Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364E699/9578AD3E87E811EE9774F3804AD9E6FC/7rZ3qlDLxpxtvb9pXKGZ1-FHqJQ.mft
File:                     7rZ3qlDLxpxtvb9pXKGZ1-FHqJQ.mft (raw, json)
Hash identifier:          fC4qghFCFmztnC2yY54fBJysNhZCPYYvgQ4cYFT5xzU=
Subject key identifier:   D2:26:45:F5:C0:9F:2F:DE:01:9E:08:96:F1:C6:73:B7:0A:7A:EA:8B
Authority key identifier: EE:B6:77:AA:50:CB:C6:9C:6D:BD:BF:69:5C:A1:99:D7:E1:47:A8:94
Certificate issuer:       /CN=F364E699AF/serialNumber=EEB677AA50CBC69C6DBDBF695CA199D7E147A894
Certificate serial:       0370
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/7rZ3qlDLxpxtvb9pXKGZ1-FHqJQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364E699/9578AD3E87E811EE9774F3804AD9E6FC/7rZ3qlDLxpxtvb9pXKGZ1-FHqJQ.mft
Manifest number:          036F
Signing time:             Thu 26 Mar 2026 04:34:04 +0000
Manifest this update:     Thu 26 Mar 2026 04:34:03 +0000
Manifest next update:     Sat 28 Mar 2026 04:34:03 +0000
Files and hashes:         1: 7rZ3qlDLxpxtvb9pXKGZ1-FHqJQ.crl (hash: jsW9VinfDtDYYGxFqyF0eVvjU82ilbGI6ZeI55oRtRA=)
                          2: 5B2E23D224F711EFB578AD317DDC24C2.roa (hash: dJqx2tIQdNKOhw5rXNRRGr+piGM3e2LGv8rFqRIxuKM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364E699/9578AD3E87E811EE9774F3804AD9E6FC/7rZ3qlDLxpxtvb9pXKGZ1-FHqJQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364E699/9578AD3E87E811EE9774F3804AD9E6FC/7rZ3qlDLxpxtvb9pXKGZ1-FHqJQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/7rZ3qlDLxpxtvb9pXKGZ1-FHqJQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 880 (0x370)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364E699AF, serialNumber=EEB677AA50CBC69C6DBDBF695CA199D7E147A894
        Validity
            Not Before: Mar 26 04:34:03 2026 GMT
            Not After : Mar 28 04:34:03 2026 GMT
        Subject: CN=69c4b73c-a126
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:7b:3e:4a:17:cb:94:01:94:9b:b1:20:f7:ec:
                    a0:94:01:d0:be:6b:91:b9:ba:d1:90:68:da:4f:56:
                    5a:b9:cf:54:5f:1e:8e:9a:13:9c:5a:a1:20:22:53:
                    d7:dc:35:b9:eb:31:11:33:4c:d9:9d:8b:32:95:d6:
                    b8:66:88:6d:0a:74:78:78:29:55:cd:4b:b1:21:0c:
                    14:2e:57:7b:8b:c3:4d:55:c4:70:66:a9:82:fe:61:
                    b7:38:3f:10:f8:77:df:fc:40:b7:5f:98:db:41:14:
                    79:e3:4d:54:6c:32:a0:a4:7b:c9:ef:49:74:45:7f:
                    95:03:3d:ac:47:e4:f6:10:98:94:50:b8:fb:03:21:
                    74:01:90:49:11:7f:e0:7b:c7:2f:e1:a2:52:20:d8:
                    26:38:08:64:3b:21:43:11:15:67:cc:21:72:af:4d:
                    26:70:e8:84:16:49:29:e5:8a:05:09:e5:f2:11:31:
                    58:ec:61:63:08:4d:6d:18:7c:09:aa:28:f0:c8:c7:
                    e4:8a:20:73:c9:68:4b:9d:95:21:d3:74:fd:63:4d:
                    d7:7f:a0:d6:02:3d:4d:b2:70:16:33:00:7f:ae:32:
                    24:90:ff:c4:52:f4:cf:48:4b:de:14:4f:1c:80:b7:
                    bc:f2:31:89:db:23:37:26:8b:7f:cf:9c:c8:50:7b:
                    2c:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:26:45:F5:C0:9F:2F:DE:01:9E:08:96:F1:C6:73:B7:0A:7A:EA:8B
