Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367FC4F/442A9E2080BF11E6AB3BA07EF8AEA228/4XMtl9E2FxNisFGPaiFEVFy_Ok8.mft
File:                     4XMtl9E2FxNisFGPaiFEVFy_Ok8.mft (raw, json)
Hash identifier:          O3i/qYoSCRjFkT+x3Er/ZXGVI7mVl3F/Mm48jiqh/w0=
Subject key identifier:   72:A5:C3:01:62:C4:48:F5:76:8D:20:FC:67:AA:9F:7B:93:3F:F4:ED
Authority key identifier: E1:73:2D:97:D1:36:17:13:62:B0:51:8F:6A:21:44:54:5C:BF:3A:4F
Certificate issuer:       /CN=F367FC4FAF/serialNumber=E1732D97D136171362B0518F6A2144545CBF3A4F
Certificate serial:       0DDE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/4XMtl9E2FxNisFGPaiFEVFy_Ok8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367FC4F/442A9E2080BF11E6AB3BA07EF8AEA228/4XMtl9E2FxNisFGPaiFEVFy_Ok8.mft
Manifest number:          0DDD
Signing time:             Thu 26 Mar 2026 01:09:31 +0000
Manifest this update:     Thu 26 Mar 2026 01:09:30 +0000
Manifest next update:     Sat 28 Mar 2026 01:09:30 +0000
Files and hashes:         1: 4XMtl9E2FxNisFGPaiFEVFy_Ok8.crl (hash: hTv/5Pwemt9rMmGJN/lepMF6WEmZO54e7QE1iNP5jWQ=)
                          2: 0DE9F16080D011E6B7882016F8AEA228.roa (hash: lapNENqbec9IiREVadsxyCzDqZnzkWBnbMRTRH0mwYI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367FC4F/442A9E2080BF11E6AB3BA07EF8AEA228/4XMtl9E2FxNisFGPaiFEVFy_Ok8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367FC4F/442A9E2080BF11E6AB3BA07EF8AEA228/4XMtl9E2FxNisFGPaiFEVFy_Ok8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/4XMtl9E2FxNisFGPaiFEVFy_Ok8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3550 (0xdde)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367FC4FAF, serialNumber=E1732D97D136171362B0518F6A2144545CBF3A4F
        Validity
            Not Before: Mar 26 01:09:30 2026 GMT
            Not After : Mar 28 01:09:30 2026 GMT
        Subject: CN=69c4874b-db94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:41:8a:42:f5:ea:ea:07:28:09:94:ba:16:4d:
                    50:9a:4f:bc:52:79:38:d4:a8:c7:8a:dc:e2:51:f4:
                    03:0a:e0:96:4a:3c:df:87:3a:7b:de:5b:c5:51:dc:
                    c7:a0:d6:22:80:4a:0c:05:f8:3e:ce:f3:9b:2a:84:
                    c5:b4:4c:1e:99:01:55:91:a8:31:b0:79:ff:18:de:
                    03:e4:ed:a1:04:2f:5e:7a:cd:6a:66:1e:40:2a:fb:
                    ac:45:45:7b:0c:51:23:5a:1b:66:17:db:bb:2a:61:
                    09:13:24:ae:92:c0:6a:3b:78:f5:86:ac:4f:bd:5c:
                    21:f3:3f:45:fc:5f:ce:f0:bf:35:02:5b:61:15:b9:
                    2a:64:02:64:fd:fc:33:13:17:21:3c:d6:36:04:9f:
                    65:52:96:c6:48:0d:9d:b2:f4:70:b8:60:3a:24:69:
                    47:2a:dc:67:fd:c4:d3:a2:cd:cc:cd:05:5f:55:f3:
                    49:27:d0:b5:cd:7d:49:ed:98:46:12:0f:f2:05:ef:
                    f6:fd:54:13:47:fd:8a:a4:4a:d5:0b:e8:aa:f8:1b:
                    34:39:73:92:41:c2:c6:a1:70:24:0e:3b:8d:2b:2b:
                    70:3f:77:f7:c3:dc:3e:6d:77:85:a0:57:a9:8e:45:
                    0c:22:4b:e5:77:50:e2:eb:8e:c3:50:1c:71:c7:b7:
                    a3:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:A5:C3:01:62:C4:48:F5:76:8D:20:FC:67:AA:9F:7B:93:3F:F4:ED
