Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3647DDF/D0E04692863F11EA8AA7334AF8AEA228/af-Z7GUV26O7-Wo36yGeJJT-wYU.mft
File:                     af-Z7GUV26O7-Wo36yGeJJT-wYU.mft (raw, json)
Hash identifier:          Me6YnTLjJHj6ejHANNW7WurWgBUEsuUXzkKV2gyn8u4=
Subject key identifier:   AC:35:ED:1A:33:5F:6A:E7:78:B9:47:FD:9B:D5:60:EC:D5:71:1F:93
Authority key identifier: 69:FF:99:EC:65:15:DB:A3:BB:F9:6A:37:EB:21:9E:24:94:FE:C1:85
Certificate issuer:       /CN=F3647DDFAF/serialNumber=69FF99EC6515DBA3BBF96A37EB219E2494FEC185
Certificate serial:       08A8
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/af-Z7GUV26O7-Wo36yGeJJT-wYU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3647DDF/D0E04692863F11EA8AA7334AF8AEA228/af-Z7GUV26O7-Wo36yGeJJT-wYU.mft
Manifest number:          08A6
Signing time:             Thu 26 Mar 2026 02:00:22 +0000
Manifest this update:     Thu 26 Mar 2026 02:00:21 +0000
Manifest next update:     Sat 28 Mar 2026 02:00:21 +0000
Files and hashes:         1: af-Z7GUV26O7-Wo36yGeJJT-wYU.crl (hash: lhbF4qP1aARWs2UetERQ5rjXDM5x6xo4xRxZ9Jaz70U=)
                          2: D3FB7C1E86F511EA872C9285F8AEA228.roa (hash: TI9Oy29MRy8vT+vPx3tD5wZgwJvEGhK9WAGNOqgD+2Q=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3647DDF/D0E04692863F11EA8AA7334AF8AEA228/af-Z7GUV26O7-Wo36yGeJJT-wYU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3647DDF/D0E04692863F11EA8AA7334AF8AEA228/af-Z7GUV26O7-Wo36yGeJJT-wYU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/af-Z7GUV26O7-Wo36yGeJJT-wYU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2216 (0x8a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3647DDFAF, serialNumber=69FF99EC6515DBA3BBF96A37EB219E2494FEC185
        Validity
            Not Before: Mar 26 02:00:21 2026 GMT
            Not After : Mar 28 02:00:21 2026 GMT
        Subject: CN=69c49336-fc8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:bc:68:88:8d:0a:1d:ce:ef:0b:16:67:3a:b5:
                    30:f0:f8:0d:3c:f4:dc:fe:91:9c:53:02:e1:dc:89:
                    66:19:cd:75:da:e7:0c:6a:f8:0c:5c:b5:f2:08:03:
                    38:76:35:f4:98:98:55:80:b9:bf:b7:0a:77:98:9e:
                    2b:cd:f2:5a:51:12:2d:74:79:97:3d:6f:86:e2:db:
                    0b:96:c4:ea:22:98:67:02:60:ca:d1:e3:aa:ac:7e:
                    8b:99:f7:73:58:a5:1f:01:da:74:b8:cd:db:99:e3:
                    35:93:b1:6e:c0:0f:0d:95:4b:0f:63:04:a3:3c:71:
                    f1:f6:e5:96:28:f6:58:5a:2c:63:20:1f:80:15:18:
                    6e:b3:2a:5b:d1:fc:79:a3:60:04:7b:c5:8c:90:13:
                    2d:5e:2e:c8:1c:1c:c8:d7:04:73:18:52:65:d2:fa:
                    b9:e2:65:ce:e2:b0:c8:c3:28:9e:4e:72:d7:48:1b:
                    11:fc:f6:07:d8:e4:55:f6:bd:03:7e:bc:cb:18:92:
                    80:f5:99:6f:bc:c6:65:d3:68:bb:f6:34:cc:cf:6e:
                    96:31:21:7a:2a:6d:a5:c8:3d:c3:42:30:bf:c3:aa:
                    2d:b7:cf:00:4a:e7:8c:9b:95:d6:cd:c2:90:42:a1:
                    b2:ce:36:d0:78:c9:1c:2d:97:20:6e:1f:1e:2c:6c:
                    c6:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:35:ED:1A:33:5F:6A:E7:78:B9:47:FD:9B:D5:60:EC:D5:71:1F:93
            X509v3 Authority Key Identifier:
                keyid:69:FF:99:EC:65:15:DB:A3:BB:F9:6A:37:EB:21:9E:24:94:FE:C1:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3647DDF/D0E04692863F11EA8AA7334AF8AEA228/af-Z7GUV26O7-Wo36yGeJJT-wYU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/af-Z7GUV26O7-Wo36yGeJJT-wYU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3647DDF/D0E04692863F11EA8AA7334AF8AEA228/af-Z7GUV26O7-Wo36yGeJJT-wYU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:c8:e8:97:2c:1b:23:04:72:ce:9b:35:4d:ce:c4:61:06:07:
         a4:5f:e5:17:d2:2b:8d:83:92:95:11:37:18:7c:5c:00:13:63:
         26:86:52:c1:42:24:06:bd:0a:fa:0d:99:bd:ed:54:af:d7:34:
         3a:75:d8:a5:ba:62:cd:f6:ce:4c:65:4f:46:98:cd:1d:c8:70:
         0f:9d:8e:6c:6d:99:42:2e:a9:c4:0c:31:4f:e5:d6:ce:75:1d:
         9a:68:f8:fc:a3:5e:8b:1d:48:dc:b8:04:20:4a:ea:3f:b4:d3:
         83:93:95:89:92:97:5f:3e:d7:b7:c4:67:43:84:62:1c:79:f4:
         22:5c:76:99:08:db:78:e7:e8:33:58:ce:aa:ae:a5:06:a4:54:
         3e:b7:de:0b:0a:0c:24:9e:e8:9f:a0:c0:db:d5:5c:d8:03:23:
         ba:2c:19:73:30:9c:0f:58:cc:2e:d1:6c:25:fb:82:fd:3d:b0:
         69:07:b0:89:6c:6a:ee:4e:9b:ef:43:10:f1:f2:9e:0f:ab:03:
         a8:4e:01:16:c9:61:18:b3:7d:61:81:3c:61:5b:08:68:e8:d7:
         fa:da:c0:4e:e2:03:87:a8:ac:6e:c2:30:b0:1e:92:3c:2d:7b:
         f0:6b:16:0f:f3:42:e1:56:2d:f5:33:61:4d:bb:43:bf:d1:6d:
         72:e2:bf:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:37:16 2026 by rpki-client