Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3664A2A/61139A4C2A5311EE9174E2464AD9E6FC/mo0OmoAqT1sF0LmwiVg0TYdylpw.mft
File:                     mo0OmoAqT1sF0LmwiVg0TYdylpw.mft (raw, json)
Hash identifier:          ZRAd/1SfbKhz70eNubNRPK2ATq+stktBhJexsMgH+Kc=
Subject key identifier:   D7:00:C3:CE:7E:A0:FA:29:73:B3:10:96:70:B4:6E:0D:E8:88:A1:58
Authority key identifier: 9A:8D:0E:9A:80:2A:4F:5B:05:D0:B9:B0:89:58:34:4D:87:72:96:9C
Certificate issuer:       /CN=F3664A2AAF/serialNumber=9A8D0E9A802A4F5B05D0B9B08958344D8772969C
Certificate serial:       03F2
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/mo0OmoAqT1sF0LmwiVg0TYdylpw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3664A2A/61139A4C2A5311EE9174E2464AD9E6FC/mo0OmoAqT1sF0LmwiVg0TYdylpw.mft
Manifest number:          03EF
Signing time:             Thu 26 Mar 2026 04:14:35 +0000
Manifest this update:     Thu 26 Mar 2026 04:14:34 +0000
Manifest next update:     Sat 28 Mar 2026 04:14:34 +0000
Files and hashes:         1: mo0OmoAqT1sF0LmwiVg0TYdylpw.crl (hash: qdB+dWVRMWRM3LVwFBH7Af1ScovReU7VqVEr664GsYs=)
                          2: 74A188D4198F11F1A0453B9FDAE4EC9C.roa (hash: heRN3Hl/VoKOoahx6fv1krdzclqG2Ce9G2KiMF/ZKFs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3664A2A/61139A4C2A5311EE9174E2464AD9E6FC/mo0OmoAqT1sF0LmwiVg0TYdylpw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3664A2A/61139A4C2A5311EE9174E2464AD9E6FC/mo0OmoAqT1sF0LmwiVg0TYdylpw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/mo0OmoAqT1sF0LmwiVg0TYdylpw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1010 (0x3f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3664A2AAF, serialNumber=9A8D0E9A802A4F5B05D0B9B08958344D8772969C
        Validity
            Not Before: Mar 26 04:14:34 2026 GMT
            Not After : Mar 28 04:14:34 2026 GMT
        Subject: CN=69c4b2ab-ac2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:94:e4:17:b6:89:41:b0:d5:30:86:73:78:5c:
                    f1:c4:a9:6f:2a:8a:93:63:bb:5a:97:10:50:de:3a:
                    25:d9:37:0a:50:4a:ec:29:81:6d:b2:98:f1:88:88:
                    39:c3:55:22:37:77:c3:90:1c:81:90:b0:bb:ed:0d:
                    ed:7a:26:9b:11:df:b9:ac:20:25:06:b2:a4:ff:b5:
                    cf:f0:f6:e2:56:51:ae:07:86:73:0a:03:99:31:b4:
                    b6:eb:b4:b5:aa:77:8e:95:2a:66:c8:54:bf:e9:dc:
                    33:d8:1f:b0:fc:13:62:66:0e:bc:53:2b:78:2b:a9:
                    4b:bd:6e:2d:99:9c:13:f1:b7:59:f2:d9:2c:3e:ba:
                    fb:5c:68:de:89:16:56:bb:d7:b9:9e:55:b5:b6:8e:
                    b4:85:73:01:1b:bc:81:56:e4:95:89:66:ab:51:1b:
                    b2:26:b7:5f:b6:85:85:fb:c6:92:85:d4:04:7b:6d:
                    06:cc:64:3e:76:cc:b2:87:50:eb:82:34:fc:8f:90:
                    a0:d6:b6:4c:61:0f:d5:f6:26:4f:44:5d:f0:b9:18:
                    00:27:2a:0a:8f:dd:92:26:da:57:64:b7:e8:db:84:
                    7e:77:82:01:87:68:aa:92:03:a7:d4:a5:7e:8b:16:
                    ee:33:d8:58:eb:de:f1:22:e2:1c:a1:ea:5d:2d:a6:
                    fe:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:00:C3:CE:7E:A0:FA:29:73:B3:10:96:70:B4:6E:0D:E8:88:A1:58
