Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3684027/43DC0FDC207711ECB23FE226D8A014CE/qPP_zPK9bxc-V43OhiXgHFOX9zU.mft
File:                     qPP_zPK9bxc-V43OhiXgHFOX9zU.mft (raw, json)
Hash identifier:          U+wjnm7/4rGpCnvtOpvapmDl6uDhMnz8EoVCwI7SHWY=
Subject key identifier:   AB:4C:65:D7:93:F8:5C:D9:92:40:B3:78:A9:93:C8:C0:4C:22:E9:6D
Authority key identifier: A8:F3:FF:CC:F2:BD:6F:17:3E:57:8D:CE:86:25:E0:1C:53:97:F7:35
Certificate issuer:       /CN=F3684027AF/serialNumber=A8F3FFCCF2BD6F173E578DCE8625E01C5397F735
Certificate serial:       0697
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/qPP_zPK9bxc-V43OhiXgHFOX9zU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3684027/43DC0FDC207711ECB23FE226D8A014CE/qPP_zPK9bxc-V43OhiXgHFOX9zU.mft
Manifest number:          0695
Signing time:             Thu 26 Mar 2026 02:48:28 +0000
Manifest this update:     Thu 26 Mar 2026 02:48:27 +0000
Manifest next update:     Sat 28 Mar 2026 02:48:27 +0000
Files and hashes:         1: qPP_zPK9bxc-V43OhiXgHFOX9zU.crl (hash: cYxpge0xT5rwH6vGGioIOQLFIxaJcTlAnZaVsQuxeqc=)
                          2: 7053DDBA207711ECA57B2A27D8A014CE.roa (hash: 8FwYiwQNn3Nk7JGlhTjNINHWw5iUKIWhAuMhk3sKQys=)
                          3: 5EE2F40CED9F11ED90CD53134AD9E6FC.roa (hash: 7NdUaz4rD9qpZUgGvl0CsoD0saUCFYGySX0YWVKqUtI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3684027/43DC0FDC207711ECB23FE226D8A014CE/qPP_zPK9bxc-V43OhiXgHFOX9zU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3684027/43DC0FDC207711ECB23FE226D8A014CE/qPP_zPK9bxc-V43OhiXgHFOX9zU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/qPP_zPK9bxc-V43OhiXgHFOX9zU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1687 (0x697)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3684027AF, serialNumber=A8F3FFCCF2BD6F173E578DCE8625E01C5397F735
        Validity
            Not Before: Mar 26 02:48:27 2026 GMT
            Not After : Mar 28 02:48:27 2026 GMT
        Subject: CN=69c49e7c-7ea6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:26:1a:96:13:72:2d:b9:3c:07:21:fb:15:39:
                    d9:c1:31:37:78:51:5d:a9:a6:b4:98:30:78:d1:dd:
                    79:fb:4b:85:a0:6a:22:40:f2:10:48:a9:44:42:88:
                    ad:4e:d2:67:2a:f0:05:b3:8a:a7:d7:7f:e3:aa:82:
                    f0:de:96:82:a8:1f:7a:74:1a:51:e4:09:32:94:f1:
                    d9:c5:6f:6c:fa:50:83:c9:42:48:ba:c3:cf:63:c2:
                    bd:32:2e:6e:fa:2c:a7:31:7f:6d:90:c9:91:02:e7:
                    43:ca:ef:ca:04:97:7f:71:7a:c0:97:e2:2a:1f:1b:
                    6d:87:a7:fd:4b:6e:c5:f1:1f:a4:82:21:e1:70:7d:
                    be:89:6b:4e:86:4e:53:3f:c1:ab:1f:24:6d:3d:d6:
                    62:f2:9d:52:d4:c9:26:72:62:84:66:f5:b0:fb:7b:
                    d3:c6:4e:36:c6:73:f2:5b:9f:3c:45:e5:c1:97:2b:
                    6d:9c:a6:58:ba:8d:08:d5:ee:3c:a4:68:24:f3:d0:
                    6b:51:68:d9:29:d4:9c:a6:6d:18:23:af:8f:96:d8:
                    76:3d:72:fb:20:53:9f:fe:24:fd:f9:1d:0e:6d:00:
                    73:63:70:12:62:f2:cf:f2:08:ee:59:7e:e1:52:22:
                    ce:69:09:66:6d:f8:5a:77:04:4d:fd:f2:ea:34:e3:
                    45:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:4C:65:D7:93:F8:5C:D9:92:40:B3:78:A9:93:C8:C0:4C:22:E9:6D
            X509v3 Authority Key Identifier:
                keyid:A8:F3:FF:CC:F2:BD:6F:17:3E:57:8D:CE:86:25:E0:1C:53:97:F7:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3684027/43DC0FDC207711ECB23FE226D8A014CE/qPP_zPK9bxc-V43OhiXgHFOX9zU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/qPP_zPK9bxc-V43OhiXgHFOX9zU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3684027/43DC0FDC207711ECB23FE226D8A014CE/qPP_zPK9bxc-V43OhiXgHFOX9zU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:c2:23:0d:ab:47:c6:78:c4:ed:14:29:dd:a5:44:dc:1d:ac:
         8a:43:d3:92:61:91:33:4d:d1:1e:a6:f6:08:bc:90:08:c5:1f:
         4b:c6:38:5b:21:23:18:09:22:e0:92:43:80:e7:13:68:15:76:
         0f:95:40:f8:cc:b0:55:f6:1b:03:fc:3c:07:ab:c3:7b:d1:f3:
         bb:d7:9d:11:c5:d4:1d:d5:69:95:92:a3:59:98:02:e3:13:b1:
         60:89:3d:af:9d:6d:5e:47:03:f6:99:b9:bd:42:0b:75:d3:9f:
         fe:ad:6a:ed:00:18:54:cb:19:c2:79:cd:50:22:79:a1:5a:e3:
         71:60:0d:fe:b3:6e:d6:87:6d:90:9e:e4:4c:64:a6:80:2c:eb:
         e6:f4:41:ad:27:22:38:6b:eb:91:ae:7e:73:fd:e4:e2:65:eb:
         3d:dd:5f:cb:9e:01:13:da:c7:c7:01:d1:87:2f:9f:1b:a6:1d:
         b7:c7:8d:a2:7e:45:3f:f2:ff:3a:e1:fe:e6:8c:07:ca:46:ab:
         fb:84:e0:44:c4:6d:7f:1b:b6:31:99:ac:a3:8f:a7:e0:ff:8b:
         7b:ae:dc:0b:af:a5:19:ee:f5:44:37:29:ad:c2:1f:d6:07:20:
         a4:d2:d7:b2:81:6f:65:ad:72:de:8e:ee:2b:d1:b4:fc:06:a4:
         3a:56:35:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:17:22 2026 by rpki-client