Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BE2ED/06324CD897DF11EDA719F9F2F1222468/gQZ7oJrGc0TwLNTmS2v15M1zuBA.mft
File:                     gQZ7oJrGc0TwLNTmS2v15M1zuBA.mft (raw, json)
Hash identifier:          XYSKwc4gWs2rLmS4YXp/LobnOb4DuRgRIyWN1BW6QTY=
Subject key identifier:   0F:E6:58:C4:41:36:FC:89:5E:B9:98:A6:2C:36:66:C2:81:1D:23:E7
Authority key identifier: 81:06:7B:A0:9A:C6:73:44:F0:2C:D4:E6:4B:6B:F5:E4:CD:73:B8:10
Certificate issuer:       /CN=F36BE2EDRI/serialNumber=81067BA09AC67344F02CD4E64B6BF5E4CD73B810
Certificate serial:       04B3
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/gQZ7oJrGc0TwLNTmS2v15M1zuBA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/06324CD897DF11EDA719F9F2F1222468/gQZ7oJrGc0TwLNTmS2v15M1zuBA.mft
Manifest number:          04B1
Signing time:             Thu 26 Mar 2026 03:44:00 +0000
Manifest this update:     Thu 26 Mar 2026 03:43:59 +0000
Manifest next update:     Sat 28 Mar 2026 03:43:59 +0000
Files and hashes:         1: gQZ7oJrGc0TwLNTmS2v15M1zuBA.crl (hash: pvjOuGjCVwv26MidiefhkZfb5Dewyse0mH4LnjJAg5A=)
                          2: B808257A97E111ED9E450A7DF1222468.roa (hash: cAtOc/GhRwVJqkbF1v2sZelm06tLlTbFvHsrx/k9FKo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/06324CD897DF11EDA719F9F2F1222468/gQZ7oJrGc0TwLNTmS2v15M1zuBA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/06324CD897DF11EDA719F9F2F1222468/gQZ7oJrGc0TwLNTmS2v15M1zuBA.mft
                          rsync://rpki.afrinic.net/repository/ripe/gQZ7oJrGc0TwLNTmS2v15M1zuBA.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:45:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1203 (0x4b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BE2EDRI, serialNumber=81067BA09AC67344F02CD4E64B6BF5E4CD73B810
        Validity
            Not Before: Mar 26 03:43:59 2026 GMT
            Not After : Mar 28 03:43:59 2026 GMT
        Subject: CN=69c4ab80-5932
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:35:8c:0a:d7:7b:4d:b8:90:ec:89:f2:1d:f3:
                    4b:62:c3:ff:a0:bf:ad:43:3b:6f:bf:6b:29:30:ee:
                    5f:10:b2:88:ca:25:31:8b:e3:ec:82:12:c2:f9:68:
                    77:54:87:16:26:1e:21:cd:d2:4d:ad:db:e8:08:fb:
                    be:90:d8:44:61:3d:c0:52:37:9e:c2:7d:dc:eb:b3:
                    42:94:d9:f3:ae:48:86:90:74:15:c9:c6:a4:eb:92:
                    02:cb:1f:c5:3d:29:7f:6e:3b:4a:25:c0:02:60:06:
                    16:c1:5a:a1:f9:1a:bc:72:f9:35:bd:ec:de:44:e0:
                    64:9e:fe:93:f6:67:24:7b:3a:3a:bb:1e:d4:44:b5:
                    fe:c3:6f:42:9a:85:f7:65:e7:cf:c4:bf:3b:87:c8:
                    52:a2:7c:76:86:32:2e:ed:9d:ce:a4:66:ae:92:77:
                    f6:07:30:4c:91:c6:2c:92:09:40:57:da:cf:f6:e3:
                    de:1d:4e:15:9e:a9:0d:59:00:5a:16:c0:37:d8:46:
                    e3:b2:78:b6:7b:38:d8:25:51:87:90:d0:6d:69:8b:
                    25:3b:65:07:22:bc:07:f9:97:a4:fe:e0:0f:a8:61:
                    0c:90:5a:b1:6d:e9:55:53:e9:81:57:cf:64:80:50:
                    65:cd:1e:eb:24:6d:4c:b8:cc:62:92:0b:ab:9f:fe:
                    9f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:E6:58:C4:41:36:FC:89:5E:B9:98:A6:2C:36:66:C2:81:1D:23:E7
            X509v3 Authority Key Identifier:
                keyid:81:06:7B:A0:9A:C6:73:44:F0:2C:D4:E6:4B:6B:F5:E4:CD:73:B8:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/06324CD897DF11EDA719F9F2F1222468/gQZ7oJrGc0TwLNTmS2v15M1zuBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/gQZ7oJrGc0TwLNTmS2v15M1zuBA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/06324CD897DF11EDA719F9F2F1222468/gQZ7oJrGc0TwLNTmS2v15M1zuBA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:32:30:c8:9a:58:43:29:ee:ad:54:f7:a1:85:ca:46:3e:4c:
         ac:34:69:7d:7a:83:f0:dc:ed:e8:56:70:28:3c:f3:ac:dd:c2:
         09:a4:8f:f2:fe:91:15:2e:c3:6d:90:0c:2e:01:05:cf:bd:b7:
         14:0f:1a:c1:41:14:49:f0:97:e5:0b:45:5a:4a:6d:bc:d2:80:
         ab:54:e2:f4:4c:54:80:bb:b2:9b:49:f5:48:b2:54:9f:2a:14:
         28:5e:3e:d7:4c:eb:b5:cb:27:fa:62:22:e1:b1:5c:7b:65:4d:
         c7:76:80:06:73:0f:3a:c6:a9:14:d6:e5:48:86:26:07:3b:bf:
         c0:a0:ba:ff:04:3e:5f:49:2f:4a:41:96:a1:03:d3:96:e5:4d:
         81:c0:7f:38:c1:18:18:e2:7e:c9:bb:2e:db:6e:4b:d5:aa:ae:
         c8:b2:a7:ed:9f:fb:18:8d:1c:28:ca:2b:c2:1e:7f:f2:e2:4a:
         42:a5:f8:20:d9:03:ac:91:8e:c1:bf:45:5c:52:a3:58:42:40:
         ce:2e:22:ff:f9:43:fd:87:1b:5a:e5:27:01:c9:94:55:59:56:
         ff:5e:11:f3:8d:1a:f9:bd:91:7a:d6:ae:08:36:22:76:fc:ce:
         8a:a1:cd:d2:5e:75:8b:8b:f5:0b:ac:94:98:6d:32:d1:71:71:
         bf:aa:94:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:15:52 2026 by rpki-client