Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C29E6/BD45789E3D7011F08FB292D3DAE4EC9C/Rjx68zvS8Ur9TSo0XZwxgXx4c3w.mft
File:                     Rjx68zvS8Ur9TSo0XZwxgXx4c3w.mft (raw, json)
Hash identifier:          j9lXE2gWIIroD+JypKBqoomm09kRfxjRVuemVecZDH0=
Subject key identifier:   B9:F4:93:02:E4:F7:2E:90:97:ED:C2:C3:33:30:A5:A4:E3:F8:E1:10
Authority key identifier: 46:3C:7A:F3:3B:D2:F1:4A:FD:4D:2A:34:5D:9C:31:81:7C:78:73:7C
Certificate issuer:       /CN=F36C29E6AF/serialNumber=463C7AF33BD2F14AFD4D2A345D9C31817C78737C
Certificate serial:       0131
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Rjx68zvS8Ur9TSo0XZwxgXx4c3w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C29E6/BD45789E3D7011F08FB292D3DAE4EC9C/Rjx68zvS8Ur9TSo0XZwxgXx4c3w.mft
Manifest number:          0131
Signing time:             Thu 26 Mar 2026 05:54:37 +0000
Manifest this update:     Thu 26 Mar 2026 05:54:36 +0000
Manifest next update:     Sat 28 Mar 2026 05:54:36 +0000
Files and hashes:         1: Rjx68zvS8Ur9TSo0XZwxgXx4c3w.crl (hash: rFDU8rzXSleKW9rkQGkYlxaKTXUdsQy/TTgNqFpxbvU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C29E6/BD45789E3D7011F08FB292D3DAE4EC9C/Rjx68zvS8Ur9TSo0XZwxgXx4c3w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C29E6/BD45789E3D7011F08FB292D3DAE4EC9C/Rjx68zvS8Ur9TSo0XZwxgXx4c3w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Rjx68zvS8Ur9TSo0XZwxgXx4c3w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 305 (0x131)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C29E6AF, serialNumber=463C7AF33BD2F14AFD4D2A345D9C31817C78737C
        Validity
            Not Before: Mar 26 05:54:36 2026 GMT
            Not After : Mar 28 05:54:36 2026 GMT
        Subject: CN=69c4ca1d-63fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d1:3d:27:96:71:63:ce:aa:d9:3e:75:ee:2b:
                    a7:af:d1:84:94:f0:f1:76:64:05:02:46:d3:24:6b:
                    8d:88:a3:75:56:ff:39:cd:0b:60:8b:6c:ad:79:4b:
                    6c:57:be:e8:dc:d9:99:04:6f:c8:96:72:21:51:16:
                    ef:2e:5c:ff:52:d9:d6:62:0a:b1:52:ff:51:e8:53:
                    43:36:3b:2a:b8:21:eb:20:69:07:b0:26:3c:24:b5:
                    0d:2a:76:b9:cd:5e:2a:7b:22:fb:10:a0:e3:65:89:
                    37:40:e5:86:ec:c1:07:eb:85:53:ec:58:60:f8:13:
                    79:9a:f5:8c:6c:82:00:16:68:26:7b:a9:ec:c0:94:
                    b5:9b:ac:e9:94:92:5a:70:63:52:37:fa:1e:57:e3:
                    4f:85:32:28:51:c1:10:d7:d1:32:41:79:41:7f:50:
                    3c:c8:9f:0b:b5:59:5a:53:4a:f1:0c:6c:c3:df:ee:
                    b8:5f:5e:c5:08:33:f1:47:01:17:b7:2d:d7:d1:99:
                    f6:f4:bc:84:b3:d3:ac:b9:53:45:17:0d:1f:fb:13:
                    c8:e5:42:c7:f3:bb:8f:3e:3b:9d:de:a0:58:f9:57:
                    26:6a:c1:05:0a:f0:66:53:90:dc:5b:f5:12:ae:39:
                    28:88:2b:e1:76:f6:8d:3a:48:5c:60:59:17:af:0d:
                    5c:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:F4:93:02:E4:F7:2E:90:97:ED:C2:C3:33:30:A5:A4:E3:F8:E1:10
            X509v3 Authority Key Identifier:
                keyid:46:3C:7A:F3:3B:D2:F1:4A:FD:4D:2A:34:5D:9C:31:81:7C:78:73:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C29E6/BD45789E3D7011F08FB292D3DAE4EC9C/Rjx68zvS8Ur9TSo0XZwxgXx4c3w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Rjx68zvS8Ur9TSo0XZwxgXx4c3w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C29E6/BD45789E3D7011F08FB292D3DAE4EC9C/Rjx68zvS8Ur9TSo0XZwxgXx4c3w.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:05:9a:49:a5:61:92:72:f6:65:4a:04:20:ad:cd:37:6f:e5:
         70:7c:b3:a2:04:9a:18:59:2d:04:f9:41:ba:1a:22:14:2d:82:
         2e:cc:bf:4d:48:f2:e8:3d:8e:ae:0f:ab:e0:94:02:5d:d3:45:
         f8:3b:c8:46:a5:cb:e7:a1:79:95:c2:58:1d:26:50:8c:5b:80:
         19:f2:31:ea:6c:30:b0:ce:e0:dd:41:fa:df:fe:fe:c5:d0:c2:
         0b:42:64:b9:71:02:fd:62:e4:ba:3e:55:72:ff:c4:33:5f:b6:
         e2:9f:09:49:02:92:c5:1f:f9:5d:90:76:18:7a:f6:db:29:a4:
         2f:51:65:e7:2f:e6:9a:92:19:27:4d:ee:30:f2:ee:dd:41:e6:
         ae:76:29:e3:f2:13:35:2c:d4:5e:6a:ec:db:fd:1f:1b:9f:2e:
         74:5a:5b:26:83:93:9e:2a:fc:1f:de:e7:34:02:c3:d5:d1:fd:
         05:10:96:0d:2e:a1:86:07:19:64:96:44:5d:05:b2:2e:45:2b:
         0d:d2:02:28:f1:36:37:59:5c:09:00:f5:25:3f:c1:85:c5:d5:
         1a:b3:b8:32:a0:a1:26:88:fe:be:15:22:c6:ee:67:b2:33:91:
         cd:3c:6e:f2:5c:00:ec:c0:08:a8:34:3c:52:e7:93:76:f4:61:
         47:a4:6c:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:24:56 2026 by rpki-client