Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/SoPzGxsGBMptC3KkU9qj61h7TII.mft
File:                     SoPzGxsGBMptC3KkU9qj61h7TII.mft (raw, json)
Hash identifier:          v9Sh2XvyP0qZxei7aj3GbHuH7sG3aXheihGNiFDY8Ww=
Subject key identifier:   BE:78:38:5D:C1:AB:9E:C3:AA:B7:CE:5E:4E:27:FD:27:2A:12:72:9F
Authority key identifier: 4A:83:F3:1B:1B:06:04:CA:6D:0B:72:A4:53:DA:A3:EB:58:7B:4C:82
Certificate issuer:       /CN=F3681ED0AF/serialNumber=4A83F31B1B0604CA6D0B72A453DAA3EB587B4C82
Certificate serial:       0492
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SoPzGxsGBMptC3KkU9qj61h7TII.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/SoPzGxsGBMptC3KkU9qj61h7TII.mft
Manifest number:          047D
Signing time:             Thu 26 Mar 2026 03:57:07 +0000
Manifest this update:     Thu 26 Mar 2026 03:57:06 +0000
Manifest next update:     Sat 28 Mar 2026 03:57:06 +0000
Files and hashes:         1: SoPzGxsGBMptC3KkU9qj61h7TII.crl (hash: eMtojCE0re8vZ3bQCHZ0BBOkpkiQymO6SkDxQgr9zoE=)
                          2: C644833AEE7111EE86F7F361775412E6.roa (hash: YgdlYAvq9L3YlpIV33voCNPfR5sCeCWFkjxpZfRsE/k=)
                          3: 7B89F0F65C1011F097764BA7DAE4EC9C.roa (hash: eGy/v5dJ9Sg7LBFixJArYusJNOZkmFriL3Cy5EJmVsc=)
                          4: 3090B8681EC611F1BB0A92BDDAE4EC9C.roa (hash: HnTfIVu9muq+g847NRBmW0pVK2J4iJgCN/MFxOihXGI=)
                          5: 42CC1EC00B7611EEA5D28A444AD9E6FC.roa (hash: hsH3WbP2I/ts2EY2aQeTrcaXJgp89zEB64yilwHc5pg=)
                          6: F8481206047B11EE91F2EF354AD9E6FC.roa (hash: jtUAjy0+9QV2iQ02jzkoPCkRiaIb/F60j3I68U9pgH4=)
                          7: F65930865B2911F0A6F411CCDAE4EC9C.roa (hash: zlBIS1j6PkXW4nIJqeYYZE1QxvGn2R6vJr3qJUI1Apc=)
                          8: 557D1FE81EC311F1A8C107ABDAE4EC9C.roa (hash: 6E/4b3jG5+WBAhKMmUMbiYpLspky+skYf9xDIZrtcIA=)
                          9: 840D0A8C1EC111F1A3925CA1DAE4EC9C.roa (hash: FFwjG289Rtmc3S8JKRbxfJUbpIIY+o+EMq5pX7s2ODo=)
                          10: 1587E6CCEE7111EEAAFBB25C775412E6.roa (hash: zasoVhr4ZDA3BPJ+ug5ooyH3/rY2lwS6n6p8BUEgx2w=)
                          11: 4F0B564AF51511EEB208C151775412E6.roa (hash: XNyDHYdBwPvc7NbnPS7pTjwqkoohEdJw312l57VSDB8=)
                          12: 4A7830A0D18B11EFAB9E6B88762E951A.roa (hash: xV745XWxYsFhNII926E/fN4gSuSPSdyN3viLNfdZy9M=)
                          13: BFD118C27C3E11F0A02173AEDAE4EC9C.roa (hash: E8rOx5Kz5JNVd/9IEaiBcjxCcyJDlnKMUqqptEDdwRw=)
                          14: 1E00E01A052911EE84BBD2454AD9E6FC.roa (hash: sJsPXhS2u3JarGDtOh1UZa0tPJmz8vwB7/YeLKri/dk=)
                          15: C210ED2E064611F094E66494762E951A.roa (hash: Gw9d4UydYI1TKn6YtgmxyrXffZXD7vcLeB5cryG7IG4=)
                          16: F4E7AB82052811EE94115E454AD9E6FC.roa (hash: 0f6Udr5nVgdqIgPgxaXYb0TifWritIk3wQmsNXYsjss=)
                          17: C1012DD81EC611F18633B7BFDAE4EC9C.roa (hash: AEjIQDoJkuCV2zdXj8TYSJzuJbyASHlYynXe4LN5vrk=)
                          18: F2B741AE1EC211F1A3DB35A9DAE4EC9C.roa (hash: wNGAjIUP8OIxnYbE9SkgsQ9UkCWPS1lv4jOwO2xoulg=)
                          19: 31CFB30C052C11EEAC0EDC4E4AD9E6FC.roa (hash: 707c2EgzG32Mlw18CbzTHauUb9G8+7v2J+8ka2UNIbA=)
