Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368BC41/C230B48C2EE811EF8028E5BA762E951A/zhR8pAWUWs9c3-FeT6XSvepI2Qo.mft
File:                     zhR8pAWUWs9c3-FeT6XSvepI2Qo.mft (raw, json)
Hash identifier:          NdBNy7iKhIgE7D+gkE6PZP40ULIg2viIr03dsAhw1Uk=
Subject key identifier:   35:B5:CE:6F:8F:F0:46:98:6A:7A:B6:D9:9B:F8:64:4D:43:6E:EA:88
Authority key identifier: CE:14:7C:A4:05:94:5A:CF:5C:DF:E1:5E:4F:A5:D2:BD:EA:48:D9:0A
Certificate issuer:       /CN=F368BC41AF/serialNumber=CE147CA405945ACF5CDFE15E4FA5D2BDEA48D90A
Certificate serial:       02A1
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/zhR8pAWUWs9c3-FeT6XSvepI2Qo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368BC41/C230B48C2EE811EF8028E5BA762E951A/zhR8pAWUWs9c3-FeT6XSvepI2Qo.mft
Manifest number:          029A
Signing time:             Thu 26 Mar 2026 05:04:09 +0000
Manifest this update:     Thu 26 Mar 2026 05:04:08 +0000
Manifest next update:     Sat 28 Mar 2026 05:04:08 +0000
Files and hashes:         1: zhR8pAWUWs9c3-FeT6XSvepI2Qo.crl (hash: qluJvZUp2O2b2m6DUCsTrUxciB4Qtb1m6ZIHbfM8DIg=)
                          2: F3466CD22EEE11EFAB930A67762E951A.roa (hash: +dYtbycLkkem/RCdq5G5Tibdi9nPBFznIh17vDpR0yI=)
                          3: AA5E7D162EEE11EFB786B466762E951A.roa (hash: 7ctEzn08E4DJ3uFce48dpoQ1eMqIiYfX70Em/++n2wI=)
                          4: C10CD8A62EED11EFBB91475E762E951A.roa (hash: +GopixwYFgxwApDEisDd+3N08mZ9XQbjdM+uCxLPgTY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368BC41/C230B48C2EE811EF8028E5BA762E951A/zhR8pAWUWs9c3-FeT6XSvepI2Qo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368BC41/C230B48C2EE811EF8028E5BA762E951A/zhR8pAWUWs9c3-FeT6XSvepI2Qo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/zhR8pAWUWs9c3-FeT6XSvepI2Qo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 673 (0x2a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368BC41AF, serialNumber=CE147CA405945ACF5CDFE15E4FA5D2BDEA48D90A
        Validity
            Not Before: Mar 26 05:04:08 2026 GMT
            Not After : Mar 28 05:04:08 2026 GMT
        Subject: CN=69c4be49-4b57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:59:1c:d6:11:66:1a:e4:3e:9e:ca:fc:e4:33:
                    0b:f4:f4:20:8e:6a:6f:5f:0f:05:e1:b9:33:f2:4c:
                    6f:40:d0:81:0e:02:be:da:ac:fe:f6:70:fd:57:31:
                    7b:b2:24:d8:5d:5d:d4:b1:c8:f5:3a:4d:ac:9e:9d:
                    43:43:6b:e5:bd:51:45:16:73:34:c4:1d:33:8f:c0:
                    33:be:be:92:96:77:2b:c0:6e:83:bd:93:bb:f7:ff:
                    80:18:7d:67:1b:da:5a:4e:df:f3:6b:89:2b:49:09:
                    f4:19:89:9e:91:ec:33:32:61:70:0c:d9:9a:8b:26:
                    81:60:ca:00:da:6a:fa:9c:19:f6:34:67:a6:78:2d:
                    8f:4b:03:0f:87:e2:89:2f:c1:a5:75:07:05:c3:74:
                    be:24:29:47:7a:60:9b:7f:69:12:0a:82:b6:1d:af:
                    4b:d9:e9:db:34:70:0c:2b:4a:1d:ec:5f:e0:e5:cd:
                    24:0e:fa:0b:d9:52:4c:f8:60:f5:7a:bc:e8:41:0e:
                    c8:bd:cb:a9:3e:95:ad:c5:71:34:00:fa:3b:44:45:
                    ef:30:7e:fd:96:ea:79:7b:f1:03:4c:62:fb:47:c7:
                    b4:4e:8f:dc:2d:ea:40:3e:d1:c4:04:cf:5d:54:1c:
                    3e:61:66:d6:52:bb:22:88:de:d3:40:b4:2a:9a:37:
