Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft
File:                     l8kOJSEtiHz54d5v3fVRuoEvoTk.mft (raw, json)
Hash identifier:          0WtckHLzq8fzANHLyBQeAyuXwcZHfxG1pp0nabSrs1A=
Subject key identifier:   C7:75:45:8A:02:CC:D6:58:A1:16:A5:3A:BC:1F:3D:FC:83:36:26:0C
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Certificate issuer:       /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial:       091B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft
Manifest number:          0837
Signing time:             Wed 25 Mar 2026 02:21:05 +0000
Manifest this update:     Wed 25 Mar 2026 02:21:04 +0000
Manifest next update:     Fri 27 Mar 2026 02:21:04 +0000
Files and hashes:         1: l8kOJSEtiHz54d5v3fVRuoEvoTk.crl (hash: 0Zr6vl3vGzFPDInR+SANVuW9TDc4bms+AUn1+Fv0yD0=)
                          2: DBA98D145B2211F0A20E2EA0DAE4EC9C.roa (hash: baX/jyqbDDRWJ52IpaUoPLaTxEVM5KXNaJC/ks++xuQ=)
                          3: 883A6EA01D3711F1979BA3A1DAE4EC9C.roa (hash: UA9UI4d18rq6rBPVQ1y6Q/PX1lx2KaDCc9BKpN3d+HQ=)
                          4: D555ACF47ED111F08EE5E58BDAE4EC9C.roa (hash: 47vFvhPfYF8MRZPiu19cy9fhXJPFVZu9WXQ1eMHjtak=)
                          5: 1310CD3A237811F1BCBD5FA0DAE4EC9C.roa (hash: qF3hG1/6g8gsTprcC6hzsx2uNOQ7cvqSo6+AiuAa4B0=)
                          6: 9A84AD3E11C311F1BF5B00B3DAE4EC9C.roa (hash: P/lqdhKz2qnZ4C+UPmgXSJnw29EF+B0hRLQpPCRGO9g=)
                          7: 31AC1B067F2B11F0A2FC2DE1DAE4EC9C.roa (hash: pJmfeAp3o89ojiARZABIHNF+5KqQANGXnVyfWK3JWAo=)
                          8: 3D71A6821C9111F18CCD2AD1DAE4EC9C.roa (hash: UVwSMaGbMl/DAfWetirdJftqh3TSiqq+bvhtljLq+s8=)
                          9: EE4BCA50C51611F0882C7A79DAE4EC9C.roa (hash: QORpqLPUnemyJVfwyKiR9rBTSjXXBwPxprwBhq4ORos=)
                          10: 8F66F9F2625011F093EF34AEDAE4EC9C.roa (hash: azeXExxPadQBtZQAbA3QmCVU3GUpPn3GgN81W/kzNws=)
                          11: DE2FE726163011F1829CE9EADAE4EC9C.roa (hash: TMIMgwsogkJNyAx0X77xxGocwvE2m5HEfSTcrhrwoyI=)
                          12: E230D98211C311F19EC4DEB6DAE4EC9C.roa (hash: gOYSWL2Lg9L2pOgZoVRNIEaVmFGhDhKeXyI02beuiOk=)
                          13: 37683106C51711F0831FC779DAE4EC9C.roa (hash: X7+3tEI76PBXlAAcgP4WQPX2ONBme8iwLb9ftSScgDo=)
                          14: C36E5120609611F0AB6F15F2DAE4EC9C.roa (hash: Fk+IfFMpvi36aQyLQYlmv26xnAUJjv0obfvmLZs4rLU=)
                          15: FC053F5CAF7A11F09C68E3B1DAE4EC9C.roa (hash: ovkEHwqKLlju8yGU3yNPqm9jMYWfqRxIBEHgStiUby0=)
                          16: CEA072D8776A11EEA49F007D4AD9E6FC.roa (hash: oG1ErKkSbYpP5X6eq2VOONQIy8u5lFGEO9d6IZTGw04=)
                          17: 1DA0B1A4502C11F08AB1C8C2DAE4EC9C.roa (hash: O39HvXcGM8vCDm9DfWvAXNTa9fV5PX5xkVsjsSq21p8=)
