Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A1387/9872DBD6364811EFAFF89080762E951A/p3dqG-VaqYxXBf13nITdAQb-xYI.mft
File:                     p3dqG-VaqYxXBf13nITdAQb-xYI.mft (raw, json)
Hash identifier:          jK+rzufhQ2VUd0XXCR82hT02zuD7J8/A18vvoinvHqQ=
Subject key identifier:   DA:EE:6E:25:D8:F0:3C:B9:9D:EB:7C:98:C8:94:8E:13:B6:77:A2:C5
Authority key identifier: A7:77:6A:1B:E5:5A:A9:8C:57:05:FD:77:9C:84:DD:01:06:FE:C5:82
Certificate issuer:       /CN=F36A1387AF/serialNumber=A7776A1BE55AA98C5705FD779C84DD0106FEC582
Certificate serial:       0297
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/p3dqG-VaqYxXBf13nITdAQb-xYI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A1387/9872DBD6364811EFAFF89080762E951A/p3dqG-VaqYxXBf13nITdAQb-xYI.mft
Manifest number:          0291
Signing time:             Thu 26 Mar 2026 05:05:40 +0000
Manifest this update:     Thu 26 Mar 2026 05:05:39 +0000
Manifest next update:     Sat 28 Mar 2026 05:05:39 +0000
Files and hashes:         1: p3dqG-VaqYxXBf13nITdAQb-xYI.crl (hash: U9Mt3C0zCa9EbR8e7Sb9Qi+2oyqecUpWRCUsD980WBg=)
                          2: 36BF5EDE364B11EFA8FDBE92762E951A.roa (hash: 1AccGXf0yBwYdD+2hlK0nS5uXanO+WfhPLEA3XftMww=)
                          3: C191D4E8276611F184C60C89DAE4EC9C.roa (hash: J7SzOeOkxkBYSb/+dDFTPApl1RYzIVpPAgJtDYPneX8=)
                          4: 759FE886276611F1AE61E588DAE4EC9C.roa (hash: 2rumQMHsgGx3ykIi8xEgx4NeyhLSv49ebW1PiSlTkDI=)
                          5: 32250A2011A711F1A9FD248BDAE4EC9C.roa (hash: y4wM2ILtLtdNcUDwpGv7OoxbdddVN1pR20cZyIkpuQc=)
                          6: 062ACA4C276711F19A5B6589DAE4EC9C.roa (hash: 5P1G99+XCokiFg1thL2VFdUqsgMy1RdNQcsG4XQ7TBk=)
                          7: 32899EC0276611F1A1AA7785DAE4EC9C.roa (hash: whA6l07HdxCOCGyCXXIQazy2QuFHnMHeyiidkxJj8+Q=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A1387/9872DBD6364811EFAFF89080762E951A/p3dqG-VaqYxXBf13nITdAQb-xYI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A1387/9872DBD6364811EFAFF89080762E951A/p3dqG-VaqYxXBf13nITdAQb-xYI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/p3dqG-VaqYxXBf13nITdAQb-xYI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 663 (0x297)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A1387AF, serialNumber=A7776A1BE55AA98C5705FD779C84DD0106FEC582
        Validity
            Not Before: Mar 26 05:05:39 2026 GMT
            Not After : Mar 28 05:05:39 2026 GMT
        Subject: CN=69c4bea4-d6d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f1:e6:14:7f:cf:3e:bc:37:3d:97:9f:ad:6f:
                    a4:8f:0e:32:ed:bc:df:07:19:91:70:e0:b8:82:ac:
                    e0:cd:ae:3d:b3:b0:74:11:a1:45:a2:9a:65:3a:05:
                    0b:fd:00:64:d7:99:89:5f:1c:99:2f:35:2b:a5:cc:
                    b8:51:54:2e:92:c3:b1:ec:40:43:66:29:8d:a8:45:
                    25:7e:d7:aa:8f:46:44:11:83:78:9d:d2:c6:79:e5:
                    68:de:a6:a0:17:eb:59:0c:b9:17:03:ef:31:d6:0b:
                    95:95:ba:03:5d:cf:86:dd:86:4d:7a:cc:d7:44:cc:
                    2c:be:89:80:ba:31:ad:2a:87:45:a4:40:34:25:36:
                    aa:cb:b5:cb:12:8c:04:24:36:94:b6:21:1f:55:ea:
                    e7:1d:79:96:ae:75:81:49:32:6b:ce:cd:89:f9:2c:
                    1a:74:29:dd:96:ed:69:3f:a5:a1:06:c4:3f:3c:53:
                    f8:b5:04:42:de:fa:39:4a:3a:25:95:28:98:23:b8:
                    9d:4a:5f:16:74:09:c4:02:0f:e4:88:2a:12:47:98:
