Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D32D1/AD00932C407D11ECA8E59D0FD8A014CE/v10_TcmvF_i6c_VaHXLzlZwFGOI.mft
File:                     v10_TcmvF_i6c_VaHXLzlZwFGOI.mft (raw, json)
Hash identifier:          214zjfMk1NNzx7PXY7alPW4nPqvacmINxNCrMSICqEo=
Subject key identifier:   C5:4E:FD:B7:A4:A7:1C:0D:A3:67:2C:64:97:75:A3:F4:D3:B7:19:C8
Authority key identifier: BF:5D:3F:4D:C9:AF:17:F8:BA:73:F5:5A:1D:72:F3:95:9C:05:18:E2
Certificate issuer:       /CN=F36D32D1AF/serialNumber=BF5D3F4DC9AF17F8BA73F55A1D72F3959C0518E2
Certificate serial:       0677
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/v10_TcmvF_i6c_VaHXLzlZwFGOI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D32D1/AD00932C407D11ECA8E59D0FD8A014CE/v10_TcmvF_i6c_VaHXLzlZwFGOI.mft
Manifest number:          0670
Signing time:             Thu 26 Mar 2026 02:53:31 +0000
Manifest this update:     Thu 26 Mar 2026 02:53:30 +0000
Manifest next update:     Sat 28 Mar 2026 02:53:30 +0000
Files and hashes:         1: v10_TcmvF_i6c_VaHXLzlZwFGOI.crl (hash: 2LWNODymj9HNdmxAyp/X1GiBGmb9NTwRO+55+5B9r3w=)
                          2: C22CE7B8848211EFB04104A3762E951A.roa (hash: UvSKfzbPPPDmh9qt5fUcWRDz2kLL0/oUIRFROj/013Y=)
                          3: DAF0E168407F11ECB8D6EB12D8A014CE.roa (hash: hHFxlWCSnH4gDexnkdfm1eIFVHKF3ZADP/XYQDBgtyE=)
                          4: EC73A322848211EFA35B4DA3762E951A.roa (hash: E9n0BXdEdCO4VUpJ00TALsQfI4M1cW8WL9kQTleR3iM=)
                          5: 4FE58CA0848211EFB21CDAA0762E951A.roa (hash: hT4mSK8j0yF0krAa2/n501dY/MbNiSKbpGMw/g08dhw=)
                          6: C6263998848011EFAA998A96762E951A.roa (hash: 7pLiVykcpNB61b9uTOfPQKtdMaNQfNXZhZHjF5fDR2M=)
                          7: FD442A68977511EFAFDE5CA6762E951A.roa (hash: jCYhuEuX8SeXpiy1mcrGpnTn+Pm2iMoNn/fsKbfF3rg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D32D1/AD00932C407D11ECA8E59D0FD8A014CE/v10_TcmvF_i6c_VaHXLzlZwFGOI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D32D1/AD00932C407D11ECA8E59D0FD8A014CE/v10_TcmvF_i6c_VaHXLzlZwFGOI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/v10_TcmvF_i6c_VaHXLzlZwFGOI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1655 (0x677)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D32D1AF, serialNumber=BF5D3F4DC9AF17F8BA73F55A1D72F3959C0518E2
        Validity
            Not Before: Mar 26 02:53:30 2026 GMT
            Not After : Mar 28 02:53:30 2026 GMT
        Subject: CN=69c49fab-0ef7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c2:50:a7:38:47:1f:4d:19:82:65:21:bc:34:
                    bc:43:ab:e1:d5:d6:c1:4c:c3:d6:d4:f7:c9:6d:1f:
                    57:ef:a8:a7:d3:d5:e2:04:77:f2:1a:f9:31:39:c3:
                    be:ea:fe:ad:5b:e6:69:ba:82:35:6b:84:7f:39:8c:
                    f5:be:28:96:23:e4:57:d3:be:a5:ee:41:c1:57:20:
                    12:f9:e5:a9:f4:b4:2b:67:8d:9e:d1:37:f6:72:b7:
                    d5:13:88:b0:dd:e9:1c:20:5e:40:c3:0a:0b:2f:70:
                    10:cc:02:94:3f:6c:50:e7:f9:1e:53:00:d3:4a:a6:
                    83:d5:07:09:ae:64:8d:0d:fe:72:2e:d3:23:01:9a:
                    a0:89:f8:af:2a:5c:c1:55:92:09:2b:6f:d0:48:fd:
                    1a:0b:0b:ea:b5:e6:f7:b8:e3:49:14:6d:5e:df:35:
                    80:4c:26:6c:7e:94:26:ad:68:2d:ad:ea:31:3c:55:
                    24:35:2e:a5:21:89:23:a6:2d:2d:6a:7c:86:41:6c:
                    81:67:c9:77:53:55:4f:9d:03:39:e7:9e:e3:6e:6c:
                    e3:c1:79:48:57:39:c4:09:f7:0b:77:2b:2d:3e:f2:
                    d0:24:92:43:0a:23:dc:19:fc:ce:b9:2d:74:6e:18:
                    d6:b8:fd:f1:ad:8d:76:17:12:ed:78:88:ec:74:d7:
                    0c:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:4E:FD:B7:A4:A7:1C:0D:A3:67:2C:64:97:75:A3:F4:D3:B7:19:C8
            X509v3 Authority Key Identifier:
                keyid:BF:5D:3F:4D:C9:AF:17:F8:BA:73:F5:5A:1D:72:F3:95:9C:05:18:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D32D1/AD00932C407D11ECA8E59D0FD8A014CE/v10_TcmvF_i6c_VaHXLzlZwFGOI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/v10_TcmvF_i6c_VaHXLzlZwFGOI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D32D1/AD00932C407D11ECA8E59D0FD8A014CE/v10_TcmvF_i6c_VaHXLzlZwFGOI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:dc:28:e0:38:fd:45:b3:6a:11:db:9e:4c:b7:51:67:74:d7:
         bd:81:6c:8f:79:dd:53:ad:c7:91:08:d4:b3:60:ef:d4:db:d9:
         78:b7:a4:a7:24:e6:0f:5f:6b:5c:01:f9:ff:6a:09:f8:00:49:
         31:53:2e:7b:f3:2d:14:5a:12:8c:ea:77:06:4f:3a:93:2e:d8:
         23:a8:1b:4a:4f:e0:65:df:65:f3:3e:b3:4a:ac:83:23:bd:12:
         60:f6:6c:49:2f:a9:19:f4:4a:b8:63:b1:6b:f6:ec:08:59:15:
         47:bc:0e:fc:6d:80:9e:79:f9:31:57:a2:7b:54:5d:7f:bc:5f:
         3f:ee:ba:a6:d9:fb:68:b7:f0:7b:8b:49:c7:eb:6f:72:af:00:
         45:a6:59:da:b5:00:76:52:71:b7:50:97:19:87:7c:e1:d6:47:
         4f:f3:b1:00:0d:57:93:79:17:b5:dd:0e:b0:1c:b2:9b:0d:f1:
         f3:48:59:72:50:40:8b:0d:18:0b:07:42:58:f2:88:15:b7:64:
         7b:36:c3:21:bf:94:bc:2b:c8:47:4d:da:fc:5a:28:49:0c:5c:
         41:d4:8d:28:dd:d2:ec:ac:01:d8:2b:be:36:3c:89:f0:01:82:
         3f:fe:6e:89:25:fb:26:9c:ca:45:69:94:74:9b:a6:a9:51:bb:
         d3:e7:7c:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:21:00 2026 by rpki-client