Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369EC27/F804A1AADD1C11ED9D7CEDCD2F6D8C1D/FecT_XtiDOPJk1SgfTe6g3Eym0c.mft
File:                     FecT_XtiDOPJk1SgfTe6g3Eym0c.mft (raw, json)
Hash identifier:          7k9Rl6oGkwh3E6m8LS0x3fYltXD+ZITrKM0bb0ypyWE=
Subject key identifier:   BA:76:24:CA:70:EE:44:06:F4:D6:34:55:56:05:A9:66:B2:1A:03:B7
Authority key identifier: 15:E7:13:FD:7B:62:0C:E3:C9:93:54:A0:7D:37:BA:83:71:32:9B:47
Certificate issuer:       /CN=F369EC27AF/serialNumber=15E713FD7B620CE3C99354A07D37BA8371329B47
Certificate serial:       0453
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/FecT_XtiDOPJk1SgfTe6g3Eym0c.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369EC27/F804A1AADD1C11ED9D7CEDCD2F6D8C1D/FecT_XtiDOPJk1SgfTe6g3Eym0c.mft
Manifest number:          0452
Signing time:             Thu 26 Mar 2026 03:59:37 +0000
Manifest this update:     Thu 26 Mar 2026 03:59:36 +0000
Manifest next update:     Sat 28 Mar 2026 03:59:36 +0000
Files and hashes:         1: FecT_XtiDOPJk1SgfTe6g3Eym0c.crl (hash: CwK4wX18jlPVKh9lJZMmxImYdC04V95Njkwt+2cO9RY=)
                          2: 28E4C952DD1E11ED9DD29CD12F6D8C1D.roa (hash: 89V7HDkOzxSFZWW4ZtjKFLvYB7+OW1sQEP+YyD51Nf8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369EC27/F804A1AADD1C11ED9D7CEDCD2F6D8C1D/FecT_XtiDOPJk1SgfTe6g3Eym0c.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369EC27/F804A1AADD1C11ED9D7CEDCD2F6D8C1D/FecT_XtiDOPJk1SgfTe6g3Eym0c.mft
                          rsync://rpki.afrinic.net/repository/afrinic/FecT_XtiDOPJk1SgfTe6g3Eym0c.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1107 (0x453)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369EC27AF, serialNumber=15E713FD7B620CE3C99354A07D37BA8371329B47
        Validity
            Not Before: Mar 26 03:59:36 2026 GMT
            Not After : Mar 28 03:59:36 2026 GMT
        Subject: CN=69c4af28-ca84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:c9:3e:9d:27:09:dd:97:2f:56:b6:8b:76:ed:
                    df:74:67:61:4a:11:50:76:b6:cd:d1:2a:05:d9:d3:
                    76:77:65:53:8f:9c:00:42:8d:60:06:e9:52:0f:b3:
                    25:23:6a:d3:74:c3:e2:ff:7e:69:02:65:9f:07:0e:
                    46:5d:08:2d:dd:78:4c:28:2e:2e:5f:55:db:cc:e7:
                    6a:c0:d8:4e:f8:2b:bf:1e:9b:92:27:41:7a:d3:7f:
                    df:21:cf:5d:ab:94:11:7a:b5:e8:b7:0a:bc:29:1f:
                    ad:bf:7b:20:30:7c:8f:62:f1:3e:0a:eb:5e:ac:44:
                    63:76:3b:93:c6:74:4d:71:5d:aa:11:55:88:5f:4a:
                    20:48:ab:1c:1d:03:b6:ad:cd:0a:e2:50:d5:a8:73:
                    28:5c:d8:c7:c7:3f:3e:05:63:5c:27:af:d7:33:eb:
                    a3:75:a0:49:12:da:1d:f1:e4:88:b3:4e:ef:54:83:
                    e7:0d:a0:fa:9f:07:65:ae:d6:0f:dd:f8:66:f1:d6:
                    c3:70:26:78:85:3b:3f:b6:e1:76:1a:7c:78:ae:b3:
                    2d:98:32:9c:eb:f1:3b:81:4a:69:34:4a:a0:65:e6:
                    a2:08:1d:d4:e0:23:b9:a6:e7:b7:6b:e3:f3:48:f2:
                    a3:3d:46:9b:f3:ab:d3:3b:59:66:3e:96:4a:a0:46:
                    f2:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:76:24:CA:70:EE:44:06:F4:D6:34:55:56:05:A9:66:B2:1A:03:B7
