Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369013C/B0AB51B2C4D111E9984DE320F8AEA228/WhpAmSePGP9Blk1Vd7BLPV5DfPs.mft
File:                     WhpAmSePGP9Blk1Vd7BLPV5DfPs.mft (raw, json)
Hash identifier:          ZRvd7hk9DRerzBvfw8Cl+55zN4m49UgAlvsAzLsZbyM=
Subject key identifier:   09:12:8B:04:A8:A2:CB:D2:6C:5A:55:7E:21:17:D6:71:B0:AD:DE:A5
Authority key identifier: 5A:1A:40:99:27:8F:18:FF:41:96:4D:55:77:B0:4B:3D:5E:43:7C:FB
Certificate issuer:       /CN=F369013CAF/serialNumber=5A1A4099278F18FF41964D5577B04B3D5E437CFB
Certificate serial:       09A6
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/WhpAmSePGP9Blk1Vd7BLPV5DfPs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369013C/B0AB51B2C4D111E9984DE320F8AEA228/WhpAmSePGP9Blk1Vd7BLPV5DfPs.mft
Manifest number:          09A5
Signing time:             Thu 26 Mar 2026 01:43:16 +0000
Manifest this update:     Thu 26 Mar 2026 01:43:15 +0000
Manifest next update:     Sat 28 Mar 2026 01:43:15 +0000
Files and hashes:         1: WhpAmSePGP9Blk1Vd7BLPV5DfPs.crl (hash: AgswNLfhYIFxlyjxKSybWVXWqnpZPT6JC+fNJgOQBZg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369013C/B0AB51B2C4D111E9984DE320F8AEA228/WhpAmSePGP9Blk1Vd7BLPV5DfPs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369013C/B0AB51B2C4D111E9984DE320F8AEA228/WhpAmSePGP9Blk1Vd7BLPV5DfPs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/WhpAmSePGP9Blk1Vd7BLPV5DfPs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2470 (0x9a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369013CAF, serialNumber=5A1A4099278F18FF41964D5577B04B3D5E437CFB
        Validity
            Not Before: Mar 26 01:43:15 2026 GMT
            Not After : Mar 28 01:43:15 2026 GMT
        Subject: CN=69c48f33-ed27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:22:2a:8a:2b:44:a5:c8:81:6f:62:36:3e:b3:
                    20:85:ba:2e:19:df:65:6e:e8:50:ac:3c:44:ed:55:
                    cd:88:8d:e9:96:ac:7c:a8:74:2e:84:b0:fb:e5:a8:
                    1f:1b:be:57:3f:eb:9d:d8:ee:36:d1:8a:58:8d:51:
                    d7:6b:e1:4b:b6:f2:eb:4e:c2:b0:5e:e9:30:ce:9d:
                    dd:ab:37:ec:16:02:96:6c:1a:82:9e:07:a7:2e:2d:
                    d3:06:50:60:f9:42:cc:4f:3a:e5:af:32:1f:cb:9c:
                    fa:a1:6f:6c:df:46:0f:41:b5:bb:f6:8d:95:ce:20:
                    61:36:68:24:98:60:d3:3b:c3:70:b0:08:eb:ba:17:
                    1c:7b:28:6d:ec:d5:ab:6c:dc:5f:eb:7e:fe:94:4f:
                    16:29:f1:72:ae:e5:df:05:35:f5:63:10:9a:f7:60:
                    93:26:d3:b8:a1:2a:ba:6e:72:8f:31:6d:58:7d:86:
                    e3:8c:ea:bf:7a:45:97:4d:a8:2d:70:32:59:a6:45:
                    34:eb:a6:82:30:4e:0b:3f:ee:5e:36:4f:0b:d6:1a:
                    20:a8:05:40:7f:55:61:f7:63:f8:c6:0f:a2:d7:6d:
                    05:7a:3c:32:1d:63:ea:1a:a4:09:7f:eb:a9:db:a0:
                    78:aa:d6:92:04:65:c0:f3:80:54:2e:8e:d8:6b:69:
                    55:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:12:8B:04:A8:A2:CB:D2:6C:5A:55:7E:21:17:D6:71:B0:AD:DE:A5
