Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369F058/8B32E79A553911E9A572702FF8AEA228/yS6IWCfGdhnhMXVwMBfERC3f6s8.mft
File:                     yS6IWCfGdhnhMXVwMBfERC3f6s8.mft (raw, json)
Hash identifier:          71SSjrSDcBAv/kRkl1xBhHIsvGdZAqhn9UCEFSjJ/k4=
Subject key identifier:   88:3B:82:EE:24:05:A1:B5:65:D3:CA:C4:97:A7:47:8A:39:18:10:10
Authority key identifier: C9:2E:88:58:27:C6:76:19:E1:31:75:70:30:17:C4:44:2D:DF:EA:CF
Certificate issuer:       /CN=F369F058AF/serialNumber=C92E885827C67619E13175703017C4442DDFEACF
Certificate serial:       0A4C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/yS6IWCfGdhnhMXVwMBfERC3f6s8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369F058/8B32E79A553911E9A572702FF8AEA228/yS6IWCfGdhnhMXVwMBfERC3f6s8.mft
Manifest number:          0A44
Signing time:             Thu 26 Mar 2026 01:23:57 +0000
Manifest this update:     Thu 26 Mar 2026 01:23:56 +0000
Manifest next update:     Sat 28 Mar 2026 01:23:56 +0000
Files and hashes:         1: yS6IWCfGdhnhMXVwMBfERC3f6s8.crl (hash: g2R5Ht54o6yJLvShgsikyOCUjYlRTQGDkOug8hpXtvg=)
                          2: F3961630123611EF80C92C51017001B1.roa (hash: P7zmLDBytjro0KKIgTEyZppS7BdxrGwBEJ1mm2r94Gc=)
                          3: 574BF07E282D11F197E71890DAE4EC9C.roa (hash: ra5Q0ZW/tTeltnEPjbaZN+uGuxXkH1j94J7to5jyLRY=)
                          4: 04605838361A11F0B9F961F3DAE4EC9C.roa (hash: r+y3Fw+81AAFIoIiHOQuOaDuH+WDZZZ3ri/u6RsXKpg=)
                          5: 25843EB0123711EFB5C1A851017001B1.roa (hash: 5Dbg0It6Gnjot6cZHpwak5GthbHzIipbWJ6mhVVl1e8=)
                          6: 32FAEFC2361B11F0B2EA437CDAE4EC9C.roa (hash: 22FqTrSwm7BxiKIiscjIzYYBmw1MfLawSBgcnxT4pB4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369F058/8B32E79A553911E9A572702FF8AEA228/yS6IWCfGdhnhMXVwMBfERC3f6s8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369F058/8B32E79A553911E9A572702FF8AEA228/yS6IWCfGdhnhMXVwMBfERC3f6s8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/yS6IWCfGdhnhMXVwMBfERC3f6s8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2636 (0xa4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369F058AF, serialNumber=C92E885827C67619E13175703017C4442DDFEACF
        Validity
            Not Before: Mar 26 01:23:56 2026 GMT
            Not After : Mar 28 01:23:56 2026 GMT
        Subject: CN=69c48aad-a194
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:08:99:cc:9c:39:79:90:d4:6b:a1:a8:16:da:
                    6f:f2:d6:3f:35:59:de:95:39:1d:f2:95:dc:15:d9:
                    37:62:86:3f:8b:38:f6:b6:a4:36:c0:1f:da:18:16:
                    f3:21:ff:5c:1d:26:83:8a:4e:f5:e8:1c:e5:5b:e8:
                    8d:e4:b0:27:a3:21:ea:09:f4:0a:1d:01:49:55:f2:
                    1b:cd:06:4d:d2:63:ba:ee:86:43:c5:43:3d:49:8d:
                    35:45:db:c5:6a:13:36:70:c7:f0:d9:23:fa:14:d6:
                    29:8e:99:12:a0:f3:a0:20:79:f2:77:18:ff:85:35:
                    85:c2:b6:fe:88:ce:26:6b:86:92:06:d9:ae:53:da:
                    60:28:b9:0e:d6:9c:de:c3:18:f2:b8:02:9d:48:84:
                    9e:db:07:92:c0:a0:53:90:ff:d6:97:0f:2f:54:a3:
                    c7:e9:c3:e6:77:27:bd:79:68:88:c2:ae:7c:21:04:
                    f5:c6:c8:19:a6:ed:a3:87:9e:1e:fb:f1:7b:c4:67:
                    62:fa:79:a9:82:24:80:01:90:12:a6:2b:aa:fe:a2:
                    fb:32:57:23:4d:44:c2:4b:30:60:28:74:2a:71:7a:
                    35:e3:03:6d:9e:3c:6f:d0:05:f0:18:9c:49:8d:0f:
                    bd:92:05:08:8b:2d:d3:a0:83:7f:a9:76:da:1e:cc:
                    c9:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:3B:82:EE:24:05:A1:B5:65:D3:CA:C4:97:A7:47:8A:39:18:10:10
            X509v3 Authority Key Identifier:
                keyid:C9:2E:88:58:27:C6:76:19:E1:31:75:70:30:17:C4:44:2D:DF:EA:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369F058/8B32E79A553911E9A572702FF8AEA228/yS6IWCfGdhnhMXVwMBfERC3f6s8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/yS6IWCfGdhnhMXVwMBfERC3f6s8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369F058/8B32E79A553911E9A572702FF8AEA228/yS6IWCfGdhnhMXVwMBfERC3f6s8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:4a:28:68:70:43:da:38:cd:f5:c6:4d:2d:49:11:de:26:9e:
         9f:b8:4c:a6:e1:45:8c:d6:fd:40:ac:a7:5f:d5:02:fd:50:20:
         ed:d9:72:55:bf:fb:ba:20:b4:83:65:11:07:ec:3a:f9:fe:73:
         c8:9a:de:9b:ce:2a:1d:50:f3:db:59:ac:51:31:60:de:6b:9a:
         e6:4e:87:76:98:c8:c5:b4:ff:ec:4d:be:d1:d9:73:b0:d0:80:
         e4:e6:9d:8a:7c:66:3e:41:83:03:59:ad:ab:e8:1f:13:4a:30:
         90:5b:de:ca:c4:d0:f9:5a:ea:4a:0e:b0:ba:ba:8f:1d:db:17:
         87:55:a4:a4:c6:af:dc:c4:b5:2b:10:48:67:80:45:56:08:a2:
         22:4c:ad:87:06:3c:5a:c4:fe:bd:c9:9f:08:e7:4f:f8:2b:6e:
         2c:9f:67:e4:27:05:0d:d0:65:4a:1b:07:63:04:f0:be:9b:9b:
         99:09:58:f3:12:6f:57:7f:8b:f9:5f:a5:1c:87:89:68:4c:a6:
         02:25:d3:5e:12:be:c5:86:29:de:f8:c7:4b:85:16:87:f5:91:
         4e:0d:95:15:ec:3a:e6:e7:4e:9e:8e:2a:15:85:1a:5b:ac:66:
         f7:a3:49:fe:60:75:39:d4:de:68:b6:a5:2a:f6:98:9d:87:2d:
         3c:18:7c:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:07:36 2026 by rpki-client