Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682615/77460900249E11EDA48F0988F1222468/XQ1jb1FZTmNn-cqy0UOP06HF3e8.mft
File:                     XQ1jb1FZTmNn-cqy0UOP06HF3e8.mft (raw, json)
Hash identifier:          2r/ngfob+wDm8gP8rb/i0lC1czbMBbloXx2w2Gd74M8=
Subject key identifier:   CC:A5:39:B4:D6:69:50:51:97:ED:0F:62:89:30:D5:E1:E3:80:52:6D
Authority key identifier: 5D:0D:63:6F:51:59:4E:63:67:F9:CA:B2:D1:43:8F:D3:A1:C5:DD:EF
Certificate issuer:       /CN=F3682615AF/serialNumber=5D0D636F51594E6367F9CAB2D1438FD3A1C5DDEF
Certificate serial:       054A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/XQ1jb1FZTmNn-cqy0UOP06HF3e8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682615/77460900249E11EDA48F0988F1222468/XQ1jb1FZTmNn-cqy0UOP06HF3e8.mft
Manifest number:          0547
Signing time:             Thu 26 Mar 2026 03:24:18 +0000
Manifest this update:     Thu 26 Mar 2026 03:24:17 +0000
Manifest next update:     Sat 28 Mar 2026 03:24:17 +0000
Files and hashes:         1: XQ1jb1FZTmNn-cqy0UOP06HF3e8.crl (hash: BEtUD7qVt8ow51RfN0+M/QQa07APf0FwjbO8Mjdbuyc=)
                          2: BF7C71D2253511F1A2DF32BADAE4EC9C.roa (hash: xDxj7jLAbLHTvk85XMXUrzpTx4HuVnCWuPgoavUsJzg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3682615/77460900249E11EDA48F0988F1222468/XQ1jb1FZTmNn-cqy0UOP06HF3e8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3682615/77460900249E11EDA48F0988F1222468/XQ1jb1FZTmNn-cqy0UOP06HF3e8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/XQ1jb1FZTmNn-cqy0UOP06HF3e8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1354 (0x54a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682615AF, serialNumber=5D0D636F51594E6367F9CAB2D1438FD3A1C5DDEF
        Validity
            Not Before: Mar 26 03:24:17 2026 GMT
            Not After : Mar 28 03:24:17 2026 GMT
        Subject: CN=69c4a6e2-8dfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:72:12:28:97:bb:a7:ea:f9:49:41:bb:20:88:
                    79:4c:42:92:7f:16:d3:7b:33:88:ed:b7:7e:9d:ec:
                    1b:eb:10:fa:d7:b0:b0:d7:4d:20:33:30:bf:4a:05:
                    d5:35:cf:2a:32:bc:de:19:f9:cb:40:58:18:be:b0:
                    39:05:df:31:fe:87:87:77:ab:88:cc:23:66:7d:e9:
                    e0:9b:f7:99:83:88:90:15:6b:26:de:49:6d:72:06:
                    0c:bd:5e:33:b0:cc:b4:d1:f0:5d:49:51:b2:48:21:
                    84:f1:4a:ef:dc:62:5b:a7:73:f3:36:ae:d9:c5:6b:
                    e8:a3:d2:b0:a0:3a:65:9b:c1:92:ae:92:74:11:79:
                    e2:0f:1e:b2:6b:35:13:b3:c5:ce:94:16:51:c4:db:
                    a9:66:13:81:64:c6:f0:5d:fc:80:66:e4:9b:42:b0:
                    db:ee:c5:1d:af:1c:a3:5a:63:ca:91:45:a5:83:97:
                    cc:05:dc:ca:ab:61:a6:df:68:a3:95:88:c8:ce:1b:
                    f8:48:91:92:e3:6d:28:92:cf:3a:08:cb:52:79:72:
                    4a:85:2d:43:40:13:66:fa:fd:c6:09:9a:aa:13:88:
                    ef:1a:4b:75:6c:06:43:14:5e:c0:21:d9:da:d6:c0:
                    1e:c0:55:93:80:bd:c7:83:5f:04:ad:ee:9d:22:0f:
                    56:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:A5:39:B4:D6:69:50:51:97:ED:0F:62:89:30:D5:E1:E3:80:52:6D
            X509v3 Authority Key Identifier:
                keyid:5D:0D:63:6F:51:59:4E:63:67:F9:CA:B2:D1:43:8F:D3:A1:C5:DD:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682615/77460900249E11EDA48F0988F1222468/XQ1jb1FZTmNn-cqy0UOP06HF3e8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XQ1jb1FZTmNn-cqy0UOP06HF3e8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682615/77460900249E11EDA48F0988F1222468/XQ1jb1FZTmNn-cqy0UOP06HF3e8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:d8:29:1a:dc:57:f5:c3:8c:85:dd:23:84:0b:5a:0e:49:9a:
         92:2c:34:d7:37:4d:fb:0d:c1:69:1e:4f:f2:c5:9f:a4:ab:7d:
         f5:46:23:cd:b1:06:4e:da:8d:e0:08:91:b6:b0:a8:71:bb:a4:
         81:04:96:4b:5e:35:df:08:0d:61:04:27:02:83:8e:69:e1:6a:
         d6:11:4a:39:ac:a5:78:80:f6:40:46:49:d4:b2:72:e5:01:22:
         e1:f8:0a:bd:db:aa:d9:99:b8:d0:0b:a5:96:1e:a4:06:5d:21:
         47:f4:b5:14:df:6c:43:91:d9:89:a6:6d:e8:2a:11:bc:78:5f:
         f6:54:6e:51:af:da:bc:e5:58:9d:99:13:32:0a:5b:7d:3e:82:
         ea:d1:b8:97:f4:5a:3a:b1:b4:c4:2d:5d:26:24:7b:9c:34:72:
         d6:f4:45:d6:bf:23:b7:c5:1b:f4:69:cb:7b:3a:5d:0d:dc:30:
         67:25:6c:d5:27:3b:45:a4:71:bc:70:e4:6a:0a:3e:dd:ab:cd:
         bc:a0:cb:2e:b9:6d:0e:af:55:10:83:64:b9:91:45:de:90:44:
         61:47:42:7b:ab:38:e0:a1:21:9b:06:32:2c:65:57:e9:b1:89:
         cb:95:be:aa:cc:74:d2:cf:16:20:d9:3a:ce:db:b9:fd:91:d2:
         fa:33:3f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:28:48 2026 by rpki-client