Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3691DC2/A12171821A1E11EC8D345D34D8A014CE/fHr4YJtvvVa8wCRM0y1g_-hfnuQ.mft
File:                     fHr4YJtvvVa8wCRM0y1g_-hfnuQ.mft (raw, json)
Hash identifier:          vj/3P9Y79eRYtVT4SAMzjaFurqnE4XRiu6iUT6Fqz1Y=
Subject key identifier:   C6:B1:36:94:62:14:5A:5B:C5:CB:67:D1:86:6D:55:47:D2:87:B7:79
Authority key identifier: 7C:7A:F8:60:9B:6F:BD:56:BC:C0:24:4C:D3:2D:60:FF:E8:5F:9E:E4
Certificate issuer:       /CN=F3691DC2AF/serialNumber=7C7AF8609B6FBD56BCC0244CD32D60FFE85F9EE4
Certificate serial:       069C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/fHr4YJtvvVa8wCRM0y1g_-hfnuQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3691DC2/A12171821A1E11EC8D345D34D8A014CE/fHr4YJtvvVa8wCRM0y1g_-hfnuQ.mft
Manifest number:          069B
Signing time:             Thu 26 Mar 2026 02:45:43 +0000
Manifest this update:     Thu 26 Mar 2026 02:45:42 +0000
Manifest next update:     Sat 28 Mar 2026 02:45:42 +0000
Files and hashes:         1: fHr4YJtvvVa8wCRM0y1g_-hfnuQ.crl (hash: eAZBvdtBq4JLsssvZuCzSNHC0YWb4zwwVskdKq3p+74=)
                          2: CA1FC8CC1A1E11ECBF7CA134D8A014CE.roa (hash: 89ZoBOyWvLwCDH6XINtqPI4XAUHBP8Wb3FK9Ykris/0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3691DC2/A12171821A1E11EC8D345D34D8A014CE/fHr4YJtvvVa8wCRM0y1g_-hfnuQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3691DC2/A12171821A1E11EC8D345D34D8A014CE/fHr4YJtvvVa8wCRM0y1g_-hfnuQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/fHr4YJtvvVa8wCRM0y1g_-hfnuQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1692 (0x69c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3691DC2AF, serialNumber=7C7AF8609B6FBD56BCC0244CD32D60FFE85F9EE4
        Validity
            Not Before: Mar 26 02:45:42 2026 GMT
            Not After : Mar 28 02:45:42 2026 GMT
        Subject: CN=69c49dd7-2eec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:d7:71:9a:11:25:95:77:bf:4f:1c:de:7d:de:
                    5d:b0:9c:cb:3a:32:d8:de:88:dd:a2:19:54:c9:56:
                    24:63:eb:f3:d0:11:72:61:f1:cc:87:ba:41:00:80:
                    78:85:1f:d5:47:f1:20:28:9b:a7:33:46:6a:aa:d9:
                    61:8d:cf:40:57:da:b5:48:29:fc:41:7f:5b:24:42:
                    10:d9:62:51:e9:9e:d4:4c:2e:21:b2:3a:cf:29:42:
                    3e:6d:f9:0c:50:8d:9c:8f:b6:d4:f5:8a:97:2b:6e:
                    84:ac:1e:8e:d9:52:1e:24:7d:0e:fe:27:ce:f8:6f:
                    c1:2c:59:ca:30:e9:5c:3d:79:a4:42:c4:37:b3:b9:
                    9c:df:cd:53:68:39:0c:40:f0:33:e6:fb:08:b3:68:
                    53:89:9a:35:0e:7d:90:f5:75:6a:3d:c2:cd:db:9b:
                    6e:a1:db:33:7e:70:68:af:72:1a:c1:43:9f:99:d5:
                    81:68:ca:c6:8d:6a:60:93:0c:9e:d2:f2:1b:b6:57:
                    2e:5d:08:c6:33:74:e7:75:90:c3:c6:08:b0:21:af:
                    f6:e7:d7:f5:fc:c1:ba:5c:98:03:c6:1f:ae:f1:20:
                    f2:27:b0:ce:0d:2a:0c:7f:d4:d8:e0:1f:63:f5:54:
                    6d:51:1a:6d:2e:28:a7:e1:4b:a6:b3:33:c8:b3:87:
                    50:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:B1:36:94:62:14:5A:5B:C5:CB:67:D1:86:6D:55:47:D2:87:B7:79
            X509v3 Authority Key Identifier:
                keyid:7C:7A:F8:60:9B:6F:BD:56:BC:C0:24:4C:D3:2D:60:FF:E8:5F:9E:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3691DC2/A12171821A1E11EC8D345D34D8A014CE/fHr4YJtvvVa8wCRM0y1g_-hfnuQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/fHr4YJtvvVa8wCRM0y1g_-hfnuQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3691DC2/A12171821A1E11EC8D345D34D8A014CE/fHr4YJtvvVa8wCRM0y1g_-hfnuQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:d1:46:f5:40:78:f0:7d:3b:1a:64:14:f8:09:8b:f4:47:20:
         45:e8:55:bc:16:75:1c:13:7b:1c:80:8b:6e:f5:b4:ad:a9:d5:
         4e:02:ce:a0:bb:76:ae:a6:a3:50:6d:72:96:cf:ee:59:87:e2:
         65:e1:48:22:eb:e0:7a:f3:ed:99:9f:84:39:a7:9a:ef:0f:1e:
         36:53:9f:4d:df:84:38:3f:81:61:99:86:94:06:b4:25:0c:0b:
         4d:bd:a7:23:51:ec:d8:e0:6b:5c:45:7b:db:3f:22:9f:f2:b2:
         ac:6e:86:2f:2d:de:25:30:56:0d:3a:14:1f:9b:37:60:5d:02:
         47:24:fa:17:34:d4:2b:83:19:cc:b0:8f:fc:71:4b:43:48:71:
         22:bf:02:56:7b:ec:2b:7d:90:62:30:0a:60:8e:82:c2:bb:68:
         d2:26:d6:fc:f4:ba:7f:e1:e3:fc:69:6c:6a:29:7e:50:2c:ed:
         81:0b:2a:83:24:aa:fe:51:08:f5:ac:1b:59:92:3f:d5:79:4f:
         76:e5:79:2a:ae:9f:91:49:a4:f9:82:72:d5:7d:8d:67:3a:ff:
         12:50:57:d8:84:f0:c9:34:90:1a:26:ca:aa:b3:2a:56:9f:03:
         23:7e:f1:59:59:52:ec:67:da:35:95:ff:dc:60:06:04:23:b1:
         36:fc:ed:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:00:24 2026 by rpki-client