Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36628E9/FCDCD124833211EC890A0BAF5A40D577/qO2f3Jdp7203QbndrnI9MYFl51A.mft
File:                     qO2f3Jdp7203QbndrnI9MYFl51A.mft (raw, json)
Hash identifier:          ZqhZ+SauP3GmtT1GQ8d1HZupwFcGhU0VkP5A/D27iJo=
Subject key identifier:   CD:F1:DC:C6:5E:A8:C3:F1:DE:5A:F3:EE:D9:57:9C:73:E4:2C:8C:91
Authority key identifier: A8:ED:9F:DC:97:69:EF:6D:37:41:B9:DD:AE:72:3D:31:81:65:E7:50
Certificate issuer:       /CN=F36628E9AF/serialNumber=A8ED9FDC9769EF6D3741B9DDAE723D318165E750
Certificate serial:       0616
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/qO2f3Jdp7203QbndrnI9MYFl51A.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36628E9/FCDCD124833211EC890A0BAF5A40D577/qO2f3Jdp7203QbndrnI9MYFl51A.mft
Manifest number:          0614
Signing time:             Thu 26 Mar 2026 03:00:56 +0000
Manifest this update:     Thu 26 Mar 2026 03:00:55 +0000
Manifest next update:     Sat 28 Mar 2026 03:00:55 +0000
Files and hashes:         1: qO2f3Jdp7203QbndrnI9MYFl51A.crl (hash: 6n2/hkSWOIo4DrCxFagURsm542+rBnq/7umZJzlkqGI=)
                          2: B4CDDFBA096511F09EE29CA4762E951A.roa (hash: AGjlXws4tctUuB4WUyHecSclAJY+HCC3k/CqmlHphvQ=)
                          3: 4A7BCEDE833411ECA330C8B25A40D577.roa (hash: w7j8NF07MRPRcWLZHO+fmpCs8k7Jimz6EpCqZnbOkz8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36628E9/FCDCD124833211EC890A0BAF5A40D577/qO2f3Jdp7203QbndrnI9MYFl51A.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36628E9/FCDCD124833211EC890A0BAF5A40D577/qO2f3Jdp7203QbndrnI9MYFl51A.mft
                          rsync://rpki.afrinic.net/repository/afrinic/qO2f3Jdp7203QbndrnI9MYFl51A.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1558 (0x616)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36628E9AF, serialNumber=A8ED9FDC9769EF6D3741B9DDAE723D318165E750
        Validity
            Not Before: Mar 26 03:00:55 2026 GMT
            Not After : Mar 28 03:00:55 2026 GMT
        Subject: CN=69c4a168-6e7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:15:1c:6b:fb:d5:52:b5:95:e2:99:74:43:7f:
                    aa:4f:3c:22:60:1b:ea:56:1c:6d:82:c3:31:9a:45:
                    91:51:b8:8e:f1:b2:4f:a9:a5:ad:db:95:f4:7e:dc:
                    11:21:5f:7a:35:27:d1:c0:c6:c2:81:97:74:c2:a7:
                    96:78:c4:a0:fc:fd:21:0a:fc:d6:a2:16:7a:cf:0c:
                    00:6c:58:90:5d:61:f9:96:8b:31:b6:3c:cc:d1:c6:
                    80:fc:b1:d2:1d:3d:19:8d:7c:79:ad:fe:d2:0b:f3:
                    18:43:a9:93:9f:4d:7a:59:26:0f:e8:23:27:1f:8b:
                    fa:a7:86:d0:cc:02:24:1a:a3:50:8e:bd:e6:b9:03:
                    68:0a:10:77:47:51:b2:36:61:89:3f:1a:36:0c:81:
                    2a:74:09:73:32:a7:1e:6b:46:a6:c7:5e:7d:7a:87:
                    27:38:6b:c7:10:4e:e7:6b:32:16:cf:1a:b5:df:55:
                    29:f9:5f:01:e5:5f:74:5e:ab:ba:c6:2f:6a:38:c7:
                    b7:73:92:d1:7d:2f:f7:c6:12:7e:8b:92:1a:97:8a:
                    1e:63:cc:88:e8:d9:ad:a1:cb:fd:61:a7:07:6b:27:
                    72:b3:7a:0a:9d:56:58:2c:89:ac:07:b2:4f:40:e0:
                    d6:8b:46:bb:b4:15:50:50:69:a2:74:07:81:3c:c3:
