Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B9B8F/84E1F6DC440411EFA393C656762E951A/f5DbGDX56nljonlPXDJUNY30PvQ.mft
File:                     f5DbGDX56nljonlPXDJUNY30PvQ.mft (raw, json)
Hash identifier:          VGuMzl2XXdGy0un83tGZGbEoAH2+WeXnfV+Ik7UIS5w=
Subject key identifier:   F7:91:E3:43:90:5D:E7:75:19:26:0C:BC:43:EE:5A:00:0F:4E:17:7B
Authority key identifier: 7F:90:DB:18:35:F9:EA:79:63:A2:79:4F:5C:32:54:35:8D:F4:3E:F4
Certificate issuer:       /CN=F36B9B8FAF/serialNumber=7F90DB1835F9EA7963A2794F5C3254358DF43EF4
Certificate serial:       0280
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/f5DbGDX56nljonlPXDJUNY30PvQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B9B8F/84E1F6DC440411EFA393C656762E951A/f5DbGDX56nljonlPXDJUNY30PvQ.mft
Manifest number:          027D
Signing time:             Thu 26 Mar 2026 05:09:56 +0000
Manifest this update:     Thu 26 Mar 2026 05:09:55 +0000
Manifest next update:     Sat 28 Mar 2026 05:09:55 +0000
Files and hashes:         1: f5DbGDX56nljonlPXDJUNY30PvQ.crl (hash: k0UvIr2R9ScLIiqRIGxIcstbrr8LyGHZ/pmQvD/1r2M=)
                          2: 9D6BC0A2F1EB11F0A880BEA8DAE4EC9C.roa (hash: T5AlM0cdDWsgrJOzsfZ2QwHjdJWPRUtlN9T0HbFf7rA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B9B8F/84E1F6DC440411EFA393C656762E951A/f5DbGDX56nljonlPXDJUNY30PvQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B9B8F/84E1F6DC440411EFA393C656762E951A/f5DbGDX56nljonlPXDJUNY30PvQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/f5DbGDX56nljonlPXDJUNY30PvQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 640 (0x280)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B9B8FAF, serialNumber=7F90DB1835F9EA7963A2794F5C3254358DF43EF4
        Validity
            Not Before: Mar 26 05:09:55 2026 GMT
            Not After : Mar 28 05:09:55 2026 GMT
        Subject: CN=69c4bfa4-04d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:28:9d:97:15:8e:5e:3a:05:83:e7:c1:29:f2:
                    b6:4a:21:1c:9b:7b:c8:b0:62:82:2c:b1:f7:85:a6:
                    71:0c:d8:7b:4a:14:55:45:6f:53:f6:a4:01:b3:1d:
                    70:2d:3b:69:4e:ae:e7:53:e5:11:4e:5f:5c:5d:67:
                    01:84:53:aa:4c:e6:e1:3e:7b:5d:bb:58:0f:cf:17:
                    e8:c4:4d:b8:58:e4:0d:af:6b:ed:ea:73:38:af:17:
                    6e:07:72:4f:28:d7:a0:40:ce:f6:6e:ac:f8:7c:1c:
                    fb:62:1f:85:79:a7:0a:39:31:1f:fb:b2:4f:58:9a:
                    78:2c:73:41:f9:e2:62:76:03:2a:6b:74:84:62:6f:
                    01:93:6d:fe:05:32:c9:77:33:e1:c3:1e:31:fa:fd:
                    2e:d3:00:10:c3:ef:43:66:b7:08:dc:0a:97:f0:42:
                    2c:1c:bc:a3:01:1a:ae:80:40:23:12:72:04:d8:95:
                    38:46:6a:42:47:49:0d:53:b7:71:51:67:4f:d4:1c:
                    24:69:82:b1:9c:c4:9e:49:d4:47:1c:1f:8a:a8:3a:
                    de:62:bc:fd:87:8d:a6:4f:de:b5:b2:8b:8d:0a:8c:
                    09:63:16:8f:1f:d9:d3:bd:e6:0f:9f:8f:12:3d:20:
                    70:95:31:1f:6c:f4:a8:3f:2d:09:5f:f0:74:ee:d9:
                    74:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:91:E3:43:90:5D:E7:75:19:26:0C:BC:43:EE:5A:00:0F:4E:17:7B
            X509v3 Authority Key Identifier:
                keyid:7F:90:DB:18:35:F9:EA:79:63:A2:79:4F:5C:32:54:35:8D:F4:3E:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B9B8F/84E1F6DC440411EFA393C656762E951A/f5DbGDX56nljonlPXDJUNY30PvQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/f5DbGDX56nljonlPXDJUNY30PvQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B9B8F/84E1F6DC440411EFA393C656762E951A/f5DbGDX56nljonlPXDJUNY30PvQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:5c:2f:e9:bf:42:d4:a6:89:2d:27:5b:92:d9:dc:e2:5c:a1:
         12:14:d8:99:30:fa:4b:29:81:dc:b1:b0:b6:9b:a0:8a:07:d3:
         93:6f:78:76:7b:a2:a8:12:96:3e:ed:61:10:c4:15:48:e0:0d:
         6f:bf:8d:50:7a:d1:d8:12:ca:ef:08:b4:96:38:1c:26:97:24:
         51:fd:13:cd:15:e5:cc:67:46:43:f4:3d:36:77:88:1e:f8:a1:
         78:54:b3:c2:c1:78:ba:07:f8:1a:c2:65:bd:d0:b3:35:75:cf:
         a7:fb:61:1b:cc:89:c3:a2:c7:9b:99:d5:28:32:ec:9f:1e:98:
         24:aa:2d:3a:fd:06:8f:50:e7:65:96:1d:85:97:a7:73:ad:0e:
         bd:44:cc:eb:10:34:09:e8:a7:7f:65:85:5f:05:57:13:3e:7e:
         84:41:dc:3e:1c:81:d5:8e:12:c6:74:88:fd:d0:73:64:e0:cc:
         c0:b2:ce:6b:f0:f1:81:93:52:c2:30:fb:4b:68:12:df:fb:68:
         34:32:f1:81:70:c3:f3:65:26:af:5c:c8:5d:96:ff:ec:b5:6e:
         7b:d2:30:1f:5a:b6:da:e2:0d:fc:21:41:69:c3:b3:e8:6c:79:
         6c:8a:5a:b3:bf:c6:79:91:70:e8:95:4b:9b:51:90:dc:a4:83:
         58:ad:c6:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:20:36 2026 by rpki-client