Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CE290/3F9913C6D4C211F0820C77D7DAE4EC9C/Rh_ZuGKmgprh5P7SrBJGst0MeRQ.mft
File:                     Rh_ZuGKmgprh5P7SrBJGst0MeRQ.mft (raw, json)
Hash identifier:          L7337C8WmhHKS0eFz6cK39eaLspuFRxe4VpcGCI4VSE=
Subject key identifier:   A9:E8:F7:47:EC:3A:CA:13:B4:C9:FD:44:6F:E9:02:75:FC:D4:7A:9B
Authority key identifier: 46:1F:D9:B8:62:A6:82:9A:E1:E4:FE:D2:AC:12:46:B2:DD:0C:79:14
Certificate issuer:       /CN=F36CE290AF/serialNumber=461FD9B862A6829AE1E4FED2AC1246B2DD0C7914
Certificate serial:       72
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Rh_ZuGKmgprh5P7SrBJGst0MeRQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36CE290/3F9913C6D4C211F0820C77D7DAE4EC9C/Rh_ZuGKmgprh5P7SrBJGst0MeRQ.mft
Manifest number:          70
Signing time:             Wed 25 Mar 2026 06:23:43 +0000
Manifest this update:     Wed 25 Mar 2026 06:23:42 +0000
Manifest next update:     Fri 27 Mar 2026 06:23:42 +0000
Files and hashes:         1: Rh_ZuGKmgprh5P7SrBJGst0MeRQ.crl (hash: LxffB6qcAp/EDDQ6W1YAePn6aD0yhebfDM+mvD0CcVs=)
                          2: ABDEFC98D5F911F0ADEB97ECDAE4EC9C.roa (hash: J8FadMK7Ea9bvlPNiTTJTPLhHgQY+iwpbXSBMwmh9Yw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36CE290/3F9913C6D4C211F0820C77D7DAE4EC9C/Rh_ZuGKmgprh5P7SrBJGst0MeRQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36CE290/3F9913C6D4C211F0820C77D7DAE4EC9C/Rh_ZuGKmgprh5P7SrBJGst0MeRQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Rh_ZuGKmgprh5P7SrBJGst0MeRQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 27 Mar 2026 06:23:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 114 (0x72)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36CE290AF, serialNumber=461FD9B862A6829AE1E4FED2AC1246B2DD0C7914
        Validity
            Not Before: Mar 25 06:23:42 2026 GMT
            Not After : Mar 27 06:23:42 2026 GMT
        Subject: CN=69c37f6f-666b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:eb:5d:c3:c7:13:0f:fe:a6:53:02:26:85:09:
                    12:8e:f2:11:38:7f:d4:ec:bd:1e:87:8c:9c:ad:9b:
                    3d:77:71:b6:a6:07:16:6c:5d:18:68:05:90:ef:d0:
                    31:f6:af:7a:5d:88:ac:74:84:59:ce:01:e0:87:10:
                    08:13:27:e7:6e:1c:2f:a8:26:8d:3d:99:0d:f0:c3:
                    eb:48:c7:8b:74:87:41:03:8a:68:81:04:b6:ec:b7:
                    b4:80:7f:9e:3f:d3:b0:f9:38:9d:ae:43:73:6d:f8:
                    81:4d:31:46:d4:ed:28:c8:82:e7:6e:b7:41:c7:a9:
                    43:ca:78:7c:13:b3:fe:98:a7:ec:fd:8a:0b:31:05:
                    10:a5:cc:7e:ef:f8:57:b1:d4:3c:18:18:16:ef:73:
                    a2:58:c9:78:ae:8a:8c:f1:4f:56:3e:40:4a:fa:05:
                    89:93:53:43:47:8e:10:2a:d9:70:33:41:da:fd:fa:
                    03:11:9b:9b:3e:1d:3c:ba:06:cf:3d:2c:8d:84:47:
                    37:63:ec:3f:93:7f:90:f8:2e:0b:aa:90:37:0b:58:
                    dd:9c:d0:7b:fe:2a:39:3b:d3:3a:d2:cf:a3:d7:ad:
                    87:59:18:45:ca:0b:11:f3:1c:c4:46:21:58:af:df:
                    86:a2:5f:3b:45:97:fb:66:52:bf:9c:c7:95:f0:af:
                    82:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:E8:F7:47:EC:3A:CA:13:B4:C9:FD:44:6F:E9:02:75:FC:D4:7A:9B