                    84:59:86:28:fa:81:6e:a6:5d:22:6f:8a:56:73:a9:
                    b0:e4:3c:a7:8a:bd:d2:71:9f:02:d5:66:5a:a2:47:
                    af:da:06:31:b9:69:57:08:e9:ea:0b:17:c2:d9:6a:
                    0c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:EE:6E:25:D8:F0:3C:B9:9D:EB:7C:98:C8:94:8E:13:B6:77:A2:C5
            X509v3 Authority Key Identifier:
                keyid:A7:77:6A:1B:E5:5A:A9:8C:57:05:FD:77:9C:84:DD:01:06:FE:C5:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1387/9872DBD6364811EFAFF89080762E951A/p3dqG-VaqYxXBf13nITdAQb-xYI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/p3dqG-VaqYxXBf13nITdAQb-xYI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1387/9872DBD6364811EFAFF89080762E951A/p3dqG-VaqYxXBf13nITdAQb-xYI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:54:23:00:6b:43:9f:c5:a7:2e:55:a5:4e:14:ea:e2:fc:03:
         c1:2b:5a:9a:d3:b6:58:7f:b2:43:7b:e8:0d:21:8b:46:5f:d5:
         be:7d:15:d0:05:7f:fc:c3:de:96:8f:69:d8:0b:17:4f:a6:f2:
         89:6b:52:71:7a:67:4e:82:e4:e1:b8:4c:38:c0:b0:74:93:7b:
         1c:e7:73:6b:fc:31:50:f6:c9:43:12:af:32:9d:88:dd:91:b3:
         a0:9f:7e:de:b8:16:b4:9d:65:e0:46:55:1b:34:a8:6d:bc:de:
         f7:1b:e8:fa:8e:dd:e8:f6:32:9f:14:11:f5:b6:83:c4:73:cf:
         0f:2f:42:c1:69:49:20:ca:40:6d:18:cc:ee:17:e3:d7:73:02:
         1e:d4:40:b2:ba:98:f5:b6:a3:c3:14:ff:15:5e:53:45:84:82:
         d2:5b:8d:3b:c2:fd:7c:d0:58:df:3f:32:ed:d1:33:91:17:0a:
         c7:c2:49:29:7d:fb:5e:4b:6a:ef:ad:24:0c:ca:25:ed:89:83:
         10:d4:5d:7d:de:5f:fa:dd:37:57:88:dc:b3:82:1e:5b:3a:24:
         16:1b:46:68:11:52:66:b9:1e:f5:12:bd:b8:05:51:8b:6e:1f:
         00:7c:7d:ad:c1:8b:35:98:96:de:6e:ec:cf:7a:6e:77:0a:c3:
         66:66:3b:96
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICApcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTEzODdBRjExMC8GA1UEBRMoQTc3NzZBMUJFNTVBQTk4QzU3MDVGRDc3OUM4NERE
MDEwNkZFQzU4MjAeFw0yNjAzMjYwNTA1MzlaFw0yNjAzMjgwNTA1MzlaMBgxFjAU
BgNVBAMTDTY5YzRiZWE0LWQ2ZDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCr8eYUf88+vDc9l5+tb6SPDjLtvN8HGZFw4LiCrODNrj2zsHQRoUWimmU6
BQv9AGTXmYlfHJkvNSulzLhRVC6Sw7HsQENmKY2oRSV+16qPRkQRg3id0sZ55Wje
pqAX61kMuRcD7zHWC5WVugNdz4bdhk16zNdEzCy+iYC6Ma0qh0WkQDQlNqrLtcsS
jAQkNpS2IR9V6ucdeZaudYFJMmvOzYn5LBp0Kd2W7Wk/paEGxD88U/i1BELe+jlK
OiWVKJgjuJ1KXxZ0CcQCD+SIKhJHmIRZhij6gW6mXSJvilZzqbDkPKeKvdJxnwLV
ZlqiR6/aBjG5aVcI6eoLF8LZagzPAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU2u5u
JdjwPLmd63yYyJSOE7Z3osUwHwYDVR0jBBgwFoAUp3dqG+VaqYxXBf13nITdAQb+
xYIwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkExMzg3Lzk4NzJEQkQ2MzY0ODExRUZBRkY4OTA4MDc2MkU5NTFBL3AzZHFH
LVZhcVl4WEJmMTNuSVRkQVFiLXhZSS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3AzZHFHLVZhcVl4WEJmMTNuSVRkQVFiLXhZSS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QTEzODcvOTg3MkRCRDYzNjQ4MTFFRkFGRjg5MDgwNzYy
RTk1MUEvcDNkcUctVmFxWXhYQmYxM25JVGRBUWIteFlJLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQACVCMAa0OfxacuVaVOFOri/APBK1qa
07ZYf7JDe+gNIYtGX9W+fRXQBX/8w96Wj2nYCxdPpvKJa1JxemdOguThuEw4wLB0
k3sc53Nr/DFQ9slDEq8ynYjdkbOgn37euBa0nWXgRlUbNKhtvN73G+j6jt3o9jKf
FBH1toPEc88PL0LBaUkgykBtGMzuF+PXcwIe1ECyupj1tqPDFP8VXlNFhILSW407
wv180FjfPzLt0TORFwrHwkkpffteS2rvrSQMyiXtiYMQ1F193l/63TdXiNyzgh5b
OiQWG0ZoEVJmuR71Er24BVGLbh8AfH2twYs1mJbebuzPem53CsNmZjuW
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:30:13 2026 by rpki-client