Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A39CE/792DDDBE0B5311EEA6555E5D4AD9E6FC/3YlMw4XaLW71JrsLssqqX8pm8MM.mft
File:                     3YlMw4XaLW71JrsLssqqX8pm8MM.mft (raw, json)
Hash identifier:          59ogbwlC+YIlz34tEnfjyMEhqjvJAJC90GAlg15aTpI=
Subject key identifier:   06:F0:90:B0:69:77:FB:44:07:1F:D8:4E:C4:3B:D2:CA:B5:56:63:05
Authority key identifier: DD:89:4C:C3:85:DA:2D:6E:F5:26:BB:0B:B2:CA:AA:5F:CA:66:F0:C3
Certificate issuer:       /CN=F36A39CEAF/serialNumber=DD894CC385DA2D6EF526BB0BB2CAAA5FCA66F0C3
Certificate serial:       0413
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/3YlMw4XaLW71JrsLssqqX8pm8MM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A39CE/792DDDBE0B5311EEA6555E5D4AD9E6FC/3YlMw4XaLW71JrsLssqqX8pm8MM.mft
Manifest number:          0412
Signing time:             Thu 26 Mar 2026 04:08:19 +0000
Manifest this update:     Thu 26 Mar 2026 04:08:18 +0000
Manifest next update:     Sat 28 Mar 2026 04:08:18 +0000
Files and hashes:         1: 3YlMw4XaLW71JrsLssqqX8pm8MM.crl (hash: bDpx9YpfQmmHhpQJ7regJWrBsh9+rYjR5i8Yr9Q6PWI=)
                          2: A0B834A6403611EF97C8EE46762E951A.roa (hash: kJ/+tKAV2nU5Yw7yHfU4bK7cxohBTA9n07WDnp1GBUA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A39CE/792DDDBE0B5311EEA6555E5D4AD9E6FC/3YlMw4XaLW71JrsLssqqX8pm8MM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A39CE/792DDDBE0B5311EEA6555E5D4AD9E6FC/3YlMw4XaLW71JrsLssqqX8pm8MM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/3YlMw4XaLW71JrsLssqqX8pm8MM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1043 (0x413)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A39CEAF, serialNumber=DD894CC385DA2D6EF526BB0BB2CAAA5FCA66F0C3
        Validity
            Not Before: Mar 26 04:08:18 2026 GMT
            Not After : Mar 28 04:08:18 2026 GMT
        Subject: CN=69c4b133-f2a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a2:0e:54:62:7e:42:ac:12:de:c5:b0:28:bc:
                    af:68:43:23:02:25:0e:08:f5:ed:03:54:5c:6e:51:
                    96:3c:ff:3f:d0:f1:c2:3e:ea:0f:50:a9:d3:92:fc:
                    7e:08:b5:10:eb:28:9b:a8:4d:86:33:5d:26:76:57:
                    dd:f7:af:86:b4:92:58:21:e2:8d:6b:90:21:ea:0b:
                    ee:d6:29:ee:c7:0a:f0:02:d2:36:c0:90:68:07:f6:
                    85:e2:f1:28:88:0a:14:cf:9a:5d:40:82:8a:0f:9a:
                    6e:27:64:ac:24:a4:4a:46:2f:ff:93:50:c1:99:ed:
                    b9:17:5c:2e:8e:de:ca:e2:13:dd:89:18:fa:c2:ad:
                    2a:1f:d1:a1:3d:85:3f:f3:6c:0e:59:24:a3:43:54:
                    a9:35:c1:c6:a3:f4:fb:25:f8:4d:57:38:89:c0:22:
                    65:35:54:21:5c:86:04:28:c3:b6:55:9b:24:34:26:
                    fa:30:b7:c0:0d:3a:d1:8b:06:a2:00:ea:bd:e8:79:
                    85:81:7e:d8:6d:01:75:7b:bf:55:bc:67:15:b1:ec:
                    84:3c:88:c2:da:a0:33:f4:78:07:4c:a5:aa:13:c0:
                    7e:90:ea:0d:a0:72:9f:80:73:f5:2d:4d:56:5d:ed:
                    08:2d:95:55:eb:e2:68:83:59:ee:3d:7b:0a:59:3a:
                    60:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:F0:90:B0:69:77:FB:44:07:1F:D8:4E:C4:3B:D2:CA:B5:56:63:05
            X509v3 Authority Key Identifier:
                keyid:DD:89:4C:C3:85:DA:2D:6E:F5:26:BB:0B:B2:CA:AA:5F:CA:66:F0:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A39CE/792DDDBE0B5311EEA6555E5D4AD9E6FC/3YlMw4XaLW71JrsLssqqX8pm8MM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3YlMw4XaLW71JrsLssqqX8pm8MM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A39CE/792DDDBE0B5311EEA6555E5D4AD9E6FC/3YlMw4XaLW71JrsLssqqX8pm8MM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:d6:3c:31:ae:ca:7d:b0:dc:4b:7d:91:a6:4c:ec:0d:aa:6f:
         0e:eb:f3:ea:40:04:5e:c9:88:1a:52:e1:ef:98:13:c3:13:6b:
         8e:6c:7c:21:68:27:5b:fe:27:bc:bc:0e:78:01:54:43:fb:76:
         4f:49:81:52:23:e2:7a:b5:d4:d2:3a:d2:5d:23:01:f9:a2:fb:
         c3:95:67:70:70:f7:84:74:57:fd:7a:48:e8:6e:60:31:96:ff:
         6c:33:c3:14:ec:4f:5a:06:69:b4:9b:07:91:f0:1a:8f:48:36:
         47:f6:b1:0f:86:70:7d:54:7e:0f:39:8e:fb:ff:9a:cb:03:c0:
         c0:9c:15:44:5b:36:24:5f:e5:77:0a:a3:f2:0c:ef:f2:60:03:
         9e:c8:ba:91:de:92:4e:d7:3f:d2:66:11:6e:91:0f:19:cc:af:
         8c:f5:8b:fd:a3:5e:5b:30:f5:8e:aa:72:56:ac:5a:a8:c2:a7:
         bc:20:90:5a:66:06:e0:8f:38:68:59:a6:b4:54:4b:2c:41:22:
         37:c5:67:90:51:37:74:26:b1:39:ac:8c:60:f1:24:ce:7f:d4:
         af:33:1f:78:f8:61:52:96:bd:2e:16:75:90:fd:7b:38:51:55:
         11:30:70:8c:f8:ad:c1:47:77:43:08:0b:84:52:0e:e0:94:d4:
         da:6f:ff:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:20:54 2026 by rpki-client