Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366CE6F/D9A4676C699A11EEBCC5FB674AD9E6FC/KnzueRgruFkbsTXdv7vulMHfQIc.mft
File:                     KnzueRgruFkbsTXdv7vulMHfQIc.mft (raw, json)
Hash identifier:          HEOiNRilaxPbABNIBHrwsgoQEDQ7etRmJoUVZo8P1V8=
Subject key identifier:   95:24:58:4C:40:BB:F0:87:94:40:BA:03:76:0D:4C:67:C4:EE:19:86
Authority key identifier: 2A:7C:EE:79:18:2B:B8:59:1B:B1:35:DD:BF:BB:EE:94:C1:DF:40:87
Certificate issuer:       /CN=F366CE6FAF/serialNumber=2A7CEE79182BB8591BB135DDBFBBEE94C1DF4087
Certificate serial:       03AC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/KnzueRgruFkbsTXdv7vulMHfQIc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366CE6F/D9A4676C699A11EEBCC5FB674AD9E6FC/KnzueRgruFkbsTXdv7vulMHfQIc.mft
Manifest number:          03A3
Signing time:             Thu 26 Mar 2026 04:27:06 +0000
Manifest this update:     Thu 26 Mar 2026 04:27:05 +0000
Manifest next update:     Sat 28 Mar 2026 04:27:05 +0000
Files and hashes:         1: KnzueRgruFkbsTXdv7vulMHfQIc.crl (hash: WWvwC+FZaj4XQX4FS5MWkz4gw/+zoB4qogH9g+zqOEw=)
                          2: 1A85425E69BB11EEBF5E904C4AD9E6FC.roa (hash: Kx/Y8dEbUYeqoToY5LpNSdsXIlBKib23+2DqdNa43/Y=)
                          3: FD189F0E69BA11EEBE81314C4AD9E6FC.roa (hash: UK6i2dFbIWYL9h4T/dpZ4yF8qA519gysmxncwqhjDNc=)
                          4: E44337C869BA11EE88CB094C4AD9E6FC.roa (hash: 1d8FtYAZsHDPTXDngJ49htpRva8POmc7nirQyWgiDXo=)
                          5: 3BB28D0269BA11EEABA4ED494AD9E6FC.roa (hash: Q1XgZ9ZmDeVtE4gxia+GOYWXfxLUPO9DALH0Nrtl+eg=)
                          6: B8B5DACA69BA11EEBD303C4B4AD9E6FC.roa (hash: uoqftiTs2TQ3rEVnLUYDWPuBL54Tw5Qh6vFz0fe7JV4=)
                          7: 98FDCD4669BA11EE95130C4B4AD9E6FC.roa (hash: V8tXop4xNSLK7NTMuObTNFw9mcHKdpwbwIJqeSi9teo=)
                          8: 6399788A69BA11EE9D71534A4AD9E6FC.roa (hash: kaAHuzndBPzeMjc2nNN3ZcTB7Ew41AHipGqkh1wKLvg=)
                          9: C7D92E1869B911EE953F70484AD9E6FC.roa (hash: SdAbuipwR7EHxw/Hbwbw2PDVH2wv4MuQ83A/IxBI9GQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366CE6F/D9A4676C699A11EEBCC5FB674AD9E6FC/KnzueRgruFkbsTXdv7vulMHfQIc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366CE6F/D9A4676C699A11EEBCC5FB674AD9E6FC/KnzueRgruFkbsTXdv7vulMHfQIc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/KnzueRgruFkbsTXdv7vulMHfQIc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 940 (0x3ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366CE6FAF, serialNumber=2A7CEE79182BB8591BB135DDBFBBEE94C1DF4087
        Validity
            Not Before: Mar 26 04:27:05 2026 GMT
            Not After : Mar 28 04:27:05 2026 GMT
        Subject: CN=69c4b59a-171f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:83:b6:4d:e8:16:fd:3c:43:4b:1e:da:e6:41:
