Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B2D09/0841ED9827E511EFA5CFA4137DDC24C2/EoXp9a6JDQnrah2cFSaY2CVpQXM.mft
File:                     EoXp9a6JDQnrah2cFSaY2CVpQXM.mft (raw, json)
Hash identifier:          nJWsv4Rh+FwF5ZRSDSGz6TA4ASGw7NDjtetu2MFOLd8=
Subject key identifier:   11:C5:FD:3D:83:B7:55:B6:C6:E8:65:ED:DC:5C:A7:F3:48:35:1C:5D
Authority key identifier: 12:85:E9:F5:AE:89:0D:09:EB:6A:1D:9C:15:26:98:D8:25:69:41:73
Certificate issuer:       /CN=F36B2D09AF/serialNumber=1285E9F5AE890D09EB6A1D9C152698D825694173
Certificate serial:       02A0
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/EoXp9a6JDQnrah2cFSaY2CVpQXM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B2D09/0841ED9827E511EFA5CFA4137DDC24C2/EoXp9a6JDQnrah2cFSaY2CVpQXM.mft
Manifest number:          029E
Signing time:             Thu 26 Mar 2026 05:02:38 +0000
Manifest this update:     Thu 26 Mar 2026 05:02:37 +0000
Manifest next update:     Sat 28 Mar 2026 05:02:37 +0000
Files and hashes:         1: EoXp9a6JDQnrah2cFSaY2CVpQXM.crl (hash: xo4wMPC+fpJRXub6te9JF79VelzEHJLD6hOcmI/myf4=)
                          2: 81A877024B1B11EF97889885762E951A.roa (hash: Jb7FsCfPieRiHewZHkBoyTfyXOoZ5GSQBgW72tN/jmY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B2D09/0841ED9827E511EFA5CFA4137DDC24C2/EoXp9a6JDQnrah2cFSaY2CVpQXM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B2D09/0841ED9827E511EFA5CFA4137DDC24C2/EoXp9a6JDQnrah2cFSaY2CVpQXM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/EoXp9a6JDQnrah2cFSaY2CVpQXM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 672 (0x2a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B2D09AF, serialNumber=1285E9F5AE890D09EB6A1D9C152698D825694173
        Validity
            Not Before: Mar 26 05:02:37 2026 GMT
            Not After : Mar 28 05:02:37 2026 GMT
        Subject: CN=69c4bdee-412b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a4:4c:df:8f:bc:86:76:dc:f0:68:8f:39:68:
                    6f:03:e8:b0:45:35:e3:ba:95:84:ad:49:aa:79:b8:
                    83:cc:4a:3d:50:97:7b:ac:98:03:63:35:d6:40:77:
                    a9:89:59:5b:8a:10:a5:a7:f6:b1:a3:7c:b1:22:04:
                    85:da:45:41:24:7a:49:13:96:f2:c3:59:f8:80:c5:
                    44:aa:cf:ef:b5:24:e3:dc:b0:2c:01:09:85:3f:ff:
                    bf:24:31:af:bb:1d:73:90:a3:da:97:72:fd:c7:28:
                    d8:86:6c:b0:1f:2e:78:8b:bd:8d:fc:74:dc:47:47:
                    30:9d:f7:63:cc:f5:98:75:da:e5:06:b6:a3:d6:15:
                    b9:b3:e8:02:7e:24:7d:2c:e8:a8:bd:be:3a:8d:cc:
                    4b:79:86:91:be:00:05:e1:b4:11:d6:de:9d:5d:9a:
                    7c:30:b4:9d:8a:31:ce:cb:1d:33:f1:b8:11:95:d4:
                    3c:6d:1f:ae:94:8d:5d:29:32:31:7d:44:cb:f4:5e:
                    13:1a:b4:d0:4d:09:c2:0b:e9:9d:82:77:47:58:7d:
                    a7:ea:1a:8f:54:0f:5f:ff:5c:67:02:8d:42:ac:e2:
                    a9:8c:70:e7:20:08:3a:d3:a8:f0:fc:e5:a8:ce:5a:
                    a9:55:07:0d:26:d8:09:dd:53:b0:50:56:b4:7d:42:
                    f7:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:C5:FD:3D:83:B7:55:B6:C6:E8:65:ED:DC:5C:A7:F3:48:35:1C:5D
            X509v3 Authority Key Identifier:
                keyid:12:85:E9:F5:AE:89:0D:09:EB:6A:1D:9C:15:26:98:D8:25:69:41:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B2D09/0841ED9827E511EFA5CFA4137DDC24C2/EoXp9a6JDQnrah2cFSaY2CVpQXM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/EoXp9a6JDQnrah2cFSaY2CVpQXM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B2D09/0841ED9827E511EFA5CFA4137DDC24C2/EoXp9a6JDQnrah2cFSaY2CVpQXM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:35:88:2a:0f:3d:ea:34:2d:34:b7:0a:79:5d:c9:2e:f6:d2:
         83:e6:c5:3b:e6:26:12:05:b5:99:18:e7:50:8a:f6:38:35:80:
         e4:e2:c6:2f:82:af:58:a1:33:9c:46:8a:a1:3e:aa:ad:00:95:
         4a:39:27:35:47:77:9d:2e:34:2d:b5:85:56:90:eb:0a:53:4f:
         05:d1:ed:d4:a9:1f:11:cf:af:dc:33:6d:2c:b6:fb:4e:7c:86:
         b6:d5:3c:34:f5:38:68:f8:20:07:72:9e:21:0a:95:9c:f6:45:
         6b:e1:a4:e4:51:08:1d:d5:c0:f9:b8:4b:63:f6:b3:f5:94:77:
         2b:0e:c4:67:3c:25:81:19:0a:ef:15:6f:66:a2:3a:3d:da:73:
         f2:0d:88:11:1e:1a:23:14:9d:25:f9:2f:02:bf:d7:4b:8b:34:
         cf:39:74:f8:4b:17:d4:7a:50:31:47:db:71:e0:ac:3e:0a:59:
         5e:ac:5a:e3:ec:89:68:c1:dc:3f:10:56:5f:ca:22:c8:9e:f1:
         42:8e:bb:eb:3b:1c:03:b6:d6:16:4f:d8:b9:a8:37:44:94:c0:
         9b:1f:30:8c:78:24:7f:fa:e9:99:d1:de:9e:c7:56:6f:d4:a2:
         e9:4a:da:92:1c:50:e1:2d:3f:eb:0d:ca:96:c3:6d:69:ef:35:
         d2:d7:f9:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:35:40 2026 by rpki-client