Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369D48A/C4097DD038D611ECA501247DD8A014CE/u_8lJAsgf5usxcuVSmIwmrulNl0.mft
File:                     u_8lJAsgf5usxcuVSmIwmrulNl0.mft (raw, json)
Hash identifier:          pXJxehyOQEFBwsPDgpkzt0fM7umWil7WyfrFZ6xe49A=
Subject key identifier:   46:D0:5F:B8:20:42:38:D0:17:44:5E:E4:8C:02:87:48:BD:3F:EE:56
Authority key identifier: BB:FF:25:24:0B:20:7F:9B:AC:C5:CB:95:4A:62:30:9A:BB:A5:36:5D
Certificate issuer:       /CN=F369D48AAF/serialNumber=BBFF25240B207F9BACC5CB954A62309ABBA5365D
Certificate serial:       067B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/u_8lJAsgf5usxcuVSmIwmrulNl0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369D48A/C4097DD038D611ECA501247DD8A014CE/u_8lJAsgf5usxcuVSmIwmrulNl0.mft
Manifest number:          0679
Signing time:             Thu 26 Mar 2026 02:53:01 +0000
Manifest this update:     Thu 26 Mar 2026 02:53:00 +0000
Manifest next update:     Sat 28 Mar 2026 02:53:00 +0000
Files and hashes:         1: u_8lJAsgf5usxcuVSmIwmrulNl0.crl (hash: y4IMrw/vLVyKb8eZtmMBfvHUyULt4HSx6J+oA3E5eCU=)
                          2: 5C15170E7C3F11ED8559019DF1222468.roa (hash: Fnw4e2Z6mQxfu98S+Kvx8lPub/zYdBqQ2Qpl3ytsjPY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369D48A/C4097DD038D611ECA501247DD8A014CE/u_8lJAsgf5usxcuVSmIwmrulNl0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369D48A/C4097DD038D611ECA501247DD8A014CE/u_8lJAsgf5usxcuVSmIwmrulNl0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/u_8lJAsgf5usxcuVSmIwmrulNl0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1659 (0x67b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369D48AAF, serialNumber=BBFF25240B207F9BACC5CB954A62309ABBA5365D
        Validity
            Not Before: Mar 26 02:53:00 2026 GMT
            Not After : Mar 28 02:53:00 2026 GMT
        Subject: CN=69c49f8d-da05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ee:a4:2e:4f:6d:6e:ee:75:04:98:a0:9e:b1:
                    cf:d5:9f:67:df:bc:2e:83:1c:ea:45:c0:66:8d:d3:
                    6d:8e:8f:bf:fa:92:cb:47:18:05:eb:19:cd:20:ba:
                    85:d1:64:57:53:6b:97:f9:f0:a9:42:eb:a9:aa:11:
                    1a:86:76:5f:9e:cd:ce:06:1b:c6:5d:a3:3d:ba:c3:
                    f8:7d:4e:0c:d3:a5:f3:1f:27:84:a8:d8:af:8c:42:
                    bb:3e:83:93:18:08:07:68:90:af:76:fe:86:5b:dd:
                    9b:e8:99:0b:ff:89:90:5e:e8:a4:88:fe:db:1e:77:
                    4d:96:bc:f8:be:8a:ca:8a:c7:a9:09:2a:15:98:c2:
                    80:65:1c:69:e2:f1:1c:7c:86:3b:df:b4:75:8d:df:
                    26:ac:c4:28:20:06:36:2c:bf:dc:d0:13:22:5d:7e:
                    7b:06:54:16:27:f0:76:3f:30:86:12:7f:a1:ed:63:
                    ab:50:64:7c:28:ba:74:9e:72:c7:6b:f4:77:b6:80:
                    e8:c3:08:ad:15:44:4d:ad:da:a5:43:78:8b:0c:7b:
                    49:39:60:28:02:9a:a0:74:c3:f4:38:ec:31:75:bf:
                    92:35:ef:98:31:66:fb:4d:75:31:76:31:0f:e3:08:
                    d5:1b:ad:cd:cc:ed:47:3f:45:40:1a:77:93:c7:f4:
                    3a:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:D0:5F:B8:20:42:38:D0:17:44:5E:E4:8C:02:87:48:BD:3F:EE:56
            X509v3 Authority Key Identifier:
                keyid:BB:FF:25:24:0B:20:7F:9B:AC:C5:CB:95:4A:62:30:9A:BB:A5:36:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369D48A/C4097DD038D611ECA501247DD8A014CE/u_8lJAsgf5usxcuVSmIwmrulNl0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/u_8lJAsgf5usxcuVSmIwmrulNl0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369D48A/C4097DD038D611ECA501247DD8A014CE/u_8lJAsgf5usxcuVSmIwmrulNl0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:42:3b:05:94:10:cf:bf:52:1e:09:05:4a:33:6f:b7:ed:59:
         8c:b4:1c:ce:c3:62:e0:39:ea:37:47:be:a4:fc:bc:b4:c7:16:
         7e:da:48:5b:ce:d0:ce:e1:ff:c5:0a:c8:57:f5:51:03:a9:79:
         67:bb:7c:20:55:97:ab:cb:91:bb:e1:67:6c:c5:8d:67:8f:83:
         11:3f:98:3c:5f:f3:a2:85:19:76:5d:c1:62:e7:40:4a:38:d2:
         78:71:53:23:74:29:a6:de:f9:58:6e:f7:95:b9:80:a8:bc:43:
         d8:aa:a9:a5:ab:cf:d2:de:e6:72:0d:a1:28:91:06:82:5f:90:
         c5:a9:2e:9a:7c:42:67:2a:a4:64:36:08:61:29:30:2b:62:59:
         7d:d9:71:96:3c:6a:e4:37:c3:2d:f5:b2:d8:2e:00:0a:1b:2b:
         6f:ed:be:07:4e:b4:a1:ce:fe:ea:8e:45:27:5e:66:44:1f:84:
         5f:20:62:ec:7d:80:14:8a:4f:e0:76:7c:81:b7:e3:48:36:ac:
         90:05:c9:a0:0d:a9:22:a6:bc:4c:28:a8:ce:b0:70:cf:2f:4e:
         cb:52:40:18:0c:9c:12:57:fe:9a:ed:6d:72:f5:6b:f0:13:3a:
         c7:43:6d:0f:03:1f:7f:8a:fd:57:a0:bf:aa:ed:29:46:77:f5:
         d1:5e:07:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:01:01 2026 by rpki-client