Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B8D1/561E2FDC21F011EEACFC01104AD9E6FC/L9OdkqzapRN7zkgavmyN8dzNDvY.mft
File:                     L9OdkqzapRN7zkgavmyN8dzNDvY.mft (raw, json)
Hash identifier:          lJmF7+1U1PusKCQU2Hnf0ygPK+myYJZAkZ86EL94FxQ=
Subject key identifier:   98:78:F0:79:F7:3B:2D:8C:E6:19:97:4A:77:74:8D:59:99:EE:50:78
Authority key identifier: 2F:D3:9D:92:AC:DA:A5:13:7B:CE:48:1A:BE:6C:8D:F1:DC:CD:0E:F6
Certificate issuer:       /CN=F367B8D1AF/serialNumber=2FD39D92ACDAA5137BCE481ABE6C8DF1DCCD0EF6
Certificate serial:       0409
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/L9OdkqzapRN7zkgavmyN8dzNDvY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/561E2FDC21F011EEACFC01104AD9E6FC/L9OdkqzapRN7zkgavmyN8dzNDvY.mft
Manifest number:          0401
Signing time:             Thu 26 Mar 2026 04:13:50 +0000
Manifest this update:     Thu 26 Mar 2026 04:13:49 +0000
Manifest next update:     Sat 28 Mar 2026 04:13:49 +0000
Files and hashes:         1: L9OdkqzapRN7zkgavmyN8dzNDvY.crl (hash: eQLBCr7llOjZSJ60aLcQt5TcCI/ADc7OOjH0L96ZVc8=)
                          2: 2CF3A3EEF23111F08DE709CADAE4EC9C.roa (hash: E/G6AxJRTy6BWkfQETWJC1LpmEof5Nqv6ggmyx/krZg=)
                          3: 82D2D66E261811EE84FCC57F4AD9E6FC.roa (hash: 8DOR79YopZBDIjmiAAaaEool8LnL3u27308SxIQ3uSY=)
                          4: E1F87CC6261711EE9112117E4AD9E6FC.roa (hash: L/3Ed8SgC2Eem41w8cHehrxxaShVOqXifUiGhdxr7zk=)
                          5: DBC4D84EF19F11F0BB0D92C4DAE4EC9C.roa (hash: 0w11dAl0ZHuL4r3C+H0Cy861F6dvJBOgzONU1ELikMM=)
                          6: 3333CFFEF22C11F0B7B687ABDAE4EC9C.roa (hash: n9BHCAIHciXSckg0OkYupto8mNVTVrnQREgeCL2seHc=)
                          7: 7977DC10F13E11F08E43847CDAE4EC9C.roa (hash: S6SqyKuMuszdFgWYXKbiOJ/eUFMOthzgeUjko1wpZeI=)
                          8: 857C6338F13811F08947FFD6DAE4EC9C.roa (hash: EQjufZY+Ld4Nc6rRRR5Pa+LhyHbL3SiAVgHsy5rcUII=)
                          9: 2BBF61F4261711EEBF1F207C4AD9E6FC.roa (hash: uweMPd3tzGkzK5NAwH3tY1Gjy+sA5uAC5mjmqHriOro=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/561E2FDC21F011EEACFC01104AD9E6FC/L9OdkqzapRN7zkgavmyN8dzNDvY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/561E2FDC21F011EEACFC01104AD9E6FC/L9OdkqzapRN7zkgavmyN8dzNDvY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/L9OdkqzapRN7zkgavmyN8dzNDvY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1033 (0x409)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367B8D1AF, serialNumber=2FD39D92ACDAA5137BCE481ABE6C8DF1DCCD0EF6
        Validity
            Not Before: Mar 26 04:13:49 2026 GMT
            Not After : Mar 28 04:13:49 2026 GMT
        Subject: CN=69c4b27d-5d87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:05:75:d3:9b:68:29:9a:3f:80:28:d3:fc:d0:
