Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3663954/B2FDE4A22A2611EE864DCA484AD9E6FC/3eQFo7njLL0ZkIdZfW8pC2w0G80.mft
File:                     3eQFo7njLL0ZkIdZfW8pC2w0G80.mft (raw, json)
Hash identifier:          paA8mcKnhS998yEO8zxftewJLfUV58Gywc+Urp5rqls=
Subject key identifier:   55:C6:05:A4:77:A0:10:5C:F3:E2:9F:83:CC:A1:1B:1B:17:24:61:FA
Authority key identifier: DD:E4:05:A3:B9:E3:2C:BD:19:90:87:59:7D:6F:29:0B:6C:34:1B:CD
Certificate issuer:       /CN=F3663954AF/serialNumber=DDE405A3B9E32CBD199087597D6F290B6C341BCD
Certificate serial:       03F0
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/3eQFo7njLL0ZkIdZfW8pC2w0G80.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3663954/B2FDE4A22A2611EE864DCA484AD9E6FC/3eQFo7njLL0ZkIdZfW8pC2w0G80.mft
Manifest number:          03ED
Signing time:             Thu 26 Mar 2026 04:14:20 +0000
Manifest this update:     Thu 26 Mar 2026 04:14:19 +0000
Manifest next update:     Sat 28 Mar 2026 04:14:19 +0000
Files and hashes:         1: 3eQFo7njLL0ZkIdZfW8pC2w0G80.crl (hash: 54AnT27TtoW6U0vIxN36vrkn7HIN+U3PBCAjC1lNX00=)
                          2: 3B3C94A8355611F0A72D5BD3DAE4EC9C.roa (hash: dNkXrkMo29JWmN/2Fiah29iTZ9KKxjxmwXwttQ5e+fY=)
                          3: 92455510355511F09A3F8ED0DAE4EC9C.roa (hash: EzKU6CQxGZwi822liJZKhnE2Wswv1oKziheTE/2ZwuU=)
                          4: AA85EAE4360F11F08E7B1CAFDAE4EC9C.roa (hash: KqakcfmbrA2BIbq/4uC8DnJ5j63ssavBmkP7waw6iDc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3663954/B2FDE4A22A2611EE864DCA484AD9E6FC/3eQFo7njLL0ZkIdZfW8pC2w0G80.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3663954/B2FDE4A22A2611EE864DCA484AD9E6FC/3eQFo7njLL0ZkIdZfW8pC2w0G80.mft
                          rsync://rpki.afrinic.net/repository/afrinic/3eQFo7njLL0ZkIdZfW8pC2w0G80.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1008 (0x3f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3663954AF, serialNumber=DDE405A3B9E32CBD199087597D6F290B6C341BCD
        Validity
            Not Before: Mar 26 04:14:19 2026 GMT
            Not After : Mar 28 04:14:19 2026 GMT
        Subject: CN=69c4b29c-aed8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:7c:a1:1b:a9:7c:13:e0:04:29:1a:c4:fe:0b:
                    ae:f9:8f:61:fc:90:be:1c:2f:c5:ef:a3:d0:b4:9f:
                    2f:8b:2a:dc:37:54:c4:64:81:7c:fb:ab:d9:4f:d0:
                    6e:93:56:da:59:6b:e4:a9:b3:7d:6f:9a:2b:28:ec:
                    6b:a6:65:33:f4:29:04:7a:e6:5e:7a:8d:08:7e:c9:
                    f5:64:46:c1:3f:f3:4a:51:6c:cc:02:5d:c2:e3:31:
                    6b:10:d3:ea:54:0a:28:ec:57:50:06:28:19:ad:c5:
                    6d:d9:33:b8:26:95:f8:88:ca:1a:47:f6:5f:0b:3e:
                    55:bd:c5:89:1b:af:0f:e4:79:0b:69:26:cf:8b:d5:
                    80:3f:11:20:c1:0c:f9:96:27:53:a5:cb:47:70:9b:
                    43:6a:dd:f4:8c:4a:03:47:4b:cf:e9:29:a7:9f:c5:
                    5e:8d:71:9b:40:91:b4:a7:ac:30:a3:0b:50:ed:c4:
                    57:31:69:c1:a6:b9:e2:6a:92:cf:16:65:63:fa:c0:
                    e0:90:04:b7:b0:83:d5:01:09:18:64:c6:80:b6:f2:
                    3a:85:52:a8:c7:b7:bf:d1:82:4d:1d:76:6c:a0:70:
                    25:6f:2a:e5:68:7e:62:39:8a:00:79:35:c2:b9:c9:
                    15:6e:5a:a6:cc:2c:e4:b2:73:7d:73:d9:eb:9b:da:
                    a7:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:C6:05:A4:77:A0:10:5C:F3:E2:9F:83:CC:A1:1B:1B:17:24:61:FA
            X509v3 Authority Key Identifier:
                keyid:DD:E4:05:A3:B9:E3:2C:BD:19:90:87:59:7D:6F:29:0B:6C:34:1B:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3663954/B2FDE4A22A2611EE864DCA484AD9E6FC/3eQFo7njLL0ZkIdZfW8pC2w0G80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3eQFo7njLL0ZkIdZfW8pC2w0G80.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3663954/B2FDE4A22A2611EE864DCA484AD9E6FC/3eQFo7njLL0ZkIdZfW8pC2w0G80.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:fc:db:0c:20:7a:a7:4f:8d:e1:5f:5f:71:ba:40:3b:6b:a6:
         e0:e0:e1:24:a1:27:77:38:b7:50:78:ed:f7:02:98:e6:99:43:
         a3:d7:4b:d3:ab:3c:2b:1c:10:b9:11:0f:bb:b1:0a:e1:96:a4:
         f4:1f:83:33:ea:cd:81:28:0f:f4:f5:dc:9e:ec:e3:b8:67:61:
         85:c8:ba:c7:51:ad:54:68:15:bb:63:19:ab:19:1a:7e:69:04:
         16:95:95:74:19:40:a8:5b:9b:7d:cb:6e:0b:9e:3f:9d:57:44:
         98:cc:0b:57:fa:7c:af:d7:c1:e8:07:a4:61:36:d8:0e:b3:fc:
         09:b2:30:14:7f:18:6a:71:9c:fe:17:4b:9a:0c:c9:ff:4b:84:
         e1:b0:8a:2d:df:9b:02:51:53:f3:25:6c:72:11:1c:f9:2d:ee:
         a9:a3:e2:48:bd:10:58:35:af:52:09:1a:9f:21:c2:d3:1f:c4:
         90:fe:e7:3a:ad:1c:4b:4e:1c:80:8b:99:d9:06:26:db:76:35:
         72:fe:f8:38:67:c1:92:36:78:69:cf:2d:9d:c5:20:68:75:46:
         6e:08:fc:01:2b:31:a3:f9:f9:2b:de:59:cf:74:3d:76:41:b3:
         e3:06:13:83:99:cf:26:66:ad:eb:86:67:33:01:98:10:d3:c3:
         3b:a6:fb:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:14:59 2026 by rpki-client