                    ea:13:f6:5a:07:bb:78:6a:8b:c8:62:ea:64:84:fb:
                    fa:0d:21:30:d1:7c:7a:09:44:f1:ff:f8:61:11:93:
                    50:28:5b:67:9b:fa:ab:ee:4f:bf:c2:16:df:99:75:
                    d9:04:35:33:00:a3:7a:79:c0:7d:59:27:d4:62:7f:
                    e7:95:4d:08:70:26:77:83:5e:46:01:7c:42:c1:9e:
                    99:a1:b1:5c:63:63:7b:e5:77:2c:95:7f:33:05:8c:
                    4d:b9:be:52:24:64:74:c4:81:a3:e7:a8:63:ed:e6:
                    2f:8b:cc:86:4a:6d:9d:47:0a:88:a9:0d:d0:42:94:
                    12:1f:22:b4:53:81:49:76:b8:fb:03:5c:2d:8b:5b:
                    02:9b:0d:ca:46:6c:95:b0:cb:87:e2:bb:a7:05:37:
                    ed:5a:7b:93:e3:95:2d:c9:f7:90:66:57:b7:42:1c:
                    fd:6f:05:63:76:20:48:3d:4d:4f:31:81:f1:60:5a:
                    8a:6e:33:bc:91:46:0e:89:a2:48:7d:5d:e1:c8:a2:
                    b7:dc:af:ae:14:1e:cd:80:a1:79:9a:24:90:a0:a7:
                    c0:af:c2:11:31:42:bd:49:fd:01:52:da:3c:f4:7f:
                    b4:36:1d:f6:a0:27:bb:ce:a6:3b:35:f7:24:63:e6:
                    0a:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:24:58:4C:40:BB:F0:87:94:40:BA:03:76:0D:4C:67:C4:EE:19:86
            X509v3 Authority Key Identifier:
                keyid:2A:7C:EE:79:18:2B:B8:59:1B:B1:35:DD:BF:BB:EE:94:C1:DF:40:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366CE6F/D9A4676C699A11EEBCC5FB674AD9E6FC/KnzueRgruFkbsTXdv7vulMHfQIc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KnzueRgruFkbsTXdv7vulMHfQIc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366CE6F/D9A4676C699A11EEBCC5FB674AD9E6FC/KnzueRgruFkbsTXdv7vulMHfQIc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:5a:d9:f3:82:cf:63:a8:03:9f:1c:bd:9e:b6:74:c6:59:d7:
         2f:c1:ec:06:00:b4:3e:b1:f3:2f:57:b5:ad:c6:5a:11:4d:ae:
         1f:9d:4f:29:fd:4c:a0:3e:5d:06:69:88:e9:f5:05:8e:b3:9d:
         47:59:19:5e:29:52:65:6a:8a:44:6c:c0:58:51:99:9d:73:1d:
         7b:f9:82:ce:b8:d1:18:82:9c:5c:ad:16:de:4d:47:cb:67:b8:
         47:ca:e4:35:1d:28:2b:0c:8a:bb:be:02:2a:2e:0d:e4:cd:c7:
         ae:0d:6e:39:ea:52:7d:04:ae:d4:df:1f:0e:a8:03:be:98:4c:
         bd:28:e9:e0:eb:6e:72:2c:bc:18:06:c3:c1:b5:22:ec:67:97:
         d5:be:90:63:44:98:74:49:4e:fb:c2:75:dd:70:fe:ca:21:57:
         b2:20:27:29:bd:26:d1:29:f8:0f:70:67:c5:87:e6:b9:14:31:
         2c:5f:e8:86:e1:de:fc:da:14:1d:5e:ae:c8:2d:db:a8:57:91:
         b0:35:5f:ba:38:df:e8:00:3f:3b:58:f3:a9:b0:18:5d:44:92:
         f0:44:0b:d1:e4:31:5d:cd:6d:8b:d7:7c:3a:04:3e:e6:f8:7d:
         7e:41:a7:71:ee:63:ca:84:cb:50:ae:84:32:3d:72:74:26:26:
         59:16:27:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:52:44 2026 by rpki-client