Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369A175/70EF6578D1D011F089F2F4E0DAE4EC9C/p2GjM_sHiCoLh27yN6AEmoSNfjE.mft
File:                     p2GjM_sHiCoLh27yN6AEmoSNfjE.mft (raw, json)
Hash identifier:          d0sPc0MUNTIzEBl+G7DWZEIFUL5FG8Ags+QMLCGKIkU=
Subject key identifier:   0A:57:A2:54:52:20:7C:6E:52:82:66:29:F3:53:96:66:97:FA:3B:A1
Authority key identifier: A7:61:A3:33:FB:07:88:2A:0B:87:6E:F2:37:A0:04:9A:84:8D:7E:31
Certificate issuer:       /CN=F369A175AF/serialNumber=A761A333FB07882A0B876EF237A0049A848D7E31
Certificate serial:       73
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/p2GjM_sHiCoLh27yN6AEmoSNfjE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369A175/70EF6578D1D011F089F2F4E0DAE4EC9C/p2GjM_sHiCoLh27yN6AEmoSNfjE.mft
Manifest number:          72
Signing time:             Thu 26 Mar 2026 06:23:30 +0000
Manifest this update:     Thu 26 Mar 2026 06:23:30 +0000
Manifest next update:     Sat 28 Mar 2026 06:23:30 +0000
Files and hashes:         1: p2GjM_sHiCoLh27yN6AEmoSNfjE.crl (hash: Oef9k+UkChKIWsvARfpbesNNNJJI+eyfbDfhqAyepSk=)
                          2: D8BE6E24D1D011F081FB64E3DAE4EC9C.roa (hash: 2R26vV4RIhLeHcqd7Et7YVYkAWTwdZTJEaPCxT554BM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369A175/70EF6578D1D011F089F2F4E0DAE4EC9C/p2GjM_sHiCoLh27yN6AEmoSNfjE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369A175/70EF6578D1D011F089F2F4E0DAE4EC9C/p2GjM_sHiCoLh27yN6AEmoSNfjE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/p2GjM_sHiCoLh27yN6AEmoSNfjE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 115 (0x73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369A175AF, serialNumber=A761A333FB07882A0B876EF237A0049A848D7E31
        Validity
            Not Before: Mar 26 06:23:30 2026 GMT
            Not After : Mar 28 06:23:30 2026 GMT
        Subject: CN=69c4d0e2-27e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:ad:83:ea:a7:21:44:48:fd:7b:20:8d:2e:86:
                    d4:60:67:5e:a2:e0:53:37:8a:10:fd:ea:0b:06:bf:
                    8d:0e:25:a0:19:24:07:7e:7d:3f:4d:f7:31:24:c1:
                    2b:7f:2a:c7:a1:89:aa:be:b6:e1:46:aa:2c:6b:98:
                    70:9d:a3:e4:4e:dc:c6:a5:59:c9:80:d9:3a:d8:0a:
                    e2:d2:44:95:b2:52:4e:b2:91:f6:ea:f3:69:1d:f9:
                    0f:d1:2f:1a:c6:a8:a6:af:67:4d:14:1b:99:56:b4:
                    97:58:fc:64:47:98:37:8c:95:ca:e9:35:0b:35:4c:
                    75:4d:0b:df:f5:f7:62:9a:40:8a:b4:a9:1c:76:64:
                    96:6b:34:bd:35:0f:f1:83:fa:68:6c:a4:86:85:f4:
                    39:a3:5e:0a:4c:29:de:05:e6:6c:7d:2c:e1:a4:de:
                    d6:de:7b:23:d6:58:33:ba:79:18:5a:c9:48:7f:48:
                    ef:78:0c:d5:0c:cf:0f:8f:21:65:a4:b3:8a:7d:f9:
                    81:bc:01:ee:83:fe:df:9c:11:e0:fe:6f:8d:34:12:
                    36:91:26:4f:11:4e:99:69:68:54:e4:24:e8:19:f4:
                    f7:16:5f:11:6a:c2:1f:14:5b:34:23:c6:c2:57:ef:
                    ad:0f:80:4f:5b:6e:3d:e5:41:d2:9b:37:93:9e:02:
                    8d:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:57:A2:54:52:20:7C:6E:52:82:66:29:F3:53:96:66:97:FA:3B:A1
            X509v3 Authority Key Identifier:
                keyid:A7:61:A3:33:FB:07:88:2A:0B:87:6E:F2:37:A0:04:9A:84:8D:7E:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369A175/70EF6578D1D011F089F2F4E0DAE4EC9C/p2GjM_sHiCoLh27yN6AEmoSNfjE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/p2GjM_sHiCoLh27yN6AEmoSNfjE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369A175/70EF6578D1D011F089F2F4E0DAE4EC9C/p2GjM_sHiCoLh27yN6AEmoSNfjE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:5d:6b:f3:d2:68:e7:a3:18:67:a8:2d:86:4a:84:36:7a:b3:
         9b:a6:e2:36:2f:af:ee:df:e4:ed:6f:7f:1d:37:6f:ad:00:31:
         a0:91:d5:5e:5b:e2:a0:bc:8e:33:cf:5f:da:b1:6f:0f:ff:59:
         e8:c5:2b:9f:32:88:29:c1:1e:53:a3:de:b6:6c:99:2f:98:58:
         23:bd:34:62:76:66:e7:e7:8b:fc:5a:bb:34:c0:a7:b6:09:b7:
         1d:29:81:ea:5f:93:70:84:e3:61:ba:96:a0:0b:32:a4:c1:ee:
         45:ea:4e:0e:2b:4b:7a:5f:ef:44:61:13:5d:84:df:eb:46:35:
         ad:d9:55:1c:9f:27:5d:97:e0:dd:d4:2c:f3:d8:0a:c3:0f:57:
         ce:38:f4:29:10:8b:55:f6:7b:6b:09:91:9d:53:02:84:f6:58:
         da:01:3d:3a:f7:59:e9:46:e3:59:d7:c0:b4:08:ee:ec:dc:4d:
         fc:8c:20:b1:83:c3:dd:6e:e1:21:e8:b8:65:2a:65:13:a2:00:
         b9:48:a4:61:8a:90:93:0f:71:43:a1:8e:d0:5a:52:eb:fe:a9:
         2f:c4:c4:a8:bd:41:14:b9:70:75:c3:bb:4c:0b:6f:88:d0:14:
         77:1f:87:19:46:58:84:89:d6:6c:e1:f8:dc:07:48:65:7a:39:
         e9:d6:1b:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:39:37 2026 by rpki-client