Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364AE44/22270EFEAF4411EB8C257686F8AEA228/j1A71XPOETUXzWtM-jdKYvFeEsE.mft
File:                     j1A71XPOETUXzWtM-jdKYvFeEsE.mft (raw, json)
Hash identifier:          4OQTlzHAY0G/wNlRN9xZ3XJ3WjxA/7KDANKpJgw1PK4=
Subject key identifier:   8A:9A:F3:92:05:A7:CF:0C:05:9E:4E:E8:F0:30:0D:59:53:F7:CC:BE
Authority key identifier: 8F:50:3B:D5:73:CE:11:35:17:CD:6B:4C:FA:37:4A:62:F1:5E:12:C1
Certificate issuer:       /CN=F364AE44AF/serialNumber=8F503BD573CE113517CD6B4CFA374A62F15E12C1
Certificate serial:       0736
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/j1A71XPOETUXzWtM-jdKYvFeEsE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364AE44/22270EFEAF4411EB8C257686F8AEA228/j1A71XPOETUXzWtM-jdKYvFeEsE.mft
Manifest number:          0731
Signing time:             Thu 26 Mar 2026 02:25:30 +0000
Manifest this update:     Thu 26 Mar 2026 02:25:29 +0000
Manifest next update:     Sat 28 Mar 2026 02:25:29 +0000
Files and hashes:         1: j1A71XPOETUXzWtM-jdKYvFeEsE.crl (hash: EzknnOUUo20gFFtorQNGYbPbj04xfUXLqU4N9SbKz4Y=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364AE44/22270EFEAF4411EB8C257686F8AEA228/j1A71XPOETUXzWtM-jdKYvFeEsE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364AE44/22270EFEAF4411EB8C257686F8AEA228/j1A71XPOETUXzWtM-jdKYvFeEsE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/j1A71XPOETUXzWtM-jdKYvFeEsE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1846 (0x736)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364AE44AF, serialNumber=8F503BD573CE113517CD6B4CFA374A62F15E12C1
        Validity
            Not Before: Mar 26 02:25:29 2026 GMT
            Not After : Mar 28 02:25:29 2026 GMT
        Subject: CN=69c4991a-458e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ff:0f:1e:21:92:b5:07:d8:1e:a1:43:04:4c:
                    6f:8d:53:d6:73:72:1b:59:7c:9f:4e:c9:7c:4b:a0:
                    00:2c:89:76:71:5f:04:32:c8:f1:e6:95:af:5d:1c:
                    2a:77:0b:90:42:0f:b0:c4:7e:af:2b:66:c4:e6:a3:
                    70:e6:87:ba:0c:7f:64:41:c6:22:a4:7b:59:fb:f6:
                    a6:53:85:b8:63:19:a3:46:db:56:8b:0a:ab:dd:aa:
                    34:c5:5f:81:7a:12:dd:21:bb:64:c4:10:61:6c:b2:
                    7b:b8:a2:d2:4a:18:40:a7:1f:08:a9:46:a5:be:99:
                    f2:fc:b7:4b:98:c8:4e:f6:5f:f3:a3:4f:81:fb:c9:
                    57:23:c2:16:c5:c3:22:fe:d5:6d:74:30:77:a6:00:
                    ba:b9:49:67:db:b8:7a:24:4e:a4:15:1c:dc:82:a4:
                    56:67:69:e2:ee:00:06:c0:56:f9:d9:ca:f6:77:71:
                    fe:d0:b0:1d:57:5d:37:9f:e2:9d:20:75:09:dd:e8:
                    55:97:3b:d3:2d:1f:d1:d4:df:d3:36:3c:39:9a:a9:
                    f0:0f:31:6e:1d:3b:45:f5:0e:e4:35:48:68:10:88:
                    35:6f:cc:3b:69:0b:99:88:d3:c2:f3:9d:ad:dd:02:
                    33:1d:0a:9d:0e:bb:f4:98:1b:9d:47:94:27:b3:eb:
                    e9:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:9A:F3:92:05:A7:CF:0C:05:9E:4E:E8:F0:30:0D:59:53:F7:CC:BE
            X509v3 Authority Key Identifier:
                keyid:8F:50:3B:D5:73:CE:11:35:17:CD:6B:4C:FA:37:4A:62:F1:5E:12:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364AE44/22270EFEAF4411EB8C257686F8AEA228/j1A71XPOETUXzWtM-jdKYvFeEsE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/j1A71XPOETUXzWtM-jdKYvFeEsE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364AE44/22270EFEAF4411EB8C257686F8AEA228/j1A71XPOETUXzWtM-jdKYvFeEsE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:a2:17:5e:73:33:7c:b6:a0:f5:e7:25:d0:41:34:e9:8a:8a:
         a0:d0:77:a6:11:c3:3a:53:3d:6e:8b:82:5d:fd:91:0b:33:fd:
         e6:ba:7b:5c:51:0a:56:b4:38:93:05:3f:ac:fc:5d:7c:cc:80:
         fb:a8:8a:dc:94:5c:16:15:b2:ce:0e:2a:09:15:41:18:ba:09:
         88:c1:01:d5:11:7c:ee:6d:b5:7b:ec:74:6a:4d:8b:4c:51:db:
         fa:3e:b3:ad:34:c6:a6:2e:3e:c7:60:21:7f:ea:93:19:f8:21:
         3e:e0:ff:7e:32:9b:00:43:b2:c1:28:b7:01:58:a3:4a:29:c7:
         8b:d4:60:f7:31:e4:40:78:05:32:bf:93:11:ed:e8:47:fc:1b:
         43:67:10:32:8d:ff:b6:f6:67:36:66:c9:8f:f7:04:ff:e8:5c:
         fa:a7:e5:fc:72:ac:c2:0d:ff:9e:d5:d9:6b:78:b5:85:6d:06:
         c3:df:61:28:38:96:79:73:e4:39:c9:ed:06:51:e1:cc:c8:72:
         34:32:41:be:75:fb:5e:22:8f:7c:3e:ad:b8:5d:95:67:76:13:
         ce:01:74:83:3d:30:85:c7:c5:25:58:b7:69:92:5a:c9:93:d3:
         c0:68:06:be:9c:3e:68:b8:27:6b:05:a4:0e:e1:be:dd:61:68:
         df:bf:03:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:01:33 2026 by rpki-client