Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B3D1/C4C3AEB0C11F11EFA0B58AA4762E951A/8H0xNKDMPAQpA5gVfKBVkucrz6s.mft
File:                     8H0xNKDMPAQpA5gVfKBVkucrz6s.mft (raw, json)
Hash identifier:          +oNJ75wgzK0MouF1NsPGKNlfjyNSVeW9Nt7LEibh3Ps=
Subject key identifier:   B9:15:46:A9:8A:DB:ED:62:BD:9B:7B:C3:35:FB:70:A8:13:C2:1C:C5
Authority key identifier: F0:7D:31:34:A0:CC:3C:04:29:03:98:15:7C:A0:55:92:E7:2B:CF:AB
Certificate issuer:       /CN=F367B3D1AF/serialNumber=F07D3134A0CC3C04290398157CA05592E72BCFAB
Certificate serial:       01D8
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/8H0xNKDMPAQpA5gVfKBVkucrz6s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367B3D1/C4C3AEB0C11F11EFA0B58AA4762E951A/8H0xNKDMPAQpA5gVfKBVkucrz6s.mft
Manifest number:          01D6
Signing time:             Thu 26 Mar 2026 05:39:04 +0000
Manifest this update:     Thu 26 Mar 2026 05:39:03 +0000
Manifest next update:     Sat 28 Mar 2026 05:39:03 +0000
Files and hashes:         1: 8H0xNKDMPAQpA5gVfKBVkucrz6s.crl (hash: dfkjE0rzYFRGnGQlM6xAOcfkcnvVwgmT8gBU7ibvCa8=)
                          2: 1561360CC12111EFA3DCFAAD762E951A.roa (hash: m44/mD69fqilQr5qakXjjSIMYxNycWbNcH5wLm+55Bk=)
                          3: EBC72644C12011EFA34E2AAC762E951A.roa (hash: FBA7XhhYZKd8zAiwrkhqOdWNSKf23ZrcRwoec3JtQJI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367B3D1/C4C3AEB0C11F11EFA0B58AA4762E951A/8H0xNKDMPAQpA5gVfKBVkucrz6s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367B3D1/C4C3AEB0C11F11EFA0B58AA4762E951A/8H0xNKDMPAQpA5gVfKBVkucrz6s.mft
                          rsync://rpki.afrinic.net/repository/afrinic/8H0xNKDMPAQpA5gVfKBVkucrz6s.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 472 (0x1d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367B3D1AF, serialNumber=F07D3134A0CC3C04290398157CA05592E72BCFAB
        Validity
            Not Before: Mar 26 05:39:03 2026 GMT
            Not After : Mar 28 05:39:03 2026 GMT
        Subject: CN=69c4c678-b202
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:3f:ec:27:74:81:97:ef:fa:ad:50:55:20:05:
                    60:2b:e3:20:6b:96:8f:fb:70:f4:76:0b:a1:90:3e:
                    89:05:0c:42:3c:8f:53:6b:7c:a5:f4:37:b1:c0:df:
                    9f:66:c5:f3:1a:fd:0d:ab:68:6e:ed:79:da:c8:c6:
                    72:c8:8d:9e:2d:d2:d1:10:21:47:9d:89:19:86:00:
                    e7:93:43:bb:c8:9b:b8:48:ab:00:7a:87:35:d3:93:
                    10:2e:bd:eb:41:0e:71:1b:5a:8f:65:b0:23:2a:b0:
                    c1:34:6a:f2:31:87:23:db:82:eb:cf:8f:66:02:21:
                    f1:50:7d:22:80:10:83:3f:d3:7e:7a:43:ea:56:7f:
                    77:5f:89:c2:5c:12:7d:33:34:9d:a3:e4:4f:8a:68:
                    04:e2:fa:16:f4:b8:8a:eb:23:ca:ba:d5:08:2d:3b:
                    28:6c:3e:6c:b2:2f:86:92:76:81:65:73:19:0c:b6:
                    c8:a3:a8:8e:07:0f:7c:c9:9b:c0:19:6f:83:bf:d6:
                    da:15:e6:99:bd:cd:7e:bc:0c:e8:cb:24:77:56:93:
                    89:d8:64:03:38:b2:37:7c:6d:fc:1d:aa:e8:2f:e7:
                    b4:f7:43:2f:bd:1f:ef:2b:f7:78:b8:e6:1d:20:f6:
                    4a:bc:33:2e:7d:1a:bf:5e:74:6a:4f:3b:aa:e5:ea:
                    60:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:15:46:A9:8A:DB:ED:62:BD:9B:7B:C3:35:FB:70:A8:13:C2:1C:C5
            X509v3 Authority Key Identifier:
                keyid:F0:7D:31:34:A0:CC:3C:04:29:03:98:15:7C:A0:55:92:E7:2B:CF:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367B3D1/C4C3AEB0C11F11EFA0B58AA4762E951A/8H0xNKDMPAQpA5gVfKBVkucrz6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/8H0xNKDMPAQpA5gVfKBVkucrz6s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B3D1/C4C3AEB0C11F11EFA0B58AA4762E951A/8H0xNKDMPAQpA5gVfKBVkucrz6s.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:8f:4d:78:6b:a4:9f:33:e9:50:b9:b8:c2:25:c3:a0:14:ca:
         e0:79:56:58:c3:3d:bd:ff:7d:30:3b:b2:59:8d:76:1e:7c:13:
         4f:78:a9:fd:37:33:48:ed:84:7b:a4:b8:df:3a:9b:f2:ff:54:
         f9:03:64:3f:aa:eb:b8:26:2e:a7:1d:e0:c3:2c:e6:45:cc:6f:
         8a:2f:57:a5:4a:9e:3b:53:dc:e3:52:6e:99:5f:e2:ba:e6:63:
         e8:24:03:06:82:22:f7:dd:6e:7e:a9:bb:ec:4d:08:1c:f8:80:
         93:a2:f0:88:48:fb:42:31:84:8a:06:72:08:0e:3a:3e:fc:08:
         3a:7c:af:0b:e9:86:2a:cd:44:dd:e6:8a:30:39:3f:b5:7f:3f:
         94:76:c7:e9:3d:69:d4:1c:89:13:de:91:df:6c:49:ab:2e:ef:
         f7:b1:69:f4:40:e1:a8:3b:6d:ff:3f:89:67:a2:9f:2f:5a:e5:
         40:da:ea:92:b3:ba:1d:57:71:4a:5c:6d:fa:46:07:0b:02:f9:
         fb:9f:76:91:d5:5d:7c:93:5c:36:a6:aa:4c:61:e1:00:0b:0a:
         3e:cc:e9:da:d9:5b:5b:84:d0:49:1e:97:ad:49:37:21:cb:8e:
         15:f7:fa:4d:f4:b0:38:88:de:79:d7:56:e0:89:dd:87:ed:1e:
         d6:99:a7:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:31:12 2026 by rpki-client