Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D289C/12FAB962A87511E99285C745F8AEA228/bynJvMAklSDlBwZp-vZmUm98jzA.mft
File:                     bynJvMAklSDlBwZp-vZmUm98jzA.mft (raw, json)
Hash identifier:          NycMVLy1kIYh/137wUZvUIJLSlDRU8lHqF+UU4iMomc=
Subject key identifier:   6E:B1:BF:BA:00:AD:E4:56:E3:38:71:3D:C0:AD:53:81:AC:A1:53:8F
Authority key identifier: 6F:29:C9:BC:C0:24:95:20:E5:07:06:69:FA:F6:66:52:6F:7C:8F:30
Certificate issuer:       /CN=F36D289CRI/serialNumber=6F29C9BCC0249520E5070669FAF666526F7C8F30
Certificate serial:       09D4
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/bynJvMAklSDlBwZp-vZmUm98jzA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D289C/12FAB962A87511E99285C745F8AEA228/bynJvMAklSDlBwZp-vZmUm98jzA.mft
Manifest number:          09D2
Signing time:             Thu 26 Mar 2026 01:41:29 +0000
Manifest this update:     Thu 26 Mar 2026 01:41:28 +0000
Manifest next update:     Sat 28 Mar 2026 01:41:28 +0000
Files and hashes:         1: bynJvMAklSDlBwZp-vZmUm98jzA.crl (hash: /uLQR+jYy16WRY5ZrQccZNSF4VuDhWXK/54xOVbV7PE=)
                          2: 931E9D64F1E611EF9602D94F762E951A.roa (hash: pu2PP2qQRpHTl0P12WcevM+SHqavoog2ZfvG3UTYFMs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D289C/12FAB962A87511E99285C745F8AEA228/bynJvMAklSDlBwZp-vZmUm98jzA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D289C/12FAB962A87511E99285C745F8AEA228/bynJvMAklSDlBwZp-vZmUm98jzA.mft
                          rsync://rpki.afrinic.net/repository/ripe/bynJvMAklSDlBwZp-vZmUm98jzA.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:45:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2516 (0x9d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D289CRI, serialNumber=6F29C9BCC0249520E5070669FAF666526F7C8F30
        Validity
            Not Before: Mar 26 01:41:28 2026 GMT
            Not After : Mar 28 01:41:28 2026 GMT
        Subject: CN=69c48ec9-c5d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:04:c2:16:40:f3:c9:58:62:b1:79:e8:a1:ef:
                    5a:50:ed:4f:39:86:50:a4:8e:f1:34:30:9c:80:63:
                    93:ef:d4:00:3f:5e:f5:32:26:ea:36:60:a8:c1:09:
                    c6:a7:1a:7a:77:b4:13:f3:7f:4f:4a:da:15:c7:07:
                    6d:fa:e7:cf:36:8e:35:c6:72:72:44:36:97:93:3d:
                    9b:25:d6:88:1c:d0:fb:a4:a1:4d:b1:36:d5:54:ba:
                    7d:fc:46:38:9e:88:26:39:f7:9f:61:35:d0:92:45:
                    a4:84:96:17:fb:ae:2c:c8:93:c3:a7:13:99:c7:d3:
                    11:9b:01:a3:3f:41:7a:50:c1:71:99:3f:c0:6b:8b:
                    8c:be:2c:37:f4:9c:69:63:48:a6:f4:80:5a:81:8b:
                    aa:c7:5f:5e:c7:6f:86:8d:cd:57:4c:4b:aa:75:23:
                    6d:32:0d:c8:a2:34:62:27:24:0e:63:b8:9e:63:3c:
                    9e:90:fc:72:ad:4e:19:91:f9:eb:44:9a:ef:be:af:
                    d8:37:db:e5:35:9a:fb:ce:b0:f3:c2:39:48:95:9d:
                    0b:0f:a8:6c:38:83:a3:f2:25:0d:74:5b:4f:0d:71:
                    cb:41:66:10:2a:ea:13:67:8f:8d:ee:32:ab:39:31:
                    88:df:4a:c0:e6:5f:5f:72:d9:8f:c0:85:54:59:c7:
                    33:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:B1:BF:BA:00:AD:E4:56:E3:38:71:3D:C0:AD:53:81:AC:A1:53:8F
            X509v3 Authority Key Identifier:
                keyid:6F:29:C9:BC:C0:24:95:20:E5:07:06:69:FA:F6:66:52:6F:7C:8F:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D289C/12FAB962A87511E99285C745F8AEA228/bynJvMAklSDlBwZp-vZmUm98jzA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/bynJvMAklSDlBwZp-vZmUm98jzA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D289C/12FAB962A87511E99285C745F8AEA228/bynJvMAklSDlBwZp-vZmUm98jzA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:ae:9a:d7:bc:5b:f6:cf:bd:ab:08:e9:0d:b0:18:cc:f9:5f:
         9b:21:4d:96:28:20:a4:5f:07:1c:b2:fb:5e:f5:dc:67:07:05:
         63:ca:4b:80:06:e3:26:e9:f9:76:ea:2d:f2:7a:9c:b7:5a:b5:
         73:a7:98:56:c5:57:7e:80:50:6f:e2:e2:40:48:50:f0:00:5b:
         3e:e1:44:66:b0:67:20:39:67:32:fd:55:3c:ce:c8:bc:47:ea:
         11:b3:7f:73:3b:14:53:0e:82:ce:09:0a:db:1a:69:7d:73:95:
         e3:72:b2:b9:36:6c:a0:90:d5:fa:60:f0:04:55:13:19:2c:79:
         33:12:f5:c8:bc:2e:f4:c5:4a:f9:59:9d:9d:e0:81:af:7f:4f:
         c9:11:9c:7e:54:61:f8:ea:6f:f0:f7:26:46:31:a9:e9:66:03:
         1b:01:f7:8a:a6:10:02:c6:55:5c:83:fc:7f:b8:11:45:e6:c2:
         67:d1:05:57:55:75:ca:c2:d7:97:2c:8a:8a:3c:38:b6:fe:a8:
         43:0c:9c:a5:56:e9:03:c7:d7:b1:b9:97:7f:aa:1a:ae:41:2e:
         4c:77:b9:a9:f1:b5:42:71:3d:4d:ae:28:e5:20:1f:11:e1:d8:
         2b:62:6a:57:ec:71:12:2c:9b:12:74:40:48:be:7e:37:55:01:
         1c:20:5d:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:03:33 2026 by rpki-client