Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3695A2A/7AA69C3CC42E11EEB649DA4F775412E6/Zc12cqY4S1k4r9xciu-vQzS6KcA.mft
File:                     Zc12cqY4S1k4r9xciu-vQzS6KcA.mft (raw, json)
Hash identifier:          ET1hD6BoSjAccRcsdUjlhXqH4K9QZZHaGr1a+A0Ojwc=
Subject key identifier:   A9:FD:15:37:67:4E:21:75:C3:9B:B3:B8:01:F9:0D:C2:3A:51:2C:FF
Authority key identifier: 65:CD:76:72:A6:38:4B:59:38:AF:DC:5C:8A:EF:AF:43:34:BA:29:C0
Certificate issuer:       /CN=F3695A2AAF/serialNumber=65CD7672A6384B5938AFDC5C8AEFAF4334BA29C0
Certificate serial:       0322
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Zc12cqY4S1k4r9xciu-vQzS6KcA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3695A2A/7AA69C3CC42E11EEB649DA4F775412E6/Zc12cqY4S1k4r9xciu-vQzS6KcA.mft
Manifest number:          0320
Signing time:             Thu 26 Mar 2026 04:44:46 +0000
Manifest this update:     Thu 26 Mar 2026 04:44:45 +0000
Manifest next update:     Sat 28 Mar 2026 04:44:45 +0000
Files and hashes:         1: Zc12cqY4S1k4r9xciu-vQzS6KcA.crl (hash: Kpu/pk7e21Emo5LOEPp1Giw4P40zb5dkf231d0+YMx0=)
                          2: FABF9778404F11EF82E76870762E951A.roa (hash: LBsqO52AIum2DnzkQ0UyfHJJgoQtKMXAuqtuxKPonQw=)
                          3: CB0BD6A8573811F0B498479FDAE4EC9C.roa (hash: hP8TCFSZ+MtSaLGQDJ2mcF7zKJ8CzUHgiIB+ELSv+Qo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3695A2A/7AA69C3CC42E11EEB649DA4F775412E6/Zc12cqY4S1k4r9xciu-vQzS6KcA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3695A2A/7AA69C3CC42E11EEB649DA4F775412E6/Zc12cqY4S1k4r9xciu-vQzS6KcA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Zc12cqY4S1k4r9xciu-vQzS6KcA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 802 (0x322)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3695A2AAF, serialNumber=65CD7672A6384B5938AFDC5C8AEFAF4334BA29C0
        Validity
            Not Before: Mar 26 04:44:45 2026 GMT
            Not After : Mar 28 04:44:45 2026 GMT
        Subject: CN=69c4b9be-8881
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:3e:ea:54:64:f4:1c:8f:14:f9:5a:ce:a7:07:
                    8b:75:bf:37:7b:e2:06:02:5a:0a:5c:af:85:7b:8e:
                    e9:7e:5e:d1:2d:3f:f2:78:88:91:cb:47:65:46:27:
                    c0:29:04:f0:ba:35:3a:fc:f2:e6:0d:a4:d6:ce:e1:
                    9b:1e:d1:aa:e3:05:a2:8a:9d:9f:a9:b7:cc:53:fe:
                    8c:9a:e6:89:3c:e8:8d:00:30:ad:af:40:b2:1b:42:
                    b7:71:31:b0:6b:7f:d8:4b:83:13:b7:d3:c9:9b:f4:
                    0e:06:f3:2b:40:bf:dc:05:8e:29:84:7e:72:7e:0d:
                    a7:09:3f:13:7e:fe:b9:11:a6:fe:63:9c:04:12:f8:
                    61:bb:cc:9f:10:5b:ce:43:92:e8:26:f3:00:79:9f:
                    42:8c:68:f8:df:78:6a:6e:2b:24:2f:38:99:c9:21:
                    68:c2:18:8f:47:8c:03:b2:a6:08:84:d6:b9:55:02:
                    ba:72:af:b8:ba:34:97:48:46:2d:5b:32:25:7a:ee:
                    2a:b9:6a:03:9b:58:f0:e1:a8:db:32:86:b4:f0:93:
                    a4:0d:a7:56:07:07:c4:d0:4e:73:9c:79:36:76:60:
                    44:5f:d9:92:d2:6b:78:35:e1:47:87:3a:26:92:18:
                    ce:c9:cb:8b:74:3a:77:ff:8c:b1:b2:9d:af:78:ec:
