Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365C79E/1FC34BE6BEDA11EB8F5CE243F8AEA228/3XSZqMjBKrZ-FetJKAimku1LWfQ.mft
File:                     3XSZqMjBKrZ-FetJKAimku1LWfQ.mft (raw, json)
Hash identifier:          f+A003McW2GIrmUiv7vkCqMMUeSlXxwhEBgzqHJO1jw=
Subject key identifier:   79:86:C5:48:8D:66:45:84:D6:E3:81:CC:73:A2:38:88:9B:50:F8:05
Authority key identifier: DD:74:99:A8:C8:C1:2A:B6:7E:15:EB:49:28:08:A6:92:ED:4B:59:F4
Certificate issuer:       /CN=F365C79EAF/serialNumber=DD7499A8C8C12AB67E15EB492808A692ED4B59F4
Certificate serial:       0726
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/3XSZqMjBKrZ-FetJKAimku1LWfQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365C79E/1FC34BE6BEDA11EB8F5CE243F8AEA228/3XSZqMjBKrZ-FetJKAimku1LWfQ.mft
Manifest number:          071F
Signing time:             Thu 26 Mar 2026 02:28:15 +0000
Manifest this update:     Thu 26 Mar 2026 02:28:14 +0000
Manifest next update:     Sat 28 Mar 2026 02:28:14 +0000
Files and hashes:         1: 3XSZqMjBKrZ-FetJKAimku1LWfQ.crl (hash: R3Hzn/SCGr3EdDgFpRXog1l0kJyiOwMITt5/6Xgc8Cc=)
                          2: F2AE5BA0270C11F186A655EADAE4EC9C.roa (hash: 9JorJHXWwq0sbJOBnfh0uYUZoXJy5k1Hxib4ZHL4hlA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365C79E/1FC34BE6BEDA11EB8F5CE243F8AEA228/3XSZqMjBKrZ-FetJKAimku1LWfQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365C79E/1FC34BE6BEDA11EB8F5CE243F8AEA228/3XSZqMjBKrZ-FetJKAimku1LWfQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/3XSZqMjBKrZ-FetJKAimku1LWfQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1830 (0x726)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365C79EAF, serialNumber=DD7499A8C8C12AB67E15EB492808A692ED4B59F4
        Validity
            Not Before: Mar 26 02:28:14 2026 GMT
            Not After : Mar 28 02:28:14 2026 GMT
        Subject: CN=69c499bf-44a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d2:5a:12:f0:59:a1:2a:9f:e9:60:d3:a8:f0:
                    45:66:f6:46:fa:27:7e:27:4c:23:f8:18:a9:3b:ea:
                    96:fc:2f:aa:2c:e5:74:68:44:ba:50:8d:dc:99:4a:
                    1a:90:11:8c:66:1d:6c:cd:1d:9e:d9:af:95:03:95:
                    ea:db:29:88:40:1c:98:3d:f9:52:42:4e:ef:26:e7:
                    e3:46:90:ee:1b:32:da:cc:10:b2:61:cc:95:22:19:
                    83:65:04:05:1e:f4:b9:41:04:91:26:e8:9f:1f:3e:
                    4a:81:87:88:21:d6:66:7c:4b:65:12:65:2a:f3:68:
                    13:d6:e7:45:a8:7b:52:98:d4:6e:77:0b:dc:75:da:
                    3c:6f:80:0a:b3:a0:e8:a0:05:f8:e4:22:34:8e:f2:
                    38:f4:d6:e6:66:c9:a0:d4:96:ae:a2:65:9b:4d:8d:
                    20:d8:a5:ba:cf:69:37:37:a4:b9:ac:06:0c:3d:2e:
                    f6:75:6a:a5:37:7f:04:72:0a:39:69:4b:40:cf:10:
                    8c:74:18:a2:42:a3:d4:8b:b2:1d:45:63:b1:da:b3:
                    24:e4:65:61:19:21:32:5b:32:bf:59:c0:a4:4c:e3:
                    13:90:b2:81:7f:50:7c:08:7d:3f:65:d4:98:f1:40:
                    62:3e:8a:56:ab:b2:62:a0:dd:67:13:19:1a:0e:cf:
                    a9:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:86:C5:48:8D:66:45:84:D6:E3:81:CC:73:A2:38:88:9B:50:F8:05
            X509v3 Authority Key Identifier:
                keyid:DD:74:99:A8:C8:C1:2A:B6:7E:15:EB:49:28:08:A6:92:ED:4B:59:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365C79E/1FC34BE6BEDA11EB8F5CE243F8AEA228/3XSZqMjBKrZ-FetJKAimku1LWfQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3XSZqMjBKrZ-FetJKAimku1LWfQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365C79E/1FC34BE6BEDA11EB8F5CE243F8AEA228/3XSZqMjBKrZ-FetJKAimku1LWfQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:29:b9:10:4f:25:7e:ed:ee:cc:7c:2c:e9:9f:98:ba:cd:da:
         d0:49:97:9b:4b:86:70:36:e1:cc:21:d8:a6:84:71:a6:5a:5b:
         11:45:c0:f3:c1:a7:fb:d7:0d:83:57:f5:1d:86:47:07:bb:a6:
         9f:f2:f2:2f:70:e3:80:f3:a2:85:33:0c:a9:a4:29:75:f0:32:
         ed:d7:f0:74:86:91:e9:96:ab:24:50:b8:19:f7:01:df:ed:f1:
         00:38:47:38:12:70:f6:38:94:71:ab:51:5f:1d:e7:28:78:ed:
         d9:c6:65:07:51:4b:d7:3b:f0:a8:76:b2:8d:5b:d7:25:cb:4b:
         8c:46:8a:1d:22:ef:41:b6:b9:fa:1f:06:4d:ea:20:55:5b:0a:
         e2:98:85:ba:d0:9f:59:c5:64:8d:ec:e4:18:34:db:7b:29:c4:
         69:c7:75:c6:3c:38:78:6c:d0:f6:37:b9:ce:df:07:f6:d9:0e:
         b3:2d:5f:ad:4b:81:bd:13:ec:6d:e2:89:02:28:6c:d9:e0:ff:
         70:78:f4:f1:5b:4b:94:27:eb:fa:ce:54:ff:65:8e:ad:13:bd:
         8d:08:0b:fd:d9:8e:19:48:01:fd:ae:de:08:4e:58:b3:3e:cb:
         43:93:df:75:61:73:6f:72:70:6a:6b:1f:d7:49:07:bc:83:72:
         86:a4:4b:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:28:13 2026 by rpki-client