                          20: 506B37B0FD0A11EEA3B5DB34017001B1.roa (hash: 12EkqcvUqaX3EcpZliJ64g6Wrfs7WAZ3LR6j5D262RI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/SoPzGxsGBMptC3KkU9qj61h7TII.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/SoPzGxsGBMptC3KkU9qj61h7TII.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SoPzGxsGBMptC3KkU9qj61h7TII.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1170 (0x492)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3681ED0AF, serialNumber=4A83F31B1B0604CA6D0B72A453DAA3EB587B4C82
        Validity
            Not Before: Mar 26 03:57:06 2026 GMT
            Not After : Mar 28 03:57:06 2026 GMT
        Subject: CN=69c4ae93-1c8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:13:6e:34:6d:98:25:e8:12:e7:5f:fb:e5:ce:
                    dd:4a:7e:10:7d:7c:5c:79:14:62:71:df:ff:3d:09:
                    5c:12:48:10:5c:08:36:56:bb:b4:8e:67:e3:b1:61:
                    d8:ea:a5:05:ff:0d:d7:bc:59:28:b4:d3:d1:e7:f2:
                    6c:fd:f5:92:f3:65:b1:48:98:9f:f9:0b:ad:ef:65:
                    3e:84:86:fe:11:62:65:6b:9c:de:55:26:a9:01:64:
                    b3:db:a3:d8:55:28:3b:7f:bc:0f:4f:5f:3e:1a:a3:
                    8b:39:2b:f5:8f:0a:c0:b3:27:ca:4d:ab:fc:83:07:
                    46:3b:c8:4d:da:51:99:72:b4:29:a0:26:9f:21:0e:
                    63:e4:24:dd:31:30:ad:11:d0:7c:63:76:c6:29:78:
                    9a:e4:34:e6:91:ec:03:f8:9b:4f:b1:be:a1:06:69:
                    d2:75:06:1a:88:e1:9b:12:d5:d5:c2:aa:67:81:47:
                    84:2f:08:c8:d8:60:11:1f:81:0f:68:c5:b9:a0:4c:
                    55:f8:59:34:2b:8f:7e:e9:bd:3d:0a:70:42:f2:7b:
                    c9:e7:5f:b3:32:a5:99:c3:bb:68:97:1f:2d:12:cf:
                    64:21:e6:0a:35:d2:4a:98:ad:c4:0b:a0:fa:3a:fd:
                    43:08:69:25:95:39:74:de:13:3a:23:ec:52:1f:de:
                    dc:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:78:38:5D:C1:AB:9E:C3:AA:B7:CE:5E:4E:27:FD:27:2A:12:72:9F
            X509v3 Authority Key Identifier:
                keyid:4A:83:F3:1B:1B:06:04:CA:6D:0B:72:A4:53:DA:A3:EB:58:7B:4C:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/SoPzGxsGBMptC3KkU9qj61h7TII.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SoPzGxsGBMptC3KkU9qj61h7TII.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/SoPzGxsGBMptC3KkU9qj61h7TII.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:0d:2c:a2:a3:cb:2d:7d:48:9d:b8:10:61:1d:c7:eb:aa:29:
         fc:e6:78:9d:f0:e4:5d:54:d4:f4:5e:6b:aa:39:c2:8f:17:2e:
         fc:13:8a:23:e7:f7:88:5c:0d:3e:9c:7c:d3:66:c5:d6:78:fa:
         1b:5d:0b:e3:11:f4:fb:26:a9:c7:dd:30:6d:04:33:9d:10:fa:
         a1:e8:cf:12:23:5b:91:9f:9f:3d:12:54:69:cc:b2:1e:87:ac:
         58:5b:7f:fe:be:6c:23:dc:1a:e7:95:e2:b4:be:48:42:3c:01:
         b3:a5:8f:3b:97:96:93:db:37:f2:c4:48:d5:87:c2:6c:c2:85:
         c6:a4:92:14:a7:d5:d6:b9:39:d2:66:a0:e7:e4:e8:73:bf:72:
         a7:0c:18:d2:d6:dd:a0:6c:66:50:9c:d1:8b:51:7e:d9:9b:d9:
         71:85:c9:ed:78:02:9d:de:8d:1f:74:7f:5c:f5:47:df:71:47:
         84:43:9c:7c:b4:bb:e8:92:ff:b2:c5:0e:12:68:c3:4d:e8:07:
         e6:6b:94:b2:9c:9d:5b:cf:09:b4:5c:c2:87:e3:c9:58:77:7b:
         ce:ac:4f:08:0a:0f:21:7b:02:53:eb:1d:39:6a:29:7e:4a:cf:
         8d:48:87:f7:f6:ad:9e:11:f6:8a:58:07:e2:c4:74:4d:6c:fa:
         04:f1:85:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:47:08 2026 by rpki-client