Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36858D5/CE72EFB840B311EEB99A38154AD9E6FC/0uDwPq7oAqkBwlcRKP55pj80aSw.mft
File:                     0uDwPq7oAqkBwlcRKP55pj80aSw.mft (raw, json)
Hash identifier:          xOU++kFP913PJxsQX1kBV4Ww1AnqT0zzrMBNuH23IVQ=
Subject key identifier:   74:70:87:7F:CB:40:2A:B1:E0:2E:BA:4C:1B:4E:BF:9D:1E:20:50:67
Authority key identifier: D2:E0:F0:3E:AE:E8:02:A9:01:C2:57:11:28:FE:79:A6:3F:34:69:2C
Certificate issuer:       /CN=F36858D5AF/serialNumber=D2E0F03EAEE802A901C2571128FE79A63F34692C
Certificate serial:       03CE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/0uDwPq7oAqkBwlcRKP55pj80aSw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36858D5/CE72EFB840B311EEB99A38154AD9E6FC/0uDwPq7oAqkBwlcRKP55pj80aSw.mft
Manifest number:          03CD
Signing time:             Thu 26 Mar 2026 04:20:07 +0000
Manifest this update:     Thu 26 Mar 2026 04:20:06 +0000
Manifest next update:     Sat 28 Mar 2026 04:20:06 +0000
Files and hashes:         1: 0uDwPq7oAqkBwlcRKP55pj80aSw.crl (hash: AbYdMKWBDgbnKERnKW8nr0Fuor+3AlH/Z+y7VlNBFNk=)
                          2: 6C083968730911EEB676D5174AD9E6FC.roa (hash: GPazHsxOeA8iw549I//PnsuiDjidxxug1DVogvWrQ6I=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36858D5/CE72EFB840B311EEB99A38154AD9E6FC/0uDwPq7oAqkBwlcRKP55pj80aSw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36858D5/CE72EFB840B311EEB99A38154AD9E6FC/0uDwPq7oAqkBwlcRKP55pj80aSw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/0uDwPq7oAqkBwlcRKP55pj80aSw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 974 (0x3ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36858D5AF, serialNumber=D2E0F03EAEE802A901C2571128FE79A63F34692C
        Validity
            Not Before: Mar 26 04:20:06 2026 GMT
            Not After : Mar 28 04:20:06 2026 GMT
        Subject: CN=69c4b3f7-713b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b0:75:5b:52:e6:ef:78:ff:28:49:8f:5a:14:
                    6b:56:64:0e:73:1f:f9:3f:81:67:62:00:bc:83:64:
                    cd:85:0c:4c:37:21:4f:0c:1a:0a:12:b7:5f:48:17:
                    ae:53:8c:42:57:3c:14:40:14:86:bb:50:56:c0:5c:
                    a6:11:77:3f:70:24:0a:52:9f:25:95:f8:45:a5:71:
                    42:91:4d:bd:3e:56:f7:53:79:bc:38:18:89:de:66:
                    33:42:26:6b:8f:8d:40:d7:d3:fb:b6:ba:aa:9a:39:
                    59:f4:5a:f4:2c:c9:65:c0:aa:4d:e4:4d:f6:b6:7c:
                    1e:cc:6f:bf:81:64:27:2d:7a:11:40:f6:27:60:47:
                    ca:d5:65:4b:5a:26:1f:4f:16:2e:3d:ca:50:ff:0f:
                    60:90:e0:db:78:37:b3:f2:26:1d:5b:37:b3:20:e3:
                    09:fb:f7:ec:92:c6:f2:57:fe:aa:eb:8a:36:2c:fd:
                    6a:bb:ac:d7:93:86:f7:ba:66:f7:14:07:ed:9b:71:
                    3e:7e:a5:b6:1d:69:b8:25:4f:52:bf:af:e7:60:e1:
                    c5:69:13:17:18:e3:fb:bc:d9:db:6f:89:59:e7:6b:
                    29:84:63:5a:66:30:ec:8b:76:d5:37:c1:9f:03:6f:
                    96:e4:2c:fb:2e:06:5e:c1:9e:3d:14:9d:6b:e9:b5:
                    49:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:70:87:7F:CB:40:2A:B1:E0:2E:BA:4C:1B:4E:BF:9D:1E:20:50:67
            X509v3 Authority Key Identifier:
                keyid:D2:E0:F0:3E:AE:E8:02:A9:01:C2:57:11:28:FE:79:A6:3F:34:69:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36858D5/CE72EFB840B311EEB99A38154AD9E6FC/0uDwPq7oAqkBwlcRKP55pj80aSw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0uDwPq7oAqkBwlcRKP55pj80aSw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36858D5/CE72EFB840B311EEB99A38154AD9E6FC/0uDwPq7oAqkBwlcRKP55pj80aSw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:b9:a7:ba:10:4d:15:a8:aa:3a:cf:a3:ce:e9:2b:ee:2a:c7:
         b8:78:e3:fa:47:dc:85:e5:ca:1b:d0:df:6f:c8:1a:aa:30:0f:
         82:30:7e:0e:c1:4c:74:ec:eb:82:e2:c1:b4:e2:50:75:6a:9e:
         88:f1:8e:0a:86:55:fc:7b:4f:26:2d:2e:c6:ee:63:3a:9a:da:
         b0:5f:ba:b6:b1:38:a2:85:86:63:c7:c9:7c:9b:66:48:01:72:
         9c:ac:69:13:15:5b:4b:a7:f2:bd:f4:3f:20:12:9a:9b:52:6d:
         b1:1d:5a:8a:75:61:27:2a:d2:94:78:5d:fb:6b:88:94:0f:38:
         6e:82:ff:4d:7b:50:35:77:81:38:a0:bd:38:46:51:e2:95:95:
         a9:df:e1:6c:49:62:39:30:21:ba:a7:0d:ec:19:90:ae:f8:51:
         97:3e:81:e1:c6:c3:21:a1:b9:37:05:bb:0e:84:18:64:a5:cf:
         57:ea:c7:5f:cc:78:dd:4d:20:dd:7e:7f:07:24:1f:f1:77:2d:
         80:03:fa:0a:fe:f3:f6:38:e5:07:07:31:55:19:05:c2:01:6b:
         43:1b:43:68:3d:cb:03:04:a9:ef:74:87:de:06:73:b3:cb:65:
         29:81:37:4c:af:c5:17:f3:a6:89:91:b8:57:54:04:0a:13:f0:
         9d:3b:56:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:34:34 2026 by rpki-client