Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365461D/20B3F7527E5D11F0B898BF95DAE4EC9C/2XFO6UZLDHro1GvxAWN4ShYPcXI.mft
File:                     2XFO6UZLDHro1GvxAWN4ShYPcXI.mft (raw, json)
Hash identifier:          uxcqV472yLkvlpaOr9fmVMERN3lvvgSt7kQkbR3AfoY=
Subject key identifier:   5F:6A:95:7C:9A:58:A0:AF:D6:57:A6:88:42:93:0E:DF:0D:22:4E:8E
Authority key identifier: D9:71:4E:E9:46:4B:0C:7A:E8:D4:6B:F1:01:63:78:4A:16:0F:71:72
Certificate issuer:       /CN=F365461DAF/serialNumber=D9714EE9464B0C7AE8D46BF10163784A160F7172
Certificate serial:       E3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/2XFO6UZLDHro1GvxAWN4ShYPcXI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365461D/20B3F7527E5D11F0B898BF95DAE4EC9C/2XFO6UZLDHro1GvxAWN4ShYPcXI.mft
Manifest number:          E1
Signing time:             Thu 26 Mar 2026 06:09:24 +0000
Manifest this update:     Thu 26 Mar 2026 06:09:24 +0000
Manifest next update:     Sat 28 Mar 2026 06:09:23 +0000
Files and hashes:         1: 2XFO6UZLDHro1GvxAWN4ShYPcXI.crl (hash: LHnqAXsNfYlsRUln2nTwfwX8cgNm1dTD/eWnoG2qzhY=)
                          2: 68055F96FDD411F0BBB618B9DAE4EC9C.roa (hash: H2IBhkLDeEh8TsQusjlVvlGGweGQFU3ynG5IcXZXGpk=)
                          3: 100568547E5E11F0A78B849ADAE4EC9C.roa (hash: PvZoBj2A7ENispwmai6nCrzzAnKO2XiSPBgvLBIB2QA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365461D/20B3F7527E5D11F0B898BF95DAE4EC9C/2XFO6UZLDHro1GvxAWN4ShYPcXI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365461D/20B3F7527E5D11F0B898BF95DAE4EC9C/2XFO6UZLDHro1GvxAWN4ShYPcXI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/2XFO6UZLDHro1GvxAWN4ShYPcXI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 227 (0xe3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365461DAF, serialNumber=D9714EE9464B0C7AE8D46BF10163784A160F7172
        Validity
            Not Before: Mar 26 06:09:24 2026 GMT
            Not After : Mar 28 06:09:23 2026 GMT
        Subject: CN=69c4cd94-4e76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:8c:b6:71:c2:e9:60:13:44:d9:09:58:59:c6:
                    7a:0c:2a:ca:72:76:e1:49:f9:c8:9e:ee:a2:27:28:
                    20:76:36:d7:45:25:0f:3e:de:57:de:b2:fb:bc:23:
                    bc:96:3d:f2:8e:9a:22:0c:bf:b1:bd:fb:60:ce:45:
                    e5:a2:b9:a2:86:8e:62:39:c8:4f:82:19:70:b6:e7:
                    44:e4:9c:54:bb:06:f0:4a:61:4c:4f:76:e5:4b:50:
                    fd:f9:e2:71:46:b9:31:62:cf:4c:f5:85:15:fc:f6:
                    22:c5:4f:10:5e:7b:84:fb:d5:35:2e:54:0a:63:6b:
                    4a:58:54:56:04:16:00:72:da:d0:9d:2f:a9:57:e3:
                    97:5b:a9:29:8e:c6:d0:6e:65:3e:db:b8:99:36:48:
                    42:28:5a:a0:a3:5a:c3:6e:e6:2a:84:d9:79:72:25:
                    b5:02:dc:1c:85:a4:00:09:99:70:43:ca:d3:f1:29:
                    5f:a4:43:49:a7:5d:1f:c2:ba:6f:eb:40:92:ce:cc:
                    73:db:d5:5d:f7:23:81:f1:f2:3e:2b:b7:42:ac:12:
                    e8:c9:b8:e4:43:be:97:04:a2:08:21:c4:07:03:71:
                    fb:71:db:25:3c:b8:05:22:4b:05:c1:2b:02:04:23:
                    52:9c:d4:a2:7f:8f:f1:38:55:bf:91:c4:f7:19:95:
