Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369BFA8/FBBFE27EB22111EF8BDA705C762E951A/zXRmXLHPyFlppqWrpHLD6irSVc4.mft
File:                     zXRmXLHPyFlppqWrpHLD6irSVc4.mft (raw, json)
Hash identifier:          wdxHVi+2Gyd7jf3gpQKwPegJgSO8wkAUOrbH3QVCHhU=
Subject key identifier:   3C:3E:DA:DD:00:6A:17:46:1C:5E:14:71:A0:42:69:AA:AE:54:2A:7C
Authority key identifier: CD:74:66:5C:B1:CF:C8:59:69:A6:A5:AB:A4:72:C3:EA:2A:D2:55:CE
Certificate issuer:       /CN=F369BFA8AF/serialNumber=CD74665CB1CFC85969A6A5ABA472C3EA2AD255CE
Certificate serial:       01E9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/zXRmXLHPyFlppqWrpHLD6irSVc4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369BFA8/FBBFE27EB22111EF8BDA705C762E951A/zXRmXLHPyFlppqWrpHLD6irSVc4.mft
Manifest number:          01E8
Signing time:             Thu 26 Mar 2026 05:37:05 +0000
Manifest this update:     Thu 26 Mar 2026 05:37:04 +0000
Manifest next update:     Sat 28 Mar 2026 05:37:04 +0000
Files and hashes:         1: zXRmXLHPyFlppqWrpHLD6irSVc4.crl (hash: TPT9zq1jReVGqV1UY8fZ3+okp+fZqf8P+IlHFzIbQDg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369BFA8/FBBFE27EB22111EF8BDA705C762E951A/zXRmXLHPyFlppqWrpHLD6irSVc4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369BFA8/FBBFE27EB22111EF8BDA705C762E951A/zXRmXLHPyFlppqWrpHLD6irSVc4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/zXRmXLHPyFlppqWrpHLD6irSVc4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 489 (0x1e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369BFA8AF, serialNumber=CD74665CB1CFC85969A6A5ABA472C3EA2AD255CE
        Validity
            Not Before: Mar 26 05:37:04 2026 GMT
            Not After : Mar 28 05:37:04 2026 GMT
        Subject: CN=69c4c601-fa64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:4a:b8:16:f2:40:d8:a2:73:85:dd:41:ec:97:
                    01:a2:15:9d:b0:fa:90:a3:d8:55:e1:c9:55:a1:06:
                    f4:5c:3f:7b:a6:6d:93:99:fd:d6:85:99:18:82:2e:
                    9b:05:c1:0b:0d:7b:a0:eb:f9:97:48:8b:a2:05:4c:
                    6e:7c:b1:16:a3:18:00:58:82:c5:de:51:6e:75:5c:
                    e7:02:a7:b4:95:f3:73:0b:76:af:a2:d5:72:b5:ae:
                    2d:ce:aa:69:ee:45:d7:8e:70:0c:1d:2a:d2:06:6b:
                    f2:52:93:a9:b4:61:4a:a4:37:03:b8:fa:5f:d0:8d:
                    0d:ce:90:43:40:18:41:99:46:80:6b:fd:47:34:c9:
                    e2:15:00:80:c2:04:41:c4:ab:d2:a2:d7:a0:94:bd:
                    1d:31:64:a9:dd:78:7a:a0:21:01:6c:7a:55:05:ed:
                    41:2b:3c:aa:40:bd:92:d6:dd:9a:f2:75:ec:01:93:
                    37:4c:3c:0a:70:c1:7a:d0:71:2c:46:1e:16:b8:d0:
                    a1:6c:e5:aa:ed:97:4e:54:2c:cf:e6:a5:c4:c0:c6:
                    f4:d5:81:52:38:a4:e3:78:80:aa:82:3f:12:ee:7b:
                    fe:d1:c7:50:00:3b:4f:79:e8:d1:dd:a1:f9:d5:5a:
                    b9:05:2a:4c:fd:b5:e3:d6:32:7c:1e:ad:c0:64:84:
                    80:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:3E:DA:DD:00:6A:17:46:1C:5E:14:71:A0:42:69:AA:AE:54:2A:7C
