Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366351B/4665A9F0ACA011EDAF100DF7F1222468/Z4miVHJtAx5ZtGthtKyqhRv6Ld8.mft
File:                     Z4miVHJtAx5ZtGthtKyqhRv6Ld8.mft (raw, json)
Hash identifier:          9m0NdpKLS+4Suvy7KI7Cu96lfRhn42+CXtDgGgg/onA=
Subject key identifier:   DD:22:F7:4C:EB:08:E0:F2:49:C6:31:3E:1F:F2:71:42:86:9B:43:98
Authority key identifier: 67:89:A2:54:72:6D:03:1E:59:B4:6B:61:B4:AC:AA:85:1B:FA:2D:DF
Certificate issuer:       /CN=F366351BAF/serialNumber=6789A254726D031E59B46B61B4ACAA851BFA2DDF
Certificate serial:       0493
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Z4miVHJtAx5ZtGthtKyqhRv6Ld8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366351B/4665A9F0ACA011EDAF100DF7F1222468/Z4miVHJtAx5ZtGthtKyqhRv6Ld8.mft
Manifest number:          0492
Signing time:             Thu 26 Mar 2026 03:49:17 +0000
Manifest this update:     Thu 26 Mar 2026 03:49:16 +0000
Manifest next update:     Sat 28 Mar 2026 03:49:16 +0000
Files and hashes:         1: Z4miVHJtAx5ZtGthtKyqhRv6Ld8.crl (hash: W/dNumsM/j4M1AOq3Be0xOFS8VqfNm37dCp4Sfq1zQ4=)
                          2: 27AA2D78ACA111EDB32660F9F1222468.roa (hash: aFi9RZ2jR17q9wqzUvxZqHWXbSaW+vzPZaKbsAiYUDM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366351B/4665A9F0ACA011EDAF100DF7F1222468/Z4miVHJtAx5ZtGthtKyqhRv6Ld8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366351B/4665A9F0ACA011EDAF100DF7F1222468/Z4miVHJtAx5ZtGthtKyqhRv6Ld8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Z4miVHJtAx5ZtGthtKyqhRv6Ld8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1171 (0x493)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366351BAF, serialNumber=6789A254726D031E59B46B61B4ACAA851BFA2DDF
        Validity
            Not Before: Mar 26 03:49:16 2026 GMT
            Not After : Mar 28 03:49:16 2026 GMT
        Subject: CN=69c4acbd-1fc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:df:72:ae:bc:d2:8b:43:7d:dd:f4:ca:cd:27:
                    f7:39:7d:96:65:25:69:c7:fa:32:2b:80:80:43:cf:
                    c4:d0:66:b3:16:75:9b:71:e0:cd:30:65:88:cb:08:
                    ed:a5:e6:c3:f3:b1:69:88:6c:b0:35:a0:65:42:5e:
                    bd:49:9a:ce:d1:86:da:e3:7d:ba:d8:f6:13:cc:c5:
                    27:44:bb:4b:39:9a:ea:8a:6c:a0:41:03:4f:83:92:
                    e2:d5:91:84:e4:3f:22:00:57:aa:be:af:b8:59:fd:
                    ee:5e:72:a9:10:7b:ae:d6:56:86:62:43:0f:bc:97:
                    7e:36:c6:61:cc:e8:26:f8:f5:a3:03:2a:b4:62:25:
                    eb:6f:3d:63:6a:ad:54:a7:c2:62:9d:84:07:e1:b7:
                    fc:d3:b6:4b:b7:0d:77:e9:aa:5c:00:4b:f8:c5:cd:
                    d8:24:ae:2b:e9:21:14:7e:a1:3f:f3:26:88:0b:df:
                    b7:9c:63:c2:74:b4:71:8d:5f:32:30:fb:73:83:8d:
                    47:f8:ce:8a:e4:7c:9c:b3:81:1f:5d:65:97:e0:0f:
                    0f:34:df:cd:cf:6b:05:e1:5b:52:ed:b7:27:b1:80:
                    14:22:a7:83:b6:18:10:97:69:55:a3:07:26:c5:37:
                    e0:6c:ef:44:50:c7:58:0c:ae:97:44:b1:7f:a9:ed:
                    9a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:22:F7:4C:EB:08:E0:F2:49:C6:31:3E:1F:F2:71:42:86:9B:43:98
            X509v3 Authority Key Identifier:
                keyid:67:89:A2:54:72:6D:03:1E:59:B4:6B:61:B4:AC:AA:85:1B:FA:2D:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366351B/4665A9F0ACA011EDAF100DF7F1222468/Z4miVHJtAx5ZtGthtKyqhRv6Ld8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Z4miVHJtAx5ZtGthtKyqhRv6Ld8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366351B/4665A9F0ACA011EDAF100DF7F1222468/Z4miVHJtAx5ZtGthtKyqhRv6Ld8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:73:71:c4:f1:f2:09:ed:2e:89:1f:c6:93:4c:79:85:c8:1d:
         1d:2d:ee:94:c9:12:62:4f:58:ad:ba:1e:b1:47:05:59:7d:d6:
         a6:05:97:6f:7e:73:59:bf:b2:f0:5f:cb:a7:44:75:d1:4a:b8:
         03:0d:ce:04:fe:25:d0:08:49:ee:15:ec:34:95:33:85:86:66:
         fc:d5:21:52:d1:0b:5e:aa:cf:84:8a:ed:8a:d0:f6:6f:0c:d7:
         4f:61:98:65:b5:51:5d:2c:43:08:a1:bc:cb:0f:39:a6:6d:e6:
         bf:59:2d:fb:90:3f:9b:1c:b9:a1:ff:26:ff:99:a5:0f:91:d4:
         7c:4d:14:c5:b5:96:78:42:df:f8:98:9f:cc:9b:bf:7e:1b:7a:
         1f:d4:47:de:c4:21:f2:a7:30:c0:0b:6c:6a:cf:bc:c6:28:76:
         7e:05:a5:48:f3:fc:18:62:84:47:d2:34:1d:d2:82:46:a3:43:
         d0:90:d9:eb:48:ac:1d:78:f5:04:78:43:da:a0:a7:8c:b9:72:
         f2:d6:7a:0f:47:39:b9:37:aa:48:77:6a:8d:3c:43:03:29:db:
         47:4b:05:0e:d4:ef:d3:ca:d3:3b:20:28:23:89:d6:5e:ac:aa:
         24:2b:76:2f:1b:d7:62:fd:73:21:f8:35:56:a0:88:77:de:f7:
         cb:67:07:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:17:09 2026 by rpki-client