                    aa:b3:9c:bb:61:44:0e:b4:92:34:d0:c2:dd:48:32:
                    f3:87:1a:24:b8:2f:90:84:89:9e:4a:94:40:c2:2d:
                    d3:ba:7f:9e:c3:71:a3:a6:d6:59:8f:c0:69:29:f2:
                    f9:18:64:32:01:88:0c:d2:dd:4f:7e:18:4c:64:97:
                    69:4a:7e:32:45:66:bf:8c:73:55:7c:86:55:20:e4:
                    a3:7c:e7:8e:de:3e:6e:82:50:5e:8d:ca:28:cd:48:
                    6e:c0:9d:d7:c3:fd:db:ae:98:d5:06:7e:28:ce:f7:
                    8c:de:a7:7e:a1:76:cb:a8:4d:6d:5e:8c:87:fb:d5:
                    ae:d9:9c:0f:98:33:7e:87:9e:4e:96:4b:12:87:0b:
                    11:89:de:9e:b7:1c:02:d4:fb:e9:67:fb:57:58:88:
                    58:d5:9f:84:42:a3:31:ef:71:1a:e9:2f:17:c2:76:
                    ea:a8:5f:c6:98:98:48:77:4e:f1:eb:dc:88:3a:34:
                    71:b9:7a:a9:1e:08:59:66:73:7b:36:fc:f1:f2:cf:
                    0c:ae:5e:64:8e:4a:15:59:7d:04:8f:ef:14:44:b2:
                    00:b5:eb:9a:ef:ab:d8:46:74:16:10:47:70:28:3d:
                    eb:f3:7f:f9:23:8b:ac:f4:e2:de:40:60:05:6a:f9:
                    43:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:78:F0:79:F7:3B:2D:8C:E6:19:97:4A:77:74:8D:59:99:EE:50:78
            X509v3 Authority Key Identifier:
                keyid:2F:D3:9D:92:AC:DA:A5:13:7B:CE:48:1A:BE:6C:8D:F1:DC:CD:0E:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/561E2FDC21F011EEACFC01104AD9E6FC/L9OdkqzapRN7zkgavmyN8dzNDvY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/L9OdkqzapRN7zkgavmyN8dzNDvY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/561E2FDC21F011EEACFC01104AD9E6FC/L9OdkqzapRN7zkgavmyN8dzNDvY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:13:0f:e6:e6:76:f5:b6:5b:f0:60:8d:01:9b:c4:7a:df:b4:
         16:25:43:5e:6d:77:8f:07:32:9e:b1:03:b6:16:a8:96:2e:72:
         88:93:03:9e:82:39:d8:1b:3c:64:ae:15:df:e3:a2:cb:f0:28:
         39:e3:3b:13:70:3a:4c:e0:63:e3:22:1d:1a:3c:b1:70:ef:25:
         90:66:86:e9:b4:61:dc:01:82:8c:4c:17:78:d1:0b:0f:fe:40:
         16:fa:68:bd:c5:b3:83:ba:bf:5f:4e:eb:d1:a0:e5:85:9f:57:
         a9:8b:19:2f:93:b8:6a:f7:05:5a:e8:dd:cb:66:84:c6:21:8c:
         90:f4:e4:2c:9a:1a:6d:4e:df:90:28:57:0b:31:af:e9:b4:28:
         b8:d6:c6:5c:82:71:0c:b2:01:b0:73:10:14:1e:08:68:da:12:
         42:4a:0e:6e:b2:0f:cc:79:d9:d3:cf:07:03:86:3d:d7:80:96:
         1c:48:c1:96:15:bf:a1:a3:86:3c:5a:cd:b4:4a:96:ab:b4:5f:
         5d:7f:02:01:2f:80:9c:44:3b:fd:fe:45:68:b2:e3:dc:c2:ba:
         25:78:42:7a:6f:4b:98:b9:63:3a:58:5b:74:f6:86:cb:67:e5:
         62:7f:08:fc:6c:2b:41:57:1f:d5:be:d7:aa:1a:05:f3:75:51:
         cc:5d:6a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:10:18 2026 by rpki-client