Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369E115/FBFEB76403C211EF9713C10C017001B1/S9EnC3AP8p0YQj8YO5-Ss2iH1t0.mft
File:                     S9EnC3AP8p0YQj8YO5-Ss2iH1t0.mft (raw, json)
Hash identifier:          nAQLWP+1F1p9fVU1aAj+kh132HIVs3/c0zsarbRz+dY=
Subject key identifier:   64:BD:64:72:0F:22:A7:C4:5E:D5:75:38:22:72:73:72:22:67:5C:BC
Authority key identifier: 4B:D1:27:0B:70:0F:F2:9D:18:42:3F:18:3B:9F:92:B3:68:87:D6:DD
Certificate issuer:       /CN=F369E115AF/serialNumber=4BD1270B700FF29D18423F183B9F92B36887D6DD
Certificate serial:       02D2
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/S9EnC3AP8p0YQj8YO5-Ss2iH1t0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369E115/FBFEB76403C211EF9713C10C017001B1/S9EnC3AP8p0YQj8YO5-Ss2iH1t0.mft
Manifest number:          02D0
Signing time:             Thu 26 Mar 2026 04:58:08 +0000
Manifest this update:     Thu 26 Mar 2026 04:58:08 +0000
Manifest next update:     Sat 28 Mar 2026 04:58:07 +0000
Files and hashes:         1: S9EnC3AP8p0YQj8YO5-Ss2iH1t0.crl (hash: Ke9fgqvMgYPHqv4YpJmFKP6frkvv5oZiJlp1cl7mGGc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369E115/FBFEB76403C211EF9713C10C017001B1/S9EnC3AP8p0YQj8YO5-Ss2iH1t0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369E115/FBFEB76403C211EF9713C10C017001B1/S9EnC3AP8p0YQj8YO5-Ss2iH1t0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/S9EnC3AP8p0YQj8YO5-Ss2iH1t0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 722 (0x2d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369E115AF, serialNumber=4BD1270B700FF29D18423F183B9F92B36887D6DD
        Validity
            Not Before: Mar 26 04:58:08 2026 GMT
            Not After : Mar 28 04:58:07 2026 GMT
        Subject: CN=69c4bce0-d986
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:9e:11:c9:02:93:c3:03:cb:9b:38:47:c1:a7:
                    0f:28:7b:7f:c6:9f:8c:93:99:2b:f5:5b:b4:f1:f2:
                    76:a0:f2:e8:75:29:b4:06:48:d3:a3:98:e0:f3:0e:
                    32:75:24:dc:34:45:42:0a:4e:42:2c:83:e3:bc:89:
                    96:4d:8c:f8:a3:ba:12:37:df:bd:92:ef:94:55:d4:
                    18:d9:b8:56:b1:28:1f:6f:fa:79:25:c7:8c:64:b8:
                    fb:70:21:7f:0c:26:19:42:46:ae:2f:bf:08:fc:d8:
                    87:93:4c:ba:a9:68:a4:7e:12:11:00:60:85:32:0e:
                    4e:22:4a:2f:1e:5d:44:7e:89:b9:9f:32:58:c9:b1:
                    ee:88:b4:ea:f9:d7:76:e2:d0:c8:0d:2c:61:b0:7f:
                    5b:d8:9b:08:18:26:9b:87:12:cb:ac:b3:4e:60:d8:
                    bf:05:66:21:cf:37:95:43:12:9f:59:66:89:63:9e:
                    30:19:73:42:96:c4:cd:bd:c8:68:cd:d3:0a:ae:37:
                    51:d6:e3:d4:49:1d:8b:60:bc:59:0a:b9:e6:f6:e4:
                    3d:74:c7:50:39:c8:b2:20:e1:bc:c2:bf:5d:23:49:
                    5f:f6:0b:02:09:74:8e:d1:3b:ff:2a:78:fa:7a:95:
                    c7:c2:77:b1:69:62:96:86:ab:bb:1d:a2:d6:b1:6d:
                    bf:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:BD:64:72:0F:22:A7:C4:5E:D5:75:38:22:72:73:72:22:67:5C:BC
            X509v3 Authority Key Identifier:
                keyid:4B:D1:27:0B:70:0F:F2:9D:18:42:3F:18:3B:9F:92:B3:68:87:D6:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369E115/FBFEB76403C211EF9713C10C017001B1/S9EnC3AP8p0YQj8YO5-Ss2iH1t0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/S9EnC3AP8p0YQj8YO5-Ss2iH1t0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369E115/FBFEB76403C211EF9713C10C017001B1/S9EnC3AP8p0YQj8YO5-Ss2iH1t0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:84:b9:0e:ff:7d:f4:5f:99:31:b8:73:ae:30:3b:de:7d:c6:
         0a:5a:c2:ca:39:72:88:db:8d:5d:86:0b:db:8a:23:54:9e:45:
         42:bb:93:a4:50:a5:4b:52:76:de:bd:fb:14:84:6f:99:33:ef:
         c8:eb:36:7c:a1:4d:89:77:96:c0:b1:c4:d2:1a:9a:ee:fe:71:
         e5:53:78:ab:ab:1d:b4:b7:f4:59:9a:63:e3:32:60:1d:84:04:
         56:8f:59:51:dd:31:2c:0f:00:82:ed:10:6e:83:4a:aa:7d:c8:
         85:b1:f4:aa:a5:15:67:ed:82:86:10:5b:2a:c9:d3:94:f5:f2:
         39:5f:2b:08:4c:bd:fb:b2:75:85:cf:93:26:e1:cf:5f:69:94:
         75:bd:63:fc:d9:8d:05:d2:10:a5:7d:4c:ad:27:9c:d2:f0:d2:
         dd:27:55:f8:91:7b:c5:d0:e1:a5:9b:75:cb:94:83:fb:5e:6d:
         f6:12:26:79:b9:05:f7:75:64:89:b7:e6:84:ec:71:92:92:31:
         21:c9:71:c9:ff:a3:1a:35:f3:2c:87:e9:13:5f:6a:13:8e:18:
         7c:80:82:fd:6b:76:93:a5:9f:7e:96:d3:95:55:af:1f:79:6f:
         66:ae:79:17:60:64:be:74:2f:cf:01:19:c5:96:fd:e9:c0:04:
         7c:60:dc:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:31:47 2026 by rpki-client