d8:3b:f6:b0:36:bc:4f:3b:5b:57:98:
                    1f:90:1e:68:3e:c0:09:b6:c2:6d:a8:d6:4a:73:2e:
                    fa:18:0a:d6:36:0f:36:2c:64:68:b0:77:cc:85:81:
                    ef:7e:ec:64:66:62:64:c3:93:97:5b:5e:67:de:9f:
                    61:52:61:45:8f:aa:21:b1:60:e8:83:73:b6:c8:ab:
                    51:82:fd:07:c1:49:a2:5c:ec:51:cd:7a:c4:b6:7f:
                    ae:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:D9:DC:EA:A3:60:82:4B:97:CD:01:96:73:05:D1:44:EC:02:6D:C1
            X509v3 Authority Key Identifier:
                keyid:E7:FC:FE:03:A3:85:EF:A1:74:2B:20:7F:AE:C9:D3:DC:6C:03:97:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3646DCF/DA9D1FCE773611E59B2FF40DF8AEA228/5_z-A6OF76F0KyB_rsnT3GwDl50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/5_z-A6OF76F0KyB_rsnT3GwDl50.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3646DCF/DA9D1FCE773611E59B2FF40DF8AEA228/5_z-A6OF76F0KyB_rsnT3GwDl50.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:28:92:b0:ba:4e:0d:07:3e:65:9e:6a:59:a9:04:35:8b:c3:
         1f:84:86:5e:ae:25:d5:b1:bf:dd:cc:97:da:90:fc:ad:35:64:
         90:49:15:13:de:da:4a:27:e7:f1:79:78:24:92:b6:6b:d1:4a:
         53:c6:e1:f2:30:f1:f5:13:c5:14:77:05:d7:bc:23:06:85:8f:
         2e:51:ca:25:a2:d3:d3:45:3b:1b:51:dd:c9:be:b9:70:c0:ae:
         29:f3:8c:f2:64:1e:35:2a:c0:86:0e:60:26:80:07:2e:fb:ee:
         51:3b:3e:17:83:6d:5b:3b:a7:9b:4c:a6:f7:99:db:9e:49:2b:
         b9:0e:4c:e7:4e:2f:05:21:06:f8:d5:7f:44:ae:57:af:3f:59:
         c0:e3:61:5b:94:b4:eb:d7:6e:79:ae:46:83:76:30:1e:73:c1:
         05:d3:e9:f2:9d:be:48:8b:9c:61:47:5a:fa:15:55:dc:58:0b:
         f1:fd:58:d6:e8:fa:b9:6d:ab:ee:1e:2f:5e:c4:c8:ce:3d:6c:
         cf:ba:7f:a3:db:3d:62:b0:e8:01:ba:21:36:eb:3f:28:71:54:
         3a:3c:91:ea:c3:92:77:74:c4:c6:b5:c1:9d:2c:25:97:d5:82:
         a8:d9:26:cc:cf:1a:ec:9a:c0:6a:52:03:f5:a1:be:2f:90:15:
         41:59:47:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:21:16 2026 by rpki-client