                          18: 3AE05628237811F1966164A0DAE4EC9C.roa (hash: 24Q/iN3IITD01IOkQTNwboLkZsMjqiYfwPg+zgtpD/4=)
                          19: 1BF4F8CC187E11F1BA032D93DAE4EC9C.roa (hash: zXtWle/yOTpKwLGIe5XmsNFjkXiS/vvqgdWG5YsQ/bE=)
                          20: 8EC0956E70A411F094929688DAE4EC9C.roa (hash: Dmc5XqbplUaGfABGKpPzYUPx32YybXd085DRK5wjFm4=)
                          21: D3F7ECBE237711F1B5789F9EDAE4EC9C.roa (hash: m3i0l0lNUH6ltsGq6+F120+QsjNXJkq9PihsuoVPVvI=)
                          22: 087B5DDA187F11F1B908269BDAE4EC9C.roa (hash: +iSgYQye2OWt8JVvNd+soAvL1h8eN44KQQOxfGUmU6o=)
                          23: E8B4523C187D11F1A5DD0B93DAE4EC9C.roa (hash: N/GBo7sJ9sVz40T3E38ntjv4vl5jXnFQj2Tw1+btscU=)
                          24: 06EA9146625111F082ED08AFDAE4EC9C.roa (hash: DlQwSvTDJt//sym2C2UVKdfDULxPx2s6Ok+gJg27kxk=)
                          25: 991B77F8CE8811F08B0D7DCBDAE4EC9C.roa (hash: 4NDnlsPwnLQ0bvJwiU4jMN98KtaytJXKCjFbhCuymzw=)
                          26: C1E8AFA611C311F1B6BEC5B4DAE4EC9C.roa (hash: JEqp2N2TXrJ+Ky/pTVMu50jhhMR0hRKsd7V4NfPv25Y=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 27 Mar 2026 02:21:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2331 (0x91b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367DFA4AF, serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
        Validity
            Not Before: Mar 25 02:21:04 2026 GMT
            Not After : Mar 27 02:21:04 2026 GMT
        Subject: CN=69c34691-d085
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:bd:42:51:dd:4b:96:ba:47:0b:2d:ba:a1:97:
                    b0:d1:e8:27:bb:2b:bd:0b:69:2e:72:e8:5b:d8:1f:
                    7b:e0:3f:84:d6:ab:c8:63:26:e2:e0:a5:60:4e:5b:
                    16:80:5c:29:bf:36:e7:d0:d2:40:10:0a:dd:1b:b9:
                    12:ea:48:01:29:fb:0f:95:76:29:84:3e:dd:41:b1:
                    25:a7:3f:a4:25:12:7b:69:5d:f6:d7:fa:30:a1:4f:
                    95:45:ad:ac:0f:6e:c0:8b:44:e9:f2:46:70:b4:93:
                    f8:61:2d:29:f7:4a:47:b1:27:53:4e:90:de:bf:dd:
                    bf:b8:48:5d:16:73:38:40:86:ef:d7:bd:16:97:bb:
                    cf:93:df:0b:c7:f6:05:98:40:c9:9c:d0:b1:af:a8:
                    18:c6:25:90:e6:ea:0e:c0:03:8a:a7:4d:e9:70:7f:
                    ae:bc:c9:5b:fd:52:c9:5f:ca:2f:88:36:6f:e7:9f:
                    83:34:bd:f0:79:12:bc:b4:77:ad:56:fd:7b:41:f2:
                    61:85:ed:f0:8a:c8:8f:ef:a2:e5:ed:b2:80:61:35:
                    f7:72:cd:0d:3c:39:fb:bb:f7:bf:22:02:23:d4:44:
                    87:6a:aa:49:15:85:dc:b9:ae:fe:9e:ab:4d:48:8f:
                    bf:ac:ab:b1:66:a5:3a:ab:42:2e:f9:37:5c:80:ef:
                    6f:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:75:45:8A:02:CC:D6:58:A1:16:A5:3A:BC:1F:3D:FC:83:36:26:0C
