Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368948B/57871110B09A11EFBA5BE8A0762E951A/wrcqDttgGOuk7XzTA12xMvRJwB0.mft
File:                     wrcqDttgGOuk7XzTA12xMvRJwB0.mft (raw, json)
Hash identifier:          85DbIdzMWxlhePHyiWrZmQHt8LbniB3V1x8HIDKXRks=
Subject key identifier:   D3:42:FA:CC:E6:A0:C5:BB:13:C9:A7:5A:57:E2:63:E5:70:C1:37:99
Authority key identifier: C2:B7:2A:0E:DB:60:18:EB:A4:ED:7C:D3:03:5D:B1:32:F4:49:C0:1D
Certificate issuer:       /CN=F368948BAF/serialNumber=C2B72A0EDB6018EBA4ED7CD3035DB132F449C01D
Certificate serial:       01F0
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/wrcqDttgGOuk7XzTA12xMvRJwB0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368948B/57871110B09A11EFBA5BE8A0762E951A/wrcqDttgGOuk7XzTA12xMvRJwB0.mft
Manifest number:          01ED
Signing time:             Thu 26 Mar 2026 05:36:50 +0000
Manifest this update:     Thu 26 Mar 2026 05:36:49 +0000
Manifest next update:     Sat 28 Mar 2026 05:36:49 +0000
Files and hashes:         1: wrcqDttgGOuk7XzTA12xMvRJwB0.crl (hash: DbuJbJq2dDLTJ+UkNmOkuleX+mfLAngUAlApJ4kF7q8=)
                          2: 2B39C894B3A811EFB417EA70762E951A.roa (hash: JbNHPWtSF1vQZDwXPX2JIdA3ze8jlLo9getuU4tbAN4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368948B/57871110B09A11EFBA5BE8A0762E951A/wrcqDttgGOuk7XzTA12xMvRJwB0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368948B/57871110B09A11EFBA5BE8A0762E951A/wrcqDttgGOuk7XzTA12xMvRJwB0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/wrcqDttgGOuk7XzTA12xMvRJwB0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 496 (0x1f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368948BAF, serialNumber=C2B72A0EDB6018EBA4ED7CD3035DB132F449C01D
        Validity
            Not Before: Mar 26 05:36:49 2026 GMT
            Not After : Mar 28 05:36:49 2026 GMT
        Subject: CN=69c4c5f2-46d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f8:40:d0:ca:ec:72:53:9d:32:c8:7b:a1:a3:
                    58:b8:87:ba:0c:2d:48:1f:a3:4c:eb:02:dc:2d:12:
                    9f:87:95:14:f2:2f:12:da:f9:7d:95:09:90:49:9b:
                    da:e7:32:f3:f1:ae:f8:e9:85:2c:7e:23:46:9e:3a:
                    19:4b:ab:9c:da:81:3a:c4:1c:00:ca:81:46:2d:a8:
                    f0:6c:8e:de:33:df:ad:f4:01:8c:bc:dd:95:ae:ec:
                    47:bd:fc:a2:53:5d:cf:2a:85:4e:e1:c4:a4:00:31:
                    8b:96:7b:73:bf:fe:eb:aa:7b:e6:c2:eb:43:6f:80:
                    3c:ec:a1:82:c9:30:19:b8:b5:ba:98:8b:f8:99:35:
                    b8:98:67:0b:20:3d:dd:54:a2:c3:c2:5d:2e:c4:7b:
                    62:09:3b:7d:e1:da:dc:85:04:1f:83:70:f0:c0:e9:
                    bd:33:9c:db:94:38:ed:5a:9a:69:f6:6c:6e:83:83:
                    f6:d4:ee:b0:03:f1:80:a2:a8:35:80:63:73:42:1e:
                    db:6b:ab:d1:4f:56:78:57:74:83:65:6e:6f:15:62:
                    9c:19:1b:fb:a2:14:0d:73:c6:3c:c2:eb:14:1a:47:
                    c9:dc:b0:41:2b:1c:1a:42:88:f2:ab:14:65:2d:9b:
                    bd:db:7b:62:24:6f:01:05:28:1c:1a:2c:fc:d6:14:
                    0a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:42:FA:CC:E6:A0:C5:BB:13:C9:A7:5A:57:E2:63:E5:70:C1:37:99
            X509v3 Authority Key Identifier:
                keyid:C2:B7:2A:0E:DB:60:18:EB:A4:ED:7C:D3:03:5D:B1:32:F4:49:C0:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368948B/57871110B09A11EFBA5BE8A0762E951A/wrcqDttgGOuk7XzTA12xMvRJwB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wrcqDttgGOuk7XzTA12xMvRJwB0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368948B/57871110B09A11EFBA5BE8A0762E951A/wrcqDttgGOuk7XzTA12xMvRJwB0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:91:42:bd:a0:9c:3d:82:9e:c0:d7:93:29:51:2b:9b:e6:6a:
         60:6e:90:72:6b:70:a2:3a:df:cc:1a:80:da:bd:e8:ed:79:a1:
         6f:66:68:c5:35:90:98:c1:8d:d7:13:32:92:af:a5:5d:de:f7:
         a9:80:f9:39:f8:c4:5d:86:98:2b:ef:63:f6:1a:da:45:19:8d:
         b4:aa:31:f7:1d:78:80:55:09:dd:ce:14:eb:93:53:f5:ab:b2:
         a4:f0:f8:43:17:72:c5:a0:bc:a7:ec:c2:65:3d:7d:02:02:a5:
         4d:49:42:e9:cf:2a:5c:5b:aa:ec:1b:6c:e1:46:5d:13:45:74:
         13:20:cc:fc:8b:f2:25:4e:8b:0e:ec:74:79:64:9b:d0:66:bd:
         00:a8:f1:26:16:b1:c6:56:2d:dc:49:a2:6d:1b:be:d1:17:fe:
         56:ec:c5:1e:fa:8f:f2:56:77:54:35:a9:14:b0:8c:cd:ba:e8:
         b2:f2:69:6a:ff:fc:bd:c0:5d:f9:a9:aa:e4:ea:ee:ce:93:86:
         55:6b:3d:97:96:21:f2:3c:cd:4a:a4:3f:3b:a8:0d:9a:c8:d3:
         3f:88:53:c1:01:71:e7:92:e7:f2:f9:a7:80:cf:cd:85:7c:eb:
         8e:6f:52:8b:36:15:08:98:f1:d6:a0:8a:44:87:6e:d8:fb:24:
         26:e0:80:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:45:38 2026 by rpki-client