Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3698125/9ED7EB1E838411EEAF8131354AD9E6FC/PHnw_LuwwEHItPbe4QOwJRlRbvQ.mft
File:                     PHnw_LuwwEHItPbe4QOwJRlRbvQ.mft (raw, json)
Hash identifier:          S+wLb05d54WdlXGjT/jMl5gU0lo2bqMrvVo56al4vi0=
Subject key identifier:   29:17:9B:D3:AF:13:1D:ED:F0:BF:EA:AB:3A:C1:63:02:57:57:A5:B3
Authority key identifier: 3C:79:F0:FC:BB:B0:C0:41:C8:B4:F6:DE:E1:03:B0:25:19:51:6E:F4
Certificate issuer:       /CN=F3698125AF/serialNumber=3C79F0FCBBB0C041C8B4F6DEE103B02519516EF4
Certificate serial:       0377
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PHnw_LuwwEHItPbe4QOwJRlRbvQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3698125/9ED7EB1E838411EEAF8131354AD9E6FC/PHnw_LuwwEHItPbe4QOwJRlRbvQ.mft
Manifest number:          0376
Signing time:             Thu 26 Mar 2026 04:32:19 +0000
Manifest this update:     Thu 26 Mar 2026 04:32:18 +0000
Manifest next update:     Sat 28 Mar 2026 04:32:18 +0000
Files and hashes:         1: PHnw_LuwwEHItPbe4QOwJRlRbvQ.crl (hash: OtUr78oQ3JHadCsi/sbaUtkrXAkn6ldYaL4fZFWLJsg=)
                          2: 7505B06024CD11EF9410DD1A7DDC24C2.roa (hash: vn59PtsA74MEKr6H9TKVqZemfFNq5OYAs+pWATJBHgA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3698125/9ED7EB1E838411EEAF8131354AD9E6FC/PHnw_LuwwEHItPbe4QOwJRlRbvQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3698125/9ED7EB1E838411EEAF8131354AD9E6FC/PHnw_LuwwEHItPbe4QOwJRlRbvQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PHnw_LuwwEHItPbe4QOwJRlRbvQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 887 (0x377)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3698125AF, serialNumber=3C79F0FCBBB0C041C8B4F6DEE103B02519516EF4
        Validity
            Not Before: Mar 26 04:32:18 2026 GMT
            Not After : Mar 28 04:32:18 2026 GMT
        Subject: CN=69c4b6d3-551d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:29:ff:db:9d:00:a4:d9:9f:cc:72:5f:46:67:
                    df:a9:0f:da:7b:47:56:02:2f:22:39:39:0f:f7:00:
                    ac:ca:d3:ad:38:aa:2b:00:0e:22:6e:1a:39:06:85:
                    a7:99:5e:1a:5a:50:de:70:54:3a:1c:89:95:7c:bd:
                    91:a0:e5:e4:cb:b4:33:de:24:36:83:50:8a:b9:0e:
                    b5:e4:17:25:f6:2d:0f:31:6f:21:58:f0:37:48:64:
                    b5:67:cb:25:55:ce:63:77:2a:32:e7:a1:04:fd:89:
                    d1:4e:b6:60:cd:1d:09:09:4b:c4:96:12:44:96:ba:
                    1f:4b:94:a1:bb:3f:6b:4e:d8:78:d2:d5:d2:10:6e:
                    83:df:fd:0e:85:ae:db:bc:37:23:dd:55:2c:3b:8f:
                    21:ca:54:58:cb:c8:4d:e9:e2:5c:ef:6f:c3:fd:2b:
                    bb:64:94:48:e2:d3:a7:bb:48:1b:85:ce:d2:d7:58:
                    09:81:8d:88:f0:63:2b:1e:a6:6d:34:a5:9b:e7:78:
                    b5:1b:17:53:c8:83:3b:a3:fa:40:b0:e0:97:ce:48:
                    60:c2:88:ee:0f:17:3b:f4:8d:dd:6b:08:f6:59:23:
                    40:24:62:a0:b0:63:e3:0d:bc:e3:95:d8:38:ea:31:
                    b1:3c:cb:14:b2:e6:aa:bb:5c:dc:fa:4a:bf:44:b4:
                    1a:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:17:9B:D3:AF:13:1D:ED:F0:BF:EA:AB:3A:C1:63:02:57:57:A5:B3
            X509v3 Authority Key Identifier:
                keyid:3C:79:F0:FC:BB:B0:C0:41:C8:B4:F6:DE:E1:03:B0:25:19:51:6E:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3698125/9ED7EB1E838411EEAF8131354AD9E6FC/PHnw_LuwwEHItPbe4QOwJRlRbvQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PHnw_LuwwEHItPbe4QOwJRlRbvQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3698125/9ED7EB1E838411EEAF8131354AD9E6FC/PHnw_LuwwEHItPbe4QOwJRlRbvQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:1f:9b:1a:35:27:7a:52:9d:be:9a:1e:fb:9a:c2:ce:ce:1a:
         7e:7d:6b:3f:6e:c6:21:ff:2d:7b:cc:b1:cd:c5:ee:12:b9:24:
         bc:fb:be:ed:42:cd:a8:c5:b7:1f:ca:9c:e7:c8:61:1f:d1:7f:
         49:f1:e6:07:0b:cf:70:95:51:ec:4b:28:d0:08:a6:16:cb:2f:
         ca:3d:e1:6f:63:7e:45:22:a4:a6:36:1f:93:89:00:cc:5f:4e:
         49:37:da:b5:e9:78:9e:7b:c3:8e:c7:3c:05:d3:c1:44:1a:20:
         33:52:5c:7a:9f:75:cb:07:b5:f5:ab:6b:9a:1d:c5:f3:ac:2f:
         7a:88:4c:91:06:96:ac:48:da:68:04:1b:55:a0:da:49:a0:91:
         6f:d9:2d:93:f9:fd:c4:01:34:01:09:03:d5:e1:67:39:b6:1a:
         18:64:98:67:ff:07:17:97:1f:2a:57:8c:3c:3d:ce:f4:a2:bc:
         2b:a5:11:01:3a:54:b5:cd:8a:ed:1a:23:d1:c3:40:93:af:6e:
         c6:be:82:64:e3:c0:72:a4:74:62:be:01:63:7a:a0:eb:f5:0d:
         4e:c9:fd:60:de:35:4a:72:d1:a6:50:92:2a:44:89:44:0a:9b:
         ee:33:62:1a:bc:51:fb:9a:53:c1:78:43:55:df:4b:d1:69:ce:
         bf:b0:c3:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:21:05 2026 by rpki-client