Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3663CEE/1FBC442083BE11EA8A65B730F8AEA228/y4hYdSezg5FswLHYhmZTwzQx5F0.mft
File:                     y4hYdSezg5FswLHYhmZTwzQx5F0.mft (raw, json)
Hash identifier:          yG+pm+uv9Txv9p5FS07Aj6sHwTSp22UrdHR6kdg3PWk=
Subject key identifier:   29:84:C1:06:8F:17:4F:C2:4E:4A:D2:27:EF:81:FE:6D:65:1A:BE:9F
Authority key identifier: CB:88:58:75:27:B3:83:91:6C:C0:B1:D8:86:66:53:C3:34:31:E4:5D
Certificate issuer:       /CN=F3663CEEAF/serialNumber=CB88587527B383916CC0B1D8866653C33431E45D
Certificate serial:       08BA
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/y4hYdSezg5FswLHYhmZTwzQx5F0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3663CEE/1FBC442083BE11EA8A65B730F8AEA228/y4hYdSezg5FswLHYhmZTwzQx5F0.mft
Manifest number:          08B4
Signing time:             Thu 26 Mar 2026 01:58:38 +0000
Manifest this update:     Thu 26 Mar 2026 01:58:37 +0000
Manifest next update:     Sat 28 Mar 2026 01:58:37 +0000
Files and hashes:         1: y4hYdSezg5FswLHYhmZTwzQx5F0.crl (hash: 4JPv7+ZUUBbv26PW03ilCjvbFctR6HJuBPyA+qjQPIQ=)
                          2: 24B727805CBA11F0A0DBD87DDAE4EC9C.roa (hash: URhpC1wmpxyjiKTCACXMGSDga5+OKiFUmrZJhnhMHo0=)
                          3: 413B19025CBA11F0B3AC387EDAE4EC9C.roa (hash: huhnDHM3c28d4RK7MjVi9V09R1xz37R9RDv4groETcU=)
                          4: AE18FBD67CA911EEB6D3DD404AD9E6FC.roa (hash: EUXpIG95DQgNgpSPlS78r4ZPbIQJ7nP3j1DIht+45k0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3663CEE/1FBC442083BE11EA8A65B730F8AEA228/y4hYdSezg5FswLHYhmZTwzQx5F0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3663CEE/1FBC442083BE11EA8A65B730F8AEA228/y4hYdSezg5FswLHYhmZTwzQx5F0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/y4hYdSezg5FswLHYhmZTwzQx5F0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2234 (0x8ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3663CEEAF, serialNumber=CB88587527B383916CC0B1D8866653C33431E45D
        Validity
            Not Before: Mar 26 01:58:37 2026 GMT
            Not After : Mar 28 01:58:37 2026 GMT
        Subject: CN=69c492ce-241b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ea:31:1d:e1:6f:09:d7:06:ad:04:a9:8d:21:
                    a2:2a:28:88:f2:15:40:34:46:bc:ff:20:11:c9:60:
                    ae:06:c7:25:60:6d:70:34:08:77:37:4f:9a:58:50:
                    6f:88:31:e2:4c:3e:fc:e8:ef:7c:6c:a1:0f:27:9c:
                    14:e8:47:e0:11:c0:af:4a:02:e6:4e:ed:5a:39:ce:
                    46:b6:fa:60:25:17:11:1c:72:a0:92:a7:99:19:3b:
                    d6:19:56:d4:af:67:a2:90:5e:61:3e:f0:4d:95:c3:
                    51:47:2f:02:b6:90:d2:3f:80:b5:d4:72:f6:8b:aa:
                    7e:99:8e:cc:ad:80:11:79:d0:df:c8:08:45:73:a3:
                    c9:02:39:d6:d5:45:61:01:9f:80:60:24:0e:a7:c9:
                    08:54:56:70:5c:fa:17:ed:a5:10:34:72:31:07:61:
                    2d:56:a4:fd:cb:4b:fb:a9:56:9e:47:f9:9a:44:77:
                    d5:4d:8c:23:36:5a:87:37:a6:a6:76:55:31:48:e9:
                    55:ed:06:bc:fb:9a:de:09:03:e2:f9:9b:fb:bf:ef:
                    cd:c3:23:51:db:77:c2:66:8e:5a:30:cc:5b:b8:65:
                    78:a5:c8:39:94:b6:90:b9:21:25:65:01:ba:93:74:
                    25:09:f4:06:6b:73:6b:1a:88:36:34:2a:aa:29:79:
                    5a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:84:C1:06:8F:17:4F:C2:4E:4A:D2:27:EF:81:FE:6D:65:1A:BE:9F
            X509v3 Authority Key Identifier:
                keyid:CB:88:58:75:27:B3:83:91:6C:C0:B1:D8:86:66:53:C3:34:31:E4:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3663CEE/1FBC442083BE11EA8A65B730F8AEA228/y4hYdSezg5FswLHYhmZTwzQx5F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/y4hYdSezg5FswLHYhmZTwzQx5F0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3663CEE/1FBC442083BE11EA8A65B730F8AEA228/y4hYdSezg5FswLHYhmZTwzQx5F0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:72:f3:37:4b:83:d4:0e:cd:20:58:35:a0:82:45:1e:a0:a3:
         37:a4:df:d7:4d:e5:99:99:d6:d1:2d:4f:48:07:99:6a:f0:a3:
         97:6f:fe:cb:63:0b:4d:1f:e8:7b:42:b1:5e:27:9d:be:5b:8a:
         c9:d5:08:b0:a7:7b:f8:b4:d5:81:c0:04:e1:53:45:d4:85:af:
         ff:75:69:41:25:0a:f1:84:bb:70:c2:0b:49:a4:03:91:e4:ef:
         95:1d:be:cb:4f:f0:fe:4c:4f:36:20:fc:21:1f:55:22:df:0d:
         41:b3:87:fa:f9:04:51:51:81:39:17:fd:73:d0:a4:00:b4:1e:
         ec:d9:5f:e6:9a:04:38:87:c6:f8:95:61:74:be:e5:58:89:81:
         19:09:a4:7d:e7:ab:84:91:75:70:f2:83:a6:cc:32:8d:8b:28:
         1a:fd:c1:fe:cb:84:64:8c:c2:64:5a:12:75:68:40:3f:97:3c:
         43:5b:4b:03:f6:dd:75:31:06:92:71:47:dc:7c:f3:a9:9a:8a:
         11:3d:fd:ae:9b:0e:bb:b9:2a:0c:33:cc:63:3b:67:f4:43:4e:
         ed:68:7a:6f:ee:c3:42:0d:34:97:0c:e3:9c:3e:8c:af:7e:91:
         f3:c3:24:40:cd:f8:7a:69:45:c7:6d:2a:e6:ab:2e:d2:1b:ae:
         9f:03:e5:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:41:34 2026 by rpki-client