Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3692292/481A5F60912911EF838CED73762E951A/8nuTXzXgS4_qo5EN5fHi0jxeAHs.mft
File:                     8nuTXzXgS4_qo5EN5fHi0jxeAHs.mft (raw, json)
Hash identifier:          PsiDDyT8AZkyF81013e5u0VW82AL2xfKJjwLF2oqWdU=
Subject key identifier:   4A:BB:21:87:13:10:A2:5A:5A:18:80:F7:36:5D:53:B8:A2:25:24:A5
Authority key identifier: F2:7B:93:5F:35:E0:4B:8F:EA:A3:91:0D:E5:F1:E2:D2:3C:5E:00:7B
Certificate issuer:       /CN=F3692292AF/serialNumber=F27B935F35E04B8FEAA3910DE5F1E2D23C5E007B
Certificate serial:       0216
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/8nuTXzXgS4_qo5EN5fHi0jxeAHs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3692292/481A5F60912911EF838CED73762E951A/8nuTXzXgS4_qo5EN5fHi0jxeAHs.mft
Manifest number:          0215
Signing time:             Thu 26 Mar 2026 05:31:03 +0000
Manifest this update:     Thu 26 Mar 2026 05:31:02 +0000
Manifest next update:     Sat 28 Mar 2026 05:31:02 +0000
Files and hashes:         1: 8nuTXzXgS4_qo5EN5fHi0jxeAHs.crl (hash: +XOTD6ztB+baUMrdsQXMeRl4Sk3MtL/dQfZN7QcTQxQ=)
                          2: F56FFE86912911EFAEEF2B78762E951A.roa (hash: CXZk+/Is0OxggDK9eJOwdsU1YQzXuO6D+yTuqbBLE28=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3692292/481A5F60912911EF838CED73762E951A/8nuTXzXgS4_qo5EN5fHi0jxeAHs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3692292/481A5F60912911EF838CED73762E951A/8nuTXzXgS4_qo5EN5fHi0jxeAHs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/8nuTXzXgS4_qo5EN5fHi0jxeAHs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 534 (0x216)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3692292AF, serialNumber=F27B935F35E04B8FEAA3910DE5F1E2D23C5E007B
        Validity
            Not Before: Mar 26 05:31:02 2026 GMT
            Not After : Mar 28 05:31:02 2026 GMT
        Subject: CN=69c4c497-516e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:27:f1:ce:e5:ab:93:7d:c3:b6:9e:85:b7:ef:
                    3f:81:de:2a:d3:cd:72:e3:48:6c:46:62:e0:6a:55:
                    57:80:f2:ef:60:c1:79:eb:3f:91:2d:09:c7:38:4f:
                    9a:80:f5:ca:54:20:70:37:3c:cc:70:d8:f2:78:79:
                    18:83:f2:27:b7:47:b6:79:94:3f:96:7f:d4:9c:89:
                    22:e7:79:50:25:d0:29:e1:b2:05:ab:3a:17:c3:87:
                    a6:44:14:50:a9:17:c7:5e:d5:8b:a8:1c:4a:8a:9d:
                    e9:d5:bd:52:60:87:1c:da:4d:b6:24:a3:4f:ac:51:
                    e1:74:6f:5c:9e:f0:25:e0:74:d0:85:35:d0:f5:b8:
                    e3:7e:c5:dd:da:95:3c:b1:43:44:45:da:c0:19:9c:
                    68:e8:90:26:06:02:c5:f4:21:de:a5:b7:a9:75:f8:
                    1f:b5:01:63:f0:4c:6c:21:a1:42:8a:1d:ad:1d:99:
                    46:ea:dd:fd:07:36:13:67:ba:f0:cc:65:91:e9:75:
                    14:3d:27:4f:8a:6c:11:5e:30:a2:39:7b:ad:86:82:
                    9b:44:38:9e:26:18:54:90:fd:13:c5:37:99:6f:9d:
                    05:8a:65:7a:5d:da:2a:9a:96:9d:7c:98:9b:4a:ed:
                    be:c5:55:55:9e:02:16:4c:0c:0f:c8:c5:1f:28:18:
                    0a:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:BB:21:87:13:10:A2:5A:5A:18:80:F7:36:5D:53:B8:A2:25:24:A5
