Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3670369/691565D27E7811ECB77461CB5A40D577/yLuITQS6vBYFq333lYeWBZySwmo.mft
File:                     yLuITQS6vBYFq333lYeWBZySwmo.mft (raw, json)
Hash identifier:          q60R5BUUeLABf0LZzZxA7zLU8WzH7NMeSnUyehEinsY=
Subject key identifier:   4C:9B:BA:6C:6D:A9:F2:DB:12:C7:6C:24:45:BC:FF:1C:FC:92:E6:A0
Authority key identifier: C8:BB:88:4D:04:BA:BC:16:05:AB:7D:F7:95:87:96:05:9C:92:C2:6A
Certificate issuer:       /CN=F3670369AF/serialNumber=C8BB884D04BABC1605AB7DF7958796059C92C26A
Certificate serial:       061C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/yLuITQS6vBYFq333lYeWBZySwmo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3670369/691565D27E7811ECB77461CB5A40D577/yLuITQS6vBYFq333lYeWBZySwmo.mft
Manifest number:          061B
Signing time:             Thu 26 Mar 2026 03:00:41 +0000
Manifest this update:     Thu 26 Mar 2026 03:00:40 +0000
Manifest next update:     Sat 28 Mar 2026 03:00:40 +0000
Files and hashes:         1: yLuITQS6vBYFq333lYeWBZySwmo.crl (hash: qx6Ug9BaPxwyzONb5EMIBMzNwjAnFl8rQf+KaNKbN4k=)
                          2: DBE0F6EE7E8C11EC9A551E885A40D577.roa (hash: e+LkqN78DWuhBsqL8FFr5mWtusQpgR9pzmjfGcJQ5/w=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3670369/691565D27E7811ECB77461CB5A40D577/yLuITQS6vBYFq333lYeWBZySwmo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3670369/691565D27E7811ECB77461CB5A40D577/yLuITQS6vBYFq333lYeWBZySwmo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/yLuITQS6vBYFq333lYeWBZySwmo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1564 (0x61c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3670369AF, serialNumber=C8BB884D04BABC1605AB7DF7958796059C92C26A
        Validity
            Not Before: Mar 26 03:00:40 2026 GMT
            Not After : Mar 28 03:00:40 2026 GMT
        Subject: CN=69c4a159-6def
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:91:a0:49:12:36:6d:ac:8e:c6:45:3e:49:37:
                    3e:a4:26:9d:7c:3b:6f:22:5a:7f:f8:a7:43:bc:d7:
                    14:63:5c:f8:70:44:00:df:05:aa:de:c2:07:17:eb:
                    06:37:a3:2b:eb:6b:80:24:21:18:f4:5e:aa:87:9c:
                    9b:21:f9:85:fb:be:a4:61:02:4a:42:9b:61:89:99:
                    d8:75:62:48:cd:cc:85:24:c9:08:e4:41:d0:5b:85:
                    8c:f7:d4:5f:9b:22:10:20:97:b5:e6:92:a3:24:75:
                    a5:e9:c0:41:2f:6e:21:41:89:50:da:8e:ff:7a:9a:
                    be:4f:31:ad:32:ab:25:66:28:c5:54:cf:34:48:94:
                    cd:bc:82:ba:b5:6d:62:53:02:54:53:3a:d9:35:78:
                    27:d7:d7:bb:eb:ef:28:e9:b2:65:da:2b:97:09:a1:
                    92:1d:b9:ff:2a:b6:b4:1c:8d:2e:ba:16:cd:e5:a8:
                    d5:4a:b8:4e:6b:62:6a:7f:97:95:20:bf:cd:e4:04:
                    f2:72:e9:9a:34:03:db:3a:10:d8:f2:24:ed:32:c0:
                    b2:8a:fe:ae:7c:25:e5:81:5d:64:ff:40:77:ca:1b:
                    14:c7:94:d3:9c:91:b0:9b:34:f8:e7:cd:89:ba:f1:
                    e2:68:45:16:75:68:e5:8d:86:33:fc:f3:9c:9a:6f:
                    7f:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:9B:BA:6C:6D:A9:F2:DB:12:C7:6C:24:45:BC:FF:1C:FC:92:E6:A0
            X509v3 Authority Key Identifier:
                keyid:C8:BB:88:4D:04:BA:BC:16:05:AB:7D:F7:95:87:96:05:9C:92:C2:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3670369/691565D27E7811ECB77461CB5A40D577/yLuITQS6vBYFq333lYeWBZySwmo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/yLuITQS6vBYFq333lYeWBZySwmo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3670369/691565D27E7811ECB77461CB5A40D577/yLuITQS6vBYFq333lYeWBZySwmo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:c5:c3:26:4b:1b:03:cc:2e:4f:ab:5c:57:86:fb:42:c6:4e:
         bc:fb:f6:cc:68:77:02:f2:5d:f9:e8:ed:ee:1f:f7:b7:f9:80:
         18:77:90:ef:e9:f3:5f:e8:bf:a5:6d:a0:40:2d:04:75:ef:cd:
         cc:d2:d4:e9:dc:58:3b:8c:3d:7d:37:1d:cf:ed:a7:3d:63:80:
         04:a4:71:dc:5a:5a:b5:4b:f4:62:0d:71:ef:22:9f:37:13:11:
         ee:f7:6d:70:1e:b2:a1:45:74:3c:b0:b1:d2:5c:ae:16:e0:9a:
         9d:01:c6:6b:5e:65:66:87:96:d1:f9:2f:01:82:e5:c5:60:7a:
         31:b9:fc:5d:5e:75:ab:42:c3:ca:08:a3:05:21:2d:85:20:2e:
         9a:ff:c0:da:dc:44:93:eb:2d:b4:0f:c3:0b:3d:03:c6:48:62:
         2c:24:25:98:49:28:fd:30:dc:58:99:48:47:50:b0:b0:98:5a:
         4a:aa:d9:eb:c8:61:5b:5c:03:2a:85:bf:69:90:1b:46:4c:a9:
         86:22:d4:03:66:b3:a3:27:92:3b:62:07:8f:06:c9:9d:db:a2:
         e1:44:e3:08:cc:a9:ae:bc:bf:83:fb:a9:a4:a1:ee:d6:0d:e6:
         ee:ad:8d:4c:6e:6d:20:60:75:07:7b:e6:e2:db:85:33:1f:a8:
         8b:f1:16:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:21:30 2026 by rpki-client