                    81:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:F1:DC:C6:5E:A8:C3:F1:DE:5A:F3:EE:D9:57:9C:73:E4:2C:8C:91
            X509v3 Authority Key Identifier:
                keyid:A8:ED:9F:DC:97:69:EF:6D:37:41:B9:DD:AE:72:3D:31:81:65:E7:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36628E9/FCDCD124833211EC890A0BAF5A40D577/qO2f3Jdp7203QbndrnI9MYFl51A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/qO2f3Jdp7203QbndrnI9MYFl51A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36628E9/FCDCD124833211EC890A0BAF5A40D577/qO2f3Jdp7203QbndrnI9MYFl51A.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:60:b8:37:9c:89:c4:b8:fb:b2:eb:17:1d:77:d3:2f:4d:5b:
         24:2c:c5:ff:7a:95:67:9b:46:53:6b:0b:40:33:3c:42:4b:d1:
         8a:c7:a5:82:76:a6:66:8e:08:39:f6:11:9d:5f:86:0f:5a:ae:
         8d:4c:b5:e1:db:bb:dd:82:03:8a:11:7a:cf:b6:a2:50:ee:c3:
         6b:b4:0f:c7:74:8a:69:69:44:04:fb:24:34:3f:67:d1:c4:55:
         53:60:51:6e:f2:07:89:30:85:58:2c:12:1c:7a:3a:61:9f:cd:
         4e:71:e9:55:89:00:ab:e5:43:d4:33:69:de:0a:12:3b:41:44:
         f6:da:ff:c1:ae:0f:7b:47:18:75:c0:9b:dc:0d:12:ff:14:20:
         75:5b:c4:f8:9c:ce:33:cf:f9:fb:37:e2:31:1e:55:51:58:77:
         2b:f2:c6:28:17:7e:7a:db:bb:9b:7e:36:0b:1a:b1:92:65:76:
         1c:1a:0b:6a:6c:db:8a:b8:2f:62:21:1b:17:c3:cd:49:ae:a2:
         47:3b:84:b4:d6:82:dc:ea:62:fc:a6:b7:4d:9b:0f:96:14:89:
         48:70:fe:0c:4d:8b:2b:45:f8:2e:7b:20:87:72:e1:11:53:84:
         f9:08:9c:3e:eb:bc:6b:5d:ba:02:77:8d:dc:72:a0:f6:4f:fe:
         02:63:85:5a
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBhYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NjI4RTlBRjExMC8GA1UEBRMoQThFRDlGREM5NzY5RUY2RDM3NDFCOUREQUU3MjNE
MzE4MTY1RTc1MDAeFw0yNjAzMjYwMzAwNTVaFw0yNjAzMjgwMzAwNTVaMBgxFjAU
BgNVBAMTDTY5YzRhMTY4LTZlN2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDAFRxr+9VStZXimXRDf6pPPCJgG+pWHG2CwzGaRZFRuI7xsk+ppa3blfR+
3BEhX3o1J9HAxsKBl3TCp5Z4xKD8/SEK/NaiFnrPDABsWJBdYfmWizG2PMzRxoD8
sdIdPRmNfHmt/tIL8xhDqZOfTXpZJg/oIycfi/qnhtDMAiQao1COvea5A2gKEHdH
UbI2YYk/GjYMgSp0CXMypx5rRqbHXn16hyc4a8cQTudrMhbPGrXfVSn5XwHlX3Re
q7rGL2o4x7dzktF9L/fGEn6LkhqXih5jzIjo2a2hy/1hpwdrJ3KzegqdVlgsiawH
sk9A4NaLRru0FVBQaaJ0B4E8w4FFAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUzfHc
xl6ow/HeWvPu2Vecc+QsjJEwHwYDVR0jBBgwFoAUqO2f3Jdp7203QbndrnI9MYFl
51AwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjYyOEU5L0ZDRENEMTI0ODMzMjExRUM4OTBBMEJBRjVBNDBENTc3L3FPMmYz
SmRwNzIwM1FibmRybkk5TVlGbDUxQS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3FPMmYzSmRwNzIwM1FibmRybkk5TVlGbDUxQS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NjI4RTkvRkNEQ0QxMjQ4MzMyMTFFQzg5MEEwQkFGNUE0
MEQ1NzcvcU8yZjNKZHA3MjAzUWJuZHJuSTlNWUZsNTFBLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAmYLg3nInEuPuy6xcdd9MvTVskLMX/
epVnm0ZTawtAMzxCS9GKx6WCdqZmjgg59hGdX4YPWq6NTLXh27vdggOKEXrPtqJQ
7sNrtA/HdIppaUQE+yQ0P2fRxFVTYFFu8geJMIVYLBIcejphn81OcelViQCr5UPU
M2neChI7QUT22v/Brg97Rxh1wJvcDRL/FCB1W8T4nM4zz/n7N+IxHlVRWHcr8sYo
F35627ubfjYLGrGSZXYcGgtqbNuKuC9iIRsXw81JrqJHO4S01oLc6mL8prdNmw+W
FIlIcP4MTYsrRfgueyCHcuERU4T5CJw+67xrXboCd43ccqD2T/4CY4Va
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:03:57 2026 by rpki-client