Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3693B0E/F2C8350EEFAB11F0B070BDD0DAE4EC9C/jyoGTsQZRX82urEc33DzzNG4eHI.mft
File:                     jyoGTsQZRX82urEc33DzzNG4eHI.mft (raw, json)
Hash identifier:          akyUbXkw1TvoK+aeG8Xs1YPPcqRnb9iuVRgbyUVVmxQ=
Subject key identifier:   45:47:A4:EE:3E:F8:F5:49:E8:23:D2:7B:9C:60:2F:26:B6:14:CF:46
Authority key identifier: 8F:2A:06:4E:C4:19:45:7F:36:BA:B1:1C:DF:70:F3:CC:D1:B8:78:72
Certificate issuer:       /CN=F3693B0EAF/serialNumber=8F2A064EC419457F36BAB11CDF70F3CCD1B87872
Certificate serial:       4C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/jyoGTsQZRX82urEc33DzzNG4eHI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3693B0E/F2C8350EEFAB11F0B070BDD0DAE4EC9C/jyoGTsQZRX82urEc33DzzNG4eHI.mft
Manifest number:          4B
Signing time:             Thu 26 Mar 2026 06:28:47 +0000
Manifest this update:     Thu 26 Mar 2026 06:28:46 +0000
Manifest next update:     Sat 28 Mar 2026 06:28:46 +0000
Files and hashes:         1: jyoGTsQZRX82urEc33DzzNG4eHI.crl (hash: je8NGv/msxcNQJFbWfTL9R3mn/aWp7WR6z6oTNCZgOQ=)
                          2: FCEEFBDEEFAC11F0808042D5DAE4EC9C.roa (hash: krRtEvxWWCuCwrpIVIl6JLjXUIjvI/lJBnWBVzu/tKA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3693B0E/F2C8350EEFAB11F0B070BDD0DAE4EC9C/jyoGTsQZRX82urEc33DzzNG4eHI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3693B0E/F2C8350EEFAB11F0B070BDD0DAE4EC9C/jyoGTsQZRX82urEc33DzzNG4eHI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/jyoGTsQZRX82urEc33DzzNG4eHI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 76 (0x4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3693B0EAF, serialNumber=8F2A064EC419457F36BAB11CDF70F3CCD1B87872
        Validity
            Not Before: Mar 26 06:28:46 2026 GMT
            Not After : Mar 28 06:28:46 2026 GMT
        Subject: CN=69c4d21f-65ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:47:6d:23:44:d1:2f:c2:a3:63:76:9f:9f:6c:
                    ac:6b:69:fe:18:a9:22:48:c1:ec:78:70:0f:90:e6:
                    99:02:80:02:fd:91:ee:58:b4:ce:74:d0:5b:77:6b:
                    ed:a3:41:4a:1f:d0:6d:68:de:00:81:e8:1d:48:96:
                    9b:7b:d0:e7:3a:8b:96:3a:22:eb:fb:87:c1:a7:ed:
                    6f:03:c5:76:0d:16:4c:bf:5d:34:44:bf:60:f0:98:
                    2c:3b:85:09:78:45:06:cb:46:aa:37:74:c6:2a:40:
                    b8:80:9d:dd:72:ab:cb:a5:03:58:a3:41:b9:47:80:
                    b0:43:52:29:ee:4d:c6:6a:33:b9:e5:75:d5:c7:50:
                    f7:33:e6:c0:86:f1:1a:21:29:f0:8a:cc:6c:cb:98:
                    93:13:c4:03:c8:48:5b:1f:43:5e:9a:06:d5:a8:e7:
                    10:b6:f3:95:57:e5:fd:f4:a8:1b:61:58:e0:8f:33:
                    65:7d:14:b4:3e:af:54:36:08:ca:33:27:de:12:37:
                    8a:2d:94:30:46:e3:d7:c4:cf:11:97:00:96:61:06:
                    20:cd:e7:be:f2:d3:e6:5d:78:b2:b3:26:ff:d5:b8:
                    58:99:91:3e:bb:47:dd:ea:ac:88:03:ba:cd:63:77:
                    5d:a9:a5:9b:f0:cf:1d:3e:70:55:c3:f9:ba:9a:17:
                    0b:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:47:A4:EE:3E:F8:F5:49:E8:23:D2:7B:9C:60:2F:26:B6:14:CF:46
            X509v3 Authority Key Identifier:
                keyid:8F:2A:06:4E:C4:19:45:7F:36:BA:B1:1C:DF:70:F3:CC:D1:B8:78:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3693B0E/F2C8350EEFAB11F0B070BDD0DAE4EC9C/jyoGTsQZRX82urEc33DzzNG4eHI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/jyoGTsQZRX82urEc33DzzNG4eHI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3693B0E/F2C8350EEFAB11F0B070BDD0DAE4EC9C/jyoGTsQZRX82urEc33DzzNG4eHI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:9c:69:34:17:37:ea:63:3b:c0:c0:b2:f4:85:f8:8a:e2:b4:
         6e:9b:08:09:d5:73:e4:34:a7:71:d7:2d:8c:5a:eb:06:6a:59:
         88:f2:99:c3:e6:a5:15:a0:39:4d:9f:1f:03:07:c3:3b:68:9c:
         96:bb:4b:40:0d:8b:98:22:51:ce:35:8b:c9:61:70:a0:40:84:
         ab:43:ab:96:d5:06:3f:66:8b:bf:c5:0e:00:c5:5d:c8:30:2c:
         0e:15:55:47:ea:e5:dd:f6:3a:c1:71:4b:83:a1:ed:8c:b3:df:
         ff:74:30:1b:31:c0:8c:f7:b8:c1:7d:9b:12:87:4e:7a:32:1c:
         aa:a9:38:ba:77:f2:3c:15:a1:67:5a:dd:ee:c4:c3:ad:a1:9d:
         5d:04:49:51:b9:58:02:aa:10:49:84:1c:6b:79:a2:09:d5:b7:
         fc:57:a0:b3:d3:04:5b:4d:ee:90:b4:b6:d9:0f:fb:c2:15:ec:
         d9:96:71:17:03:b6:ad:d7:33:c5:68:b1:cf:98:71:65:a3:14:
         81:8b:1f:91:78:cc:c2:92:84:a0:7c:a6:93:17:bc:1f:f0:2d:
         0f:1a:bf:82:3a:fc:de:a4:ad:2b:2b:d1:ee:7c:77:5a:40:23:
         b1:37:c3:3d:8b:b5:9b:a5:d3:45:73:cd:71:9f:43:78:77:50:
         3a:ef:b8:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:55:18 2026 by rpki-client