Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D2FA4/28EF067EC9A911EE801F6F7B775412E6/_IwxIe9n77axzoOCjjTdt-4B7nc.mft
File:                     _IwxIe9n77axzoOCjjTdt-4B7nc.mft (raw, json)
Hash identifier:          nxg2yf+pwaZSqZeE98fhDJ7GcAaqnyxkt9h6iRS7z8Q=
Subject key identifier:   10:E5:DF:E2:F0:42:ED:3E:5D:E8:2B:60:BD:52:CE:D2:E0:20:F5:A8
Authority key identifier: FC:8C:31:21:EF:67:EF:B6:B1:CE:83:82:8E:34:DD:B7:EE:01:EE:77
Certificate issuer:       /CN=F36D2FA4AF/serialNumber=FC8C3121EF67EFB6B1CE83828E34DDB7EE01EE77
Certificate serial:       0319
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/_IwxIe9n77axzoOCjjTdt-4B7nc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D2FA4/28EF067EC9A911EE801F6F7B775412E6/_IwxIe9n77axzoOCjjTdt-4B7nc.mft
Manifest number:          0319
Signing time:             Thu 26 Mar 2026 04:47:31 +0000
Manifest this update:     Thu 26 Mar 2026 04:47:30 +0000
Manifest next update:     Sat 28 Mar 2026 04:47:30 +0000
Files and hashes:         1: _IwxIe9n77axzoOCjjTdt-4B7nc.crl (hash: 72ChKNOBQMuT0ZU8t6wqTCvaSnNXIFpqSUV11zeBoRA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D2FA4/28EF067EC9A911EE801F6F7B775412E6/_IwxIe9n77axzoOCjjTdt-4B7nc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D2FA4/28EF067EC9A911EE801F6F7B775412E6/_IwxIe9n77axzoOCjjTdt-4B7nc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/_IwxIe9n77axzoOCjjTdt-4B7nc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 793 (0x319)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D2FA4AF, serialNumber=FC8C3121EF67EFB6B1CE83828E34DDB7EE01EE77
        Validity
            Not Before: Mar 26 04:47:30 2026 GMT
            Not After : Mar 28 04:47:30 2026 GMT
        Subject: CN=69c4ba63-de81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a7:c3:7c:a8:fb:bb:58:af:71:52:fa:99:ea:
                    59:54:eb:cb:18:2d:21:30:93:88:07:8b:9d:d9:a4:
                    7c:7b:aa:03:60:c8:12:a7:68:9b:3e:0e:5d:0e:de:
                    76:0e:1a:70:3b:5a:16:8b:c0:06:68:3d:0f:bb:3b:
                    5e:33:69:c9:14:6d:c2:e4:0d:1e:df:ca:a1:29:b3:
                    a8:64:dc:a4:5e:ab:37:4c:2d:be:9c:7b:81:34:fd:
                    b7:02:0f:7d:23:91:97:92:c4:40:87:92:90:6f:99:
                    7b:bd:6f:66:9e:e9:b7:7c:21:f4:f0:44:03:17:5a:
                    47:34:1b:aa:da:38:e3:02:ff:90:b0:15:0c:46:ad:
                    32:d0:b5:3f:f4:d3:d5:64:5d:4c:ed:40:9a:95:24:
                    f7:a8:8c:e1:e5:d3:b4:a4:cc:79:ea:ff:03:2c:a2:
                    45:f6:ca:ae:da:5a:ff:c6:02:e8:9f:05:70:ea:c8:
                    15:df:53:ac:64:eb:40:27:a5:73:72:ef:74:a7:2c:
                    14:09:e3:e2:5e:07:bd:50:7b:e1:1b:cb:62:dd:59:
                    7d:ac:c0:18:11:ef:bf:73:ad:46:ca:38:8f:22:09:
                    a2:0b:76:2d:1e:cd:77:c3:4c:57:c0:1d:8f:4d:d4:
                    d3:a4:05:0f:20:c7:63:19:0a:7b:4d:c1:25:6c:c9:
                    bd:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:E5:DF:E2:F0:42:ED:3E:5D:E8:2B:60:BD:52:CE:D2:E0:20:F5:A8
            X509v3 Authority Key Identifier:
                keyid:FC:8C:31:21:EF:67:EF:B6:B1:CE:83:82:8E:34:DD:B7:EE:01:EE:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D2FA4/28EF067EC9A911EE801F6F7B775412E6/_IwxIe9n77axzoOCjjTdt-4B7nc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_IwxIe9n77axzoOCjjTdt-4B7nc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D2FA4/28EF067EC9A911EE801F6F7B775412E6/_IwxIe9n77axzoOCjjTdt-4B7nc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:5e:49:83:1d:b0:55:c5:5e:bb:4c:21:48:0c:f3:18:55:76:
         3b:94:96:6e:8e:84:f0:21:66:e8:4b:29:2d:04:b6:51:db:49:
         05:62:55:8b:83:64:d9:01:87:ee:e7:19:62:af:d0:4e:29:ae:
         06:b5:df:b6:c3:c4:ef:0a:08:cd:fd:65:41:5c:4c:2a:19:80:
         0b:f6:f5:36:a1:a7:7b:48:d9:bf:28:4b:e2:4d:96:0f:30:7a:
         04:11:21:90:48:42:83:85:ef:1c:25:2d:6d:f7:51:81:d6:c6:
         10:e3:82:f0:19:87:25:e5:18:4a:7f:df:f7:44:49:2f:12:a0:
         89:b9:cf:e3:43:d4:58:3a:7d:f8:35:34:90:be:a2:fd:de:8a:
         af:75:f9:0f:38:c3:1a:ef:69:e0:68:99:1b:20:ce:da:f3:a3:
         8e:16:64:3e:39:d4:e2:0f:59:1c:d1:ec:cf:2a:84:ea:8b:b2:
         8c:c1:5e:4a:88:a2:85:54:d6:61:ea:7d:42:b5:8a:73:ce:9e:
         c7:d7:ac:b2:ee:0f:09:0c:f4:3b:20:74:76:29:d9:27:ab:eb:
         0d:b9:04:26:8a:db:56:e7:97:44:9f:83:36:db:13:70:b2:4e:
         82:f9:07:87:cb:af:23:d1:91:25:4b:6a:b4:84:e4:3f:73:5b:
         b3:7e:4e:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:10:59 2026 by rpki-client