Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366C76D/7486C632D5CB11F0A751D3D1DAE4EC9C/_9XXjnVnnozv_5gXPaanm0zID_0.mft
File:                     _9XXjnVnnozv_5gXPaanm0zID_0.mft (raw, json)
Hash identifier:          8BP9S2pEDtwGDYsjJ+kjgcT8JSl1wbxeCKaTsA7Bubw=
Subject key identifier:   A1:30:AB:79:BD:72:F1:F4:22:39:3A:D7:A3:C6:9F:E9:1B:F8:0E:7E
Authority key identifier: FF:D5:D7:8E:75:67:9E:8C:EF:FF:98:17:3D:A6:A7:9B:4C:C8:0F:FD
Certificate issuer:       /CN=F366C76DAF/serialNumber=FFD5D78E75679E8CEFFF98173DA6A79B4CC80FFD
Certificate serial:       6E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/_9XXjnVnnozv_5gXPaanm0zID_0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366C76D/7486C632D5CB11F0A751D3D1DAE4EC9C/_9XXjnVnnozv_5gXPaanm0zID_0.mft
Manifest number:          6D
Signing time:             Thu 26 Mar 2026 06:24:46 +0000
Manifest this update:     Thu 26 Mar 2026 06:24:45 +0000
Manifest next update:     Sat 28 Mar 2026 06:24:45 +0000
Files and hashes:         1: _9XXjnVnnozv_5gXPaanm0zID_0.crl (hash: PYFW8/MDW7jS6StqlPm8u9mDyugKbkI4+PRIlRgwwVQ=)
                          2: 51BF4370D5CD11F0BF78ACDCDAE4EC9C.roa (hash: GpfJtRTKikRCRP7GY2KeAG+0LEHAqBX0XHiILcklaao=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366C76D/7486C632D5CB11F0A751D3D1DAE4EC9C/_9XXjnVnnozv_5gXPaanm0zID_0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366C76D/7486C632D5CB11F0A751D3D1DAE4EC9C/_9XXjnVnnozv_5gXPaanm0zID_0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/_9XXjnVnnozv_5gXPaanm0zID_0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110 (0x6e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366C76DAF, serialNumber=FFD5D78E75679E8CEFFF98173DA6A79B4CC80FFD
        Validity
            Not Before: Mar 26 06:24:45 2026 GMT
            Not After : Mar 28 06:24:45 2026 GMT
        Subject: CN=69c4d12e-1a30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:6f:80:fc:a9:ee:dd:b1:0a:72:84:8e:17:b9:
                    a8:57:30:8e:1a:01:ca:fd:8c:f9:df:d6:83:65:63:
                    87:13:85:f4:48:3e:92:21:54:85:11:04:ca:6b:79:
                    e0:cc:d8:6b:6d:31:8b:28:a7:1e:6f:13:1e:70:fe:
                    ac:74:e1:c7:af:78:4f:6b:94:d8:5c:90:5a:75:b9:
                    34:ff:28:e5:49:db:52:56:08:40:82:33:fd:ec:46:
                    28:15:73:76:4f:8e:62:d0:00:5e:d8:30:da:0a:13:
                    c7:9e:a9:6a:47:47:c4:87:88:b0:32:fd:96:06:17:
                    b5:0f:56:58:05:dd:9f:65:01:7c:c3:39:6c:f0:44:
                    64:27:a3:98:99:8e:40:f0:61:33:9c:50:5e:59:34:
                    29:74:3f:3b:cd:76:52:81:da:64:35:2f:da:d9:8d:
                    ab:d4:42:73:9c:a1:ee:b8:81:a4:47:c3:ec:9f:52:
                    96:21:80:22:28:78:2b:de:9a:e1:8a:92:5e:10:47:
                    bc:39:55:41:79:89:2c:1a:d7:ad:67:ab:7a:6e:bc:
                    48:b9:77:e1:fe:c4:69:df:70:43:e6:1b:28:8a:3c:
                    e5:59:f8:9d:51:71:ff:6c:db:d5:4f:98:a6:91:08:
                    69:eb:91:76:13:79:96:77:d8:0a:a5:aa:c3:5b:d4:
                    8d:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:30:AB:79:BD:72:F1:F4:22:39:3A:D7:A3:C6:9F:E9:1B:F8:0E:7E
            X509v3 Authority Key Identifier:
                keyid:FF:D5:D7:8E:75:67:9E:8C:EF:FF:98:17:3D:A6:A7:9B:4C:C8:0F:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366C76D/7486C632D5CB11F0A751D3D1DAE4EC9C/_9XXjnVnnozv_5gXPaanm0zID_0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_9XXjnVnnozv_5gXPaanm0zID_0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366C76D/7486C632D5CB11F0A751D3D1DAE4EC9C/_9XXjnVnnozv_5gXPaanm0zID_0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:04:e3:e8:cf:21:cc:74:02:98:db:4f:65:53:b4:cb:7d:3d:
         25:80:47:e3:ca:fb:ad:3b:bd:3c:b5:7a:1f:bc:56:7e:b7:8d:
         89:50:1b:66:9e:e4:47:20:cb:f7:2a:1f:4d:58:74:30:7a:8a:
         35:41:84:de:f9:6e:92:d8:9e:4b:7a:af:6c:d5:fc:a1:08:14:
         5d:73:ae:d5:4d:f5:f2:ed:19:bd:2c:75:2a:e1:c8:64:05:ee:
         7b:30:e9:b8:6b:fd:d3:24:58:30:bf:cf:e8:0e:81:c3:54:fd:
         d4:d0:f6:af:33:04:99:8d:ba:52:16:4a:6d:f9:2b:0f:db:0c:
         96:e8:88:7b:e8:b8:bc:7f:4b:35:47:37:5f:99:98:86:03:4a:
         a4:de:7b:c2:86:19:a9:b6:5f:4b:c7:d4:61:57:ae:b8:67:66:
         14:d3:2b:56:91:74:2c:5b:3e:30:be:76:b1:e2:f1:96:f6:67:
         86:ce:9e:8e:47:c4:33:0e:62:90:14:a4:a3:e7:3d:a6:c6:ae:
         a8:04:2c:59:a0:64:4a:cc:c8:4b:7d:ac:5c:58:b4:a0:4c:74:
         17:a2:dc:f9:b3:f1:3e:9e:2d:90:43:12:15:79:2f:fe:1d:1a:
         4f:68:ec:98:cc:a1:d6:18:01:34:6b:d8:01:82:71:4d:30:92:
         c8:f7:cb:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:32:34 2026 by rpki-client