Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.mft
File:                     jI-M4q1VuTZr7G7fSSzZwUmOBmQ.mft (raw, json)
Hash identifier:          TUObkJZ3dM9tg5OePfgNxcgAZkJ7KT44URCLflmMu7I=
Subject key identifier:   8A:35:DF:E5:74:9E:A8:8D:22:4E:C7:36:24:3A:10:0A:32:CF:D1:57
Authority key identifier: 8C:8F:8C:E2:AD:55:B9:36:6B:EC:6E:DF:49:2C:D9:C1:49:8E:06:64
Certificate issuer:       /CN=F36BC80AAF/serialNumber=8C8F8CE2AD55B9366BEC6EDF492CD9C1498E0664
Certificate serial:       05FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.mft
Manifest number:          05D3
Signing time:             Thu 26 Mar 2026 03:13:33 +0000
Manifest this update:     Thu 26 Mar 2026 03:13:32 +0000
Manifest next update:     Sat 28 Mar 2026 03:13:32 +0000
Files and hashes:         1: jI-M4q1VuTZr7G7fSSzZwUmOBmQ.crl (hash: VsrSbL98qo0EX/OmZu6sWfiPLs1rgdMtqcDmaKUyHOk=)
                          2: B3F00DD8B5D211F0A032E09CDAE4EC9C.roa (hash: pBnI8YYRnn+y8iTW/+yYOAZgWLOb00S+9jpxjry2ifU=)
                          3: 7510A490FBDA11EFA602538E762E951A.roa (hash: K8eoOxbyDzKOVr27RbOhGjO0ujSDpgusioRxfBEGdeg=)
                          4: 802F17ACB5D011F0A862F28FDAE4EC9C.roa (hash: cEa5rc+b8uoRQm6lEKjcwEO4AN3MwGfJNjZVLfnNXsQ=)
                          5: 6C4F7098FFA911EF80A256B8762E951A.roa (hash: nLVSz/e6y8EyahDhz46G+ddHGy6xFQEmZ+lSlLJOj1k=)
                          6: 14D0DD48FCAC11EF8F606291762E951A.roa (hash: We9A0b1twQQd49MjYQiHevJV7RGbH0zGgiiv0BmjU4w=)
                          7: 924A5592B5CF11F083499A8BDAE4EC9C.roa (hash: vI5//pHlGWHAgoJjpRzv1Mv4Rju5P+7W+b9IA6ocMm8=)
                          8: 34F044FE336D11F0A6FE177FDAE4EC9C.roa (hash: yhXToE/ivhLm4HgJKr6OrdpT7iNJJtMwXlhtqU/6qu4=)
                          9: 332A33CAFFA911EF84F40CB6762E951A.roa (hash: nAe7SVEbrFBsJsSB2QjjEXejvC3k+OkB22lneTxOJs4=)
                          10: A3F519ECB5D111F099E55E98DAE4EC9C.roa (hash: N2S0kcv9ynYD8ccz/SB7pJXYn4dSI1K0kSCmPaGO2N4=)
                          11: BEB0D28EFCAA11EF97EC4A88762E951A.roa (hash: jZflyQkEOdvyH7cORlNM6RzxEc6T6GfFgEfB6W779Ik=)
                          12: E67C4F66FD2A11EFAFF97E57762E951A.roa (hash: 0KEac1L9NXZHhaATxDUbvggLHQuqEfxaMAc1BKGdXv0=)
                          13: 6C20E300FCAB11EFA301CF8C762E951A.roa (hash: OvsUXNSmfjEutAwyrB9JnPffvmOpMIjkA04wcKDLKRY=)
                          14: F0DCA42CFCAA11EF9CB0AF88762E951A.roa (hash: BzJmdF2Js2FoOGSwDan1wfPrzdWX29V5MPNuA8XkzBM=)
                          15: 731820EAFD6B11EFA5FAAE9C762E951A.roa (hash: WBg3iidspfXKbYNsCa9+4QR22QeQEUUkOPouJHSY0gU=)
                          16: 84D63AD4FCAC11EFBDC66892762E951A.roa (hash: eiarFVPH9xcpuLJ9GJbS6IkBNStXLIhNVgC/u2KChdQ=)
                          17: 0B36502EB5CF11F09E324387DAE4EC9C.roa (hash: FuUSeKXmdp59eIJUnwXj15oz80rdM1YNse2hoVng0XE=)
                          18: 5B20E2CAB5CF11F09368898BDAE4EC9C.roa (hash: 8lx8POTXnxQ/rETcudf+Tn5nhHis5M15ESoQBVa0Mz4=)
                          19: 115DB472B5D111F0A1AC2194DAE4EC9C.roa (hash: zLkLQwxPLh5BBWNzGvRyOityfiR56S+KxQLYKxeld8U=)
                          20: D6A36628B5D111F099116B98DAE4EC9C.roa (hash: Qb7brFTW1SmyM6hCIpLR/WnpCM+Gnw0eopnrES6lJs4=)
