Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CAF37/426A0AD6586F11E5A3276231F8AEA228/imnjE5vX78CApC4WBIM5j6bHW7Y.mft
File:                     imnjE5vX78CApC4WBIM5j6bHW7Y.mft (raw, json)
Hash identifier:          3IetZaOwY3D+wk9Pr8v8y6mMQ2oz6qgHJd+jHsALi2s=
Subject key identifier:   88:97:59:95:7F:BD:6A:D7:6E:37:1D:B0:80:07:AE:16:BA:A1:8C:03
Authority key identifier: 8A:69:E3:13:9B:D7:EF:C0:80:A4:2E:16:04:83:39:8F:A6:C7:5B:B6
Certificate issuer:       /CN=F36CAF37AF/serialNumber=8A69E3139BD7EFC080A42E160483398FA6C75BB6
Certificate serial:       0F54
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/imnjE5vX78CApC4WBIM5j6bHW7Y.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36CAF37/426A0AD6586F11E5A3276231F8AEA228/imnjE5vX78CApC4WBIM5j6bHW7Y.mft
Manifest number:          0F54
Signing time:             Thu 26 Mar 2026 00:59:08 +0000
Manifest this update:     Thu 26 Mar 2026 00:59:07 +0000
Manifest next update:     Sat 28 Mar 2026 00:59:07 +0000
Files and hashes:         1: imnjE5vX78CApC4WBIM5j6bHW7Y.crl (hash: JuDqtBoAFbG7QQ6SWhAgvM0XjpRQ+ATBgizVhVf+wTM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36CAF37/426A0AD6586F11E5A3276231F8AEA228/imnjE5vX78CApC4WBIM5j6bHW7Y.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36CAF37/426A0AD6586F11E5A3276231F8AEA228/imnjE5vX78CApC4WBIM5j6bHW7Y.mft
                          rsync://rpki.afrinic.net/repository/afrinic/imnjE5vX78CApC4WBIM5j6bHW7Y.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3924 (0xf54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36CAF37AF, serialNumber=8A69E3139BD7EFC080A42E160483398FA6C75BB6
        Validity
            Not Before: Mar 26 00:59:07 2026 GMT
            Not After : Mar 28 00:59:07 2026 GMT
        Subject: CN=69c484dc-c40c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:8d:07:18:25:5d:a1:93:7b:1b:79:a4:bd:41:
                    3d:50:b4:0a:5b:bd:91:e0:49:cc:17:4f:87:92:01:
                    fa:f1:1f:30:ed:a7:a4:93:9c:d9:35:71:3f:5d:4f:
                    dd:53:4a:b1:1d:81:7b:d0:dc:1b:0c:08:c4:e2:e8:
                    20:2c:58:09:ac:a8:fe:6f:b5:4e:fe:0f:4b:02:45:
                    e8:9c:5a:07:d7:b7:c9:b6:51:1e:32:4b:3f:6d:f3:
                    0f:1e:2b:91:6f:e7:80:51:7e:14:67:d5:19:a5:a8:
                    00:d3:d2:4f:c7:53:1b:02:81:fe:8b:72:54:de:c4:
                    aa:63:23:cb:fd:38:42:2c:9f:87:d6:ae:90:9e:5a:
                    29:0f:61:fe:1b:89:f2:12:24:fc:25:01:96:df:3f:
                    fd:6c:72:29:2b:1b:4b:1b:05:16:85:a0:2b:67:66:
                    9e:32:89:33:7b:74:33:07:5d:1c:d9:fb:8c:66:05:
                    d9:b2:3b:cf:eb:4b:f2:d3:5a:17:9f:52:00:9c:c0:
                    59:64:d6:b0:e8:7f:8f:1a:81:d8:ff:8f:38:0a:25:
                    a7:23:6a:60:8c:24:d3:14:e9:0c:07:fd:16:00:71:
                    eb:80:09:39:70:b1:f2:b5:ed:cf:35:36:e9:de:18:
                    af:8b:a3:98:47:c5:a3:51:22:74:8a:e5:3d:73:4c:
                    f2:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:97:59:95:7F:BD:6A:D7:6E:37:1D:B0:80:07:AE:16:BA:A1:8C:03