            X509v3 Authority Key Identifier:
                keyid:EE:B6:77:AA:50:CB:C6:9C:6D:BD:BF:69:5C:A1:99:D7:E1:47:A8:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364E699/9578AD3E87E811EE9774F3804AD9E6FC/7rZ3qlDLxpxtvb9pXKGZ1-FHqJQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/7rZ3qlDLxpxtvb9pXKGZ1-FHqJQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364E699/9578AD3E87E811EE9774F3804AD9E6FC/7rZ3qlDLxpxtvb9pXKGZ1-FHqJQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:a8:3f:f5:6b:9c:9f:f2:7e:0b:dc:a0:42:4c:d7:1c:35:5e:
         2b:73:dc:f1:36:02:0c:42:f1:3b:43:21:ff:bc:5c:b8:5c:3a:
         c0:8d:8d:c7:3b:c4:6d:47:5a:a6:c5:3b:4a:8f:1b:33:81:34:
         23:5a:4b:50:a1:54:15:b6:5b:88:f8:dd:54:dd:85:06:25:44:
         94:4d:51:64:1b:7c:b2:71:a5:b9:2a:ea:30:48:77:90:24:76:
         75:22:08:71:8a:1c:71:0d:45:00:54:3d:65:25:4b:9a:e6:ae:
         21:40:fd:75:b2:d8:92:a4:da:9c:eb:2b:b6:93:11:af:c5:74:
         49:b3:71:bc:a1:f6:73:87:90:6a:e3:bb:ea:e9:a8:48:66:90:
         be:84:f8:76:f3:2d:5b:c1:52:ee:24:56:88:49:70:29:d6:c9:
         ed:82:46:8d:d0:83:32:5b:40:00:95:50:a8:a4:77:e8:24:d1:
         c9:1d:ab:87:74:e5:64:05:e0:b6:be:4e:e1:63:a7:fc:54:08:
         fc:fc:78:8f:e6:17:f6:69:3b:13:62:df:96:25:3a:e4:07:69:
         0d:56:49:eb:ba:91:8b:48:46:7c:aa:bd:eb:50:96:d3:9f:ba:
         8e:e6:fe:67:d0:c2:80:b9:6a:d8:51:d9:5d:5a:20:3a:d8:47:
         54:f7:75:33
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICA3AwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NEU2OTlBRjExMC8GA1UEBRMoRUVCNjc3QUE1MENCQzY5QzZEQkRCRjY5NUNBMTk5
RDdFMTQ3QTg5NDAeFw0yNjAzMjYwNDM0MDNaFw0yNjAzMjgwNDM0MDNaMBgxFjAU
BgNVBAMTDTY5YzRiNzNjLWExMjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCfez5KF8uUAZSbsSD37KCUAdC+a5G5utGQaNpPVlq5z1RfHo6aE5xaoSAi
U9fcNbnrMREzTNmdizKV1rhmiG0KdHh4KVXNS7EhDBQuV3uLw01VxHBmqYL+Ybc4
PxD4d9/8QLdfmNtBFHnjTVRsMqCke8nvSXRFf5UDPaxH5PYQmJRQuPsDIXQBkEkR
f+B7xy/holIg2CY4CGQ7IUMRFWfMIXKvTSZw6IQWSSnligUJ5fIRMVjsYWMITW0Y
fAmqKPDIx+SKIHPJaEudlSHTdP1jTdd/oNYCPU2ycBYzAH+uMiSQ/8RS9M9IS94U
TxyAt7zyMYnbIzcmi3/PnMhQeyzdAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU0iZF
9cCfL94BngiW8cZztwp66oswHwYDVR0jBBgwFoAU7rZ3qlDLxpxtvb9pXKGZ1+FH
qJQwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjRFNjk5Lzk1NzhBRDNFODdFODExRUU5Nzc0RjM4MDRBRDlFNkZDLzdyWjNx
bERMeHB4dHZiOXBYS0daMS1GSHFKUS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzdyWjNxbERMeHB4dHZiOXBYS0daMS1GSHFKUS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NEU2OTkvOTU3OEFEM0U4N0U4MTFFRTk3NzRGMzgwNEFE
OUU2RkMvN3JaM3FsREx4cHh0dmI5cFhLR1oxLUZIcUpRLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC/qD/1a5yf8n4L3KBCTNccNV4rc9zx
NgIMQvE7QyH/vFy4XDrAjY3HO8RtR1qmxTtKjxszgTQjWktQoVQVtluI+N1U3YUG
JUSUTVFkG3yycaW5KuowSHeQJHZ1IghxihxxDUUAVD1lJUua5q4hQP11stiSpNqc
6yu2kxGvxXRJs3G8ofZzh5Bq47vq6ahIZpC+hPh28y1bwVLuJFaISXAp1sntgkaN
0IMyW0AAlVCopHfoJNHJHauHdOVkBeC2vk7hY6f8VAj8/HiP5hf2aTsTYt+WJTrk
B2kNVknrupGLSEZ8qr3rUJbTn7qO5v5n0MKAuWrYUdldWiA62EdU93Uz
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:54:34 2026 by rpki-client