            X509v3 Authority Key Identifier:
                keyid:9A:8D:0E:9A:80:2A:4F:5B:05:D0:B9:B0:89:58:34:4D:87:72:96:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3664A2A/61139A4C2A5311EE9174E2464AD9E6FC/mo0OmoAqT1sF0LmwiVg0TYdylpw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/mo0OmoAqT1sF0LmwiVg0TYdylpw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3664A2A/61139A4C2A5311EE9174E2464AD9E6FC/mo0OmoAqT1sF0LmwiVg0TYdylpw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:09:ba:6e:b6:3e:b9:ed:ff:06:3d:5d:f7:59:3a:4d:ce:91:
         3d:16:c4:5d:74:eb:04:a5:af:00:ac:07:0f:23:39:ca:6e:0b:
         99:67:28:83:67:11:f9:e7:b8:da:40:db:be:27:c5:43:ba:81:
         43:d9:31:dd:43:8a:24:b3:8f:e3:2b:8b:4f:46:5a:19:33:80:
         2c:db:d4:c4:e2:b8:2b:67:ea:b6:e1:0d:b2:db:48:a8:51:e0:
         ec:0a:fd:1d:ec:d4:63:d6:59:d6:fb:ae:61:04:36:6d:4e:79:
         5a:c3:3f:b0:12:29:16:4f:f3:15:54:a9:5f:34:1e:70:50:5c:
         3b:67:66:8d:b5:98:23:1f:71:26:bc:71:f8:93:b9:71:e1:5e:
         be:c5:6b:2f:92:fa:50:0c:78:e7:43:4f:df:b7:8f:16:0f:b6:
         25:01:c8:99:88:36:95:43:04:bc:af:35:91:4c:8d:c2:77:89:
         fe:be:5c:6b:95:87:2f:52:99:4a:84:93:f5:23:e0:de:31:00:
         60:06:07:1a:4a:df:3d:2b:5a:21:09:d5:b0:2b:29:ef:ba:d2:
         fa:a2:28:40:75:e0:3e:1e:c5:f5:bd:33:1c:ab:90:7b:d7:86:
         ba:6d:c4:1b:d2:cd:fb:69:3d:26:71:59:71:b6:d0:1c:e3:58:
         f6:3e:8a:68
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICA/IwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NjRBMkFBRjExMC8GA1UEBRMoOUE4RDBFOUE4MDJBNEY1QjA1RDBCOUIwODk1ODM0
NEQ4NzcyOTY5QzAeFw0yNjAzMjYwNDE0MzRaFw0yNjAzMjgwNDE0MzRaMBgxFjAU
BgNVBAMTDTY5YzRiMmFiLWFjMmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDMlOQXtolBsNUwhnN4XPHEqW8qipNju1qXEFDeOiXZNwpQSuwpgW2ymPGI
iDnDVSI3d8OQHIGQsLvtDe16JpsR37msICUGsqT/tc/w9uJWUa4HhnMKA5kxtLbr
tLWqd46VKmbIVL/p3DPYH7D8E2JmDrxTK3grqUu9bi2ZnBPxt1ny2Sw+uvtcaN6J
Fla717meVbW2jrSFcwEbvIFW5JWJZqtRG7Imt1+2hYX7xpKF1AR7bQbMZD52zLKH
UOuCNPyPkKDWtkxhD9X2Jk9EXfC5GAAnKgqP3ZIm2ldkt+jbhH53ggGHaKqSA6fU
pX6LFu4z2Fjr3vEi4hyh6l0tpv73AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU1wDD
zn6g+ilzsxCWcLRuDeiIoVgwHwYDVR0jBBgwFoAUmo0OmoAqT1sF0LmwiVg0TYdy
lpwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjY0QTJBLzYxMTM5QTRDMkE1MzExRUU5MTc0RTI0NjRBRDlFNkZDL21vME9t
b0FxVDFzRjBMbXdpVmcwVFlkeWxwdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL21vME9tb0FxVDFzRjBMbXdpVmcwVFlkeWxwdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NjRBMkEvNjExMzlBNEMyQTUzMTFFRTkxNzRFMjQ2NEFE
OUU2RkMvbW8wT21vQXFUMXNGMExtd2lWZzBUWWR5bHB3Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBPCbputj657f8GPV33WTpNzpE9FsRd
dOsEpa8ArAcPIznKbguZZyiDZxH557jaQNu+J8VDuoFD2THdQ4oks4/jK4tPRloZ
M4As29TE4rgrZ+q24Q2y20ioUeDsCv0d7NRj1lnW+65hBDZtTnlawz+wEikWT/MV
VKlfNB5wUFw7Z2aNtZgjH3EmvHH4k7lx4V6+xWsvkvpQDHjnQ0/ft48WD7YlAciZ
iDaVQwS8rzWRTI3Cd4n+vlxrlYcvUplKhJP1I+DeMQBgBgcaSt89K1ohCdWwKynv
utL6oihAdeA+HsX1vTMcq5B714a6bcQb0s37aT0mcVlxttAc41j2Popo
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:45:00 2026 by rpki-client