Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369E735/7BC5D4801CD711F1B9A0DDDFDAE4EC9C/b4Um3OtaqCQHFEfR3rQc7IBrSoE.mft
File:                     b4Um3OtaqCQHFEfR3rQc7IBrSoE.mft (raw, json)
Hash identifier:          oBNbIss3nYGrht1N0JT8YAdm4DkA0WnSQMNck/VMxog=
Subject key identifier:   0F:CC:11:70:87:E6:93:92:71:AA:A3:94:77:CC:71:17:0B:12:58:BD
Authority key identifier: 6F:85:26:DC:EB:5A:A8:24:07:14:47:D1:DE:B4:1C:EC:80:6B:4A:81
Certificate issuer:       /CN=F369E735AF/serialNumber=6F8526DCEB5AA824071447D1DEB41CEC806B4A81
Certificate serial:       14
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/b4Um3OtaqCQHFEfR3rQc7IBrSoE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369E735/7BC5D4801CD711F1B9A0DDDFDAE4EC9C/b4Um3OtaqCQHFEfR3rQc7IBrSoE.mft
Manifest number:          13
Signing time:             Thu 26 Mar 2026 06:38:35 +0000
Manifest this update:     Thu 26 Mar 2026 06:38:34 +0000
Manifest next update:     Sat 28 Mar 2026 06:38:34 +0000
Files and hashes:         1: b4Um3OtaqCQHFEfR3rQc7IBrSoE.crl (hash: sPgbZlU/MzAgTPbktHEnYWj93drDbG3gr0Gap/agows=)
                          2: 8DE4B02A1CDA11F1B51079F1DAE4EC9C.roa (hash: ki1Y7U8ceJ4uu+WWwIuci/NWldaq2lAVwWjFI1+0Btg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369E735/7BC5D4801CD711F1B9A0DDDFDAE4EC9C/b4Um3OtaqCQHFEfR3rQc7IBrSoE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369E735/7BC5D4801CD711F1B9A0DDDFDAE4EC9C/b4Um3OtaqCQHFEfR3rQc7IBrSoE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/b4Um3OtaqCQHFEfR3rQc7IBrSoE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20 (0x14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369E735AF, serialNumber=6F8526DCEB5AA824071447D1DEB41CEC806B4A81
        Validity
            Not Before: Mar 26 06:38:34 2026 GMT
            Not After : Mar 28 06:38:34 2026 GMT
        Subject: CN=69c4d46b-2740
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:58:0d:94:7d:a0:e6:42:c2:36:65:73:89:19:
                    32:62:8e:6c:84:48:0d:c2:7e:7a:5f:29:a4:a9:16:
                    7b:ee:3b:61:57:71:2b:80:fa:31:99:d7:8d:57:51:
                    eb:99:3a:9f:36:ba:21:27:63:29:52:6f:e6:62:84:
                    ff:a0:ba:1f:9f:dc:e9:38:d5:fd:f4:8c:6f:44:e0:
                    93:33:f0:b0:3e:78:25:f3:d2:7e:20:76:c5:14:d5:
                    1c:95:e7:1d:0d:47:4f:57:66:85:07:06:f2:a1:d0:
                    e1:02:f8:62:6c:5b:24:ef:5f:fe:42:a5:15:40:94:
                    47:9b:03:9c:52:e4:35:b6:da:c9:3a:50:36:4c:22:
                    fa:3f:36:bd:61:70:92:c1:a7:3b:35:ee:c1:ec:e5:
                    fc:d4:34:ad:f1:92:35:ef:16:fc:e9:f3:f3:5c:16:
                    c9:d5:11:66:e6:bf:52:c1:4d:f3:93:ab:52:34:c4:
                    11:66:0f:e3:e0:3d:88:55:b6:d7:c1:2a:93:6c:f2:
                    aa:03:5a:ef:1a:76:d8:d6:b2:68:3f:83:77:dd:65:
                    0e:3f:8b:7d:97:cb:ae:35:6e:50:29:d4:5e:a5:63:
                    dd:5d:58:30:2e:5f:50:1c:08:ad:63:4e:1e:99:77:
                    fa:1a:c5:7c:71:21:a2:77:c1:83:9e:7b:e9:72:0d:
                    f7:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:CC:11:70:87:E6:93:92:71:AA:A3:94:77:CC:71:17:0B:12:58:BD
            X509v3 Authority Key Identifier:
                keyid:6F:85:26:DC:EB:5A:A8:24:07:14:47:D1:DE:B4:1C:EC:80:6B:4A:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369E735/7BC5D4801CD711F1B9A0DDDFDAE4EC9C/b4Um3OtaqCQHFEfR3rQc7IBrSoE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/b4Um3OtaqCQHFEfR3rQc7IBrSoE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369E735/7BC5D4801CD711F1B9A0DDDFDAE4EC9C/b4Um3OtaqCQHFEfR3rQc7IBrSoE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:55:0a:59:68:a9:99:ac:ac:84:32:2b:2b:62:78:e3:ab:d9:
         a9:29:da:98:e9:f8:5e:c8:bb:52:da:ab:d8:34:da:08:61:05:
         9e:26:57:a7:e6:e8:3e:1b:0b:93:4a:29:02:31:f5:19:ba:f8:
         1f:0c:ab:87:82:36:14:64:4c:11:ec:ff:26:62:37:38:ea:13:
         09:37:72:12:46:57:59:f8:50:f0:e8:aa:0f:fc:b7:1a:f9:f8:
         8d:f0:c9:8d:00:c2:6b:96:27:00:c3:cf:9d:8a:28:ad:7e:68:
         27:6f:fc:b4:d3:2b:9f:62:27:ed:75:68:31:ef:fe:5e:86:44:
         39:6f:90:73:a9:10:33:38:53:17:a0:86:17:36:69:0c:83:17:
         c7:b4:7a:78:96:80:cf:62:e2:90:71:b0:44:d4:9c:06:56:5f:
         e1:b2:40:ad:eb:0d:18:4a:16:82:83:6e:7b:25:47:5c:ac:f1:
         b2:cd:af:c0:f9:12:42:12:99:f6:d0:56:f7:7c:c2:26:97:31:
         60:0f:34:5c:76:d6:44:71:98:00:c3:7f:0d:81:00:4a:ad:12:
         f2:eb:bf:fb:fc:6e:34:b2:70:ca:28:a8:75:85:3b:41:3f:f8:
         6d:0e:86:2c:58:92:97:de:02:81:92:bd:2e:12:74:2b:db:04:
         f5:7c:45:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:32:16 2026 by rpki-client