Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3671BB4/02E646F8061D11EABC386256F8AEA228/9yrHa7B-RN3HrGDmYx8c0u3wNd0.mft
File:                     9yrHa7B-RN3HrGDmYx8c0u3wNd0.mft (raw, json)
Hash identifier:          rsNesYural69viT63/SStgtKxz7/r9wdUMaanQgSYYE=
Subject key identifier:   1E:37:90:77:0D:D0:DC:54:C4:03:23:05:37:AF:D8:68:2E:D5:A5:2E
Authority key identifier: F7:2A:C7:6B:B0:7E:44:DD:C7:AC:60:E6:63:1F:1C:D2:ED:F0:35:DD
Certificate issuer:       /CN=F3671BB4AF/serialNumber=F72AC76BB07E44DDC7AC60E6631F1CD2EDF035DD
Certificate serial:       0957
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/9yrHa7B-RN3HrGDmYx8c0u3wNd0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3671BB4/02E646F8061D11EABC386256F8AEA228/9yrHa7B-RN3HrGDmYx8c0u3wNd0.mft
Manifest number:          0952
Signing time:             Thu 26 Mar 2026 01:49:36 +0000
Manifest this update:     Thu 26 Mar 2026 01:49:35 +0000
Manifest next update:     Sat 28 Mar 2026 01:49:35 +0000
Files and hashes:         1: 9yrHa7B-RN3HrGDmYx8c0u3wNd0.crl (hash: wDrAvYMH959xalUGsyq+ZrhP6elQljiQLFP0+Jh5AsU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3671BB4/02E646F8061D11EABC386256F8AEA228/9yrHa7B-RN3HrGDmYx8c0u3wNd0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3671BB4/02E646F8061D11EABC386256F8AEA228/9yrHa7B-RN3HrGDmYx8c0u3wNd0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/9yrHa7B-RN3HrGDmYx8c0u3wNd0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2391 (0x957)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3671BB4AF, serialNumber=F72AC76BB07E44DDC7AC60E6631F1CD2EDF035DD
        Validity
            Not Before: Mar 26 01:49:35 2026 GMT
            Not After : Mar 28 01:49:35 2026 GMT
        Subject: CN=69c490b0-fce0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4d:a3:81:08:14:0f:be:14:5d:3a:73:2a:74:
                    f2:3e:bb:3d:18:cf:92:8f:7f:b9:37:b5:2b:5e:b4:
                    6f:46:d4:5d:eb:9e:1d:1c:4f:d1:42:20:f7:89:48:
                    32:03:c9:74:b8:d5:67:dc:73:88:57:6f:2a:0c:ef:
                    4a:b3:bb:29:2f:14:82:38:4e:c0:fd:f2:61:8d:0d:
                    8a:0f:ff:7b:4d:e0:0c:0e:a1:f8:ca:70:1a:31:2c:
                    da:c0:33:b8:30:6c:2d:53:c6:cd:a5:5b:0d:35:7a:
                    dc:ce:7d:92:4c:6f:00:2b:1e:2a:a8:53:61:14:47:
                    0c:2e:77:3d:f3:c7:b7:d6:ef:b7:5f:04:b9:48:b9:
                    8b:ef:2c:ec:7e:ea:32:d4:bc:c5:4a:67:9b:34:d9:
                    5c:96:e2:d9:81:13:24:e4:36:7b:76:87:22:d2:2d:
                    e9:8a:15:e1:c6:61:2f:9a:72:fb:36:a7:98:a6:77:
                    86:fe:0d:10:02:b2:7c:7a:7d:1f:41:2c:2e:5c:49:
                    86:e0:30:c5:c1:61:bf:cc:5c:8d:d8:2a:91:5f:41:
                    6e:4b:45:3e:f7:4c:4a:40:a3:16:ba:60:b5:e2:59:
                    45:d7:6d:c3:3e:99:dd:97:71:70:c1:54:2d:7b:80:
                    39:61:b1:32:5f:4e:c8:ff:fb:75:f5:c0:b5:00:6a:
                    15:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:37:90:77:0D:D0:DC:54:C4:03:23:05:37:AF:D8:68:2E:D5:A5:2E
            X509v3 Authority Key Identifier:
                keyid:F7:2A:C7:6B:B0:7E:44:DD:C7:AC:60:E6:63:1F:1C:D2:ED:F0:35:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3671BB4/02E646F8061D11EABC386256F8AEA228/9yrHa7B-RN3HrGDmYx8c0u3wNd0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9yrHa7B-RN3HrGDmYx8c0u3wNd0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3671BB4/02E646F8061D11EABC386256F8AEA228/9yrHa7B-RN3HrGDmYx8c0u3wNd0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:f2:70:ac:69:87:1c:01:8f:22:f3:41:15:c4:49:5c:3c:8c:
         64:85:29:51:c7:dd:26:7c:5f:60:67:12:8c:4d:95:cd:e0:32:
         8f:ec:25:06:e8:89:0c:66:05:9c:f3:bd:0c:c4:0d:58:80:f8:
         ac:c1:89:ee:f3:29:d1:ff:f3:58:d9:1b:45:52:ed:25:0c:57:
         7b:80:56:76:76:f0:42:76:74:a4:2e:df:4d:66:77:18:81:92:
         a8:81:d4:6b:cd:b4:8b:b2:ad:0f:39:e4:d9:54:43:61:d6:b1:
         cb:6f:5a:0f:7f:bf:6e:ad:e5:0f:65:ec:72:1e:79:71:34:f8:
         78:57:d8:05:58:97:df:f3:08:76:53:f5:2f:29:a4:e5:0b:c5:
         87:d7:aa:94:59:8c:2b:e3:65:1e:a6:a8:54:51:f5:ab:71:c3:
         6b:fe:ca:e2:ac:20:c0:55:3f:69:15:69:70:7c:f9:5d:ec:4f:
         f4:63:dc:d0:6e:ce:35:f0:4e:38:a7:2a:ca:41:3a:09:ef:0f:
         e1:f8:04:ad:3f:e2:75:eb:b1:2a:9f:a9:4b:67:9c:6c:62:c2:
         61:3e:93:3f:84:7a:8a:ed:2f:31:98:48:30:4f:0d:73:84:c5:
         01:c2:fe:21:b8:b5:01:44:df:0a:03:94:6d:5b:0e:1d:86:b3:
         8b:12:55:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:55:57 2026 by rpki-client