                    85:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:6A:95:7C:9A:58:A0:AF:D6:57:A6:88:42:93:0E:DF:0D:22:4E:8E
            X509v3 Authority Key Identifier:
                keyid:D9:71:4E:E9:46:4B:0C:7A:E8:D4:6B:F1:01:63:78:4A:16:0F:71:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365461D/20B3F7527E5D11F0B898BF95DAE4EC9C/2XFO6UZLDHro1GvxAWN4ShYPcXI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2XFO6UZLDHro1GvxAWN4ShYPcXI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365461D/20B3F7527E5D11F0B898BF95DAE4EC9C/2XFO6UZLDHro1GvxAWN4ShYPcXI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:cc:bc:94:25:5c:30:f0:f9:66:1d:94:fd:93:76:0a:8f:50:
         26:e9:f5:ae:92:cf:c1:53:7f:2f:eb:6d:6f:39:5e:e4:34:fe:
         ef:3d:2b:50:ac:20:62:94:6f:73:27:23:82:85:92:f1:17:6d:
         fe:40:39:c3:4a:ff:f4:dd:64:01:96:5f:f2:99:7b:b3:66:a5:
         b5:2e:54:79:4e:9f:c3:6f:14:f7:d9:dd:60:d4:eb:7a:c4:d3:
         e4:b7:dc:7d:17:57:ae:40:99:9b:4b:ae:34:32:33:22:64:56:
         5b:b0:68:5a:2c:7a:31:6a:d0:28:19:36:da:49:a3:53:99:40:
         73:73:08:47:f8:23:3a:dd:50:db:80:b8:73:a5:2f:c5:d5:80:
         5f:10:bd:5d:41:f5:b1:87:57:d2:6d:5c:24:e4:b8:55:9a:9e:
         1a:07:d2:08:3b:63:1c:f9:21:6d:69:3a:3e:ad:ba:3c:30:f0:
         f8:e0:a5:ca:c5:0e:01:d8:35:e2:81:79:2f:d5:4d:e3:1d:ea:
         0f:28:60:73:19:de:93:b3:a7:d5:6d:9b:2d:63:a7:a2:2d:cc:
         bf:7a:b5:cb:16:46:b6:ce:b1:71:52:8f:cb:15:02:cf:f1:92:
         88:5b:9c:af:d4:43:cc:11:cd:c1:df:a8:ab:06:26:03:63:51:
         95:3a:81:f0
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAOMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NTQ2MURBRjExMC8GA1UEBRMoRDk3MTRFRTk0NjRCMEM3QUU4RDQ2QkYxMDE2Mzc4
NEExNjBGNzE3MjAeFw0yNjAzMjYwNjA5MjRaFw0yNjAzMjgwNjA5MjNaMBgxFjAU
BgNVBAMTDTY5YzRjZDk0LTRlNzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDHjLZxwulgE0TZCVhZxnoMKspyduFJ+cie7qInKCB2NtdFJQ8+3lfesvu8
I7yWPfKOmiIMv7G9+2DOReWiuaKGjmI5yE+CGXC250TknFS7BvBKYUxPduVLUP35
4nFGuTFiz0z1hRX89iLFTxBee4T71TUuVApja0pYVFYEFgBy2tCdL6lX45dbqSmO
xtBuZT7buJk2SEIoWqCjWsNu5iqE2XlyJbUC3ByFpAAJmXBDytPxKV+kQ0mnXR/C
um/rQJLOzHPb1V33I4Hx8j4rt0KsEujJuORDvpcEogghxAcDcftx2yU8uAUiSwXB
KwIEI1Kc1KJ/j/E4Vb+RxPcZlYWXAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUX2qV
fJpYoK/WV6aIQpMO3w0iTo4wHwYDVR0jBBgwFoAU2XFO6UZLDHro1GvxAWN4ShYP
cXIwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjU0NjFELzIwQjNGNzUyN0U1RDExRjBCODk4QkY5NURBRTRFQzlDLzJYRk82
VVpMREhybzFHdnhBV040U2hZUGNYSS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzJYRk82VVpMREhybzFHdnhBV040U2hZUGNYSS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NTQ2MUQvMjBCM0Y3NTI3RTVEMTFGMEI4OThCRjk1REFF
NEVDOUMvMlhGTzZVWkxESHJvMUd2eEFXTjRTaFlQY1hJLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB0zLyUJVww8PlmHZT9k3YKj1Am6fWu
ks/BU38v621vOV7kNP7vPStQrCBilG9zJyOChZLxF23+QDnDSv/03WQBll/ymXuz
ZqW1LlR5Tp/DbxT32d1g1Ot6xNPkt9x9F1euQJmbS640MjMiZFZbsGhaLHoxatAo
GTbaSaNTmUBzcwhH+CM63VDbgLhzpS/F1YBfEL1dQfWxh1fSbVwk5LhVmp4aB9II
O2Mc+SFtaTo+rbo8MPD44KXKxQ4B2DXigXkv1U3jHeoPKGBzGd6Ts6fVbZstY6ei
Lcy/erXLFka2zrFxUo/LFQLP8ZKIW5yv1EPMEc3B36irBiYDY1GVOoHw
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:36:22 2026 by rpki-client