Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/A_5dcm806TzhqV2UUY4SI3rD4sY.mft
File:                     A_5dcm806TzhqV2UUY4SI3rD4sY.mft (raw, json)
Hash identifier:          lHnDv1eOs5WPWT7u2GNdnEB7v0zppWLSWNBsQeMuUzk=
Subject key identifier:   31:9A:14:3A:B7:E7:3F:14:72:21:92:E8:33:61:09:D1:8F:FD:D7:78
Authority key identifier: 03:FE:5D:72:6F:34:E9:3C:E1:A9:5D:94:51:8E:12:23:7A:C3:E2:C6
Certificate issuer:       /CN=F36B3234AF/serialNumber=03FE5D726F34E93CE1A95D94518E12237AC3E2C6
Certificate serial:       073F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/A_5dcm806TzhqV2UUY4SI3rD4sY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/A_5dcm806TzhqV2UUY4SI3rD4sY.mft
Manifest number:          0704
Signing time:             Thu 26 Mar 2026 02:49:43 +0000
Manifest this update:     Thu 26 Mar 2026 02:49:42 +0000
Manifest next update:     Sat 28 Mar 2026 02:49:42 +0000
Files and hashes:         1: A_5dcm806TzhqV2UUY4SI3rD4sY.crl (hash: nYuMcvySGoOzMvifWj1yc7vQmTfJf0nK6UoBIjGBLsM=)
                          2: F073103AED8511F098246590DAE4EC9C.roa (hash: 7/OBPMvHgaBhBjcdfmAskDW47LM3Vtw//UfK9zD6ZTM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/A_5dcm806TzhqV2UUY4SI3rD4sY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/A_5dcm806TzhqV2UUY4SI3rD4sY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/A_5dcm806TzhqV2UUY4SI3rD4sY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1855 (0x73f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B3234AF, serialNumber=03FE5D726F34E93CE1A95D94518E12237AC3E2C6
        Validity
            Not Before: Mar 26 02:49:42 2026 GMT
            Not After : Mar 28 02:49:42 2026 GMT
        Subject: CN=69c49ec7-8af2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:90:ef:bb:c8:c4:e0:4e:98:14:08:35:41:30:
                    20:83:02:bb:be:b9:da:4e:f1:1d:26:63:30:c5:b1:
                    0c:b6:d7:2a:5a:20:d3:e4:2c:55:1c:5d:54:af:17:
                    fa:46:8d:a7:12:35:16:f4:cf:f6:57:48:9c:6d:59:
                    90:3b:4a:79:79:ac:68:17:e5:54:a9:66:e9:24:57:
                    08:32:e9:55:05:76:5a:8e:8b:a8:40:e3:30:e3:c3:
                    dd:60:cb:39:ee:d9:9c:af:69:bb:02:11:a1:3c:79:
                    5b:ce:56:10:39:5b:08:28:03:b4:1d:4d:1a:dd:9b:
                    8a:2e:93:d7:d2:1e:1c:0f:78:6a:f5:46:73:4a:a3:
                    d3:08:c0:bd:c0:0d:0a:42:9f:38:f3:e0:51:08:ab:
                    ed:05:bc:49:8e:e4:11:86:62:a1:84:c1:96:8f:c9:
                    79:23:28:63:ed:be:e1:1d:e7:79:2c:ad:6f:48:e5:
                    23:a0:d6:59:b8:39:4e:9d:e1:42:8c:ce:5f:5f:81:
                    d8:a6:b8:5a:04:a5:ef:e4:31:c9:17:44:8a:3f:92:
                    de:4f:80:a2:8a:cf:4b:8a:ed:c4:c0:55:76:ce:4b:
                    e3:da:ed:71:e0:55:55:33:a6:e6:aa:2c:c1:73:be:
                    81:c9:33:c4:bb:e9:8c:6f:0a:78:8e:4b:b2:70:8d:
                    de:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:9A:14:3A:B7:E7:3F:14:72:21:92:E8:33:61:09:D1:8F:FD:D7:78
            X509v3 Authority Key Identifier:
                keyid:03:FE:5D:72:6F:34:E9:3C:E1:A9:5D:94:51:8E:12:23:7A:C3:E2:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/A_5dcm806TzhqV2UUY4SI3rD4sY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/A_5dcm806TzhqV2UUY4SI3rD4sY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/A_5dcm806TzhqV2UUY4SI3rD4sY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:67:75:8d:27:10:26:5c:3a:0f:d1:56:86:89:78:54:19:24:
         8b:46:cb:32:b0:f4:8a:2e:57:13:21:06:7f:6c:9d:ca:83:57:
         0b:b2:10:2a:0d:79:b0:64:4f:73:c2:62:90:bf:72:61:50:49:
         11:55:86:b8:e1:13:41:2e:e5:9f:20:1f:bb:b2:8a:8f:6c:71:
         79:4f:a4:47:d0:53:85:d7:0e:4c:c2:28:06:b8:05:fd:f7:3d:
         3a:cb:51:54:92:37:99:00:aa:a5:84:ac:3c:67:1b:01:44:02:
         fb:e5:28:f5:bc:d4:c2:20:fe:59:e1:1e:6d:6f:52:3b:6f:c9:
         0c:c9:cf:b5:45:5f:88:15:73:7c:d4:a0:33:51:c9:72:74:27:
         18:bd:68:47:c4:87:fd:d4:53:dd:d1:2e:7d:a0:7a:19:fb:c1:
         d6:88:87:1f:67:d2:4a:0d:77:b6:2f:ef:1a:3e:af:3d:8a:d6:
         be:8a:d1:36:a2:1f:39:86:ae:e8:88:1c:9a:93:59:e9:ea:a5:
         25:9d:45:dc:14:ca:9b:32:3e:83:a7:af:2b:c5:c5:b3:35:df:
         98:6a:0f:cd:42:68:d4:da:a8:93:69:b7:1e:09:8a:75:cc:8c:
         4e:24:2e:fe:83:5b:53:c8:23:d0:e8:69:d4:73:e9:c4:f1:e3:
         0c:4e:ff:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:14:28 2026 by rpki-client