Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B6ED4/7FEB5078746511F0B88F0E83DAE4EC9C/s14-lHqUdaFnx9_wp9CQLIZFgy0.mft
File:                     s14-lHqUdaFnx9_wp9CQLIZFgy0.mft (raw, json)
Hash identifier:          Yej8pbwm1c7q5MB8FuRJRd681y1Zzh7S5z58TTdvcrQ=
Subject key identifier:   CA:A9:76:5C:CF:6D:B9:7A:37:AC:AB:B3:72:7E:59:50:4E:33:1E:69
Authority key identifier: B3:5E:3E:94:7A:94:75:A1:67:C7:DF:F0:A7:D0:90:2C:86:45:83:2D
Certificate issuer:       /CN=F36B6ED4AF/serialNumber=B35E3E947A9475A167C7DFF0A7D0902C8645832D
Certificate serial:       EA
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/s14-lHqUdaFnx9_wp9CQLIZFgy0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B6ED4/7FEB5078746511F0B88F0E83DAE4EC9C/s14-lHqUdaFnx9_wp9CQLIZFgy0.mft
Manifest number:          E9
Signing time:             Wed 25 Mar 2026 06:05:09 +0000
Manifest this update:     Wed 25 Mar 2026 06:05:08 +0000
Manifest next update:     Fri 27 Mar 2026 06:05:08 +0000
Files and hashes:         1: s14-lHqUdaFnx9_wp9CQLIZFgy0.crl (hash: 8lL/LTxM3hoMdqUuC+8CDZ45z8BKXA0VsCDtF6otA6k=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B6ED4/7FEB5078746511F0B88F0E83DAE4EC9C/s14-lHqUdaFnx9_wp9CQLIZFgy0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B6ED4/7FEB5078746511F0B88F0E83DAE4EC9C/s14-lHqUdaFnx9_wp9CQLIZFgy0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/s14-lHqUdaFnx9_wp9CQLIZFgy0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 27 Mar 2026 06:05:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 234 (0xea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B6ED4AF, serialNumber=B35E3E947A9475A167C7DFF0A7D0902C8645832D
        Validity
            Not Before: Mar 25 06:05:08 2026 GMT
            Not After : Mar 27 06:05:08 2026 GMT
        Subject: CN=69c37b15-559a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4e:63:72:c6:4d:d7:81:e1:94:f2:47:78:0a:
                    e8:b4:60:ec:26:9f:90:a8:cc:c0:73:b5:c6:d7:46:
                    14:0c:80:bd:6a:70:48:21:3f:77:6a:ed:9b:7b:23:
                    1f:65:67:f1:99:82:e5:96:44:44:8f:4a:0f:d2:65:
                    ba:28:52:a8:ee:6b:15:24:c4:38:c8:4a:4e:40:d5:
                    d2:5e:04:a7:c9:cf:96:1d:2e:f0:ba:71:3d:ae:5c:
                    81:1b:5f:21:48:8e:f8:95:84:3a:89:91:dc:d6:74:
                    42:3e:5c:95:5d:02:cf:15:76:76:23:54:29:98:17:
                    73:f9:4d:7a:8d:39:18:14:cf:3f:59:e6:81:09:64:
                    90:95:35:8f:78:3c:26:da:97:97:e6:13:d5:d3:47:
                    b1:5e:18:fb:95:75:50:c6:3d:77:e8:54:d6:b0:b0:
                    9e:a1:f1:01:76:1f:82:c2:28:7f:a2:57:0b:cf:a5:
                    83:44:0e:51:9e:3c:d4:74:c8:87:1d:13:5d:c6:20:
                    22:9c:10:50:27:bf:99:80:03:41:e5:89:52:1b:96:
                    1e:84:c6:4d:df:f3:0d:a9:63:11:88:ac:9b:4d:d4:
                    d3:fe:9d:f8:96:22:ff:0b:e1:d1:73:e4:a7:33:2a:
                    5b:e7:d2:99:f6:01:6f:ba:6c:3a:cf:bc:70:8a:2f:
                    b9:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:A9:76:5C:CF:6D:B9:7A:37:AC:AB:B3:72:7E:59:50:4E:33:1E:69
            X509v3 Authority Key Identifier:
                keyid:B3:5E:3E:94:7A:94:75:A1:67:C7:DF:F0:A7:D0:90:2C:86:45:83:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B6ED4/7FEB5078746511F0B88F0E83DAE4EC9C/s14-lHqUdaFnx9_wp9CQLIZFgy0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/s14-lHqUdaFnx9_wp9CQLIZFgy0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B6ED4/7FEB5078746511F0B88F0E83DAE4EC9C/s14-lHqUdaFnx9_wp9CQLIZFgy0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:b0:6f:64:c8:ab:9c:e9:e2:08:76:11:30:1f:74:08:46:89:
         62:a4:92:23:df:73:9e:ed:ea:1f:2d:1e:18:01:7f:09:ba:d9:
         52:92:be:42:b4:e8:b5:fa:a4:62:7e:06:ba:c3:8b:3d:20:90:
         3c:01:5a:98:44:0d:0c:1d:87:14:2a:af:ea:ed:26:ed:a6:2c:
         09:3a:5d:e0:f3:db:9f:c0:4e:7f:38:83:75:ea:6a:d8:75:13:
         e4:c4:33:5f:25:df:a9:42:84:b0:5e:72:27:51:cd:12:e7:ca:
         3c:5b:53:c8:00:ba:5e:2b:fb:00:40:9a:16:11:57:37:e3:25:
         02:ef:93:cc:9f:09:c9:0f:14:12:44:66:52:8c:83:e4:3c:f5:
         29:c7:33:f6:82:44:94:ac:95:df:e0:b3:30:0f:02:a5:a1:63:
         e4:c1:20:e3:fb:fa:e6:ce:a4:fe:52:23:3f:e7:74:4c:80:39:
         8f:a4:16:35:d3:37:43:51:cb:fc:75:75:d5:72:d3:6b:a7:61:
         14:a6:3a:f0:18:43:37:94:91:65:c5:69:06:a7:fe:40:58:e4:
         99:df:80:4a:31:ba:7e:ea:c7:40:3a:47:32:08:f6:1d:20:56:
         bd:10:b9:4f:8d:9e:b3:6e:1f:fa:6c:3f:c4:cd:cf:79:9c:a6:
         d1:eb:bc:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:29:14 2026 by rpki-client