Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B9A81/0B27C0F2F1A111EEA48FB64C775412E6/2WACNlD1TrS44dw0q9RZ9QJw140.mft
File:                     2WACNlD1TrS44dw0q9RZ9QJw140.mft (raw, json)
Hash identifier:          QYrp/luSfd7ETEmj5ngdL5zkGab/vI4sihcYpqwVo8g=
Subject key identifier:   66:24:C2:24:A1:A1:65:51:10:DC:58:B2:17:A3:07:DF:AC:36:03:81
Authority key identifier: D9:60:02:36:50:F5:4E:B4:B8:E1:DC:34:AB:D4:59:F5:02:70:D7:8D
Certificate issuer:       /CN=F36B9A81AF/serialNumber=D960023650F54EB4B8E1DC34ABD459F50270D78D
Certificate serial:       02E4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/2WACNlD1TrS44dw0q9RZ9QJw140.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B9A81/0B27C0F2F1A111EEA48FB64C775412E6/2WACNlD1TrS44dw0q9RZ9QJw140.mft
Manifest number:          02E3
Signing time:             Thu 26 Mar 2026 04:53:16 +0000
Manifest this update:     Thu 26 Mar 2026 04:53:15 +0000
Manifest next update:     Sat 28 Mar 2026 04:53:15 +0000
Files and hashes:         1: 2WACNlD1TrS44dw0q9RZ9QJw140.crl (hash: V6oL2JCBqmjiiYwP0kARWizENYNE4vFKmg5cHgE4IZ4=)
                          2: 31539876F1A311EEAC1F355D775412E6.roa (hash: j6M+6W88movOdd6zMZWbEb9mu+RhA+HSxS5xxIDt/qU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B9A81/0B27C0F2F1A111EEA48FB64C775412E6/2WACNlD1TrS44dw0q9RZ9QJw140.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B9A81/0B27C0F2F1A111EEA48FB64C775412E6/2WACNlD1TrS44dw0q9RZ9QJw140.mft
                          rsync://rpki.afrinic.net/repository/afrinic/2WACNlD1TrS44dw0q9RZ9QJw140.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 740 (0x2e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B9A81AF, serialNumber=D960023650F54EB4B8E1DC34ABD459F50270D78D
        Validity
            Not Before: Mar 26 04:53:15 2026 GMT
            Not After : Mar 28 04:53:15 2026 GMT
        Subject: CN=69c4bbbc-5a4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5c:e5:6b:db:85:b7:5a:f3:61:53:32:9a:f0:
                    f3:fd:9a:6f:34:d9:e8:c9:0d:a3:62:1d:84:20:6c:
                    b9:54:56:17:dc:43:c8:ba:cd:be:22:9f:66:db:24:
                    e0:09:80:bf:ac:7e:1a:99:2d:c3:11:1c:53:ad:2b:
                    87:7c:fc:2b:2a:fd:f6:b2:d3:a2:0d:9f:d4:c5:b6:
                    a4:95:54:34:fd:f6:cb:ce:70:27:00:08:77:8c:97:
                    c2:27:53:04:50:ef:d3:2c:8c:79:06:0c:73:4e:00:
                    69:8f:4d:62:9d:0f:29:a0:66:ea:38:f4:07:8d:87:
                    99:9d:c8:0b:c7:5c:d5:0c:46:44:d7:26:16:db:9d:
                    67:a4:0f:57:24:bf:f9:c3:a7:b2:34:ef:b7:5a:49:
                    27:66:32:55:54:72:60:6b:28:4c:6e:9c:2c:74:91:
                    4d:88:3b:53:71:44:d0:aa:0c:b3:a6:f4:7f:60:23:
                    69:01:da:21:73:71:6f:f5:d0:72:10:25:cc:14:ed:
                    43:ce:42:15:3d:a9:d6:8d:5c:20:7e:44:ea:53:69:
                    a6:a3:e7:88:3f:7d:3e:41:64:a5:1e:4f:4b:41:fe:
                    6c:de:6d:09:68:92:ee:33:2c:fc:1b:33:35:69:71:
                    b2:e3:a0:d8:ba:72:b7:34:ef:b0:9f:c6:6a:f4:63:
                    1c:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:24:C2:24:A1:A1:65:51:10:DC:58:B2:17:A3:07:DF:AC:36:03:81
            X509v3 Authority Key Identifier:
                keyid:D9:60:02:36:50:F5:4E:B4:B8:E1:DC:34:AB:D4:59:F5:02:70:D7:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B9A81/0B27C0F2F1A111EEA48FB64C775412E6/2WACNlD1TrS44dw0q9RZ9QJw140.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2WACNlD1TrS44dw0q9RZ9QJw140.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B9A81/0B27C0F2F1A111EEA48FB64C775412E6/2WACNlD1TrS44dw0q9RZ9QJw140.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:25:8c:33:5b:22:37:40:11:cc:96:e7:f0:66:1e:b5:33:94:
         48:8a:6e:0b:7d:69:45:a4:52:aa:5a:78:54:1e:d2:07:3c:dd:
         80:f8:ba:67:3f:3b:50:e8:2a:bc:51:f8:8a:bf:a6:c7:06:ba:
         b6:d9:45:d1:73:ca:0d:13:3a:bc:c7:e4:49:a0:5a:96:19:69:
         de:33:ac:1b:0b:9d:03:f6:f5:81:22:10:f6:83:09:b3:8f:a4:
         9d:5a:13:cf:81:6e:1d:b4:bc:28:c5:7f:68:8e:1e:eb:ba:85:
         d9:8f:ac:5b:ba:78:c6:01:45:90:dc:b8:d6:1a:c3:a1:be:7d:
         8d:89:07:7d:11:d5:d8:b7:04:10:b0:c5:ff:c6:33:74:ac:e4:
         ca:c5:59:94:7d:b7:b2:31:60:89:8d:fc:73:a5:97:5b:47:aa:
         85:b7:af:79:e5:24:29:ff:e8:ae:b7:c2:70:dc:3f:65:09:4b:
         80:35:48:91:05:9b:f6:ff:e8:f1:c7:b3:fe:17:f1:32:f2:66:
         ad:9a:df:53:cd:5a:67:5b:6f:b8:72:e0:65:11:58:0c:c3:5f:
         d1:66:f1:34:4b:4e:25:d2:7c:c6:79:5e:3b:91:4c:53:af:58:
         1b:88:32:f7:01:88:9a:b3:38:11:c9:35:fb:af:88:7d:9c:31:
         82:9d:b4:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:54:10 2026 by rpki-client