                    00:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:B5:CE:6F:8F:F0:46:98:6A:7A:B6:D9:9B:F8:64:4D:43:6E:EA:88
            X509v3 Authority Key Identifier:
                keyid:CE:14:7C:A4:05:94:5A:CF:5C:DF:E1:5E:4F:A5:D2:BD:EA:48:D9:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368BC41/C230B48C2EE811EF8028E5BA762E951A/zhR8pAWUWs9c3-FeT6XSvepI2Qo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zhR8pAWUWs9c3-FeT6XSvepI2Qo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368BC41/C230B48C2EE811EF8028E5BA762E951A/zhR8pAWUWs9c3-FeT6XSvepI2Qo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:7f:a5:b3:b3:f8:10:c7:0c:e7:8a:cc:3b:72:a0:51:45:3d:
         f2:93:8e:ef:f3:6c:cb:88:a0:73:71:0e:16:f0:61:30:c9:80:
         bf:05:62:3f:ff:67:0e:bd:a1:b5:04:61:2a:99:1e:07:68:15:
         9d:53:5a:8b:55:21:d6:5e:07:f3:70:b9:1e:54:9a:5f:7d:11:
         85:0b:d9:3a:79:97:44:83:d2:43:9b:5d:bd:46:77:99:d3:2b:
         02:54:cf:16:9d:38:66:a9:1d:19:f7:42:be:22:25:71:ff:0b:
         73:79:26:25:68:27:88:f1:0d:0b:85:b3:b6:d8:26:ae:7b:d9:
         bc:c0:15:36:da:ea:5b:5e:dd:24:19:e1:c1:f4:99:d4:72:ff:
         9a:c0:70:19:03:bb:e2:2b:17:d3:e1:42:01:94:91:15:07:0a:
         6f:13:d4:bd:c6:27:90:3c:fb:b1:1e:28:20:36:3d:88:e3:94:
         89:19:d2:56:63:a8:ef:90:ad:d7:87:4b:4d:94:73:8c:19:18:
         53:da:46:93:60:ca:72:01:2c:8f:fd:0d:a6:94:e8:c2:25:0a:
         d3:dd:e0:bd:d6:b4:93:96:f3:24:28:3f:b2:35:4b:5d:f0:10:
         98:ad:cc:7d:0e:d8:b2:6e:c8:a5:8f:76:b7:de:19:d7:bf:79:
         f3:a9:7c:8f
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAqEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEJDNDFBRjExMC8GA1UEBRMoQ0UxNDdDQTQwNTk0NUFDRjVDREZFMTVFNEZBNUQy
QkRFQTQ4RDkwQTAeFw0yNjAzMjYwNTA0MDhaFw0yNjAzMjgwNTA0MDhaMBgxFjAU
BgNVBAMTDTY5YzRiZTQ5LTRiNTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDLWRzWEWYa5D6eyvzkMwv09CCOam9fDwXhuTPyTG9A0IEOAr7arP72cP1X
MXuyJNhdXdSxyPU6TayenUNDa+W9UUUWczTEHTOPwDO+vpKWdyvAboO9k7v3/4AY
fWcb2lpO3/NriStJCfQZiZ6R7DMyYXAM2ZqLJoFgygDaavqcGfY0Z6Z4LY9LAw+H
4okvwaV1BwXDdL4kKUd6YJt/aRIKgrYdr0vZ6ds0cAwrSh3sX+DlzSQO+gvZUkz4
YPV6vOhBDsi9y6k+la3FcTQA+jtERe8wfv2W6nl78QNMYvtHx7ROj9wt6kA+0cQE
z11UHD5hZtZSuyKI3tNAtCqaNwA1AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUNbXO
b4/wRphqerbZm/hkTUNu6ogwHwYDVR0jBBgwFoAUzhR8pAWUWs9c3+FeT6XSvepI
2QowDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhCQzQxL0MyMzBCNDhDMkVFODExRUY4MDI4RTVCQTc2MkU5NTFBL3poUjhw
QVdVV3M5YzMtRmVUNlhTdmVwSTJRby5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3poUjhwQVdVV3M5YzMtRmVUNlhTdmVwSTJRby5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OEJDNDEvQzIzMEI0OEMyRUU4MTFFRjgwMjhFNUJBNzYy
RTk1MUEvemhSOHBBV1VXczljMy1GZVQ2WFN2ZXBJMlFvLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAtf6Wzs/gQxwznisw7cqBRRT3yk47v
82zLiKBzcQ4W8GEwyYC/BWI//2cOvaG1BGEqmR4HaBWdU1qLVSHWXgfzcLkeVJpf
fRGFC9k6eZdEg9JDm129RneZ0ysCVM8WnThmqR0Z90K+IiVx/wtzeSYlaCeI8Q0L
hbO22Caue9m8wBU22upbXt0kGeHB9JnUcv+awHAZA7viKxfT4UIBlJEVBwpvE9S9
xieQPPuxHiggNj2I45SJGdJWY6jvkK3Xh0tNlHOMGRhT2kaTYMpyASyP/Q2mlOjC
JQrT3eC91rSTlvMkKD+yNUtd8BCYrcx9Dtiybsilj3a33hnXv3nzqXyP
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:31:38 2026 by rpki-client