Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3688321/894DD8A00DFC11EF94AA185B017001B1/Ob52uHZXsJfc7qO0DURSok5WA4I.mft
File:                     Ob52uHZXsJfc7qO0DURSok5WA4I.mft (raw, json)
Hash identifier:          ot/mR+TMNnUFu/oSGMrsb4T2RLw/YxbFXiX8z8nRFo4=
Subject key identifier:   80:27:34:41:A5:EB:55:29:CB:86:C2:F4:5B:0C:74:47:A3:95:6B:D6
Authority key identifier: 39:BE:76:B8:76:57:B0:97:DC:EE:A3:B4:0D:44:52:A2:4E:56:03:82
Certificate issuer:       /CN=F3688321AF/serialNumber=39BE76B87657B097DCEEA3B40D4452A24E560382
Certificate serial:       02C0
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Ob52uHZXsJfc7qO0DURSok5WA4I.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3688321/894DD8A00DFC11EF94AA185B017001B1/Ob52uHZXsJfc7qO0DURSok5WA4I.mft
Manifest number:          02BF
Signing time:             Thu 26 Mar 2026 04:59:23 +0000
Manifest this update:     Thu 26 Mar 2026 04:59:22 +0000
Manifest next update:     Sat 28 Mar 2026 04:59:22 +0000
Files and hashes:         1: Ob52uHZXsJfc7qO0DURSok5WA4I.crl (hash: hzstK3jqLJrQaUNCrxUWXqbwxLS5GsfvDvV77sBA42c=)
                          2: BCE5E01A0DFF11EFA7C0A7F8007001B1.roa (hash: m39T3fuh7q5xXJaI34cgegPgwSRYyjf0xq3cmG1FBwE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3688321/894DD8A00DFC11EF94AA185B017001B1/Ob52uHZXsJfc7qO0DURSok5WA4I.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3688321/894DD8A00DFC11EF94AA185B017001B1/Ob52uHZXsJfc7qO0DURSok5WA4I.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Ob52uHZXsJfc7qO0DURSok5WA4I.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 704 (0x2c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3688321AF, serialNumber=39BE76B87657B097DCEEA3B40D4452A24E560382
        Validity
            Not Before: Mar 26 04:59:22 2026 GMT
            Not After : Mar 28 04:59:22 2026 GMT
        Subject: CN=69c4bd2b-783c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ef:9c:5d:33:9d:05:c2:48:31:5f:6a:80:34:
                    8f:62:e6:53:e9:13:be:57:36:57:94:c7:1b:25:b4:
                    be:df:44:95:a4:c5:e9:00:fe:fe:7f:70:c5:95:ae:
                    f5:ca:2e:f0:3b:44:35:f5:e9:0c:27:14:3f:ed:14:
                    5a:4c:ee:f9:6c:2a:c0:1c:99:aa:7b:5a:e9:b7:39:
                    cc:97:3a:b9:72:a2:80:b1:f8:bc:14:e2:76:01:f5:
                    92:a1:56:d8:2e:3d:88:3e:21:5b:4d:68:41:dd:0a:
                    d6:a2:b7:89:01:e9:d8:fc:08:38:50:84:11:3e:db:
                    4a:44:f5:49:52:90:69:ab:e2:7e:4f:a2:70:1e:59:
                    a2:a5:ba:0e:40:d5:5e:a0:52:ea:07:c4:3e:bd:0c:
                    32:9b:42:3a:93:08:99:89:a9:a0:d3:91:35:25:31:
                    a1:f6:4f:c0:ac:9c:90:20:77:2e:99:2c:91:e3:b3:
                    b1:03:5b:3a:fd:99:40:2f:4f:fa:8a:0e:5f:54:81:
                    d0:02:38:c1:fb:70:d0:96:a6:43:75:c4:15:53:c8:
                    9a:2c:cc:99:35:b3:a5:dd:23:b3:0a:1f:21:ff:17:
                    85:da:ac:7f:e5:fb:e2:fa:27:40:0e:6e:13:5a:7b:
                    f0:1f:68:65:ac:37:84:95:f9:4c:86:26:bb:5e:10:
                    5a:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:27:34:41:A5:EB:55:29:CB:86:C2:F4:5B:0C:74:47:A3:95:6B:D6
            X509v3 Authority Key Identifier:
                keyid:39:BE:76:B8:76:57:B0:97:DC:EE:A3:B4:0D:44:52:A2:4E:56:03:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3688321/894DD8A00DFC11EF94AA185B017001B1/Ob52uHZXsJfc7qO0DURSok5WA4I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Ob52uHZXsJfc7qO0DURSok5WA4I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3688321/894DD8A00DFC11EF94AA185B017001B1/Ob52uHZXsJfc7qO0DURSok5WA4I.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:61:81:62:0e:5c:57:91:9f:4f:c4:f5:80:b5:02:35:36:5c:
         8b:b9:f0:6d:45:8f:3e:64:25:2f:eb:ae:dc:06:00:9b:4e:33:
         ba:eb:18:95:43:13:2f:d6:7a:b0:7e:a4:4e:17:d1:39:bb:1a:
         cf:df:03:3d:84:9c:c7:5a:f4:58:3a:b3:7e:60:7c:04:67:f2:
         92:7d:ca:49:dc:eb:00:d9:06:18:e8:c5:ea:68:57:2a:0d:85:
         b9:d3:07:2e:6d:62:47:a3:d6:b5:b7:f4:c4:5a:3a:02:c7:b3:
         c4:80:86:d9:49:f4:62:b0:c2:06:11:8d:41:ee:6d:43:f3:e5:
         d5:cb:72:9d:1e:6e:d6:22:ce:5e:30:b8:4e:07:8f:0a:fa:b2:
         ec:5d:c1:20:fb:7f:e7:ca:c9:c4:e3:ce:09:fa:2e:3d:2a:77:
         28:15:8c:bd:bf:70:16:f9:0e:af:74:24:4c:6a:ae:e6:ed:21:
         13:e7:da:b4:17:b5:01:74:f3:73:32:dd:0d:dc:ee:07:1f:a9:
         56:9a:fd:5c:57:44:a9:db:f9:cd:aa:d5:94:6b:5b:74:37:d6:
         49:e8:51:80:57:c3:7f:89:b0:bb:ea:d7:c4:fb:d2:ed:e8:89:
         eb:40:98:0f:f7:58:38:d5:15:50:13:c8:51:3d:97:1c:19:b5:
         6b:98:93:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:11:49 2026 by rpki-client