            X509v3 Authority Key Identifier:
                keyid:8A:69:E3:13:9B:D7:EF:C0:80:A4:2E:16:04:83:39:8F:A6:C7:5B:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36CAF37/426A0AD6586F11E5A3276231F8AEA228/imnjE5vX78CApC4WBIM5j6bHW7Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/imnjE5vX78CApC4WBIM5j6bHW7Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CAF37/426A0AD6586F11E5A3276231F8AEA228/imnjE5vX78CApC4WBIM5j6bHW7Y.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:bd:ce:85:cc:3a:44:c2:86:09:6b:52:68:7a:92:8e:8f:7d:
         ba:2d:c6:e0:e8:62:f4:64:08:18:9d:c9:b4:44:3a:b0:63:84:
         c0:68:ae:27:07:57:a7:8b:a3:dc:a2:de:fc:49:9e:28:26:16:
         e3:42:9c:b5:14:da:c7:e4:c3:6c:7f:2a:c5:7f:9d:84:f9:05:
         d1:4f:03:64:55:c1:39:30:95:c1:b8:c2:7d:f9:18:96:3a:48:
         87:16:e5:d8:57:62:a5:69:92:3d:17:11:93:a5:b4:ca:6e:b7:
         26:17:4a:c1:74:4a:66:7a:23:78:4a:e2:32:02:9d:3b:63:e4:
         1c:20:89:5f:3b:e4:30:f2:06:ab:a2:14:23:16:f5:c2:30:6b:
         f4:4e:51:8a:7c:a9:a6:12:43:5b:52:6d:cd:32:4b:8a:d0:bc:
         16:56:00:3e:92:e1:6a:f2:80:92:7b:dc:50:d6:01:e9:cd:f6:
         ce:66:07:ac:76:9c:9b:d9:1a:5c:7f:89:b6:09:b7:27:9c:58:
         e1:5d:4b:1f:33:2c:fd:e3:f1:9c:1b:c0:16:f5:12:2e:45:8a:
         af:63:a9:81:50:65:af:f6:bc:d0:3e:c9:31:a4:71:fe:57:e6:
         7f:17:8a:70:56:b0:52:0e:61:78:96:fc:7c:3b:61:e0:cd:b2:
         d9:ce:03:b3
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICD1QwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
Q0FGMzdBRjExMC8GA1UEBRMoOEE2OUUzMTM5QkQ3RUZDMDgwQTQyRTE2MDQ4MzM5
OEZBNkM3NUJCNjAeFw0yNjAzMjYwMDU5MDdaFw0yNjAzMjgwMDU5MDdaMBgxFjAU
BgNVBAMTDTY5YzQ4NGRjLWM0MGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDEjQcYJV2hk3sbeaS9QT1QtApbvZHgScwXT4eSAfrxHzDtp6STnNk1cT9d
T91TSrEdgXvQ3BsMCMTi6CAsWAmsqP5vtU7+D0sCReicWgfXt8m2UR4ySz9t8w8e
K5Fv54BRfhRn1RmlqADT0k/HUxsCgf6LclTexKpjI8v9OEIsn4fWrpCeWikPYf4b
ifISJPwlAZbfP/1scikrG0sbBRaFoCtnZp4yiTN7dDMHXRzZ+4xmBdmyO8/rS/LT
WhefUgCcwFlk1rDof48agdj/jzgKJacjamCMJNMU6QwH/RYAceuACTlwsfK17c81
NuneGK+Lo5hHxaNRInSK5T1zTPJTAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUiJdZ
lX+9atduNx2wgAeuFrqhjAMwHwYDVR0jBBgwFoAUimnjE5vX78CApC4WBIM5j6bH
W7YwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkNBRjM3LzQyNkEwQUQ2NTg2RjExRTVBMzI3NjIzMUY4QUVBMjI4L2ltbmpF
NXZYNzhDQXBDNFdCSU01ajZiSFc3WS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2ltbmpFNXZYNzhDQXBDNFdCSU01ajZiSFc3WS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2Q0FGMzcvNDI2QTBBRDY1ODZGMTFFNUEzMjc2MjMxRjhB
RUEyMjgvaW1uakU1dlg3OENBcEM0V0JJTTVqNmJIVzdZLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC7vc6FzDpEwoYJa1JoepKOj326Lcbg
6GL0ZAgYncm0RDqwY4TAaK4nB1eni6Pcot78SZ4oJhbjQpy1FNrH5MNsfyrFf52E
+QXRTwNkVcE5MJXBuMJ9+RiWOkiHFuXYV2KlaZI9FxGTpbTKbrcmF0rBdEpmeiN4
SuIyAp07Y+QcIIlfO+Qw8garohQjFvXCMGv0TlGKfKmmEkNbUm3NMkuK0LwWVgA+
kuFq8oCSe9xQ1gHpzfbOZgesdpyb2Rpcf4m2CbcnnFjhXUsfMyz94/GcG8AW9RIu
RYqvY6mBUGWv9rzQPskxpHH+V+Z/F4pwVrBSDmF4lvx8O2HgzbLZzgOz
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:52:38 2026 by rpki-client