            X509v3 Authority Key Identifier:
                keyid:5A:1A:40:99:27:8F:18:FF:41:96:4D:55:77:B0:4B:3D:5E:43:7C:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369013C/B0AB51B2C4D111E9984DE320F8AEA228/WhpAmSePGP9Blk1Vd7BLPV5DfPs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/WhpAmSePGP9Blk1Vd7BLPV5DfPs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369013C/B0AB51B2C4D111E9984DE320F8AEA228/WhpAmSePGP9Blk1Vd7BLPV5DfPs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:45:2c:f0:cc:9d:73:65:00:22:5b:49:ce:3a:3c:ed:86:d9:
         62:5e:f9:03:2a:36:7c:1b:ca:76:f5:99:de:32:90:83:69:f7:
         3d:cf:0d:f1:04:66:80:7c:03:13:82:85:87:72:a7:a2:63:2b:
         f0:6d:3c:ce:c3:cc:15:83:35:89:dd:42:3f:cd:90:81:36:ed:
         a9:ba:b8:74:59:d3:ee:3c:14:e3:96:6c:2d:1f:00:86:43:04:
         50:c9:89:9b:a0:f4:f7:fc:77:4c:fa:2d:0e:11:3b:74:1e:65:
         aa:9b:37:ae:f7:5c:df:e3:e7:72:0a:09:77:90:7c:21:43:b3:
         ad:e9:e5:c9:b7:4b:cc:e5:5d:ae:68:0f:bf:ec:c4:ea:13:a3:
         58:95:f4:59:18:11:70:96:8f:e8:20:de:77:32:93:2b:ac:41:
         38:f9:7c:04:25:75:b3:65:f0:0a:3f:19:0e:a0:3d:96:92:05:
         69:a0:c3:9a:27:3b:7a:23:f0:33:1b:99:71:e6:8e:ef:2d:b7:
         fd:98:5e:09:c9:31:08:fb:64:be:ff:3b:1a:01:50:a5:be:78:
         0c:4c:46:35:09:c0:c8:96:ce:5e:5e:78:51:7a:e8:3b:ac:89:
         0e:5b:be:ef:69:4d:b3:d0:9b:cd:58:6b:27:ab:bd:66:1b:38:
         6d:96:0b:76
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCaYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OTAxM0NBRjExMC8GA1UEBRMoNUExQTQwOTkyNzhGMThGRjQxOTY0RDU1NzdCMDRC
M0Q1RTQzN0NGQjAeFw0yNjAzMjYwMTQzMTVaFw0yNjAzMjgwMTQzMTVaMBgxFjAU
BgNVBAMTDTY5YzQ4ZjMzLWVkMjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDKIiqKK0SlyIFvYjY+syCFui4Z32Vu6FCsPETtVc2IjemWrHyodC6EsPvl
qB8bvlc/653Y7jbRiliNUddr4Uu28utOwrBe6TDOnd2rN+wWApZsGoKeB6cuLdMG
UGD5QsxPOuWvMh/LnPqhb2zfRg9Btbv2jZXOIGE2aCSYYNM7w3CwCOu6Fxx7KG3s
1ats3F/rfv6UTxYp8XKu5d8FNfVjEJr3YJMm07ihKrpuco8xbVh9huOM6r96RZdN
qC1wMlmmRTTrpoIwTgs/7l42TwvWGiCoBUB/VWH3Y/jGD6LXbQV6PDIdY+oapAl/
66nboHiq1pIEZcDzgFQujthraVWdAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUCRKL
BKiiy9JsWlV+IRfWcbCt3qUwHwYDVR0jBBgwFoAUWhpAmSePGP9Blk1Vd7BLPV5D
fPswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjkwMTNDL0IwQUI1MUIyQzREMTExRTk5ODRERTMyMEY4QUVBMjI4L1docEFt
U2VQR1A5QmxrMVZkN0JMUFY1RGZQcy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1docEFtU2VQR1A5QmxrMVZkN0JMUFY1RGZQcy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OTAxM0MvQjBBQjUxQjJDNEQxMTFFOTk4NERFMzIwRjhB
RUEyMjgvV2hwQW1TZVBHUDlCbGsxVmQ3QkxQVjVEZlBzLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCYRSzwzJ1zZQAiW0nOOjzthtliXvkD
KjZ8G8p29ZneMpCDafc9zw3xBGaAfAMTgoWHcqeiYyvwbTzOw8wVgzWJ3UI/zZCB
Nu2purh0WdPuPBTjlmwtHwCGQwRQyYmboPT3/HdM+i0OETt0HmWqmzeu91zf4+dy
Cgl3kHwhQ7Ot6eXJt0vM5V2uaA+/7MTqE6NYlfRZGBFwlo/oIN53MpMrrEE4+XwE
JXWzZfAKPxkOoD2WkgVpoMOaJzt6I/AzG5lx5o7vLbf9mF4JyTEI+2S+/zsaAVCl
vngMTEY1CcDIls5eXnhReug7rIkOW77vaU2z0JvNWGsnq71mGzhtlgt2
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:39:52 2026 by rpki-client