            X509v3 Authority Key Identifier:
                keyid:F2:7B:93:5F:35:E0:4B:8F:EA:A3:91:0D:E5:F1:E2:D2:3C:5E:00:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3692292/481A5F60912911EF838CED73762E951A/8nuTXzXgS4_qo5EN5fHi0jxeAHs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/8nuTXzXgS4_qo5EN5fHi0jxeAHs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3692292/481A5F60912911EF838CED73762E951A/8nuTXzXgS4_qo5EN5fHi0jxeAHs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:69:12:83:57:98:79:ea:df:45:e7:e3:06:1f:6b:07:1f:c3:
         4e:fd:2b:c2:fd:b3:37:08:b4:c0:d6:19:64:0d:f2:f1:ff:7a:
         a0:bc:36:6b:3a:43:bd:5e:89:56:58:1a:c5:80:7e:e0:a3:e8:
         c2:61:c6:72:ea:32:4e:2f:4d:53:26:ba:12:38:5e:db:84:ff:
         0e:06:19:a3:98:a8:8b:b3:ba:9a:30:d8:55:00:1b:80:05:41:
         ea:0e:99:23:23:4c:27:f4:09:36:f3:06:80:4e:c3:a5:9c:ec:
         3d:7f:0f:c2:03:e7:55:46:01:f4:a2:a6:89:66:34:32:8d:b0:
         d6:54:72:15:83:5c:c5:3a:e3:42:66:37:77:e2:d8:d2:1b:7f:
         19:79:94:1b:1c:04:3b:1a:2a:7e:8d:06:3b:b7:5e:5e:54:04:
         e5:4a:f4:28:08:e0:e4:30:90:e8:1b:5a:a7:9a:fe:fc:16:99:
         21:27:ea:aa:e2:94:cc:76:30:10:c0:59:73:29:bc:21:66:56:
         83:0f:2b:61:2a:91:cc:66:41:ab:fa:bf:8a:0b:f4:76:e9:3d:
         c3:97:30:39:5a:19:bb:ef:16:08:31:b8:a2:48:31:24:61:5e:
         ae:4d:55:de:04:4b:1d:4f:2d:9d:57:62:49:77:35:a0:37:31:
         ca:0b:66:b6
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAhYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OTIyOTJBRjExMC8GA1UEBRMoRjI3QjkzNUYzNUUwNEI4RkVBQTM5MTBERTVGMUUy
RDIzQzVFMDA3QjAeFw0yNjAzMjYwNTMxMDJaFw0yNjAzMjgwNTMxMDJaMBgxFjAU
BgNVBAMTDTY5YzRjNDk3LTUxNmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDuJ/HO5auTfcO2noW37z+B3irTzXLjSGxGYuBqVVeA8u9gwXnrP5EtCcc4
T5qA9cpUIHA3PMxw2PJ4eRiD8ie3R7Z5lD+Wf9SciSLneVAl0CnhsgWrOhfDh6ZE
FFCpF8de1YuoHEqKnenVvVJghxzaTbYko0+sUeF0b1ye8CXgdNCFNdD1uON+xd3a
lTyxQ0RF2sAZnGjokCYGAsX0Id6lt6l1+B+1AWPwTGwhoUKKHa0dmUbq3f0HNhNn
uvDMZZHpdRQ9J0+KbBFeMKI5e62GgptEOJ4mGFSQ/RPFN5lvnQWKZXpd2iqalp18
mJtK7b7FVVWeAhZMDA/IxR8oGApLAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUSrsh
hxMQolpaGID3Nl1TuKIlJKUwHwYDVR0jBBgwFoAU8nuTXzXgS4/qo5EN5fHi0jxe
AHswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjkyMjkyLzQ4MUE1RjYwOTEyOTExRUY4MzhDRUQ3Mzc2MkU5NTFBLzhudVRY
elhnUzRfcW81RU41ZkhpMGp4ZUFIcy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzhudVRYelhnUzRfcW81RU41ZkhpMGp4ZUFIcy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OTIyOTIvNDgxQTVGNjA5MTI5MTFFRjgzOENFRDczNzYy
RTk1MUEvOG51VFh6WGdTNF9xbzVFTjVmSGkwanhlQUhzLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBHaRKDV5h56t9F5+MGH2sHH8NO/SvC
/bM3CLTA1hlkDfLx/3qgvDZrOkO9XolWWBrFgH7go+jCYcZy6jJOL01TJroSOF7b
hP8OBhmjmKiLs7qaMNhVABuABUHqDpkjI0wn9Ak28waATsOlnOw9fw/CA+dVRgH0
oqaJZjQyjbDWVHIVg1zFOuNCZjd34tjSG38ZeZQbHAQ7Gip+jQY7t15eVATlSvQo
CODkMJDoG1qnmv78FpkhJ+qq4pTMdjAQwFlzKbwhZlaDDythKpHMZkGr+r+KC/R2
6T3DlzA5Whm77xYIMbiiSDEkYV6uTVXeBEsdTy2dV2JJdzWgNzHKC2a2
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:15:53 2026 by rpki-client