Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367A534/97B68100036211F1B9EDAFDCDAE4EC9C/ECqVKM6Relap2R5oH4HbdcNC7y4.mft
File:                     ECqVKM6Relap2R5oH4HbdcNC7y4.mft (raw, json)
Hash identifier:          qhrpF4XXKs425HF95wHbgSiY+UaX8rFimALUDZ2Rgm4=
Subject key identifier:   75:AB:3B:EE:6C:CC:1A:98:52:48:64:30:EA:EA:4D:75:CF:8A:1D:17
Authority key identifier: 10:2A:95:28:CE:91:7A:56:A9:D9:1E:68:1F:81:DB:75:C3:42:EF:2E
Certificate issuer:       /CN=F367A534AF/serialNumber=102A9528CE917A56A9D91E681F81DB75C342EF2E
Certificate serial:       33
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ECqVKM6Relap2R5oH4HbdcNC7y4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367A534/97B68100036211F1B9EDAFDCDAE4EC9C/ECqVKM6Relap2R5oH4HbdcNC7y4.mft
Manifest number:          32
Signing time:             Thu 26 Mar 2026 06:34:21 +0000
Manifest this update:     Thu 26 Mar 2026 06:34:20 +0000
Manifest next update:     Sat 28 Mar 2026 06:34:20 +0000
Files and hashes:         1: ECqVKM6Relap2R5oH4HbdcNC7y4.crl (hash: g+Mild3Yoxn8KpBF9wLo0iFjvKKpY9L4ZszBIiLj9BM=)
                          2: 6FE8433203AF11F18F2730ABDAE4EC9C.roa (hash: ou262VbjZ6vJWAT6dCiTH0QexJP5DHG74Vx9LVjF+CU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367A534/97B68100036211F1B9EDAFDCDAE4EC9C/ECqVKM6Relap2R5oH4HbdcNC7y4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367A534/97B68100036211F1B9EDAFDCDAE4EC9C/ECqVKM6Relap2R5oH4HbdcNC7y4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ECqVKM6Relap2R5oH4HbdcNC7y4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 51 (0x33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367A534AF, serialNumber=102A9528CE917A56A9D91E681F81DB75C342EF2E
        Validity
            Not Before: Mar 26 06:34:20 2026 GMT
            Not After : Mar 28 06:34:20 2026 GMT
        Subject: CN=69c4d36d-9e2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:24:a8:b5:0d:58:98:ea:b2:f0:5a:8f:37:e8:
                    53:5d:0a:72:f0:c6:92:35:c2:30:a8:5b:db:9d:db:
                    f8:01:40:cb:d0:39:7c:dd:78:d2:3c:d1:cf:e4:83:
                    63:1e:77:54:22:b8:01:7d:0c:60:1d:db:52:53:ef:
                    1d:1f:f1:07:10:61:ce:c6:e9:ec:97:ef:ac:a9:11:
                    f0:a3:e8:e5:94:ec:5c:cd:9a:94:50:15:ce:5d:b1:
                    b8:f6:88:03:47:8d:25:1a:3e:72:3c:8f:16:6a:c6:
                    c9:fb:d3:aa:d6:8d:63:e7:a3:9e:0f:3b:6b:eb:af:
                    d8:b6:b9:bf:71:cd:07:0a:8a:65:56:ce:b3:df:3f:
                    11:f5:39:11:dc:2a:15:9d:b9:89:ba:d3:c9:11:30:
                    a3:5f:9f:ee:2b:e6:db:f7:c1:46:15:a3:6d:69:a1:
                    f8:0f:a5:57:a7:9c:09:32:84:3a:09:de:8c:b2:40:
                    32:ce:4e:83:d2:88:5f:9d:e4:24:e8:e8:85:fa:8e:
                    2c:7d:23:eb:05:4a:fc:06:5f:56:84:59:e3:42:fc:
                    45:4b:9b:bb:2d:32:25:46:b4:33:56:49:f3:02:09:
                    f9:51:16:6d:fe:90:44:be:93:7b:4a:c6:e2:ac:68:
                    a6:30:47:7b:56:8f:41:49:c9:69:97:20:7e:d7:48:
                    9d:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:AB:3B:EE:6C:CC:1A:98:52:48:64:30:EA:EA:4D:75:CF:8A:1D:17
            X509v3 Authority Key Identifier:
                keyid:10:2A:95:28:CE:91:7A:56:A9:D9:1E:68:1F:81:DB:75:C3:42:EF:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367A534/97B68100036211F1B9EDAFDCDAE4EC9C/ECqVKM6Relap2R5oH4HbdcNC7y4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ECqVKM6Relap2R5oH4HbdcNC7y4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367A534/97B68100036211F1B9EDAFDCDAE4EC9C/ECqVKM6Relap2R5oH4HbdcNC7y4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:e7:59:e3:33:64:13:dd:20:ab:c2:36:23:05:e5:f6:1a:0e:
         18:04:b8:5b:5c:74:cc:22:40:9f:dc:7c:97:ec:a2:c0:8d:da:
         10:ee:5f:e1:c9:e4:9c:db:55:91:2e:48:f8:c3:37:45:37:50:
         e7:14:f8:c2:8c:07:d4:d5:f7:47:a1:7a:33:23:39:3a:67:85:
         b2:f7:44:84:a0:42:0d:66:56:a3:87:3f:0e:08:d2:32:61:0d:
         e0:ea:63:65:ef:a7:0b:7b:80:0e:57:64:25:83:23:6e:2c:0a:
         34:f1:0c:04:64:d0:9c:a7:64:2b:ac:dd:31:c4:4c:30:20:34:
         7c:c2:73:fc:5e:15:14:93:51:cf:f2:db:bd:7d:0b:fa:71:4e:
         f8:54:aa:eb:8b:9a:68:e4:34:41:66:c1:b6:cc:a5:41:11:5d:
         3d:ad:a8:2a:e3:62:a8:43:c3:64:58:cd:51:db:af:59:8c:da:
         07:a5:53:54:77:16:4e:89:aa:7a:be:72:05:6b:b0:e0:be:d4:
         45:72:f3:c0:00:6e:39:09:1f:a4:4f:3a:37:0c:51:b1:1e:a8:
         04:03:60:76:79:89:a5:fa:c9:69:4d:aa:82:be:d0:9b:f1:92:
         c0:cf:37:2e:23:b0:c3:76:52:19:60:87:25:6b:b8:c1:ff:37:
         3f:86:9a:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:46:31 2026 by rpki-client