Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367E157/E62CA68A0B3611F19D79027CDAE4EC9C/fsFNfEl2kNywyTPfM9amixuZKo8.mft
File:                     fsFNfEl2kNywyTPfM9amixuZKo8.mft (raw, json)
Hash identifier:          yKqXtOwZ+e8zWzZcb8yl7FApP06c4EshiyDj6VVuGIg=
Subject key identifier:   BE:05:99:CC:3E:2D:38:A0:B4:90:D6:9C:D2:1D:9D:A7:AA:25:1A:B1
Authority key identifier: 7E:C1:4D:7C:49:76:90:DC:B0:C9:33:DF:33:D6:A6:8B:1B:99:2A:8F
Certificate issuer:       /CN=F367E157AF/serialNumber=7EC14D7C497690DCB0C933DF33D6A68B1B992A8F
Certificate serial:       2A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/fsFNfEl2kNywyTPfM9amixuZKo8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367E157/E62CA68A0B3611F19D79027CDAE4EC9C/fsFNfEl2kNywyTPfM9amixuZKo8.mft
Manifest number:          29
Signing time:             Thu 26 Mar 2026 06:35:51 +0000
Manifest this update:     Thu 26 Mar 2026 06:35:50 +0000
Manifest next update:     Sat 28 Mar 2026 06:35:50 +0000
Files and hashes:         1: fsFNfEl2kNywyTPfM9amixuZKo8.crl (hash: GS9Q3aB/rU3voD/Tm7whwRlj+Dmn2Hh7+Nzm3ktlrH4=)
                          2: E2AB27880B3711F191969680DAE4EC9C.roa (hash: TV2HllXtBfZyxNjiNtlEzte8OfMxx+gLKAKoslmR1is=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367E157/E62CA68A0B3611F19D79027CDAE4EC9C/fsFNfEl2kNywyTPfM9amixuZKo8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367E157/E62CA68A0B3611F19D79027CDAE4EC9C/fsFNfEl2kNywyTPfM9amixuZKo8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/fsFNfEl2kNywyTPfM9amixuZKo8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 42 (0x2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367E157AF, serialNumber=7EC14D7C497690DCB0C933DF33D6A68B1B992A8F
        Validity
            Not Before: Mar 26 06:35:50 2026 GMT
            Not After : Mar 28 06:35:50 2026 GMT
        Subject: CN=69c4d3c7-7283
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c5:e5:41:ef:f8:7e:03:90:84:95:86:5e:5f:
                    bf:f9:ec:f3:a7:85:06:eb:8d:db:ec:fb:3f:4c:0c:
                    e5:d9:fc:b2:fe:a6:e1:b7:f4:05:08:a8:76:3f:6e:
                    cf:1e:0c:17:70:11:0c:1f:09:34:5b:bb:b2:b0:fb:
                    98:bb:56:0b:29:9b:87:47:0b:23:d7:a3:2f:56:69:
                    89:05:aa:97:18:e6:d1:3e:cd:3a:d0:31:69:79:ce:
                    fe:3a:ff:30:89:68:7b:48:b9:e8:6f:82:34:59:ad:
                    57:c8:27:ad:4f:f9:62:e7:50:5f:30:b4:71:96:8b:
                    a0:39:6f:fb:bc:ff:e9:fb:9d:75:21:22:bb:e6:76:
                    d9:e5:50:59:3f:42:bd:e0:6a:a1:34:32:5f:86:05:
                    6f:a8:07:35:63:2d:5e:ec:c9:fa:9d:25:60:8b:f8:
                    13:0f:35:06:bc:68:71:fc:e0:4a:c1:73:01:02:4b:
                    f8:e3:b3:9c:ca:1e:de:91:e2:c3:b9:7d:67:13:2c:
                    41:c6:3a:d3:bc:e4:a4:59:6a:0a:a8:f9:2c:f5:4c:
                    16:31:87:07:d3:90:7d:4a:48:f2:dd:e8:1a:c6:3e:
                    67:44:c8:15:f0:1a:d4:41:46:4c:f4:b4:ae:00:f0:
                    da:dc:96:18:ab:eb:75:f2:d5:72:1e:83:da:d0:e5:
                    fa:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:05:99:CC:3E:2D:38:A0:B4:90:D6:9C:D2:1D:9D:A7:AA:25:1A:B1
            X509v3 Authority Key Identifier:
                keyid:7E:C1:4D:7C:49:76:90:DC:B0:C9:33:DF:33:D6:A6:8B:1B:99:2A:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367E157/E62CA68A0B3611F19D79027CDAE4EC9C/fsFNfEl2kNywyTPfM9amixuZKo8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/fsFNfEl2kNywyTPfM9amixuZKo8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367E157/E62CA68A0B3611F19D79027CDAE4EC9C/fsFNfEl2kNywyTPfM9amixuZKo8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:ae:68:47:50:36:bd:2c:4a:84:ad:32:ba:eb:fa:93:09:92:
         5b:71:75:e5:1a:91:e5:9a:d7:33:31:b4:68:93:38:99:f5:48:
         dd:f7:6d:2b:25:7b:fe:5c:ba:f7:3c:29:9c:e2:77:93:e8:22:
         4f:b9:f2:23:8c:1c:87:83:92:d6:f5:e6:8f:18:c6:b8:a7:06:
         a5:d1:6d:19:ee:a2:16:c8:0a:a4:91:b8:51:26:e7:9f:e1:b6:
         df:a2:0e:38:c9:bc:7f:63:e7:51:d1:26:c1:57:96:47:9c:7f:
         8a:ee:b4:1d:86:fd:3c:cd:cb:fd:86:71:23:23:80:ac:98:ee:
         45:24:89:85:ee:7d:f3:63:6e:67:57:0f:8c:8a:d2:3c:b0:dd:
         b4:0f:ff:9b:78:5e:21:db:a5:1e:5b:d5:65:00:be:b3:58:31:
         29:3d:32:84:aa:50:74:b4:6b:31:85:b2:3b:a6:3e:fa:3b:4e:
         ba:33:d8:85:11:d0:8c:b1:b0:1d:91:f7:b2:7c:fd:a0:f7:8e:
         90:a9:63:4e:36:78:13:43:76:c7:b4:0d:9d:cf:79:53:f5:cd:
         fe:42:60:b5:94:e5:e4:7a:52:af:56:29:c1:9d:a9:9e:81:8e:
         45:0c:17:97:4f:1b:5e:6f:d3:d1:f3:a5:e2:f5:ab:37:dc:3c:
         5a:5c:c4:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:13:29 2026 by rpki-client