            X509v3 Authority Key Identifier:
                keyid:E1:73:2D:97:D1:36:17:13:62:B0:51:8F:6A:21:44:54:5C:BF:3A:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367FC4F/442A9E2080BF11E6AB3BA07EF8AEA228/4XMtl9E2FxNisFGPaiFEVFy_Ok8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4XMtl9E2FxNisFGPaiFEVFy_Ok8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367FC4F/442A9E2080BF11E6AB3BA07EF8AEA228/4XMtl9E2FxNisFGPaiFEVFy_Ok8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:0e:f8:d0:d1:26:52:a5:59:7c:dd:aa:1d:37:39:fa:58:61:
         8a:7c:1e:bb:16:52:14:f3:1b:b0:72:43:5b:7a:d6:13:75:89:
         af:16:2f:66:c5:dc:2a:61:93:4d:ed:13:df:1f:de:41:52:0c:
         3a:b0:4e:fa:6b:5f:70:a4:18:68:b4:1b:cb:e6:04:e1:f0:b0:
         92:97:ce:3c:59:73:89:d7:6b:f3:bd:d8:03:a1:db:32:d1:ca:
         bf:bf:13:98:ee:0d:0d:0a:bc:a0:c5:19:ad:87:d3:74:9b:09:
         90:a8:17:fd:93:ae:d0:66:87:6d:1e:48:f7:19:98:31:ca:46:
         91:61:8d:87:57:1f:b6:e3:db:35:38:f7:7c:29:47:63:5f:ee:
         51:d1:79:a9:a6:92:19:01:4c:ab:8b:63:dc:bc:1f:2c:6e:1a:
         8c:37:0f:92:b1:0c:aa:98:aa:fc:43:23:a0:4b:4c:9f:2a:d4:
         81:ad:44:37:8a:f4:5b:4a:c6:b6:2f:c9:87:16:bc:29:e5:53:
         09:9d:96:a4:67:57:da:8a:a9:7f:d4:c1:d2:3b:40:05:41:ab:
         68:0f:20:1c:98:f8:cf:e1:79:a0:2f:f5:61:1b:7c:04:df:40:
         67:7a:e6:b8:13:64:d1:66:d4:77:83:53:b8:02:61:cc:13:43:
         24:75:9f:6b
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICDd4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
N0ZDNEZBRjExMC8GA1UEBRMoRTE3MzJEOTdEMTM2MTcxMzYyQjA1MThGNkEyMTQ0
NTQ1Q0JGM0E0RjAeFw0yNjAzMjYwMTA5MzBaFw0yNjAzMjgwMTA5MzBaMBgxFjAU
BgNVBAMTDTY5YzQ4NzRiLWRiOTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCfQYpC9erqBygJlLoWTVCaT7xSeTjUqMeK3OJR9AMK4JZKPN+HOnveW8VR
3Meg1iKASgwF+D7O85sqhMW0TB6ZAVWRqDGwef8Y3gPk7aEEL156zWpmHkAq+6xF
RXsMUSNaG2YX27sqYQkTJK6SwGo7ePWGrE+9XCHzP0X8X87wvzUCW2EVuSpkAmT9
/DMTFyE81jYEn2VSlsZIDZ2y9HC4YDokaUcq3Gf9xNOizczNBV9V80kn0LXNfUnt
mEYSD/IF7/b9VBNH/YqkStUL6Kr4GzQ5c5JBwsahcCQOO40rK3A/d/fD3D5td4Wg
V6mORQwiS+V3UOLrjsNQHHHHt6O9AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUcqXD
AWLESPV2jSD8Z6qfe5M/9O0wHwYDVR0jBBgwFoAU4XMtl9E2FxNisFGPaiFEVFy/
Ok8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjdGQzRGLzQ0MkE5RTIwODBCRjExRTZBQjNCQTA3RUY4QUVBMjI4LzRYTXRs
OUUyRnhOaXNGR1BhaUZFVkZ5X09rOC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzRYTXRsOUUyRnhOaXNGR1BhaUZFVkZ5X09rOC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2N0ZDNEYvNDQyQTlFMjA4MEJGMTFFNkFCM0JBMDdFRjhB
RUEyMjgvNFhNdGw5RTJGeE5pc0ZHUGFpRkVWRnlfT2s4Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBaDvjQ0SZSpVl83aodNzn6WGGKfB67
FlIU8xuwckNbetYTdYmvFi9mxdwqYZNN7RPfH95BUgw6sE76a19wpBhotBvL5gTh
8LCSl848WXOJ12vzvdgDodsy0cq/vxOY7g0NCrygxRmth9N0mwmQqBf9k67QZodt
Hkj3GZgxykaRYY2HVx+249s1OPd8KUdjX+5R0XmpppIZAUyri2PcvB8sbhqMNw+S
sQyqmKr8QyOgS0yfKtSBrUQ3ivRbSsa2L8mHFrwp5VMJnZakZ1faiql/1MHSO0AF
QatoDyAcmPjP4XmgL/VhG3wE30Bneua4E2TRZtR3g1O4AmHME0MkdZ9r
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:17:35 2026 by rpki-client