Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C67A4/AD38F85627B011F19CC9CBAEDAE4EC9C/NfEnWyh-nA-Oo6hLizVKsCS3aXI.mft
File:                     NfEnWyh-nA-Oo6hLizVKsCS3aXI.mft (raw, json)
Hash identifier:          dWcZf74qGPOp4oEfEiwTZ3VPTuI3KMvpOmJq90CcU9Y=
Subject key identifier:   83:FB:17:61:5A:F8:77:26:F0:A5:C2:27:D5:6A:ED:4A:4C:8C:2D:04
Authority key identifier: 35:F1:27:5B:28:7E:9C:0F:8E:A3:A8:4B:8B:35:4A:B0:24:B7:69:72
Certificate issuer:       /CN=F36C67A4AF/serialNumber=35F1275B287E9C0F8EA3A84B8B354AB024B76972
Certificate serial:       05
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/NfEnWyh-nA-Oo6hLizVKsCS3aXI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C67A4/AD38F85627B011F19CC9CBAEDAE4EC9C/NfEnWyh-nA-Oo6hLizVKsCS3aXI.mft
Manifest number:          04
Signing time:             Thu 26 Mar 2026 06:40:05 +0000
Manifest this update:     Thu 26 Mar 2026 06:40:04 +0000
Manifest next update:     Sat 28 Mar 2026 06:40:04 +0000
Files and hashes:         1: NfEnWyh-nA-Oo6hLizVKsCS3aXI.crl (hash: zjXmL+qBnmB/ciMGyFvfI6OrftvsHaTxds2DGSsRZGI=)
                          2: 3100489627B211F18A08A3B6DAE4EC9C.roa (hash: KxXVh/K4PRDNOgb6lGt6sWf5pvipfL5DWCni74reBi0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C67A4/AD38F85627B011F19CC9CBAEDAE4EC9C/NfEnWyh-nA-Oo6hLizVKsCS3aXI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C67A4/AD38F85627B011F19CC9CBAEDAE4EC9C/NfEnWyh-nA-Oo6hLizVKsCS3aXI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/NfEnWyh-nA-Oo6hLizVKsCS3aXI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C67A4AF, serialNumber=35F1275B287E9C0F8EA3A84B8B354AB024B76972
        Validity
            Not Before: Mar 26 06:40:04 2026 GMT
            Not After : Mar 28 06:40:04 2026 GMT
        Subject: CN=69c4d4c5-d7ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:9d:57:cd:ac:82:92:3b:09:38:44:2e:98:6c:
                    1b:5b:bd:8f:99:3a:82:5c:68:13:be:78:26:c8:0d:
                    ad:10:b3:9f:2f:f9:26:5a:90:d0:49:29:5b:96:75:
                    ab:19:c7:bf:0c:b6:9d:4e:13:8d:cf:3a:d6:27:6e:
                    55:2c:29:57:fa:54:59:18:b8:eb:76:45:61:63:f8:
                    7d:e1:ec:22:2c:9e:ff:c6:36:28:25:63:dd:28:dc:
                    79:98:0a:55:d6:ff:55:10:33:87:6f:24:b2:0a:41:
                    66:e7:ed:01:70:75:ea:97:c2:74:fc:ba:32:5a:1a:
                    c7:c5:0b:88:4d:44:3c:6b:09:66:3d:5d:86:18:02:
                    64:c2:10:6f:d4:46:15:8b:37:a6:43:50:e1:5a:54:
                    ae:dd:e0:b8:94:20:96:52:6c:31:06:e8:d7:aa:60:
                    c2:08:1d:b5:aa:21:7f:27:b2:14:1d:42:f7:0b:da:
                    8d:4a:88:de:c3:3e:67:23:d1:ce:09:b6:eb:ef:ef:
                    3a:b9:ea:00:a6:98:4f:8e:65:6a:4a:bd:6c:4e:f9:
                    e6:32:de:6b:ab:b4:99:dc:38:ed:b4:47:84:e7:0f:
                    8c:b9:c7:3f:d2:12:34:ad:67:ff:5c:5d:2b:bc:f0:
                    54:9b:30:9e:4b:e9:5f:fb:22:86:fa:f3:1e:8a:61:
                    c6:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:FB:17:61:5A:F8:77:26:F0:A5:C2:27:D5:6A:ED:4A:4C:8C:2D:04
            X509v3 Authority Key Identifier:
