Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36675E3/DA6A1362D3EF11EEB0BF7F4F775412E6/ib0Ua61yHpyUGcUJxustXey5ZyE.mft
File:                     ib0Ua61yHpyUGcUJxustXey5ZyE.mft (raw, json)
Hash identifier:          H+UeNwR16MdRNGxCUvBgM/R7G8O4ZH0hlUqIAa/OC5M=
Subject key identifier:   8E:85:EB:7B:52:B6:D7:37:11:26:74:B4:23:7F:AF:4B:FF:13:F3:2A
Authority key identifier: 89:BD:14:6B:AD:72:1E:9C:94:19:C5:09:C6:EB:2D:5D:EC:B9:67:21
Certificate issuer:       /CN=F36675E3AF/serialNumber=89BD146BAD721E9C9419C509C6EB2D5DECB96721
Certificate serial:       032B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ib0Ua61yHpyUGcUJxustXey5ZyE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36675E3/DA6A1362D3EF11EEB0BF7F4F775412E6/ib0Ua61yHpyUGcUJxustXey5ZyE.mft
Manifest number:          0326
Signing time:             Thu 26 Mar 2026 04:49:16 +0000
Manifest this update:     Thu 26 Mar 2026 04:49:15 +0000
Manifest next update:     Sat 28 Mar 2026 04:49:15 +0000
Files and hashes:         1: ib0Ua61yHpyUGcUJxustXey5ZyE.crl (hash: JNtPv50ZPkRxkeOLhvGMdJCQzDHHm4YZhpqqJs795gU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36675E3/DA6A1362D3EF11EEB0BF7F4F775412E6/ib0Ua61yHpyUGcUJxustXey5ZyE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36675E3/DA6A1362D3EF11EEB0BF7F4F775412E6/ib0Ua61yHpyUGcUJxustXey5ZyE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ib0Ua61yHpyUGcUJxustXey5ZyE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 811 (0x32b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36675E3AF, serialNumber=89BD146BAD721E9C9419C509C6EB2D5DECB96721
        Validity
            Not Before: Mar 26 04:49:15 2026 GMT
            Not After : Mar 28 04:49:15 2026 GMT
        Subject: CN=69c4bacc-6f51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:34:5f:33:c6:5b:dd:a5:0b:ae:ea:9e:d3:9d:
                    49:c7:3a:8a:7a:e0:50:84:e8:2d:4e:12:6e:51:98:
                    03:22:c0:90:19:74:56:f0:73:af:80:28:ee:9b:fc:
                    ae:5f:5b:da:31:0e:a4:1b:6e:34:ec:11:77:34:5b:
                    54:31:ec:e3:60:d0:62:6d:40:44:ff:4d:97:28:67:
                    55:7a:8c:ba:02:ed:4f:3a:84:f6:d1:3f:b5:3c:2f:
                    d9:04:89:0a:04:c9:d3:87:9a:f1:0c:27:74:bf:4e:
                    ca:cb:c4:dd:17:6f:70:3a:84:88:a1:f5:dc:32:13:
                    e3:38:e0:4b:1d:74:d4:8a:84:b9:82:91:27:54:14:
                    2b:9a:1e:2e:5e:01:58:7c:94:76:e2:78:39:4b:84:
                    7e:d7:eb:23:8a:d7:88:c2:0e:26:bd:e4:04:a9:b5:
                    fc:b0:bd:69:c2:61:28:1e:2c:ac:9f:1e:be:65:50:
                    90:ff:71:6a:0e:c2:ce:21:41:50:45:37:51:66:37:
                    db:d9:75:4d:b6:9b:60:a8:1b:e6:79:79:69:91:b8:
                    fc:2c:1c:11:46:18:a8:e5:83:d6:4a:06:56:37:96:
                    46:69:ef:ff:42:fb:d5:eb:82:9a:7a:01:89:d5:f6:
                    b3:43:4c:c3:5e:23:ad:2b:3e:f4:81:5b:b3:0e:81:
                    c9:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:85:EB:7B:52:B6:D7:37:11:26:74:B4:23:7F:AF:4B:FF:13:F3:2A
            X509v3 Authority Key Identifier:
                keyid:89:BD:14:6B:AD:72:1E:9C:94:19:C5:09:C6:EB:2D:5D:EC:B9:67:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36675E3/DA6A1362D3EF11EEB0BF7F4F775412E6/ib0Ua61yHpyUGcUJxustXey5ZyE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ib0Ua61yHpyUGcUJxustXey5ZyE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36675E3/DA6A1362D3EF11EEB0BF7F4F775412E6/ib0Ua61yHpyUGcUJxustXey5ZyE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:0f:31:bc:c7:07:e9:21:9e:53:84:d5:6c:05:86:d9:7e:db:
         ab:09:4b:40:3f:6b:99:8e:e2:e5:02:4b:9b:21:65:37:c2:3a:
         ee:f7:41:02:fc:66:a6:43:a5:4b:4e:e2:6c:b4:da:60:55:8a:
         5a:05:aa:d4:a4:fe:bf:60:90:11:da:91:20:8f:c1:e4:a9:50:
         1f:c0:3e:3a:94:e0:e6:64:e3:46:b0:42:71:5d:7a:46:e3:cb:
         e6:b3:ae:fa:b3:03:da:2a:59:76:17:da:4e:e0:67:5f:77:f9:
         c6:6a:86:9d:31:93:0c:60:05:55:d8:36:21:2c:b8:28:70:8f:
         1a:af:2b:9a:ed:04:fc:1e:92:ad:c8:73:2d:94:de:eb:10:93:
         85:bb:9f:72:bc:3f:3f:10:0f:63:64:9e:07:de:a2:4c:e3:f4:
         5d:9a:5b:02:e3:ae:43:f9:96:05:1f:cb:d8:c9:ed:f3:4f:01:
         0d:c5:8d:0e:1e:35:ea:9c:65:a4:2a:2e:79:38:0e:2a:a8:04:
         4e:e4:88:e1:c4:7a:fd:f3:91:7c:e3:4e:0a:57:7d:98:17:9e:
         3b:60:99:74:16:36:db:52:55:33:c8:4a:f6:24:76:db:78:7e:
         71:98:49:5f:9d:49:be:5a:62:2f:c7:2c:86:d4:19:d0:ef:1c:
         a8:2a:99:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:20:33 2026 by rpki-client