Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B95DE/0142933CCA5E11EAAA82C884F8AEA228/Qthcb-Q83dnDQqmRI5Oe9tELlmE.mft
File:                     Qthcb-Q83dnDQqmRI5Oe9tELlmE.mft (raw, json)
Hash identifier:          ss6rJmJRLwhSzBcEOzKCOEVaJVD/DSchaUZLQaNGMiE=
Subject key identifier:   01:E4:FB:D3:E3:99:23:F0:3D:09:08:49:04:90:08:02:D3:00:E1:B6
Authority key identifier: 42:D8:5C:6F:E4:3C:DD:D9:C3:42:A9:91:23:93:9E:F6:D1:0B:96:61
Certificate issuer:       /CN=F36B95DEAF/serialNumber=42D85C6FE43CDDD9C342A99123939EF6D10B9661
Certificate serial:       0858
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Qthcb-Q83dnDQqmRI5Oe9tELlmE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B95DE/0142933CCA5E11EAAA82C884F8AEA228/Qthcb-Q83dnDQqmRI5Oe9tELlmE.mft
Manifest number:          0854
Signing time:             Thu 26 Mar 2026 02:07:06 +0000
Manifest this update:     Thu 26 Mar 2026 02:07:05 +0000
Manifest next update:     Sat 28 Mar 2026 02:07:05 +0000
Files and hashes:         1: Qthcb-Q83dnDQqmRI5Oe9tELlmE.crl (hash: luXvBjkgM1gUgrgFuIRmvJtKW1V/84LFebP3TTllftA=)
                          2: 45832B683A1811F0A5162699DAE4EC9C.roa (hash: bH1V9seBQy1bZT+/9CsQ550EAlVYbRUIjhOsEaER3S4=)
                          3: 5FD871EACA5F11EA8E777586F8AEA228.roa (hash: EtblfigLNGF6wfw5nHmJIbAVHju/Amjjjou8s+nuYu4=)
                          4: 9A1972CECA5E11EAA7968D85F8AEA228.roa (hash: o/3b7bz/I2GIF7K8ptLx/xwnuWsVO1fKO4zNdB3TrJA=)
                          5: 3B0F41F6119A11EE83C1C7674AD9E6FC.roa (hash: Akb8hG2TQ9VVrsrKElxgh/Wgpez3UXugTuk8ANcj3VE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B95DE/0142933CCA5E11EAAA82C884F8AEA228/Qthcb-Q83dnDQqmRI5Oe9tELlmE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B95DE/0142933CCA5E11EAAA82C884F8AEA228/Qthcb-Q83dnDQqmRI5Oe9tELlmE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Qthcb-Q83dnDQqmRI5Oe9tELlmE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2136 (0x858)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B95DEAF, serialNumber=42D85C6FE43CDDD9C342A99123939EF6D10B9661
        Validity
            Not Before: Mar 26 02:07:05 2026 GMT
            Not After : Mar 28 02:07:05 2026 GMT
        Subject: CN=69c494ca-d3e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:33:5b:e5:6f:10:4a:b7:95:41:93:b2:e8:50:
                    f0:a1:ad:67:69:6f:5c:f1:2d:e6:ea:2f:71:e1:1a:
                    d1:9b:ae:3a:39:08:82:f0:23:c4:dd:be:fb:da:86:
                    56:13:00:1c:ac:9b:1b:8e:62:46:bb:be:60:87:34:
                    0e:72:cc:14:45:9e:ca:2f:9b:60:a6:a1:06:92:e3:
                    31:bb:fd:3e:fd:1e:cb:a7:aa:1f:47:68:45:2a:4b:
                    41:a9:0f:03:a3:c0:45:de:53:36:04:c5:f2:51:4d:
                    13:fd:42:92:ed:14:c1:67:8d:e7:79:ff:4d:91:14:
                    ab:06:b6:44:b4:c9:37:17:67:87:73:fb:35:78:88:
                    c6:e1:da:8d:d5:e2:6c:bf:88:43:31:31:ad:b6:2e:
                    00:28:2a:ff:cc:53:96:af:1c:17:29:62:f0:e8:67:
                    cf:37:06:da:c0:94:63:87:a8:e7:0a:db:d6:b6:e0:
                    0b:f0:06:9e:f4:04:76:13:44:cc:62:04:e4:c8:ba:
                    1a:89:f4:97:30:d3:33:7b:65:c2:44:19:b6:e8:34:
                    cb:fc:09:3b:98:ed:ff:51:00:16:34:aa:60:43:04:
                    34:06:ab:6d:e1:22:f1:f3:fc:b8:50:78:1a:21:30:
                    f5:4a:a5:f6:6b:7c:73:71:49:7a:fb:c1:b0:31:3d:
                    7b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:E4:FB:D3:E3:99:23:F0:3D:09:08:49:04:90:08:02:D3:00:E1:B6
            X509v3 Authority Key Identifier:
                keyid:42:D8:5C:6F:E4:3C:DD:D9:C3:42:A9:91:23:93:9E:F6:D1:0B:96:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B95DE/0142933CCA5E11EAAA82C884F8AEA228/Qthcb-Q83dnDQqmRI5Oe9tELlmE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Qthcb-Q83dnDQqmRI5Oe9tELlmE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B95DE/0142933CCA5E11EAAA82C884F8AEA228/Qthcb-Q83dnDQqmRI5Oe9tELlmE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:c6:f0:7e:f4:a6:82:be:37:49:9d:96:ea:7a:c3:02:fd:5b:
         64:db:7a:a2:86:d9:92:9e:29:ee:ef:59:ff:e6:76:0a:cd:6b:
         c1:71:be:8b:44:59:24:84:5d:37:49:93:63:d9:b2:6b:d8:18:
         56:18:2e:18:d7:0c:69:79:97:93:57:77:05:77:b8:76:5a:8d:
         80:0a:4e:2a:33:b4:73:4b:0b:e3:97:20:2b:61:b7:b0:ac:86:
         af:bc:a2:82:47:08:af:4a:41:ce:db:6c:04:f8:b9:e1:de:e8:
         c8:5f:9e:b2:2f:2e:ef:ae:d2:cd:ea:ee:c0:8f:a5:1d:76:12:
         4d:23:b2:39:f5:d0:19:2b:60:54:ed:ed:7e:a8:b9:a9:85:48:
         6e:c7:f8:24:a4:a7:84:72:36:df:59:6d:29:0c:8c:b6:17:6f:
         62:7f:8c:21:eb:8f:58:1d:87:e6:9c:f1:b8:0f:01:72:3c:d3:
         09:7c:3c:12:d2:2f:52:0e:06:5b:a2:eb:ec:b2:d6:cf:b7:0d:
         71:02:11:16:fb:c8:00:dc:91:d0:cb:44:68:db:f8:d1:aa:0a:
         4d:3a:44:e4:c1:22:6d:4e:1c:79:8c:ba:be:fa:8e:5f:c3:cb:
         5b:5a:46:e1:b9:05:23:9c:93:c4:e2:14:6a:2b:26:2d:11:db:
         af:72:59:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:58:39 2026 by rpki-client