Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3691854/5CFF4AE071AD11EEA2EC74334AD9E6FC/5_gJqmoxZrjFrsmPz6j2VQ4P6F0.mft
File:                     5_gJqmoxZrjFrsmPz6j2VQ4P6F0.mft (raw, json)
Hash identifier:          XPNycyR9srnCuYlHIQPAKmYDzwTpKlbx8hn+lt/O2nI=
Subject key identifier:   3E:FB:CD:15:21:16:79:5A:F5:DC:6E:FA:BE:8A:22:E1:43:11:FF:2E
Authority key identifier: E7:F8:09:AA:6A:31:66:B8:C5:AE:C9:8F:CF:A8:F6:55:0E:0F:E8:5D
Certificate issuer:       /CN=F3691854AF/serialNumber=E7F809AA6A3166B8C5AEC98FCFA8F6550E0FE85D
Certificate serial:       038C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/5_gJqmoxZrjFrsmPz6j2VQ4P6F0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3691854/5CFF4AE071AD11EEA2EC74334AD9E6FC/5_gJqmoxZrjFrsmPz6j2VQ4P6F0.mft
Manifest number:          038C
Signing time:             Thu 26 Mar 2026 04:28:21 +0000
Manifest this update:     Thu 26 Mar 2026 04:28:20 +0000
Manifest next update:     Sat 28 Mar 2026 04:28:20 +0000
Files and hashes:         1: 5_gJqmoxZrjFrsmPz6j2VQ4P6F0.crl (hash: QKohr9sWexNGjkN2HkhH1op5isdteq6kpZluyCN9fBs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3691854/5CFF4AE071AD11EEA2EC74334AD9E6FC/5_gJqmoxZrjFrsmPz6j2VQ4P6F0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3691854/5CFF4AE071AD11EEA2EC74334AD9E6FC/5_gJqmoxZrjFrsmPz6j2VQ4P6F0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/5_gJqmoxZrjFrsmPz6j2VQ4P6F0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 908 (0x38c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3691854AF, serialNumber=E7F809AA6A3166B8C5AEC98FCFA8F6550E0FE85D
        Validity
            Not Before: Mar 26 04:28:20 2026 GMT
            Not After : Mar 28 04:28:20 2026 GMT
        Subject: CN=69c4b5e4-c87d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f0:26:95:f7:11:64:44:bf:9d:a4:39:9c:0a:
                    c9:a3:58:8d:ae:02:4c:e5:ca:1c:78:60:f1:78:84:
                    a3:26:bd:1f:fd:e3:ae:00:31:0d:00:90:7b:07:31:
                    2f:5b:89:7c:a1:7a:1a:7d:92:60:54:5e:4f:13:00:
                    24:01:62:9f:fd:ec:99:66:ab:06:9c:18:81:f8:a5:
                    fc:12:d6:1b:39:5c:74:7f:5b:ed:0e:52:99:e6:54:
                    5f:18:27:d2:40:13:09:06:07:9c:98:91:e9:14:3a:
                    3b:dc:3b:2a:ab:83:d8:49:3f:e1:33:1f:14:07:b2:
                    7b:fb:af:d6:d2:5d:d5:f7:f5:ae:8d:dd:28:18:e7:
                    19:e7:26:a8:64:e4:9b:cd:70:f2:ab:25:37:6c:06:
                    f2:29:0f:6b:ec:59:20:7f:37:cd:6c:0d:80:13:b2:
                    d3:c0:58:29:90:52:56:c3:60:4c:2d:f7:97:d6:7b:
                    43:81:47:04:cd:0d:2c:fe:84:79:39:4e:ca:14:89:
                    fa:7a:72:35:8a:4b:6e:61:40:15:b9:b0:3d:d7:e5:
                    b2:ee:79:ad:73:40:a8:13:0b:91:36:95:7f:47:60:
                    83:f5:ca:26:00:cb:1b:c5:57:b2:4c:08:cc:cb:35:
                    fb:95:e7:61:18:96:99:8f:33:32:c4:40:1c:b9:1b:
                    59:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:FB:CD:15:21:16:79:5A:F5:DC:6E:FA:BE:8A:22:E1:43:11:FF:2E
