Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369C3F1/F4BE55A06C3F11EF95D9E89B762E951A/IGKsHBhX7ixX9xZrmADtH4952XE.mft
File:                     IGKsHBhX7ixX9xZrmADtH4952XE.mft (raw, json)
Hash identifier:          rfjMWZUMPLjPNvOCcdmK7fSX+XBiF2UyF50y4Kq5nfQ=
Subject key identifier:   B5:D5:97:0B:85:92:2E:5F:C4:B3:6A:EF:15:17:6E:2C:EE:47:CB:3F
Authority key identifier: 20:62:AC:1C:18:57:EE:2C:57:F7:16:6B:98:00:ED:1F:8F:79:D9:71
Certificate issuer:       /CN=F369C3F1AF/serialNumber=2062AC1C1857EE2C57F7166B9800ED1F8F79D971
Certificate serial:       0249
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/IGKsHBhX7ixX9xZrmADtH4952XE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369C3F1/F4BE55A06C3F11EF95D9E89B762E951A/IGKsHBhX7ixX9xZrmADtH4952XE.mft
Manifest number:          0247
Signing time:             Thu 26 Mar 2026 05:21:32 +0000
Manifest this update:     Thu 26 Mar 2026 05:21:32 +0000
Manifest next update:     Sat 28 Mar 2026 05:21:32 +0000
Files and hashes:         1: IGKsHBhX7ixX9xZrmADtH4952XE.crl (hash: q77Qf2he/uj19PzoM/yXzHIRQpENjuz9d8VJvOb8KFI=)
                          2: 730CF53E6F7811EFB7469458762E951A.roa (hash: 4Xr+HaCJbqAah+5S3H7APXwnc3AnA1LsHigd1Wadgok=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369C3F1/F4BE55A06C3F11EF95D9E89B762E951A/IGKsHBhX7ixX9xZrmADtH4952XE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369C3F1/F4BE55A06C3F11EF95D9E89B762E951A/IGKsHBhX7ixX9xZrmADtH4952XE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/IGKsHBhX7ixX9xZrmADtH4952XE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 585 (0x249)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369C3F1AF, serialNumber=2062AC1C1857EE2C57F7166B9800ED1F8F79D971
        Validity
            Not Before: Mar 26 05:21:32 2026 GMT
            Not After : Mar 28 05:21:32 2026 GMT
        Subject: CN=69c4c25c-9121
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f4:b3:6f:72:49:00:c0:1e:9b:ba:d7:0c:ff:
                    ea:16:f0:6b:03:e2:86:49:92:dd:0d:65:6c:b1:ea:
                    2c:02:c1:9c:e9:de:5a:a8:bb:2c:ad:99:bc:36:b2:
                    31:49:37:a8:13:fd:95:d1:65:21:24:38:49:0a:72:
                    0c:2e:35:47:a9:ba:77:e4:48:3f:a5:9b:4a:90:77:
                    13:e5:2b:e0:e8:76:9e:5d:87:c2:b7:79:ca:0a:af:
                    d5:d0:63:a1:63:39:6a:ce:b6:55:27:c2:c5:f6:08:
                    49:9d:fb:37:aa:85:2d:2a:06:78:bb:2e:50:3b:a3:
                    d7:71:a1:b7:af:ec:9c:48:50:6a:65:1d:2a:34:af:
                    e4:ac:39:ae:86:32:17:49:6f:58:29:fa:eb:46:4c:
                    20:17:6b:20:79:12:44:e0:84:40:51:fd:18:9b:bc:
                    46:ff:f6:8b:7a:a8:ba:95:e3:32:06:a4:99:a8:dd:
                    a2:68:3c:76:ce:44:29:d1:12:b5:44:ab:d3:4e:b1:
                    4d:b1:75:71:41:74:94:a3:ea:b8:be:40:03:57:0e:
                    1d:a7:2b:fb:34:d6:e9:4e:18:55:95:b9:d7:76:a5:
                    5b:ee:4a:37:92:fb:5e:c7:d1:1b:fd:7f:42:36:10:
                    7f:7a:7b:b7:fc:f5:17:9d:70:52:d6:5e:a8:dc:8d:
                    47:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:D5:97:0B:85:92:2E:5F:C4:B3:6A:EF:15:17:6E:2C:EE:47:CB:3F
            X509v3 Authority Key Identifier:
                keyid:20:62:AC:1C:18:57:EE:2C:57:F7:16:6B:98:00:ED:1F:8F:79:D9:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369C3F1/F4BE55A06C3F11EF95D9E89B762E951A/IGKsHBhX7ixX9xZrmADtH4952XE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/IGKsHBhX7ixX9xZrmADtH4952XE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369C3F1/F4BE55A06C3F11EF95D9E89B762E951A/IGKsHBhX7ixX9xZrmADtH4952XE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:0b:20:fa:8f:25:57:f9:30:23:c9:4c:80:46:23:1a:14:34:
         84:b3:39:b8:ab:4d:0d:8c:1c:c9:8d:07:88:00:ae:fd:34:53:
         bc:8a:3c:42:68:e4:a2:26:ae:0d:d0:1d:38:52:fa:e5:a4:0b:
         4f:9e:14:91:cf:4a:f6:79:f2:c9:52:7e:9c:96:03:48:ef:a0:
         d8:d8:a2:57:88:3f:03:c2:d0:7e:78:ef:42:8c:b4:62:f9:20:
         14:89:a8:8b:c7:a6:99:75:dd:e7:a9:35:de:09:70:9e:97:e5:
         7a:de:7e:61:64:91:63:69:c2:5b:15:d7:d9:74:d5:23:03:b3:
         f3:37:76:9e:51:1b:af:29:83:1c:a9:db:01:11:da:1f:c2:dd:
         97:a1:27:75:a1:5c:5a:38:f5:03:3c:c0:26:05:de:60:62:7a:
         d3:1a:ae:fe:18:6f:5d:0c:13:9a:42:61:b1:8a:2a:e1:d5:f9:
         b5:bb:48:27:6b:32:8f:ad:ab:65:e1:fd:0b:b9:80:cd:b9:63:
         59:de:72:1f:9a:f8:ac:9b:45:38:14:bb:71:c7:f6:d6:96:34:
         04:d9:41:11:8c:7f:28:58:42:3b:ae:8d:05:cf:b3:af:a7:18:
         ca:4b:c2:89:4c:93:6b:1c:7b:f4:d0:72:31:11:d5:42:31:3d:
         35:dc:b4:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:35:57 2026 by rpki-client