Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B86D4/A176EAD8092511EF86CCEDF5007001B1/v2DdGbZCZae1tFPwFbi4pgtCmM8.mft
File:                     v2DdGbZCZae1tFPwFbi4pgtCmM8.mft (raw, json)
Hash identifier:          SnjjvvWgmwp5ymeIMZNBn1xRouCqvFJsnpdSz82Re+0=
Subject key identifier:   4F:69:24:D7:C3:34:29:50:1D:CF:0E:13:9A:56:B1:D4:94:0C:55:0A
Authority key identifier: BF:60:DD:19:B6:42:65:A7:B5:B4:53:F0:15:B8:B8:A6:0B:42:98:CF
Certificate issuer:       /CN=F36B86D4AF/serialNumber=BF60DD19B64265A7B5B453F015B8B8A60B4298CF
Certificate serial:       02D3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/v2DdGbZCZae1tFPwFbi4pgtCmM8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B86D4/A176EAD8092511EF86CCEDF5007001B1/v2DdGbZCZae1tFPwFbi4pgtCmM8.mft
Manifest number:          02CE
Signing time:             Thu 26 Mar 2026 04:58:53 +0000
Manifest this update:     Thu 26 Mar 2026 04:58:52 +0000
Manifest next update:     Sat 28 Mar 2026 04:58:52 +0000
Files and hashes:         1: v2DdGbZCZae1tFPwFbi4pgtCmM8.crl (hash: x1Hz8nul6YK2jrsb4DiTrfNcMHnyPmhlXmvSGTi5U/g=)
                          2: 641ADEEC093411EFBC62A76A017001B1.roa (hash: 7RofrytqiAZkC8olZeL24JXarKRiHHpszoxgshTtLtE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B86D4/A176EAD8092511EF86CCEDF5007001B1/v2DdGbZCZae1tFPwFbi4pgtCmM8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B86D4/A176EAD8092511EF86CCEDF5007001B1/v2DdGbZCZae1tFPwFbi4pgtCmM8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/v2DdGbZCZae1tFPwFbi4pgtCmM8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 723 (0x2d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B86D4AF, serialNumber=BF60DD19B64265A7B5B453F015B8B8A60B4298CF
        Validity
            Not Before: Mar 26 04:58:52 2026 GMT
            Not After : Mar 28 04:58:52 2026 GMT
        Subject: CN=69c4bd0d-00d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e0:cb:1d:30:e6:0b:5b:74:61:bf:0b:7d:3b:
                    29:50:1e:82:d2:f1:49:6c:84:cf:43:0d:37:73:09:
                    90:93:73:96:f1:17:0f:ac:b4:8f:4b:1a:5a:09:ff:
                    27:30:30:26:68:6b:be:6f:48:0e:ba:a6:bc:a4:72:
                    0a:dd:9a:c6:cd:a2:a5:88:a0:01:02:de:45:2c:61:
                    f2:e6:52:89:35:ad:cf:6a:10:78:ce:b4:9c:82:27:
                    38:e7:85:0e:e7:db:1d:8d:eb:8c:2f:c8:03:d2:0b:
                    7f:64:51:30:6b:6c:af:83:54:66:47:52:03:11:fe:
                    c3:b8:1a:de:d4:60:f4:d2:04:53:60:76:57:fb:1c:
                    b1:31:73:78:31:83:25:9e:a2:d6:cd:1f:a0:3a:c9:
                    5d:c6:89:ae:a1:6a:e8:10:7e:3d:e6:e2:19:b3:e6:
                    80:29:39:e5:84:19:ab:37:ff:b2:e4:3d:64:e2:19:
                    d0:bc:c8:01:4e:09:18:36:6e:c8:4c:09:62:c4:9b:
                    a2:d5:d1:2a:fd:6f:6e:79:6e:2c:cf:0b:87:f8:dc:
                    24:cd:7d:25:61:09:b9:c3:cb:63:9c:cf:f9:ac:5a:
                    11:e7:18:b5:6e:b9:04:88:d1:49:73:67:74:b9:d3:
                    40:52:b1:8c:80:27:cf:d1:47:f3:e5:4f:67:b4:7b:
                    37:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:69:24:D7:C3:34:29:50:1D:CF:0E:13:9A:56:B1:D4:94:0C:55:0A
            X509v3 Authority Key Identifier:
                keyid:BF:60:DD:19:B6:42:65:A7:B5:B4:53:F0:15:B8:B8:A6:0B:42:98:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B86D4/A176EAD8092511EF86CCEDF5007001B1/v2DdGbZCZae1tFPwFbi4pgtCmM8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/v2DdGbZCZae1tFPwFbi4pgtCmM8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B86D4/A176EAD8092511EF86CCEDF5007001B1/v2DdGbZCZae1tFPwFbi4pgtCmM8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:6f:e5:3f:7d:c7:f0:a9:7e:46:bb:2b:22:06:82:a4:5b:ca:
         c5:a1:19:17:2a:cb:b8:27:5e:79:30:be:8b:06:b2:6e:4e:ed:
         86:da:5e:07:0e:42:49:f7:86:31:45:80:b9:12:63:d4:c8:10:
         2b:49:8f:08:47:df:4e:45:de:ef:24:ec:08:7a:3c:c8:d4:86:
         27:78:50:dd:bb:4e:ae:03:f3:08:2f:df:c1:8d:86:db:7a:38:
         b2:f9:29:0e:4d:61:57:7b:e3:4a:f7:50:fd:d4:61:f6:0a:23:
         26:f7:cf:f3:c3:d1:8b:16:51:c8:ab:3e:85:59:a8:8b:ef:29:
         07:bf:ae:94:2f:b3:98:66:77:56:e0:13:45:d2:92:39:c0:ad:
         52:46:3e:14:c3:9a:36:69:6e:c5:6e:cf:98:8a:58:cf:0b:6c:
         b5:c7:68:f5:c2:cb:98:42:87:67:09:4f:30:8f:e7:71:e6:e8:
         72:70:c3:b4:ee:07:c3:b7:f9:e5:58:e3:e6:e9:3c:a4:30:07:
         5f:54:3f:9d:b0:af:cc:46:71:94:44:41:6f:d0:86:cc:9f:cc:
         d7:e3:0e:61:e7:08:d2:6e:d8:22:50:a0:9f:b7:a0:30:17:ad:
         05:f1:34:61:b5:a9:f1:a4:4a:7f:49:51:0f:ff:3a:04:cc:ee:
         dd:17:f5:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:21:00 2026 by rpki-client