            X509v3 Authority Key Identifier:
                keyid:15:E7:13:FD:7B:62:0C:E3:C9:93:54:A0:7D:37:BA:83:71:32:9B:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369EC27/F804A1AADD1C11ED9D7CEDCD2F6D8C1D/FecT_XtiDOPJk1SgfTe6g3Eym0c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/FecT_XtiDOPJk1SgfTe6g3Eym0c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369EC27/F804A1AADD1C11ED9D7CEDCD2F6D8C1D/FecT_XtiDOPJk1SgfTe6g3Eym0c.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:47:94:26:82:cb:20:25:a5:70:c2:11:f3:ad:bf:ef:ab:a3:
         a5:c8:1e:44:bc:02:d7:67:87:ac:2d:fb:e6:93:45:5a:fe:66:
         53:6a:8a:11:5d:3b:af:8c:06:04:75:53:63:24:09:b7:1b:ff:
         5e:c3:17:f9:e2:11:02:4c:56:0f:ef:04:61:75:98:f3:1d:46:
         c2:7e:37:ff:1d:2f:44:33:3d:ca:7a:da:ca:28:58:c1:bd:be:
         36:6b:4a:d8:5b:f8:b7:b8:bb:07:63:4f:9f:1e:c9:82:09:41:
         92:0c:77:b6:f8:c0:55:db:90:e7:e1:33:1d:48:e3:69:e1:bb:
         75:57:72:a6:52:15:f7:c5:52:e8:70:ff:a2:1b:c0:3a:06:d1:
         7d:cd:7f:e7:fa:05:15:20:f2:93:c9:92:28:49:c5:e1:2c:50:
         77:2d:3f:9c:78:a1:7c:c8:ef:d0:4f:a4:f8:fa:d2:dc:ad:83:
         4e:97:ef:0e:dd:ec:12:a0:cd:35:d3:26:65:ee:ec:f5:7a:b2:
         93:90:f1:95:1e:a1:2d:b7:5a:e7:0f:e5:79:69:48:05:4f:7b:
         7c:39:33:45:4a:91:a1:ce:a4:d5:fc:cd:bf:5e:fd:87:dd:a5:
         e5:19:87:8f:19:0e:0d:50:75:48:5f:34:d4:d5:38:74:ad:b5:
         42:ec:54:a1
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBFMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OUVDMjdBRjExMC8GA1UEBRMoMTVFNzEzRkQ3QjYyMENFM0M5OTM1NEEwN0QzN0JB
ODM3MTMyOUI0NzAeFw0yNjAzMjYwMzU5MzZaFw0yNjAzMjgwMzU5MzZaMBgxFjAU
BgNVBAMTDTY5YzRhZjI4LWNhODQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDcyT6dJwndly9Wtot27d90Z2FKEVB2ts3RKgXZ03Z3ZVOPnABCjWAG6VIP
syUjatN0w+L/fmkCZZ8HDkZdCC3deEwoLi5fVdvM52rA2E74K78em5InQXrTf98h
z12rlBF6tei3CrwpH62/eyAwfI9i8T4K616sRGN2O5PGdE1xXaoRVYhfSiBIqxwd
A7atzQriUNWocyhc2MfHPz4FY1wnr9cz66N1oEkS2h3x5IizTu9Ug+cNoPqfB2Wu
1g/d+Gbx1sNwJniFOz+24XYafHiusy2YMpzr8TuBSmk0SqBl5qIIHdTgI7mm57dr
4/NI8qM9Rpvzq9M7WWY+lkqgRvK7AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUunYk
ynDuRAb01jRVVgWpZrIaA7cwHwYDVR0jBBgwFoAUFecT/XtiDOPJk1SgfTe6g3Ey
m0cwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjlFQzI3L0Y4MDRBMUFBREQxQzExRUQ5RDdDRURDRDJGNkQ4QzFEL0ZlY1Rf
WHRpRE9QSmsxU2dmVGU2ZzNFeW0wYy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0ZlY1RfWHRpRE9QSmsxU2dmVGU2ZzNFeW0wYy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OUVDMjcvRjgwNEExQUFERDFDMTFFRDlEN0NFRENEMkY2
RDhDMUQvRmVjVF9YdGlET1BKazFTZ2ZUZTZnM0V5bTBjLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCIR5QmgssgJaVwwhHzrb/vq6OlyB5E
vALXZ4esLfvmk0Va/mZTaooRXTuvjAYEdVNjJAm3G/9ewxf54hECTFYP7wRhdZjz
HUbCfjf/HS9EMz3KetrKKFjBvb42a0rYW/i3uLsHY0+fHsmCCUGSDHe2+MBV25Dn
4TMdSONp4bt1V3KmUhX3xVLocP+iG8A6BtF9zX/n+gUVIPKTyZIoScXhLFB3LT+c
eKF8yO/QT6T4+tLcrYNOl+8O3ewSoM010yZl7uz1erKTkPGVHqEtt1rnD+V5aUgF
T3t8OTNFSpGhzqTV/M2/Xv2H3aXlGYePGQ4NUHVIXzTU1Th0rbVC7FSh
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:11:57 2026 by rpki-client