Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3672189/38C85C46912A11EF98AA067A762E951A/pmHmEV84xQtNTFvj-kiO2AWMwvE.mft
File:                     pmHmEV84xQtNTFvj-kiO2AWMwvE.mft (raw, json)
Hash identifier:          ML+eAucBVqDokMLsQ0CYVwK4nHGKUZdBYRrSwpUdIGs=
Subject key identifier:   73:03:1A:6C:DF:32:30:D1:E1:99:16:1C:A0:5C:2C:A2:AC:D8:DB:D8
Authority key identifier: A6:61:E6:11:5F:38:C5:0B:4D:4C:5B:E3:FA:48:8E:D8:05:8C:C2:F1
Certificate issuer:       /CN=F3672189AF/serialNumber=A661E6115F38C50B4D4C5BE3FA488ED8058CC2F1
Certificate serial:       0218
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/pmHmEV84xQtNTFvj-kiO2AWMwvE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3672189/38C85C46912A11EF98AA067A762E951A/pmHmEV84xQtNTFvj-kiO2AWMwvE.mft
Manifest number:          0217
Signing time:             Thu 26 Mar 2026 05:31:18 +0000
Manifest this update:     Thu 26 Mar 2026 05:31:17 +0000
Manifest next update:     Sat 28 Mar 2026 05:31:17 +0000
Files and hashes:         1: pmHmEV84xQtNTFvj-kiO2AWMwvE.crl (hash: 9eu0z+09dqbvTXXr6fzEJnR+ImPDcRMhunEeqG5BuAE=)
                          2: 84121498949611EFBE8BA57F762E951A.roa (hash: XaqvhZS4unq9+u8DbG/XQq/y/o0dswE+yS72E0NeXdI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3672189/38C85C46912A11EF98AA067A762E951A/pmHmEV84xQtNTFvj-kiO2AWMwvE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3672189/38C85C46912A11EF98AA067A762E951A/pmHmEV84xQtNTFvj-kiO2AWMwvE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/pmHmEV84xQtNTFvj-kiO2AWMwvE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 536 (0x218)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3672189AF, serialNumber=A661E6115F38C50B4D4C5BE3FA488ED8058CC2F1
        Validity
            Not Before: Mar 26 05:31:17 2026 GMT
            Not After : Mar 28 05:31:17 2026 GMT
        Subject: CN=69c4c4a6-b0fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b8:17:b9:45:9c:35:af:b6:52:0f:bb:c7:37:
                    d8:53:13:0b:20:27:7c:6b:6f:bf:c5:2d:97:d1:db:
                    57:38:dc:ab:e9:76:36:e4:04:0b:58:db:0b:4a:02:
                    88:7b:ee:88:3b:0d:4a:fd:58:61:7a:d4:ff:fb:96:
                    ff:2e:2e:0c:72:76:f6:11:b0:eb:28:40:aa:70:16:
                    5e:03:bf:02:2c:1e:6b:ff:19:d5:5e:86:c1:07:3f:
                    7e:22:8f:4e:71:9c:83:9f:56:6c:dd:eb:ae:39:e9:
                    23:ee:aa:68:49:ea:bf:19:f5:f3:76:b3:ca:cd:c7:
                    29:f2:c2:64:75:be:f1:12:d3:6e:3b:94:30:a6:31:
                    0b:3c:b8:2b:9f:ab:05:e8:73:bc:e8:7d:7c:f7:f3:
                    dc:e7:07:c1:2c:36:ad:80:27:ea:b7:58:0b:70:bd:
                    e1:d2:24:58:f4:23:f9:05:44:44:f1:d5:05:b3:3b:
                    cf:b4:45:19:63:5e:26:f4:1d:0c:94:56:38:9a:b4:
                    3c:01:30:84:d0:e1:d4:a5:b8:0a:79:3e:5f:c7:f7:
                    12:75:aa:ad:dd:42:71:4f:1f:f4:6e:8b:38:bc:ed:
                    0b:53:ae:2c:04:08:55:ec:04:be:2a:d2:98:b8:bb:
                    0e:67:d7:18:1f:b4:8a:95:29:6d:77:9d:3d:12:37:
                    f9:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:03:1A:6C:DF:32:30:D1:E1:99:16:1C:A0:5C:2C:A2:AC:D8:DB:D8
            X509v3 Authority Key Identifier:
                keyid:A6:61:E6:11:5F:38:C5:0B:4D:4C:5B:E3:FA:48:8E:D8:05:8C:C2:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3672189/38C85C46912A11EF98AA067A762E951A/pmHmEV84xQtNTFvj-kiO2AWMwvE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/pmHmEV84xQtNTFvj-kiO2AWMwvE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3672189/38C85C46912A11EF98AA067A762E951A/pmHmEV84xQtNTFvj-kiO2AWMwvE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:9b:79:82:38:b6:3f:3d:2b:91:30:d1:8c:b2:75:8d:09:9e:
         79:f7:ec:19:61:9b:ed:58:d1:5f:31:20:32:c6:49:ea:72:d3:
         f5:75:3e:e8:9e:d7:83:61:bd:de:66:28:76:e2:4f:ac:85:1b:
         9d:78:8c:13:c3:83:81:d9:a8:56:b4:4b:be:ca:7d:1a:fa:81:
         db:64:6c:77:3e:e8:1f:50:ad:35:97:6b:87:2b:1c:60:f0:24:
         c2:3c:f0:c5:be:ad:d7:1c:e9:4e:ac:25:dc:67:ec:9a:c8:59:
         53:87:f5:77:6e:c1:72:e3:77:64:a5:5e:3c:5e:98:95:8b:44:
         2b:da:85:1d:a9:11:0b:7c:8f:ab:47:42:32:04:8c:9a:b3:61:
         2d:14:db:92:86:da:00:33:d4:e4:26:d4:29:d1:9a:67:3d:e9:
         cd:e9:8f:76:62:48:d3:9e:5d:a8:7d:27:a8:b0:53:90:60:b8:
         1b:32:f6:f1:0b:2f:cb:0e:1c:fd:86:81:fe:de:7b:69:ef:c6:
         fb:10:f8:0f:ce:e7:d4:7f:89:68:21:05:b3:34:8c:d4:ce:96:
         0d:96:cf:d3:9a:95:7f:f5:35:d8:ef:61:35:f8:b3:82:36:e6:
         2d:ef:c4:ec:30:53:dc:24:13:a2:ed:ef:0f:a5:e9:7d:64:20:
         4d:d8:de:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:38:41 2026 by rpki-client