Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369C632/364C4FF82E9511EDA659BB7DF1222468/X2s0EhZiPYWnTyzopeKbXurPolM.mft
File:                     X2s0EhZiPYWnTyzopeKbXurPolM.mft (raw, json)
Hash identifier:          dWlOSlp3fDvnEyeIAg6/OCHHan1TjYnaSvOCMDMPPUY=
Subject key identifier:   C8:4E:9D:95:36:DF:51:CC:9B:6B:7F:7D:FF:46:0F:40:0D:CD:8C:FD
Authority key identifier: 5F:6B:34:12:16:62:3D:85:A7:4F:2C:E8:A5:E2:9B:5E:EA:CF:A2:53
Certificate issuer:       /CN=F369C632AF/serialNumber=5F6B341216623D85A74F2CE8A5E29B5EEACFA253
Certificate serial:       053A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/X2s0EhZiPYWnTyzopeKbXurPolM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369C632/364C4FF82E9511EDA659BB7DF1222468/X2s0EhZiPYWnTyzopeKbXurPolM.mft
Manifest number:          0538
Signing time:             Thu 26 Mar 2026 03:27:02 +0000
Manifest this update:     Thu 26 Mar 2026 03:27:01 +0000
Manifest next update:     Sat 28 Mar 2026 03:27:01 +0000
Files and hashes:         1: X2s0EhZiPYWnTyzopeKbXurPolM.crl (hash: cWj05J14TVPnix10ouvYI+PcxUCADkpL/oqhW/e+mKw=)
                          2: 55A54EE42E9611EDA379C780F1222468.roa (hash: 92dmko5SHijeHZEqNigi1tIoOa55D1fkpQHQwRV5fc8=)
                          3: 189309602E9611ED8FED3480F1222468.roa (hash: 9thUVnLZZ7EOpFloeIsOWtyUvJheIIw/Jl2bg+WHMIM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369C632/364C4FF82E9511EDA659BB7DF1222468/X2s0EhZiPYWnTyzopeKbXurPolM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369C632/364C4FF82E9511EDA659BB7DF1222468/X2s0EhZiPYWnTyzopeKbXurPolM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/X2s0EhZiPYWnTyzopeKbXurPolM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1338 (0x53a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369C632AF, serialNumber=5F6B341216623D85A74F2CE8A5E29B5EEACFA253
        Validity
            Not Before: Mar 26 03:27:01 2026 GMT
            Not After : Mar 28 03:27:01 2026 GMT
        Subject: CN=69c4a786-07ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:86:ce:2b:af:d0:80:e7:b6:91:bf:7b:4e:b2:
                    d1:af:d4:84:43:fd:e8:a5:31:fe:cf:59:9d:d7:ce:
                    58:d5:3b:e4:b5:6b:32:9c:1a:aa:00:d7:c9:4b:b0:
                    43:a8:e8:51:c1:ea:aa:63:f8:03:81:20:f8:3b:8c:
                    87:6b:8d:53:f0:48:04:6a:38:42:e3:33:7c:bb:08:
                    6a:f5:e6:b8:53:50:5f:81:58:3f:d8:df:d7:6c:c5:
                    81:9f:50:51:43:ff:96:16:c1:db:53:a1:e8:ae:59:
                    90:76:02:49:bc:c8:28:3b:77:95:56:a3:df:ca:3c:
                    a4:e5:2e:84:50:8a:52:21:b7:44:f4:da:6e:74:57:
                    4e:b3:75:4c:18:4d:1d:02:81:b0:11:9f:b6:2d:94:
                    bc:27:8a:7b:d3:0b:59:2d:75:b5:3e:f0:9c:b2:11:
                    f4:fb:57:55:98:3b:f0:ec:18:af:42:4e:fb:f9:02:
                    1c:f2:bd:c3:6f:25:d3:37:6a:bb:e6:d8:69:93:3b:
                    b3:87:45:43:c7:6f:96:91:ad:77:2d:77:ec:71:6e:
                    d9:16:f0:9c:8c:68:10:79:27:20:4c:79:5e:57:d1:
                    13:d1:a5:68:d0:4e:a3:9c:67:6c:e0:00:04:b7:87:
                    a3:88:01:47:99:1a:d5:bc:a0:a9:80:31:ed:d4:bb:
                    a0:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:4E:9D:95:36:DF:51:CC:9B:6B:7F:7D:FF:46:0F:40:0D:CD:8C:FD
            X509v3 Authority Key Identifier:
                keyid:5F:6B:34:12:16:62:3D:85:A7:4F:2C:E8:A5:E2:9B:5E:EA:CF:A2:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369C632/364C4FF82E9511EDA659BB7DF1222468/X2s0EhZiPYWnTyzopeKbXurPolM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/X2s0EhZiPYWnTyzopeKbXurPolM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369C632/364C4FF82E9511EDA659BB7DF1222468/X2s0EhZiPYWnTyzopeKbXurPolM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:84:f7:00:1d:0c:66:e1:21:d0:3b:4c:9c:27:45:b0:ca:30:
         27:29:62:91:28:0a:da:fd:8a:c4:50:e6:bb:11:23:ac:6b:75:
         f9:55:0f:4e:5c:21:c9:ed:a1:56:c2:63:46:6e:e3:2b:4f:39:
         8c:77:92:07:a4:1b:f0:83:d2:09:88:49:5e:e3:bc:4f:01:a0:
         85:5f:7a:10:04:93:3d:a9:67:93:5f:c7:3b:fc:1f:aa:c0:47:
         87:97:8b:de:7d:ba:1a:c3:b5:b3:17:9a:27:14:fe:13:97:fd:
         50:81:d5:1d:4e:74:2a:ca:08:8e:3b:9a:ff:20:ba:47:f0:dc:
         a8:03:82:22:c3:f7:41:64:c8:0d:fb:f7:7c:9b:5c:31:2e:27:
         24:44:df:db:c0:e3:d8:72:49:4d:6b:82:07:bd:1d:81:00:ed:
         30:6a:5e:3c:bf:e0:1f:31:1d:98:99:40:6a:ee:62:e6:ef:10:
         d7:4a:76:fc:fc:e1:da:59:77:d1:58:68:21:6c:60:bd:45:3c:
         e0:d1:ab:e3:43:de:a6:23:5b:93:33:e9:46:5a:e6:6f:4f:71:
         dd:92:c1:b7:1a:ee:98:78:42:07:8b:34:e4:b4:ba:e3:5e:b1:
         6b:1e:2f:bb:70:a4:e2:36:31:14:ed:eb:0b:21:72:8b:19:9f:
         fd:4a:6b:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:23:07 2026 by rpki-client