Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36848BC/C0FEE47C26D011F09019149EDAE4EC9C/9yRFv_XqgzUfLmYNTYEtjzSB7PM.mft
File:                     9yRFv_XqgzUfLmYNTYEtjzSB7PM.mft (raw, json)
Hash identifier:          GA4pkHTdDEo8p3nBfkkrGwADLGlhWepwO3g9a4FVNhk=
Subject key identifier:   96:22:96:68:F7:30:2C:3E:27:D0:88:1F:E8:09:52:F4:BC:63:33:96
Authority key identifier: F7:24:45:BF:F5:EA:83:35:1F:2E:66:0D:4D:81:2D:8F:34:81:EC:F3
Certificate issuer:       /CN=F36848BCAF/serialNumber=F72445BFF5EA83351F2E660D4D812D8F3481ECF3
Certificate serial:       0152
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/9yRFv_XqgzUfLmYNTYEtjzSB7PM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36848BC/C0FEE47C26D011F09019149EDAE4EC9C/9yRFv_XqgzUfLmYNTYEtjzSB7PM.mft
Manifest number:          0150
Signing time:             Thu 26 Mar 2026 05:50:51 +0000
Manifest this update:     Thu 26 Mar 2026 05:50:50 +0000
Manifest next update:     Sat 28 Mar 2026 05:50:50 +0000
Files and hashes:         1: 9yRFv_XqgzUfLmYNTYEtjzSB7PM.crl (hash: Etl7Zo/2ZTfdhTps30vu3qiRiwDG2AbOeES+9b6w3ms=)
                          2: 09A34FAA26D211F0B6739EA6DAE4EC9C.roa (hash: ODLXD+AAWaNDLl7uFGo30OyjOAfDKyZb34POXL/jqq0=)
                          3: 91C51C4457F911F0AC734B88DAE4EC9C.roa (hash: jLmJyUTO89F5T9pEtytMOZ40rOclSZZKyrwwRKMAe9A=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36848BC/C0FEE47C26D011F09019149EDAE4EC9C/9yRFv_XqgzUfLmYNTYEtjzSB7PM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36848BC/C0FEE47C26D011F09019149EDAE4EC9C/9yRFv_XqgzUfLmYNTYEtjzSB7PM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/9yRFv_XqgzUfLmYNTYEtjzSB7PM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 338 (0x152)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36848BCAF, serialNumber=F72445BFF5EA83351F2E660D4D812D8F3481ECF3
        Validity
            Not Before: Mar 26 05:50:50 2026 GMT
            Not After : Mar 28 05:50:50 2026 GMT
        Subject: CN=69c4c93b-f3af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ff:b4:01:7c:30:3e:7a:93:9f:d2:48:74:1f:
                    20:da:31:0e:a0:3f:d2:17:4b:0e:73:85:2f:ea:52:
                    39:cb:74:0a:c5:25:45:2c:88:27:de:3d:ec:06:9d:
                    f2:69:d0:a9:80:c0:b0:07:29:79:af:07:36:24:c8:
                    24:bd:ba:56:98:f4:b4:45:c9:76:6f:9f:a0:30:33:
                    9e:48:4e:96:f4:c6:34:c4:df:47:7b:bc:ea:86:3b:
                    dd:0b:91:49:c9:bc:52:51:f3:33:4f:7f:d9:52:c4:
                    5c:1a:67:7d:8c:73:36:3b:74:7d:72:aa:a9:d1:53:
                    0c:e4:21:82:66:82:6b:81:3f:22:af:4d:df:48:0c:
                    d4:07:76:91:1b:6f:c4:41:4a:22:38:35:fe:c9:53:
                    a5:7c:9a:0b:7f:eb:30:20:b6:11:13:5d:56:86:34:
                    f6:fd:e0:18:70:a0:46:fd:b1:49:85:39:4e:92:75:
                    53:ce:01:0e:f1:49:d2:1e:d9:8e:fe:79:96:03:5b:
                    0a:8a:60:37:01:68:83:ba:83:9e:83:64:ec:64:a5:
                    aa:8f:3f:0f:b0:83:42:f8:0d:fa:2d:66:cb:f8:90:
                    ff:43:15:74:1d:d2:2a:d6:b1:09:f7:35:c7:7e:6f:
                    8e:47:e1:81:71:eb:4a:7d:48:16:92:06:65:1d:a0:
                    23:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:22:96:68:F7:30:2C:3E:27:D0:88:1F:E8:09:52:F4:BC:63:33:96
            X509v3 Authority Key Identifier:
                keyid:F7:24:45:BF:F5:EA:83:35:1F:2E:66:0D:4D:81:2D:8F:34:81:EC:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36848BC/C0FEE47C26D011F09019149EDAE4EC9C/9yRFv_XqgzUfLmYNTYEtjzSB7PM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9yRFv_XqgzUfLmYNTYEtjzSB7PM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36848BC/C0FEE47C26D011F09019149EDAE4EC9C/9yRFv_XqgzUfLmYNTYEtjzSB7PM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:c6:bb:81:d4:7a:ad:97:cf:ab:7f:65:b7:97:9d:1f:ca:0e:
         91:89:d8:48:a8:80:04:dc:0d:fc:2d:6b:eb:64:ed:e7:15:d7:
         1f:ff:fd:07:34:ee:f9:99:53:21:4a:61:e3:9a:30:ed:c3:e8:
         d4:33:30:72:d7:92:57:db:2b:2f:9a:c9:4e:c1:90:8b:3f:fb:
         31:b9:58:0d:5e:06:5d:16:4f:9c:83:f2:43:a6:9e:95:c8:97:
         d6:1a:55:f3:26:96:54:64:a1:36:f0:42:27:22:00:30:4f:64:
         0d:79:db:bd:fa:6a:33:59:2b:1a:0f:b0:a3:78:79:2d:6b:58:
         0c:e3:f0:e8:77:de:cb:cf:6f:bf:65:2e:50:32:1b:b6:6b:bd:
         af:cd:51:61:e2:d6:b4:e3:48:2c:90:68:63:b3:1c:ee:74:d1:
         ae:05:85:d2:89:db:6c:de:82:52:e5:21:71:4a:4c:5b:da:78:
         0f:e0:5a:d3:d0:9b:fc:49:73:45:de:eb:bf:48:67:2c:a7:07:
         ec:6b:47:c8:a5:91:82:64:96:22:dd:a2:f4:13:39:b9:3f:a4:
         40:1a:30:49:5a:83:ff:40:27:e7:ee:7a:cb:8d:dd:5b:dc:91:
         8c:80:43:b5:b9:be:d6:9b:11:f0:a0:df:2c:5a:84:b0:7a:8c:
         08:b7:a3:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:58:47 2026 by rpki-client