Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C3E3D/3F373BF2444111ED8B3DCCADF1222468/iyKehHwjMl1Mwm9Ajx0z5VennW0.mft
File:                     iyKehHwjMl1Mwm9Ajx0z5VennW0.mft (raw, json)
Hash identifier:          ZlHm8dzQ7hq7OeFfINXInRscqu5QiCqjd5KE67V7blE=
Subject key identifier:   60:BC:4E:73:C0:3F:0C:DC:1B:DA:B5:C4:E9:18:A9:55:60:BD:35:E7
Authority key identifier: 8B:22:9E:84:7C:23:32:5D:4C:C2:6F:40:8F:1D:33:E5:57:A7:9D:6D
Certificate issuer:       /CN=F36C3E3DAF/serialNumber=8B229E847C23325D4CC26F408F1D33E557A79D6D
Certificate serial:       0530
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/iyKehHwjMl1Mwm9Ajx0z5VennW0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C3E3D/3F373BF2444111ED8B3DCCADF1222468/iyKehHwjMl1Mwm9Ajx0z5VennW0.mft
Manifest number:          052B
Signing time:             Thu 26 Mar 2026 03:31:32 +0000
Manifest this update:     Thu 26 Mar 2026 03:31:31 +0000
Manifest next update:     Sat 28 Mar 2026 03:31:31 +0000
Files and hashes:         1: iyKehHwjMl1Mwm9Ajx0z5VennW0.crl (hash: O1E5BMXTwaRmQ2PP7eQlfKnljVKmB+5gdtSVi0YxlvQ=)
                          2: C4EF296EF5CC11EF948FCB78762E951A.roa (hash: 6EhZAZOfI7/G45J7guhw2ognpwwtVmscJX9jxlBfd4k=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C3E3D/3F373BF2444111ED8B3DCCADF1222468/iyKehHwjMl1Mwm9Ajx0z5VennW0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C3E3D/3F373BF2444111ED8B3DCCADF1222468/iyKehHwjMl1Mwm9Ajx0z5VennW0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/iyKehHwjMl1Mwm9Ajx0z5VennW0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1328 (0x530)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C3E3DAF, serialNumber=8B229E847C23325D4CC26F408F1D33E557A79D6D
        Validity
            Not Before: Mar 26 03:31:31 2026 GMT
            Not After : Mar 28 03:31:31 2026 GMT
        Subject: CN=69c4a894-dd91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ca:a2:e3:8c:d8:7f:62:d7:06:31:eb:4a:02:
                    e1:6c:10:3d:d2:2e:ff:d3:e3:46:80:cf:fe:a6:44:
                    ba:25:50:2a:96:89:54:46:41:8c:89:ca:d4:5a:70:
                    f7:ce:26:35:01:37:e2:ee:52:a4:36:d7:be:cc:e9:
                    e7:6f:32:b7:9e:aa:d3:9e:89:33:0f:83:49:00:0e:
                    a9:fe:07:ac:f3:8f:2a:a4:53:dd:da:95:4a:d7:9e:
                    06:6c:4b:f3:31:3d:07:c9:af:c2:73:6c:a5:55:60:
                    9f:0d:11:bb:8e:f5:39:ae:3b:24:91:cf:05:d3:90:
                    aa:ef:a3:f1:51:db:9e:3b:8f:59:a9:9c:f4:8b:fe:
                    a6:2f:d6:2e:16:8b:9a:83:46:5e:ce:4c:c1:f2:99:
                    fe:49:21:b3:2c:88:88:50:06:64:d8:7d:02:ea:19:
                    b6:24:4c:46:ab:b4:70:fe:45:a4:56:2d:5a:ad:39:
                    c2:ee:61:3c:e7:45:2c:88:3b:ab:43:4d:24:c0:6a:
                    69:35:91:68:bb:a7:1c:2b:16:aa:bd:46:38:6d:8e:
                    a7:2f:b7:b7:88:36:ee:0c:08:75:e1:4a:9f:c1:7d:
                    1e:58:58:3b:63:ec:1a:32:ad:21:d8:40:d0:72:0d:
                    de:83:62:ec:7b:ea:3f:07:66:c1:69:a6:ca:c2:5d:
                    f2:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:BC:4E:73:C0:3F:0C:DC:1B:DA:B5:C4:E9:18:A9:55:60:BD:35:E7
            X509v3 Authority Key Identifier:
                keyid:8B:22:9E:84:7C:23:32:5D:4C:C2:6F:40:8F:1D:33:E5:57:A7:9D:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C3E3D/3F373BF2444111ED8B3DCCADF1222468/iyKehHwjMl1Mwm9Ajx0z5VennW0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/iyKehHwjMl1Mwm9Ajx0z5VennW0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C3E3D/3F373BF2444111ED8B3DCCADF1222468/iyKehHwjMl1Mwm9Ajx0z5VennW0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:de:55:88:78:29:50:91:d4:fc:a5:4d:13:7e:22:2a:ec:d2:
         a8:98:68:12:0f:ed:91:f0:a2:72:01:af:43:88:e5:c7:4f:81:
         51:9a:ba:8c:1b:76:86:f0:dd:4f:22:df:f7:32:70:bd:d5:3a:
         e3:09:c7:89:e4:86:85:83:f9:30:dd:bc:9c:47:8b:cf:ad:cb:
         5e:84:4a:95:50:9a:b6:5d:77:1b:da:9d:a5:54:d0:65:03:d8:
         45:6b:01:e9:d7:58:93:4b:a7:90:e4:32:28:ad:fd:85:19:58:
         52:20:a1:0b:d3:54:3e:b3:b4:67:27:fe:ae:cb:63:53:e4:94:
         47:34:f4:c0:cd:4a:dd:a7:5f:77:99:d0:12:1f:60:28:3f:08:
         e2:86:e5:9c:17:7c:50:6e:8f:53:6f:b7:59:9b:56:e3:e7:ff:
         bd:2d:44:08:78:8f:3f:f2:45:c2:99:1f:51:32:c8:49:f0:81:
         31:ea:5f:c8:7c:cb:d3:f0:a3:22:68:35:65:2b:f3:15:38:34:
         7f:07:4a:29:82:78:db:c9:60:df:d0:2c:16:95:61:40:f0:f7:
         2e:2a:81:30:c5:8a:44:02:6a:0c:28:49:a1:79:44:d8:52:d7:
         16:ef:59:35:8d:42:f3:10:2b:53:57:79:5e:f9:8f:4e:a3:50:
         71:b7:48:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:31:53 2026 by rpki-client