Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C06DF/3600B3AA856811EF8C875646762E951A/i_RKORmwHdVFpRN9yW2Ih8FElMQ.mft
File:                     i_RKORmwHdVFpRN9yW2Ih8FElMQ.mft (raw, json)
Hash identifier:          g/XdYeAnm/VnasMTIgGjsaoRlWYi4ruS5uhvpEueq/I=
Subject key identifier:   84:EB:9C:1E:97:3D:AE:26:B7:77:EE:89:65:26:97:6A:A5:38:6F:1C
Authority key identifier: 8B:F4:4A:39:19:B0:1D:D5:45:A5:13:7D:C9:6D:88:87:C1:44:94:C4
Certificate issuer:       /CN=F36C06DFAF/serialNumber=8BF44A3919B01DD545A5137DC96D8887C14494C4
Certificate serial:       022D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/i_RKORmwHdVFpRN9yW2Ih8FElMQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C06DF/3600B3AA856811EF8C875646762E951A/i_RKORmwHdVFpRN9yW2Ih8FElMQ.mft
Manifest number:          0229
Signing time:             Thu 26 Mar 2026 05:28:34 +0000
Manifest this update:     Thu 26 Mar 2026 05:28:33 +0000
Manifest next update:     Sat 28 Mar 2026 05:28:33 +0000
Files and hashes:         1: i_RKORmwHdVFpRN9yW2Ih8FElMQ.crl (hash: nDk5bz6WdkZM76IegLyKQAU73HdQM6Ab/8tbO3XSTYI=)
                          2: A50DEF3A8A1B11EF86B3879F762E951A.roa (hash: 6S2eWQOAsB1C05yblXJP2r9a9WQgQ6FEOxOlJb4U21M=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C06DF/3600B3AA856811EF8C875646762E951A/i_RKORmwHdVFpRN9yW2Ih8FElMQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C06DF/3600B3AA856811EF8C875646762E951A/i_RKORmwHdVFpRN9yW2Ih8FElMQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/i_RKORmwHdVFpRN9yW2Ih8FElMQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 557 (0x22d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C06DFAF, serialNumber=8BF44A3919B01DD545A5137DC96D8887C14494C4
        Validity
            Not Before: Mar 26 05:28:33 2026 GMT
            Not After : Mar 28 05:28:33 2026 GMT
        Subject: CN=69c4c402-38c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:6c:79:49:c2:cb:81:c1:eb:8d:be:02:fb:1f:
                    8a:d7:13:b1:1d:05:c6:de:55:16:02:3d:a2:24:fd:
                    97:7d:4f:0b:3c:52:af:ed:4b:4f:78:96:19:a9:fe:
                    d1:3f:e8:50:da:75:36:3f:94:3b:ab:5f:3d:1b:b2:
                    da:5b:b0:40:72:0c:81:9a:12:78:9a:6f:14:44:51:
                    af:ff:76:43:1c:d6:f9:a6:81:4d:54:00:22:bc:87:
                    ff:22:4c:5a:1d:cf:1e:e6:51:8a:c3:98:a3:f8:1f:
                    47:93:42:c4:8a:82:d4:cd:bd:83:4d:9e:68:6d:20:
                    3f:c0:a2:4e:57:9b:8a:b6:82:29:46:89:b3:8d:a7:
                    0a:89:43:e4:02:09:b6:4c:55:6e:bb:d4:67:b9:11:
                    df:63:9b:7d:9c:08:30:3d:a7:58:39:52:6d:01:56:
                    8c:3d:b7:d0:d2:e8:f2:2a:ef:5d:ef:7b:d4:44:68:
                    8f:6a:c9:c0:06:da:53:ef:99:ce:07:64:ac:8e:b4:
                    bb:bc:55:6c:d3:5a:41:74:64:61:aa:71:f4:e8:f4:
                    a5:44:96:4b:e3:49:ec:5d:3e:42:c0:a6:3c:ad:46:
                    e4:f6:36:65:de:ae:6f:ce:e7:ce:3a:38:9a:c0:37:
                    43:b3:f6:ed:f2:7a:26:2c:02:7d:40:70:3e:b3:cb:
                    a2:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:EB:9C:1E:97:3D:AE:26:B7:77:EE:89:65:26:97:6A:A5:38:6F:1C
            X509v3 Authority Key Identifier:
                keyid:8B:F4:4A:39:19:B0:1D:D5:45:A5:13:7D:C9:6D:88:87:C1:44:94:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C06DF/3600B3AA856811EF8C875646762E951A/i_RKORmwHdVFpRN9yW2Ih8FElMQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/i_RKORmwHdVFpRN9yW2Ih8FElMQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C06DF/3600B3AA856811EF8C875646762E951A/i_RKORmwHdVFpRN9yW2Ih8FElMQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:c8:b4:ed:97:36:00:c0:1a:d9:7e:f9:0e:96:87:6e:9e:c5:
         d1:b2:fe:74:1e:d1:b9:6a:11:c0:9e:fb:ea:70:f8:b8:b4:82:
         5c:57:9b:a3:d8:05:7e:c9:ef:d0:aa:3c:13:bd:5f:67:74:53:
         2c:1f:91:8c:8a:09:c7:dc:e4:09:6a:b5:1f:13:c9:76:c3:6a:
         01:ff:cf:54:bf:8f:60:29:c5:dc:ce:08:d0:c4:c5:2c:d7:53:
         b2:a8:e5:3b:33:48:fe:00:96:2f:cc:d9:ee:0e:bd:c3:f4:b9:
         04:87:a5:fe:56:a4:bb:64:8c:36:3e:89:52:1f:8e:2a:b3:ce:
         6a:49:c3:ee:91:88:1d:01:34:de:fa:06:ee:c5:f6:82:96:a9:
         fc:2f:ff:80:5e:e8:c0:74:07:48:10:34:0f:d8:93:23:d3:7c:
         eb:5e:6b:c9:30:86:76:e9:61:e6:1a:ce:a7:28:71:b5:0c:d3:
         39:69:68:9e:d1:dc:45:c1:18:98:d4:1a:62:db:3c:e4:a4:8b:
         25:15:01:ea:3c:1d:1c:83:83:e3:24:43:ea:2e:fe:80:90:2c:
         bb:00:68:1a:53:a1:64:d6:f2:4f:c9:ed:96:da:94:3e:8e:d4:
         6a:bd:dd:05:ff:39:86:4c:80:87:0f:8b:9c:1f:f4:b2:cd:51:
         0f:92:57:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:58:50 2026 by rpki-client