            X509v3 Authority Key Identifier:
                keyid:46:1F:D9:B8:62:A6:82:9A:E1:E4:FE:D2:AC:12:46:B2:DD:0C:79:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36CE290/3F9913C6D4C211F0820C77D7DAE4EC9C/Rh_ZuGKmgprh5P7SrBJGst0MeRQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Rh_ZuGKmgprh5P7SrBJGst0MeRQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CE290/3F9913C6D4C211F0820C77D7DAE4EC9C/Rh_ZuGKmgprh5P7SrBJGst0MeRQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:d7:1e:eb:1e:39:d4:7b:98:3a:e5:48:5e:8b:15:8d:b8:f4:
         3f:9a:8c:24:85:01:79:80:e6:4e:5b:28:75:ea:10:47:ab:55:
         4c:3a:ce:a5:d4:8b:58:c1:6a:94:fb:db:59:63:13:7b:1a:e9:
         6b:a4:d6:02:da:7e:70:06:e1:cc:18:01:ec:ee:ab:4d:9d:b8:
         e1:7b:48:de:ec:32:5f:ae:61:75:af:48:2d:06:38:61:c9:8d:
         21:2d:d8:79:04:5d:a1:18:1d:56:f3:7d:43:09:6a:da:32:ab:
         23:ce:c0:9e:fc:90:cc:46:68:6d:bc:c9:26:59:98:d4:2e:1c:
         50:68:08:a8:8a:69:3f:3f:53:f0:f5:1a:90:14:1f:4f:6b:d6:
         ae:65:18:38:61:8a:0e:40:34:ce:19:b6:ec:1e:07:12:1d:ca:
         e3:8b:46:20:cd:60:84:a9:ba:15:38:ad:d1:10:42:18:ab:5e:
         aa:9e:75:38:1e:46:50:57:d9:19:20:b3:bd:59:e1:e9:55:1d:
         a9:1b:d4:a9:65:be:e9:99:15:58:f5:1d:90:d4:55:c1:7a:65:
         c2:1c:0d:8c:29:7d:01:9c:95:f6:13:db:6c:f9:07:9c:55:5b:
         bf:e9:ea:a7:99:37:9a:d7:46:98:b3:cc:fc:a9:44:81:b3:e9:
         31:c5:3f:3b
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIBcjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZD
RTI5MEFGMTEwLwYDVQQFEyg0NjFGRDlCODYyQTY4MjlBRTFFNEZFRDJBQzEyNDZC
MkREMEM3OTE0MB4XDTI2MDMyNTA2MjM0MloXDTI2MDMyNzA2MjM0MlowGDEWMBQG
A1UEAxMNNjljMzdmNmYtNjY2YjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALvrXcPHEw/+plMCJoUJEo7yETh/1Oy9HoeMnK2bPXdxtqYHFmxdGGgFkO/Q
Mfavel2IrHSEWc4B4IcQCBMn524cL6gmjT2ZDfDD60jHi3SHQQOKaIEEtuy3tIB/
nj/TsPk4na5Dc234gU0xRtTtKMiC5263QcepQ8p4fBOz/pin7P2KCzEFEKXMfu/4
V7HUPBgYFu9zoljJeK6KjPFPVj5ASvoFiZNTQ0eOECrZcDNB2v36AxGbmz4dPLoG
zz0sjYRHN2PsP5N/kPguC6qQNwtY3ZzQe/4qOTvTOtLPo9eth1kYRcoLEfMcxEYh
WK/fhqJfO0WX+2ZSv5zHlfCvgnECAwEAAaOCArgwggK0MB0GA1UdDgQWBBSp6PdH
7DrKE7TJ/URv6QJ1/NR6mzAfBgNVHSMEGDAWgBRGH9m4YqaCmuHk/tKsEkay3Qx5
FDAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2Q0UyOTAvM0Y5OTEzQzZENEMyMTFGMDgyMEM3N0Q3REFFNEVDOUMvUmhfWnVH
S21ncHJoNVA3U3JCSkdzdDBNZVJRLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvUmhfWnVHS21ncHJoNVA3U3JCSkdzdDBNZVJRLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUF
BzALhn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzZDRTI5MC8zRjk5MTNDNkQ0QzIxMUYwODIwQzc3RDdEQUU0
RUM5Qy9SaF9adUdLbWdwcmg1UDdTckJKR3N0ME1lUlEubWZ0MDUGCCsGAQUFBzAN
hilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBAHrXHuseOdR7mDrlSF6LFY249D+ajCSF
AXmA5k5bKHXqEEerVUw6zqXUi1jBapT721ljE3sa6Wuk1gLafnAG4cwYAezuq02d
uOF7SN7sMl+uYXWvSC0GOGHJjSEt2HkEXaEYHVbzfUMJatoyqyPOwJ78kMxGaG28
ySZZmNQuHFBoCKiKaT8/U/D1GpAUH09r1q5lGDhhig5ANM4ZtuweBxIdyuOLRiDN
YISpuhU4rdEQQhirXqqedTgeRlBX2Rkgs71Z4elVHakb1KllvumZFVj1HZDUVcF6
ZcIcDYwpfQGclfYT22z5B5xVW7/p6qeZN5rXRpizzPypRIGz6THFPzs=
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:00:51 2026 by rpki-client