Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B1EE5/21831C1C4F1511EFB7A68685762E951A/l8yJP0_VIPZzaAb5eWJZm3eOG2M.mft
File:                     l8yJP0_VIPZzaAb5eWJZm3eOG2M.mft (raw, json)
Hash identifier:          2pGoTwywZJspYJXjCRIVcflYmlnHm9GTIrWOnaPI/f4=
Subject key identifier:   E8:F0:C3:52:75:44:0D:73:94:AD:36:1A:AE:4E:BB:F7:E3:18:B6:09
Authority key identifier: 97:CC:89:3F:4F:D5:20:F6:73:68:06:F9:79:62:59:9B:77:8E:1B:63
Certificate issuer:       /CN=F36B1EE5AF/serialNumber=97CC893F4FD520F6736806F97962599B778E1B63
Certificate serial:       0271
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/l8yJP0_VIPZzaAb5eWJZm3eOG2M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B1EE5/21831C1C4F1511EFB7A68685762E951A/l8yJP0_VIPZzaAb5eWJZm3eOG2M.mft
Manifest number:          026E
Signing time:             Thu 26 Mar 2026 05:13:25 +0000
Manifest this update:     Thu 26 Mar 2026 05:13:24 +0000
Manifest next update:     Sat 28 Mar 2026 05:13:24 +0000
Files and hashes:         1: l8yJP0_VIPZzaAb5eWJZm3eOG2M.crl (hash: c4PM60e5QXNpsvJDpPf5yOQaageXQzQu4l3VkWytG7w=)
                          2: 15FF8A604F2E11EFBF7DAA5D762E951A.roa (hash: Ji+PkrLYVd8mg+kmjzLysu+cTidIjguKCtckW26wTJg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B1EE5/21831C1C4F1511EFB7A68685762E951A/l8yJP0_VIPZzaAb5eWJZm3eOG2M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B1EE5/21831C1C4F1511EFB7A68685762E951A/l8yJP0_VIPZzaAb5eWJZm3eOG2M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/l8yJP0_VIPZzaAb5eWJZm3eOG2M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 625 (0x271)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B1EE5AF, serialNumber=97CC893F4FD520F6736806F97962599B778E1B63
        Validity
            Not Before: Mar 26 05:13:24 2026 GMT
            Not After : Mar 28 05:13:24 2026 GMT
        Subject: CN=69c4c075-fbcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:2a:a4:d2:70:3d:c1:d6:bc:c7:e1:57:83:73:
                    3e:e5:77:f4:e2:05:3a:27:39:56:bf:0e:a5:b3:1e:
                    57:3f:b8:e5:69:d8:95:b8:5b:db:0f:0b:76:7f:9d:
                    2c:57:01:32:aa:87:3a:a0:33:00:62:f0:87:b7:5a:
                    42:9e:f7:61:b0:dc:a9:08:bc:05:9f:2d:a2:39:2d:
                    5a:ba:2e:a1:83:62:8d:e6:2e:99:2d:4f:c6:bd:be:
                    77:c8:c0:dc:67:a8:bb:65:5d:3d:b9:83:79:ab:0a:
                    cc:5e:19:4b:41:a1:aa:e8:e6:fc:e4:9b:9d:45:85:
                    f7:1c:af:fc:a8:c8:ce:2e:cf:a2:fe:00:25:f6:68:
                    6c:0d:10:ab:25:a7:51:ab:76:4b:56:fb:17:a8:ed:
                    22:c1:23:b8:a8:75:ac:6a:05:c6:3a:c2:f5:6f:b5:
                    be:0d:d4:1f:9f:35:34:71:21:8c:d6:d9:c9:d5:c9:
                    c1:9e:03:4c:2c:3d:39:35:12:54:5a:e3:b4:e2:e8:
                    50:ae:2f:e1:87:e5:b5:df:11:64:66:9e:7e:53:92:
                    df:8e:24:1a:3c:04:d1:57:0b:d2:e8:fb:d1:73:7d:
                    d9:8a:63:4b:1e:ce:79:57:33:1b:1a:46:36:0b:67:
                    0d:98:22:58:56:72:13:7e:a0:08:6b:92:0f:bd:f5:
                    ca:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:F0:C3:52:75:44:0D:73:94:AD:36:1A:AE:4E:BB:F7:E3:18:B6:09
            X509v3 Authority Key Identifier:
                keyid:97:CC:89:3F:4F:D5:20:F6:73:68:06:F9:79:62:59:9B:77:8E:1B:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B1EE5/21831C1C4F1511EFB7A68685762E951A/l8yJP0_VIPZzaAb5eWJZm3eOG2M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8yJP0_VIPZzaAb5eWJZm3eOG2M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B1EE5/21831C1C4F1511EFB7A68685762E951A/l8yJP0_VIPZzaAb5eWJZm3eOG2M.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:6e:3f:76:8f:12:c9:d3:d1:e3:5b:d9:3e:92:9b:06:dd:59:
         50:23:45:6b:a0:0e:49:13:b1:9e:31:7b:88:91:2a:8e:8c:54:
         f1:16:8d:8a:14:8b:d4:d2:c1:24:24:05:bc:29:8c:9a:88:ec:
         7c:30:2f:51:63:94:a8:c8:8e:8e:a4:f0:69:11:44:9a:58:97:
         c9:b7:07:50:72:14:50:6c:a6:f5:10:1c:96:e7:cf:a6:17:d8:
         b2:8e:1c:df:b7:07:a2:9d:71:72:e7:fc:94:c0:17:98:cf:5a:
         87:cf:ad:a0:ac:10:da:58:fd:01:61:da:40:89:59:88:87:63:
         ef:b6:be:eb:b0:b5:93:a3:60:be:a3:c9:1c:70:8e:70:e9:ac:
         f4:32:78:c0:0c:38:c6:44:de:a6:14:71:a0:f4:cf:d9:d0:f3:
         e0:8d:34:78:f4:2f:33:02:a1:50:ab:f7:4a:a9:92:d6:cb:91:
         25:45:31:4b:84:c7:77:fb:1c:34:f4:c7:b1:7d:ce:85:c0:19:
         01:df:bc:68:b1:71:eb:cb:bd:d3:26:c5:75:ac:fa:c7:2e:28:
         4d:33:6c:a6:2e:d0:56:55:37:80:26:eb:66:a9:1c:9d:5c:f0:
         63:23:f0:42:1a:5e:a3:b9:18:bb:40:78:cc:2f:e7:86:58:f1:
         42:f8:a8:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:56:16 2026 by rpki-client