Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C2FCA/A0A849CC9E1511F0A83E87BFDAE4EC9C/wDEb4pGTolThzVxYy7dlalArlVo.mft
File:                     wDEb4pGTolThzVxYy7dlalArlVo.mft (raw, json)
Hash identifier:          FXE6LJhq45jYWyeZ/40IEOaGKwpfQtKcj+EmOtnPVxY=
Subject key identifier:   B2:E5:53:61:7A:79:92:C1:E5:45:CE:1A:C6:AB:2D:94:9C:2F:B4:95
Authority key identifier: C0:31:1B:E2:91:93:A2:54:E1:CD:5C:58:CB:B7:65:6A:50:2B:95:5A
Certificate issuer:       /CN=F36C2FCAAF/serialNumber=C0311BE29193A254E1CD5C58CBB7656A502B955A
Certificate serial:       B5
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/wDEb4pGTolThzVxYy7dlalArlVo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C2FCA/A0A849CC9E1511F0A83E87BFDAE4EC9C/wDEb4pGTolThzVxYy7dlalArlVo.mft
Manifest number:          B5
Signing time:             Thu 26 Mar 2026 06:14:10 +0000
Manifest this update:     Thu 26 Mar 2026 06:14:09 +0000
Manifest next update:     Sat 28 Mar 2026 06:14:09 +0000
Files and hashes:         1: wDEb4pGTolThzVxYy7dlalArlVo.crl (hash: VSqzJG9xabeXUWmhJe5S4gqb6cG5fWZm/Sli+j+R4XU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C2FCA/A0A849CC9E1511F0A83E87BFDAE4EC9C/wDEb4pGTolThzVxYy7dlalArlVo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C2FCA/A0A849CC9E1511F0A83E87BFDAE4EC9C/wDEb4pGTolThzVxYy7dlalArlVo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/wDEb4pGTolThzVxYy7dlalArlVo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 181 (0xb5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C2FCAAF, serialNumber=C0311BE29193A254E1CD5C58CBB7656A502B955A
        Validity
            Not Before: Mar 26 06:14:09 2026 GMT
            Not After : Mar 28 06:14:09 2026 GMT
        Subject: CN=69c4ceb2-8c99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:03:34:a8:4a:47:a1:75:37:6f:81:f3:93:e2:
                    20:45:2b:fb:e5:32:3a:e9:57:a7:32:06:7d:4d:39:
                    aa:c1:d4:e3:b2:4b:35:16:00:64:fd:fe:9f:58:50:
                    9f:0b:01:99:40:ad:a1:78:dc:a5:f1:dd:d3:50:0b:
                    9a:b4:a6:8d:b4:e3:31:50:cf:c1:ba:7d:16:ea:c3:
                    3d:71:76:b2:55:cc:06:a6:e2:b0:39:f9:1f:ce:98:
                    9a:a7:39:2b:4b:8a:61:c2:02:8d:c0:1d:5c:97:67:
                    e3:15:d7:98:4d:14:4d:89:7b:be:17:84:d8:21:08:
                    5c:d1:ec:8a:99:8f:75:7b:0f:aa:02:db:05:f9:fd:
                    a2:65:f8:25:d6:09:9e:93:15:00:46:96:39:ba:49:
                    c4:f8:10:23:08:79:18:9f:88:33:1e:b9:f9:c7:fe:
                    15:a6:34:ea:15:78:b9:a7:da:9b:b9:48:dc:18:3a:
                    81:ec:70:a9:63:eb:8d:ce:ac:cd:f5:ab:4f:8b:7b:
                    68:5b:09:0a:20:83:f0:b0:74:c1:b6:f6:da:83:24:
                    41:7e:45:da:b8:84:21:a8:af:fd:9a:93:6c:02:75:
                    53:fb:9e:37:18:26:35:da:3e:00:7b:b0:db:a9:6d:
                    4d:36:0a:67:48:31:73:f0:e9:b3:67:c9:55:13:26:
                    27:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:E5:53:61:7A:79:92:C1:E5:45:CE:1A:C6:AB:2D:94:9C:2F:B4:95
            X509v3 Authority Key Identifier:
                keyid:C0:31:1B:E2:91:93:A2:54:E1:CD:5C:58:CB:B7:65:6A:50:2B:95:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C2FCA/A0A849CC9E1511F0A83E87BFDAE4EC9C/wDEb4pGTolThzVxYy7dlalArlVo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wDEb4pGTolThzVxYy7dlalArlVo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C2FCA/A0A849CC9E1511F0A83E87BFDAE4EC9C/wDEb4pGTolThzVxYy7dlalArlVo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:22:b5:65:b5:fd:cd:c1:32:c9:24:dd:1a:ff:58:94:15:41:
         fe:8e:92:d8:03:78:21:9f:e1:51:04:02:10:b7:f4:73:07:a4:
         31:dc:6a:6a:0c:9e:27:4f:31:47:ec:d4:1b:3a:eb:b1:cf:98:
         9f:37:ea:f1:a6:36:5c:82:e9:c8:1a:59:51:86:2c:32:8e:0d:
         f4:56:22:35:46:57:c2:fd:3c:fd:41:f6:6a:ad:4c:0b:9c:7a:
         0a:43:7b:14:70:ce:86:e6:42:a7:bf:f7:9d:ad:2c:9b:b8:cd:
         6a:11:c6:a9:97:e8:09:13:8c:ae:ea:e7:fd:67:da:9e:0e:a3:
         50:07:25:37:20:84:d0:2c:01:1f:9f:b8:5d:a9:03:f1:60:fb:
         cd:c8:7d:d5:01:eb:ca:06:29:03:53:40:83:05:f5:db:1c:99:
         44:ad:18:6e:77:a6:75:b1:32:a5:4a:eb:57:05:30:5c:a9:19:
         f7:68:2d:d6:a9:4c:5b:5f:db:1e:f7:a7:da:82:b0:54:16:0e:
         46:4a:b6:c5:c1:fa:27:3c:72:5f:4c:ae:e4:26:2e:2f:f4:cd:
         85:60:0f:00:15:a0:1a:22:f2:e8:16:c4:51:12:7b:20:19:a7:
         bc:74:ac:9c:71:d7:7d:de:ed:13:e2:13:1f:17:a2:3c:a9:75:
         90:77:31:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:15:19 2026 by rpki-client