Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3668037/2AB390E26DC711E68265362DF8AEA228/MU_85UKRThk8fBoqA8c1dGLqGBY.mft
File:                     MU_85UKRThk8fBoqA8c1dGLqGBY.mft (raw, json)
Hash identifier:          u8Lvsn8I1i1ItImx1mmOTXUDj1TBZnzRyL3PYqiKKV8=
Subject key identifier:   FF:75:7C:C7:F3:B6:34:5D:CB:29:E5:F5:5A:5C:83:20:1F:56:70:7A
Authority key identifier: 31:4F:FC:E5:42:91:4E:19:3C:7C:1A:2A:03:C7:35:74:62:EA:18:16
Certificate issuer:       /CN=F3668037AF/serialNumber=314FFCE542914E193C7C1A2A03C7357462EA1816
Certificate serial:       0E4B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/MU_85UKRThk8fBoqA8c1dGLqGBY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3668037/2AB390E26DC711E68265362DF8AEA228/MU_85UKRThk8fBoqA8c1dGLqGBY.mft
Manifest number:          0E2B
Signing time:             Thu 26 Mar 2026 01:07:10 +0000
Manifest this update:     Thu 26 Mar 2026 01:07:09 +0000
Manifest next update:     Sat 28 Mar 2026 01:07:09 +0000
Files and hashes:         1: MU_85UKRThk8fBoqA8c1dGLqGBY.crl (hash: GtWvqel+pt00M7140SC6zZDPd/pIRAEsMMA+1lvxNlw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3668037/2AB390E26DC711E68265362DF8AEA228/MU_85UKRThk8fBoqA8c1dGLqGBY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3668037/2AB390E26DC711E68265362DF8AEA228/MU_85UKRThk8fBoqA8c1dGLqGBY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/MU_85UKRThk8fBoqA8c1dGLqGBY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3659 (0xe4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3668037AF, serialNumber=314FFCE542914E193C7C1A2A03C7357462EA1816
        Validity
            Not Before: Mar 26 01:07:09 2026 GMT
            Not After : Mar 28 01:07:09 2026 GMT
        Subject: CN=69c486be-ecbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:0e:44:05:fc:92:20:f2:7b:8c:f1:a6:28:8f:
                    a8:d5:5d:c5:1a:f0:5b:c6:30:07:77:91:08:d6:c9:
                    c2:35:21:e8:e9:99:69:99:88:c1:ff:62:36:63:f2:
                    fd:c2:c6:03:53:eb:8d:80:2a:44:c2:5d:3a:7e:d3:
                    09:ad:8d:f3:79:87:70:7b:e0:4f:4e:1d:c9:9c:fd:
                    44:a8:74:06:d4:42:60:e6:85:ce:4c:5e:42:ea:db:
                    45:f0:2f:39:bb:06:4c:3c:54:df:5d:fd:ae:25:bf:
                    46:b5:20:06:10:2f:f7:c2:4b:9a:cc:0c:97:e0:09:
                    60:6e:b5:08:28:29:21:69:76:7c:fd:24:27:c5:6e:
                    5e:0b:12:13:1c:80:aa:c6:e8:2d:d0:6b:58:da:29:
                    bf:ae:7f:37:c1:e8:59:37:71:05:91:25:4a:18:2e:
                    cd:8b:d3:1d:f7:45:1d:e6:29:1f:c3:7e:3f:c3:67:
                    72:ed:fa:3a:1b:00:c3:d8:13:b3:6e:07:5a:1e:7a:
                    0f:f9:b9:0b:56:5e:91:07:2d:b0:7a:10:a6:eb:c4:
                    a2:94:8c:ed:f3:45:03:6c:47:b0:63:d0:22:91:06:
                    78:72:65:b0:a2:97:7a:87:9e:9c:40:5b:9d:82:e0:
                    90:43:4d:8f:3e:41:79:34:74:01:77:c9:e1:9e:51:
                    43:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:75:7C:C7:F3:B6:34:5D:CB:29:E5:F5:5A:5C:83:20:1F:56:70:7A
            X509v3 Authority Key Identifier:
                keyid:31:4F:FC:E5:42:91:4E:19:3C:7C:1A:2A:03:C7:35:74:62:EA:18:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3668037/2AB390E26DC711E68265362DF8AEA228/MU_85UKRThk8fBoqA8c1dGLqGBY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/MU_85UKRThk8fBoqA8c1dGLqGBY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668037/2AB390E26DC711E68265362DF8AEA228/MU_85UKRThk8fBoqA8c1dGLqGBY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:fe:50:a3:be:86:b4:84:76:de:45:10:cb:71:10:8c:2e:1c:
         11:db:d7:af:e7:b2:83:26:ef:6d:40:35:61:60:d3:a5:91:de:
         2a:3a:62:4d:0f:4d:a8:81:0e:52:fb:05:9a:62:64:b4:50:e9:
         b1:35:12:56:3f:8f:de:cc:3d:f6:70:a8:c1:8b:c6:c4:7a:92:
         d5:ca:80:68:3e:10:54:a6:03:fd:8c:82:7a:69:82:8a:17:bd:
         38:9b:3c:d4:cf:b1:2e:58:b5:9c:48:6c:eb:74:19:d3:2f:fc:
         11:f6:5b:23:62:90:67:39:4f:2d:a4:23:3a:21:d4:48:d0:7d:
         2b:be:f8:05:82:b9:fc:77:4d:1a:4f:5c:50:7a:4f:cf:8f:89:
         0e:cf:1b:c9:98:0f:6e:93:30:89:47:c0:26:f2:c8:b5:bd:9f:
         de:09:9e:bf:68:d3:4d:98:31:8e:d7:0f:bb:c4:a4:41:51:dd:
         a5:e1:3c:51:91:fb:76:3a:73:c3:18:d6:94:93:b9:80:99:5d:
         70:04:40:35:a6:11:9f:ce:0c:88:83:99:43:ff:33:fc:fa:c4:
         ce:7f:17:4b:dd:4a:f2:cc:5e:83:97:f6:e7:70:a3:54:1d:56:
         a4:45:2d:ce:f7:a0:9a:50:04:9d:95:2a:01:b5:f8:a4:72:46:
         3d:f5:7e:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:26:08 2026 by rpki-client