                    d7:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:FD:15:37:67:4E:21:75:C3:9B:B3:B8:01:F9:0D:C2:3A:51:2C:FF
            X509v3 Authority Key Identifier:
                keyid:65:CD:76:72:A6:38:4B:59:38:AF:DC:5C:8A:EF:AF:43:34:BA:29:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3695A2A/7AA69C3CC42E11EEB649DA4F775412E6/Zc12cqY4S1k4r9xciu-vQzS6KcA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Zc12cqY4S1k4r9xciu-vQzS6KcA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3695A2A/7AA69C3CC42E11EEB649DA4F775412E6/Zc12cqY4S1k4r9xciu-vQzS6KcA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:c1:cc:41:cc:d5:b4:9c:35:45:5f:e4:98:3f:53:8a:ea:55:
         1a:b7:cb:6c:71:6e:75:0d:bc:18:3a:22:f8:87:32:cb:5b:c0:
         4a:9f:7a:69:a8:f9:d6:94:c4:24:a1:ca:9d:7c:85:8a:bb:03:
         d0:f1:65:df:1d:34:18:c6:e2:73:41:45:03:9a:5a:54:03:f1:
         3a:17:b2:7b:0c:1a:7f:66:77:90:64:8f:92:4a:0a:3b:79:95:
         8b:f1:9d:af:9a:e8:dc:58:b8:2b:ba:a3:1a:67:c7:10:4d:70:
         4d:f9:2e:79:01:9f:ec:67:50:51:ff:7c:b8:1c:bd:87:ac:dc:
         c7:79:5d:83:d7:a3:66:84:1a:d6:d7:3a:d2:37:d8:cc:00:73:
         8e:43:95:89:8d:c9:ce:d5:4c:56:4a:93:f4:0d:5f:48:da:75:
         46:76:d3:cf:c2:0b:17:1c:71:76:26:0e:c4:0d:2c:2a:a1:8e:
         bc:93:8f:8c:c6:09:c4:21:8b:f9:d0:8d:36:74:46:5a:42:0a:
         a5:fc:33:49:c3:dc:26:e3:e2:0d:32:64:40:ec:32:83:af:71:
         7e:5e:95:6c:9a:18:aa:34:b9:02:1a:7d:58:25:02:9b:a0:40:
         67:f6:23:c1:7c:5a:59:2c:fd:be:eb:53:85:ff:a1:07:e4:57:
         48:bd:35:1d
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAyIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OTVBMkFBRjExMC8GA1UEBRMoNjVDRDc2NzJBNjM4NEI1OTM4QUZEQzVDOEFFRkFG
NDMzNEJBMjlDMDAeFw0yNjAzMjYwNDQ0NDVaFw0yNjAzMjgwNDQ0NDVaMBgxFjAU
BgNVBAMTDTY5YzRiOWJlLTg4ODEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC6PupUZPQcjxT5Ws6nB4t1vzd74gYCWgpcr4V7jul+XtEtP/J4iJHLR2VG
J8ApBPC6NTr88uYNpNbO4Zse0arjBaKKnZ+pt8xT/oya5ok86I0AMK2vQLIbQrdx
MbBrf9hLgxO308mb9A4G8ytAv9wFjimEfnJ+DacJPxN+/rkRpv5jnAQS+GG7zJ8Q
W85Dkugm8wB5n0KMaPjfeGpuKyQvOJnJIWjCGI9HjAOypgiE1rlVArpyr7i6NJdI
Ri1bMiV67iq5agObWPDhqNsyhrTwk6QNp1YHB8TQTnOceTZ2YERf2ZLSa3g14UeH
OiaSGM7Jy4t0Onf/jLGyna947NeRAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUqf0V
N2dOIXXDm7O4AfkNwjpRLP8wHwYDVR0jBBgwFoAUZc12cqY4S1k4r9xciu+vQzS6
KcAwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjk1QTJBLzdBQTY5QzNDQzQyRTExRUVCNjQ5REE0Rjc3NTQxMkU2L1pjMTJj
cVk0UzFrNHI5eGNpdS12UXpTNktjQS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1pjMTJjcVk0UzFrNHI5eGNpdS12UXpTNktjQS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OTVBMkEvN0FBNjlDM0NDNDJFMTFFRUI2NDlEQTRGNzc1
NDEyRTYvWmMxMmNxWTRTMWs0cjl4Y2l1LXZRelM2S2NBLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCzwcxBzNW0nDVFX+SYP1OK6lUat8ts
cW51DbwYOiL4hzLLW8BKn3ppqPnWlMQkocqdfIWKuwPQ8WXfHTQYxuJzQUUDmlpU
A/E6F7J7DBp/ZneQZI+SSgo7eZWL8Z2vmujcWLgruqMaZ8cQTXBN+S55AZ/sZ1BR
/3y4HL2HrNzHeV2D16NmhBrW1zrSN9jMAHOOQ5WJjcnO1UxWSpP0DV9I2nVGdtPP
wgsXHHF2Jg7EDSwqoY68k4+MxgnEIYv50I02dEZaQgql/DNJw9wm4+INMmRA7DKD
r3F+XpVsmhiqNLkCGn1YJQKboEBn9iPBfFpZLP2+61OF/6EH5FdIvTUd
-----END CERTIFICATE-----
Generated at Thu Mar 26 21:05:16 2026 by rpki-client