Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365BE6B/AE58C9440A6111F189CC10DEDAE4EC9C/CJu_po0WI_pGyRBDO-B2KT4_wrk.mft
File:                     CJu_po0WI_pGyRBDO-B2KT4_wrk.mft (raw, json)
Hash identifier:          Zn9pd0BvmdcbVmMnRd9anWxSgh5mMP/hyhF1TViXr/s=
Subject key identifier:   13:F3:0E:0D:FF:1B:28:05:25:F1:FF:0C:31:52:AD:11:04:7F:0A:52
Authority key identifier: 08:9B:BF:A6:8D:16:23:FA:46:C9:10:43:3B:E0:76:29:3E:3F:C2:B9
Certificate issuer:       /CN=F365BE6BAF/serialNumber=089BBFA68D1623FA46C910433BE076293E3FC2B9
Certificate serial:       2A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CJu_po0WI_pGyRBDO-B2KT4_wrk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365BE6B/AE58C9440A6111F189CC10DEDAE4EC9C/CJu_po0WI_pGyRBDO-B2KT4_wrk.mft
Manifest number:          29
Signing time:             Thu 26 Mar 2026 06:35:36 +0000
Manifest this update:     Thu 26 Mar 2026 06:35:35 +0000
Manifest next update:     Sat 28 Mar 2026 06:35:35 +0000
Files and hashes:         1: CJu_po0WI_pGyRBDO-B2KT4_wrk.crl (hash: Z2VHw7zxrX8AA7BXNybFupJTBoK8c0SzThsO/h44TMg=)
                          2: 66B396220A6211F192522FE2DAE4EC9C.roa (hash: lJkq355Hl6QyAz0aA6KQRws7nq8iUzZqbNSPzM4AiT8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365BE6B/AE58C9440A6111F189CC10DEDAE4EC9C/CJu_po0WI_pGyRBDO-B2KT4_wrk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365BE6B/AE58C9440A6111F189CC10DEDAE4EC9C/CJu_po0WI_pGyRBDO-B2KT4_wrk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CJu_po0WI_pGyRBDO-B2KT4_wrk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 42 (0x2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365BE6BAF, serialNumber=089BBFA68D1623FA46C910433BE076293E3FC2B9
        Validity
            Not Before: Mar 26 06:35:35 2026 GMT
            Not After : Mar 28 06:35:35 2026 GMT
        Subject: CN=69c4d3b8-a9f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:54:84:f5:ad:06:a9:59:b3:3e:a8:87:30:e5:
                    e3:e1:68:81:a4:41:35:67:91:38:48:c1:e8:dc:b7:
                    b4:6d:c6:fb:43:d9:16:e4:dc:cb:2b:91:0a:93:6d:
                    70:f8:34:3e:7e:87:4b:ad:3e:d9:99:80:af:7f:6c:
                    cc:4a:c3:3e:96:2f:be:c5:19:cd:62:c3:52:9e:00:
                    c2:f8:53:4d:68:4a:d4:fd:e8:f7:88:5e:1d:79:52:
                    6b:56:b9:be:f9:4b:f0:0a:dc:26:53:f3:be:23:60:
                    75:b3:92:a0:3f:2d:cb:f5:fe:2f:28:a8:0f:fd:e7:
                    a2:f8:e3:30:c3:34:5c:47:5f:17:af:09:08:0d:9a:
                    7a:87:8a:d1:d7:66:93:93:d8:bb:28:ae:10:7d:a1:
                    a8:09:9e:1b:5b:5e:d6:8d:04:22:ba:9b:f8:5d:a3:
                    e3:85:4b:50:36:8f:57:1a:a4:eb:e9:58:0e:dd:d5:
                    45:85:50:85:4c:ad:c7:4c:0c:d2:36:87:78:a4:bf:
                    29:a4:f5:2a:74:f9:13:ea:c7:05:2b:87:02:86:4b:
                    5d:38:2f:94:12:3c:92:cb:70:72:f6:f9:dc:87:12:
                    28:c6:1d:6b:d3:e2:48:42:f7:5e:cd:8e:9a:c7:58:
                    54:4c:89:9f:e4:db:53:da:6f:a7:84:e4:99:69:1f:
                    b4:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:F3:0E:0D:FF:1B:28:05:25:F1:FF:0C:31:52:AD:11:04:7F:0A:52
            X509v3 Authority Key Identifier:
                keyid:08:9B:BF:A6:8D:16:23:FA:46:C9:10:43:3B:E0:76:29:3E:3F:C2:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365BE6B/AE58C9440A6111F189CC10DEDAE4EC9C/CJu_po0WI_pGyRBDO-B2KT4_wrk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CJu_po0WI_pGyRBDO-B2KT4_wrk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365BE6B/AE58C9440A6111F189CC10DEDAE4EC9C/CJu_po0WI_pGyRBDO-B2KT4_wrk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:81:69:68:b6:b8:14:5a:bc:43:9a:b8:d1:6b:41:c4:09:6c:
         98:96:8f:eb:e5:74:01:74:1c:e2:6d:4b:d9:9a:fb:e5:3f:9f:
         6f:14:36:b2:8c:ab:eb:93:ba:c2:d9:52:c0:e1:f0:ec:cf:08:
         3c:25:c9:87:cd:e2:46:3a:13:3d:57:0f:84:20:25:71:09:b8:
         85:13:2a:95:90:d4:e9:ae:22:ce:af:d2:a7:da:3c:fd:94:55:
         94:b1:e8:c0:14:04:a9:ad:7e:3a:3e:e8:5d:3e:e4:5d:f9:b5:
         bb:a2:f0:b7:69:9d:cf:96:8e:6b:e8:ca:06:8a:92:d9:9a:6f:
         42:39:06:48:e5:7e:ad:58:13:9c:51:dc:d1:83:d8:c9:7b:da:
         0d:d8:7a:45:89:77:73:ab:81:68:18:c4:30:53:e2:52:c3:78:
         f9:c0:f6:10:bb:ae:9a:22:96:a7:45:2c:65:d5:c7:8e:de:27:
         68:b8:a2:8b:07:9a:d3:e8:df:d4:f9:a3:48:ee:d4:21:2c:bc:
         19:4f:72:68:9f:c2:5a:26:de:80:fd:ec:a5:c5:01:3f:fd:47:
         e7:c0:e0:e5:b2:28:54:ff:38:07:57:7a:3b:8e:1d:b6:35:b4:
         49:15:27:9d:13:06:32:85:3d:04:16:db:00:15:91:3d:ce:e1:
         71:6d:e9:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:31:34 2026 by rpki-client