                keyid:35:F1:27:5B:28:7E:9C:0F:8E:A3:A8:4B:8B:35:4A:B0:24:B7:69:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C67A4/AD38F85627B011F19CC9CBAEDAE4EC9C/NfEnWyh-nA-Oo6hLizVKsCS3aXI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/NfEnWyh-nA-Oo6hLizVKsCS3aXI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C67A4/AD38F85627B011F19CC9CBAEDAE4EC9C/NfEnWyh-nA-Oo6hLizVKsCS3aXI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:ac:fa:86:ae:60:38:1c:ac:34:18:db:ad:3b:67:f8:52:6f:
         7c:da:82:d9:cf:00:8b:81:c5:95:a7:94:55:a6:f3:59:c5:f5:
         95:f8:f7:d8:6a:a3:98:57:e8:8e:fa:4e:1f:a3:be:b8:81:cc:
         d0:6b:2a:3c:24:25:32:2a:30:44:59:e1:e7:e6:04:e4:cf:c7:
         ce:81:81:f6:9d:a9:8a:bd:25:f2:e5:e5:bc:02:60:65:9a:04:
         0b:93:f5:6e:d0:9c:06:dc:51:6f:2a:a0:8e:5a:1f:8f:01:30:
         51:f2:57:36:bd:d5:ba:d4:2a:0d:33:d4:c9:e2:5c:43:ee:f2:
         d1:44:45:e6:94:cd:8e:8a:77:42:d5:c5:64:fc:d6:ad:8a:9f:
         9b:da:14:0a:99:07:43:37:d2:5d:df:71:84:09:fc:1b:8d:a2:
         cd:b3:1e:22:cf:95:49:01:8a:73:78:f2:64:86:5e:da:f5:78:
         55:2b:2e:55:20:b3:b9:8b:80:c4:e6:53:a1:61:df:1b:86:06:
         10:41:c3:73:25:a4:79:74:45:b5:c7:00:0c:2c:00:3d:df:62:
         42:f0:71:11:8c:72:d1:00:33:fe:a3:49:d2:f9:ee:1b:4a:2f:
         3e:8e:9d:b0:50:c3:82:12:af:fd:02:8e:44:9a:92:52:5e:02:
         f3:c8:28:c7
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIBBTANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZD
NjdBNEFGMTEwLwYDVQQFEygzNUYxMjc1QjI4N0U5QzBGOEVBM0E4NEI4QjM1NEFC
MDI0Qjc2OTcyMB4XDTI2MDMyNjA2NDAwNFoXDTI2MDMyODA2NDAwNFowGDEWMBQG
A1UEAxMNNjljNGQ0YzUtZDdhZDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMedV82sgpI7CThELphsG1u9j5k6glxoE754JsgNrRCzny/5JlqQ0EkpW5Z1
qxnHvwy2nU4Tjc861iduVSwpV/pUWRi463ZFYWP4feHsIiye/8Y2KCVj3SjceZgK
Vdb/VRAzh28ksgpBZuftAXB16pfCdPy6Mloax8ULiE1EPGsJZj1dhhgCZMIQb9RG
FYs3pkNQ4VpUrt3guJQgllJsMQbo16pgwggdtaohfyeyFB1C9wvajUqI3sM+ZyPR
zgm26+/vOrnqAKaYT45lakq9bE755jLea6u0mdw47bRHhOcPjLnHP9ISNK1n/1xd
K7zwVJswnkvpX/sihvrzHophxj8CAwEAAaOCArgwggK0MB0GA1UdDgQWBBSD+xdh
Wvh3JvClwifVau1KTIwtBDAfBgNVHSMEGDAWgBQ18SdbKH6cD46jqEuLNUqwJLdp
cjAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2QzY3QTQvQUQzOEY4NTYyN0IwMTFGMTlDQzlDQkFFREFFNEVDOUMvTmZFbld5
aC1uQS1PbzZoTGl6VktzQ1MzYVhJLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvTmZFbld5aC1uQS1PbzZoTGl6VktzQ1MzYVhJLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUF
BzALhn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzZDNjdBNC9BRDM4Rjg1NjI3QjAxMUYxOUNDOUNCQUVEQUU0
RUM5Qy9OZkVuV3loLW5BLU9vNmhMaXpWS3NDUzNhWEkubWZ0MDUGCCsGAQUFBzAN
hilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBAEis+oauYDgcrDQY2607Z/hSb3zagtnP
AIuBxZWnlFWm81nF9ZX499hqo5hX6I76Th+jvriBzNBrKjwkJTIqMERZ4efmBOTP
x86BgfadqYq9JfLl5bwCYGWaBAuT9W7QnAbcUW8qoI5aH48BMFHyVza91brUKg0z
1MniXEPu8tFEReaUzY6Kd0LVxWT81q2Kn5vaFAqZB0M30l3fcYQJ/BuNos2zHiLP
lUkBinN48mSGXtr1eFUrLlUgs7mLgMTmU6Fh3xuGBhBBw3MlpHl0RbXHAAwsAD3f
YkLwcRGMctEAM/6jSdL57htKLz6OnbBQw4ISr/0CjkSaklJeAvPIKMc=
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:45:47 2026 by rpki-client