            X509v3 Authority Key Identifier:
                keyid:E7:F8:09:AA:6A:31:66:B8:C5:AE:C9:8F:CF:A8:F6:55:0E:0F:E8:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3691854/5CFF4AE071AD11EEA2EC74334AD9E6FC/5_gJqmoxZrjFrsmPz6j2VQ4P6F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/5_gJqmoxZrjFrsmPz6j2VQ4P6F0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3691854/5CFF4AE071AD11EEA2EC74334AD9E6FC/5_gJqmoxZrjFrsmPz6j2VQ4P6F0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:fc:e9:26:b2:33:c0:1c:1f:c6:f7:0b:12:c4:34:74:78:ee:
         e6:a8:03:7a:79:71:9a:1b:b8:fc:aa:85:42:12:4c:aa:8e:b8:
         47:41:55:7b:a5:4c:43:83:c9:00:5a:09:83:13:7b:a1:69:76:
         e2:b8:26:75:d2:42:f7:c7:5f:82:f4:c9:b5:1f:0f:ad:f1:72:
         d1:43:87:fc:c6:43:d2:fe:36:d9:41:5a:26:3a:92:a2:f1:e6:
         ed:b3:75:01:02:24:d3:0d:46:c2:50:61:2a:a5:8e:e3:6c:da:
         ba:3a:53:0a:65:4f:42:35:72:b6:92:62:cb:bd:1b:ea:07:c4:
         9a:c3:61:d6:06:29:22:2c:c8:a5:e8:4a:76:07:22:f3:72:43:
         70:e5:ab:1e:10:39:f8:7d:5e:e8:6e:cb:3b:27:eb:2d:70:1e:
         29:5a:a8:b0:88:3e:37:cd:e9:e4:3c:5c:2f:ff:d3:23:8d:25:
         14:94:a8:86:b8:35:43:cb:af:e9:4a:c5:66:bd:1c:fe:73:e8:
         51:c6:c8:2b:08:8f:fa:48:f6:eb:58:1b:b7:9b:9c:89:16:4d:
         f4:6f:16:15:14:c8:0f:5e:48:98:b1:0b:89:7f:37:3a:dc:e8:
         ae:fa:b5:7c:b3:0e:89:ad:87:85:46:cb:51:6e:fa:b2:9f:15:
         66:65:dd:19
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICA4wwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OTE4NTRBRjExMC8GA1UEBRMoRTdGODA5QUE2QTMxNjZCOEM1QUVDOThGQ0ZBOEY2
NTUwRTBGRTg1RDAeFw0yNjAzMjYwNDI4MjBaFw0yNjAzMjgwNDI4MjBaMBgxFjAU
BgNVBAMTDTY5YzRiNWU0LWM4N2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCl8CaV9xFkRL+dpDmcCsmjWI2uAkzlyhx4YPF4hKMmvR/9464AMQ0AkHsH
MS9biXyhehp9kmBUXk8TACQBYp/97JlmqwacGIH4pfwS1hs5XHR/W+0OUpnmVF8Y
J9JAEwkGB5yYkekUOjvcOyqrg9hJP+EzHxQHsnv7r9bSXdX39a6N3SgY5xnnJqhk
5JvNcPKrJTdsBvIpD2vsWSB/N81sDYATstPAWCmQUlbDYEwt95fWe0OBRwTNDSz+
hHk5TsoUifp6cjWKS25hQBW5sD3X5bLuea1zQKgTC5E2lX9HYIP1yiYAyxvFV7JM
CMzLNfuV52EYlpmPMzLEQBy5G1nVAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUPvvN
FSEWeVr13G76vooi4UMR/y4wHwYDVR0jBBgwFoAU5/gJqmoxZrjFrsmPz6j2VQ4P
6F0wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjkxODU0LzVDRkY0QUUwNzFBRDExRUVBMkVDNzQzMzRBRDlFNkZDLzVfZ0px
bW94WnJqRnJzbVB6NmoyVlE0UDZGMC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzVfZ0pxbW94WnJqRnJzbVB6NmoyVlE0UDZGMC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OTE4NTQvNUNGRjRBRTA3MUFEMTFFRUEyRUM3NDMzNEFE
OUU2RkMvNV9nSnFtb3hacmpGcnNtUHo2ajJWUTRQNkYwLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBQ/OkmsjPAHB/G9wsSxDR0eO7mqAN6
eXGaG7j8qoVCEkyqjrhHQVV7pUxDg8kAWgmDE3uhaXbiuCZ10kL3x1+C9Mm1Hw+t
8XLRQ4f8xkPS/jbZQVomOpKi8ebts3UBAiTTDUbCUGEqpY7jbNq6OlMKZU9CNXK2
kmLLvRvqB8Saw2HWBikiLMil6Ep2ByLzckNw5aseEDn4fV7obss7J+stcB4pWqiw
iD43zenkPFwv/9MjjSUUlKiGuDVDy6/pSsVmvRz+c+hRxsgrCI/6SPbrWBu3m5yJ
Fk30bxYVFMgPXkiYsQuJfzc63Oiu+rV8sw6JrYeFRstRbvqynxVmZd0Z
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:02:00 2026 by rpki-client