            X509v3 Authority Key Identifier:
                keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:03:8d:d0:a3:a4:45:0e:87:4c:ec:ac:d0:59:68:af:36:18:
         f2:29:85:16:a6:0d:63:ae:15:d5:10:73:c6:56:cc:5c:db:47:
         d0:cc:27:20:62:96:5f:2c:af:0a:c0:43:0d:52:f4:79:13:b6:
         c8:4a:4f:18:d7:6b:3b:ba:ea:f9:05:8e:99:57:f3:15:4f:4c:
         e7:80:47:b3:4d:5b:03:ab:cd:9f:dd:f1:21:3c:e1:70:43:1c:
         12:a7:62:e8:95:83:2c:76:68:a8:df:be:f4:86:a8:09:8a:b2:
         02:c3:72:d1:08:4e:a3:74:db:49:5c:8d:a2:d1:58:4b:a9:ae:
         ca:e9:c1:35:8c:9e:d6:09:f6:44:02:b5:0b:3c:fe:5e:28:31:
         0f:94:da:99:1f:c2:2f:65:c8:56:68:b7:00:d0:bc:b6:37:0b:
         88:39:e9:10:3e:d5:50:a7:a6:4c:95:73:2e:07:3d:a5:a6:49:
         2c:fd:cf:b3:04:18:0b:40:e0:0b:9a:97:e7:86:56:c3:83:95:
         e2:da:df:4a:b5:86:b8:f5:cd:0f:1e:98:78:38:bf:e5:12:70:
         57:7e:5b:c8:47:d9:f3:82:16:67:2e:6c:7e:5b:96:41:2f:46:
         a7:6a:76:71:13:e4:ca:36:47:10:fe:a2:19:aa:9c:1d:d7:05:
         59:1b:42:f2
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCRswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
N0RGQTRBRjExMC8GA1UEBRMoOTdDOTBFMjUyMTJEODg3Q0Y5RTFERTZGRERGNTUx
QkE4MTJGQTEzOTAeFw0yNjAzMjUwMjIxMDRaFw0yNjAzMjcwMjIxMDRaMBgxFjAU
BgNVBAMTDTY5YzM0NjkxLWQwODUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDUvUJR3UuWukcLLbqhl7DR6Ce7K70LaS5y6FvYH3vgP4TWq8hjJuLgpWBO
WxaAXCm/NufQ0kAQCt0buRLqSAEp+w+VdimEPt1BsSWnP6QlEntpXfbX+jChT5VF
rawPbsCLROnyRnC0k/hhLSn3SkexJ1NOkN6/3b+4SF0WczhAhu/XvRaXu8+T3wvH
9gWYQMmc0LGvqBjGJZDm6g7AA4qnTelwf668yVv9Uslfyi+INm/nn4M0vfB5Ery0
d61W/XtB8mGF7fCKyI/vouXtsoBhNfdyzQ08Ofu7978iAiPURIdqqkkVhdy5rv6e
q01Ij7+sq7FmpTqrQi75N1yA72+tAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUx3VF
igLM1lihFqU6vB89/IM2JgwwHwYDVR0jBBgwFoAUl8kOJSEtiHz54d5v3fVRuoEv
oTkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjdERkE0LzA4QjhEODIwOTNBQzExRUJCMUQyQTgzMkY4QUVBMjI4L2w4a09K
U0V0aUh6NTRkNXYzZlZSdW9Fdm9Uay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2w4a09KU0V0aUh6NTRkNXYzZlZSdW9Fdm9Uay5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2N0RGQTQvMDhCOEQ4MjA5M0FDMTFFQkIxRDJBODMyRjhB
RUEyMjgvbDhrT0pTRXRpSHo1NGQ1djNmVlJ1b0V2b1RrLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA5A43Qo6RFDodM7KzQWWivNhjyKYUW
pg1jrhXVEHPGVsxc20fQzCcgYpZfLK8KwEMNUvR5E7bISk8Y12s7uur5BY6ZV/MV
T0zngEezTVsDq82f3fEhPOFwQxwSp2LolYMsdmio3770hqgJirICw3LRCE6jdNtJ
XI2i0VhLqa7K6cE1jJ7WCfZEArULPP5eKDEPlNqZH8IvZchWaLcA0Ly2NwuIOekQ
PtVQp6ZMlXMuBz2lpkks/c+zBBgLQOALmpfnhlbDg5Xi2t9KtYa49c0PHph4OL/l
EnBXflvIR9nzghZnLmx+W5ZBL0ananZxE+TKNkcQ/qIZqpwd1wVZG0Ly
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:48:49 2026 by rpki-client