Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36ABB63/E08FB58213F311E5A8E5AE44F8AEA228/41870XBX5RmmOBSWl-AwgOrYdys.mft
File:                     41870XBX5RmmOBSWl-AwgOrYdys.mft (raw, json)
Hash identifier:          GI9vwIL8WBlGjpxh5IcOlhL/iAa5QJfK7COYwg1zZ+s=
Subject key identifier:   88:11:06:AD:3D:E7:A6:48:C0:8F:1B:81:29:4E:CE:9E:B9:43:3C:92
Authority key identifier: E3:5F:3B:D1:70:57:E5:19:A6:38:14:96:97:E0:30:80:EA:D8:77:2B
Certificate issuer:       /CN=F36ABB63AF/serialNumber=E35F3BD17057E519A638149697E03080EAD8772B
Certificate serial:       0FB0
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/41870XBX5RmmOBSWl-AwgOrYdys.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36ABB63/E08FB58213F311E5A8E5AE44F8AEA228/41870XBX5RmmOBSWl-AwgOrYdys.mft
Manifest number:          0FAE
Signing time:             Thu 26 Mar 2026 00:51:45 +0000
Manifest this update:     Thu 26 Mar 2026 00:51:44 +0000
Manifest next update:     Sat 28 Mar 2026 00:51:44 +0000
Files and hashes:         1: 41870XBX5RmmOBSWl-AwgOrYdys.crl (hash: VB6Gc6HYtbRKYiJdSs2znJCYtqw7k2xMQac7y6n5+tE=)
                          2: 752DB50C461511E99A25B144F8AEA228.roa (hash: k0Rhsuh/b99q9kDn1FoP+OO8bsw50UMZoPySxuOGhI8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36ABB63/E08FB58213F311E5A8E5AE44F8AEA228/41870XBX5RmmOBSWl-AwgOrYdys.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36ABB63/E08FB58213F311E5A8E5AE44F8AEA228/41870XBX5RmmOBSWl-AwgOrYdys.mft
                          rsync://rpki.afrinic.net/repository/afrinic/41870XBX5RmmOBSWl-AwgOrYdys.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4016 (0xfb0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36ABB63AF, serialNumber=E35F3BD17057E519A638149697E03080EAD8772B
        Validity
            Not Before: Mar 26 00:51:44 2026 GMT
            Not After : Mar 28 00:51:44 2026 GMT
        Subject: CN=69c48321-9d69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:21:a4:56:05:05:b4:44:8f:d6:e2:f2:7e:37:
                    f8:19:02:d0:cc:09:7e:4f:fc:23:ed:e1:81:4b:fa:
                    60:cc:7c:12:e3:f2:c6:2b:58:a4:55:c7:23:cf:f3:
                    c4:41:71:83:c1:ff:c1:0c:ee:88:41:15:a1:45:50:
                    2e:26:f6:49:5a:c2:33:59:82:32:0f:d0:1d:e4:8e:
                    d5:df:4d:0b:94:de:d3:6b:a0:41:c1:25:81:37:81:
                    ee:52:20:5a:5e:0c:15:2a:e5:ae:fc:1b:52:7f:aa:
                    1e:12:6e:88:78:2e:a4:96:5a:3e:d9:fa:34:e7:21:
                    13:01:25:28:d5:34:0a:c4:09:c9:16:31:42:3c:af:
                    10:0c:5c:e8:f2:bf:a2:66:ab:38:44:68:9c:58:d3:
                    cf:ea:d2:3f:4a:40:d1:e8:3b:33:28:1f:1c:db:ef:
                    64:80:91:a7:08:41:7a:58:18:e6:6f:8a:77:c7:e3:
                    a6:c1:9e:ec:71:27:63:25:e0:ce:65:a3:15:f2:29:
                    45:30:72:dc:b2:0e:06:35:8d:58:7b:c9:68:32:95:
                    91:be:ce:6a:dd:34:18:77:b1:43:64:81:c3:47:61:
                    68:54:94:51:87:84:8e:6f:7f:6b:78:27:ea:68:0d:
                    c6:eb:91:cf:be:1f:23:70:f9:37:75:78:30:41:4b:
                    5b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:11:06:AD:3D:E7:A6:48:C0:8F:1B:81:29:4E:CE:9E:B9:43:3C:92
            X509v3 Authority Key Identifier:
                keyid:E3:5F:3B:D1:70:57:E5:19:A6:38:14:96:97:E0:30:80:EA:D8:77:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36ABB63/E08FB58213F311E5A8E5AE44F8AEA228/41870XBX5RmmOBSWl-AwgOrYdys.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/41870XBX5RmmOBSWl-AwgOrYdys.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36ABB63/E08FB58213F311E5A8E5AE44F8AEA228/41870XBX5RmmOBSWl-AwgOrYdys.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:15:c0:21:09:e9:56:23:a0:b6:80:4d:32:3d:b6:00:02:c0:
         91:50:47:3e:99:28:c5:c1:4e:9e:4e:c3:02:8e:c4:de:ad:49:
         cd:f9:99:82:e8:bb:fe:53:58:10:38:d8:9e:b1:69:34:12:65:
         5f:0e:a2:bc:f7:0d:06:29:65:a3:84:20:1b:a5:76:16:e7:a8:
         3e:11:d1:41:af:f7:cd:ad:53:e8:c2:72:b5:21:84:bc:c6:3a:
         f5:64:40:4b:28:33:04:95:e2:22:25:00:15:39:39:31:86:09:
         81:89:2b:1b:56:65:67:60:b0:99:b1:48:da:16:55:74:d6:8a:
         48:34:a8:88:8d:48:77:25:af:61:0b:a5:7f:9b:47:ef:4c:04:
         56:83:44:92:33:69:c8:5f:31:73:5b:09:cb:f5:be:3c:35:56:
         a8:fd:3d:d2:bb:f0:40:68:eb:55:54:d5:73:ab:4a:48:1c:c0:
         64:55:08:d1:45:6b:3d:1e:41:d0:55:58:f7:8c:a6:c4:66:6c:
         7f:99:10:b2:96:5e:8d:52:a1:c7:2d:31:b9:8b:2a:01:05:f3:
         9d:dd:7f:19:43:cd:ad:fa:cd:ee:45:b4:26:9a:7c:cd:67:34:
         d0:88:5e:ab:bc:22:17:6f:60:28:a8:9e:4d:88:08:50:66:be:
         35:e7:b4:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:13:46 2026 by rpki-client