            X509v3 Authority Key Identifier:
                keyid:CD:74:66:5C:B1:CF:C8:59:69:A6:A5:AB:A4:72:C3:EA:2A:D2:55:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369BFA8/FBBFE27EB22111EF8BDA705C762E951A/zXRmXLHPyFlppqWrpHLD6irSVc4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zXRmXLHPyFlppqWrpHLD6irSVc4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369BFA8/FBBFE27EB22111EF8BDA705C762E951A/zXRmXLHPyFlppqWrpHLD6irSVc4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:4c:29:b6:a9:05:0b:ef:55:2d:f2:b3:be:b1:95:33:03:e6:
         e0:89:ae:d6:eb:03:c1:c1:4f:57:c2:61:f5:08:de:31:81:ab:
         b9:ce:96:7d:17:bd:9a:82:49:dc:24:91:9d:20:1c:4c:93:0f:
         b5:f6:73:db:69:0b:8b:c3:8d:0d:a6:af:8a:b2:9e:8c:35:ce:
         69:62:ff:f8:7b:02:ea:6b:c6:64:67:63:7d:bb:50:83:0a:60:
         9b:8f:8e:5b:7c:24:0f:3c:f9:af:9c:cc:58:4d:0f:1d:50:c0:
         27:7f:49:e7:17:04:10:2d:ce:9d:ba:04:85:44:44:fd:75:c8:
         70:b4:0b:fd:24:ea:2c:a9:e5:17:37:26:df:26:e5:54:c7:d8:
         5c:49:14:33:c8:1d:f8:04:0b:90:ec:bc:6a:49:36:99:fd:64:
         4e:7d:03:2e:0f:40:e3:b6:6b:e0:48:8f:a0:de:61:4e:fc:a4:
         67:9f:92:9f:49:b0:7b:6c:43:3e:e7:8d:9e:42:02:11:76:c6:
         59:e4:37:33:8b:8c:f5:f6:f6:d4:f0:10:02:bb:2a:e5:12:f9:
         9a:fe:21:a4:19:fe:16:dd:4c:c5:26:2c:cf:15:38:ca:d8:30:
         c2:64:6b:e5:af:f9:8e:2e:c5:42:38:05:2c:a8:0a:78:cb:23:
         86:c2:58:bd
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAekwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OUJGQThBRjExMC8GA1UEBRMoQ0Q3NDY2NUNCMUNGQzg1OTY5QTZBNUFCQTQ3MkMz
RUEyQUQyNTVDRTAeFw0yNjAzMjYwNTM3MDRaFw0yNjAzMjgwNTM3MDRaMBgxFjAU
BgNVBAMTDTY5YzRjNjAxLWZhNjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCTSrgW8kDYonOF3UHslwGiFZ2w+pCj2FXhyVWhBvRcP3umbZOZ/daFmRiC
LpsFwQsNe6Dr+ZdIi6IFTG58sRajGABYgsXeUW51XOcCp7SV83MLdq+i1XK1ri3O
qmnuRdeOcAwdKtIGa/JSk6m0YUqkNwO4+l/QjQ3OkENAGEGZRoBr/Uc0yeIVAIDC
BEHEq9Ki16CUvR0xZKndeHqgIQFselUF7UErPKpAvZLW3ZrydewBkzdMPApwwXrQ
cSxGHha40KFs5artl05ULM/mpcTAxvTVgVI4pON4gKqCPxLue/7Rx1AAO0956NHd
ofnVWrkFKkz9tePWMnwercBkhICpAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUPD7a
3QBqF0YcXhRxoEJpqq5UKnwwHwYDVR0jBBgwFoAUzXRmXLHPyFlppqWrpHLD6irS
Vc4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjlCRkE4L0ZCQkZFMjdFQjIyMTExRUY4QkRBNzA1Qzc2MkU5NTFBL3pYUm1Y
TEhQeUZscHBxV3JwSExENmlyU1ZjNC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3pYUm1YTEhQeUZscHBxV3JwSExENmlyU1ZjNC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OUJGQTgvRkJCRkUyN0VCMjIxMTFFRjhCREE3MDVDNzYy
RTk1MUEvelhSbVhMSFB5RmxwcHFXcnBITEQ2aXJTVmM0Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBcTCm2qQUL71Ut8rO+sZUzA+bgia7W
6wPBwU9XwmH1CN4xgau5zpZ9F72agkncJJGdIBxMkw+19nPbaQuLw40Npq+Ksp6M
Nc5pYv/4ewLqa8ZkZ2N9u1CDCmCbj45bfCQPPPmvnMxYTQ8dUMAnf0nnFwQQLc6d
ugSFRET9dchwtAv9JOosqeUXNybfJuVUx9hcSRQzyB34BAuQ7LxqSTaZ/WROfQMu
D0DjtmvgSI+g3mFO/KRnn5KfSbB7bEM+542eQgIRdsZZ5Dczi4z19vbU8BACuyrl
Evma/iGkGf4W3UzFJizPFTjK2DDCZGvlr/mOLsVCOAUsqAp4yyOGwli9
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:51:42 2026 by rpki-client