                          21: 5673440CFCAC11EF9614E491762E951A.roa (hash: 6r9fkhk67fd1QL6JR1kRn7YKpBT/BIiBUWKwgxbcGDI=)
                          22: 43255EBEB5D211F09330919CDAE4EC9C.roa (hash: WP/J10zandfKZR2eaHtY6wCS0JXLuclaCdl/D//TPkU=)
                          23: 84C45A96B5D211F098A59F9CDAE4EC9C.roa (hash: ZdT4oas310Raqs+Gms+VBmMixtSzPUmOs/XEA15Oe3k=)
                          24: 5FFD958AB6C011F0A433F7F3DAE4EC9C.roa (hash: lwAlG/Cp9JYBv5HsI1r0REKGcAMN2vMOXvb01TEL3gk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1532 (0x5fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BC80AAF, serialNumber=8C8F8CE2AD55B9366BEC6EDF492CD9C1498E0664
        Validity
            Not Before: Mar 26 03:13:32 2026 GMT
            Not After : Mar 28 03:13:32 2026 GMT
        Subject: CN=69c4a45d-91a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:00:02:bb:88:84:7e:ca:12:43:f5:dc:0d:e4:
                    84:87:d8:66:1c:00:73:b7:e8:d2:ee:43:f4:98:56:
                    d0:fb:d6:30:31:e5:db:65:8b:98:8c:84:97:a1:23:
                    f9:53:35:31:d1:b1:e4:04:fb:89:17:66:b4:30:4b:
                    dd:bc:d8:87:e3:0b:66:2f:e6:ad:f3:67:fb:1f:19:
                    84:e1:43:77:1b:86:41:ed:98:93:8f:25:6a:2c:61:
                    fb:cf:6e:72:3d:21:0d:50:81:d0:2c:ed:9e:e5:fb:
                    f2:9a:68:38:99:43:f3:80:d4:e8:a7:bd:77:2f:3d:
                    61:8a:4c:04:35:4f:6d:bf:cc:b9:33:04:a1:53:c1:
                    f3:1e:a5:bf:f0:67:a2:0f:fc:98:66:bb:93:ef:01:
                    6f:35:a2:ee:47:89:51:3b:c7:14:65:37:46:af:2e:
                    b6:04:68:b9:47:28:78:99:f2:ee:fe:4b:c9:a5:78:
                    e9:6a:f5:e7:6c:c1:0e:39:da:54:b5:33:f3:8a:78:
                    f0:22:0c:16:ff:dc:4c:d5:1f:f1:ea:a6:75:bd:a4:
                    fc:fa:47:ad:02:7b:c3:3a:00:50:10:e0:fc:22:e6:
                    0b:57:29:0b:b5:d6:38:5b:f1:f2:73:9a:71:3c:a3:
                    e7:67:07:b1:f6:55:ea:e5:27:89:01:68:a9:24:d5:
                    ff:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:35:DF:E5:74:9E:A8:8D:22:4E:C7:36:24:3A:10:0A:32:CF:D1:57
            X509v3 Authority Key Identifier:
                keyid:8C:8F:8C:E2:AD:55:B9:36:6B:EC:6E:DF:49:2C:D9:C1:49:8E:06:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:17:9d:dc:15:40:8c:a2:b2:7a:04:0a:22:d0:82:6e:65:cc:
         dc:ad:aa:db:42:a9:cd:40:ea:66:bd:d0:6a:52:6f:d7:f6:5d:
         bc:7b:23:a6:c8:e5:03:03:c3:92:7d:5d:5b:a5:cd:a5:07:ed:
         69:6d:b4:65:ba:08:27:73:ce:08:97:91:dd:90:80:53:99:41:
         1a:b4:f1:5b:bd:10:21:d0:06:8c:f3:ab:ed:83:00:ee:7d:a8:
         09:67:14:00:47:f1:84:5c:1b:5d:49:31:22:ba:a3:2b:c3:37:
         d7:f2:fb:ed:cd:24:3f:12:92:e5:77:75:ad:df:bc:4b:03:ff:
         66:03:53:8b:de:7c:e5:a5:c1:bf:43:86:79:19:74:55:b4:24:
         1f:33:a7:ba:3a:ef:05:2d:3d:1e:c4:d7:94:91:dd:62:4e:fe:
         3e:6e:a4:ba:6c:76:b2:11:48:b4:db:84:a7:d8:8a:e7:34:64:
         57:0d:42:98:f1:89:18:75:74:56:f6:e5:69:53:6e:57:09:df:
         1c:0b:38:28:63:bf:1b:56:55:a5:b2:8d:ba:95:94:0f:1a:04:
         e2:91:5e:d4:c8:3a:9d:85:74:66:17:d9:27:8e:78:98:00:75:
         1d:0c:97:f2:53:66:76:f5:43:bf:f9:4b:67:c2:17:29:08:54:
         23:40:e5:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:45:32 2026 by rpki-client