Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D591B/1F6B567CD7C111EE8F2917A2775412E6/wzA4fNIYxMz6UivFNddwdVvPe28.mft
File:                     wzA4fNIYxMz6UivFNddwdVvPe28.mft (raw, json)
Hash identifier:          L1E6n0p6G/A26ZdLmEwbI3zNbalFPjS3MDFCcPj2qgw=
Subject key identifier:   40:05:DA:89:14:DC:3A:87:A0:65:B1:36:07:26:5D:0C:5D:2D:A9:D9
Authority key identifier: C3:30:38:7C:D2:18:C4:CC:FA:52:2B:C5:35:D7:70:75:5B:CF:7B:6F
Certificate issuer:       /CN=F36D591BAF/serialNumber=C330387CD218C4CCFA522BC535D770755BCF7B6F
Certificate serial:       0305
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/wzA4fNIYxMz6UivFNddwdVvPe28.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D591B/1F6B567CD7C111EE8F2917A2775412E6/wzA4fNIYxMz6UivFNddwdVvPe28.mft
Manifest number:          0304
Signing time:             Thu 26 Mar 2026 04:49:31 +0000
Manifest this update:     Thu 26 Mar 2026 04:49:30 +0000
Manifest next update:     Sat 28 Mar 2026 04:49:30 +0000
Files and hashes:         1: wzA4fNIYxMz6UivFNddwdVvPe28.crl (hash: ImPUm3FEpQAA8EQUbKYqJeXY9ozAsRGVycQmt6xpqrs=)
                          2: D27A6A28D7C111EE8A342CA3775412E6.roa (hash: peA4+LIUnTnNHVNJXvAgPW0H2f9Uqrwu8nzHISX24Zo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D591B/1F6B567CD7C111EE8F2917A2775412E6/wzA4fNIYxMz6UivFNddwdVvPe28.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D591B/1F6B567CD7C111EE8F2917A2775412E6/wzA4fNIYxMz6UivFNddwdVvPe28.mft
                          rsync://rpki.afrinic.net/repository/afrinic/wzA4fNIYxMz6UivFNddwdVvPe28.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 773 (0x305)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D591BAF, serialNumber=C330387CD218C4CCFA522BC535D770755BCF7B6F
        Validity
            Not Before: Mar 26 04:49:30 2026 GMT
            Not After : Mar 28 04:49:30 2026 GMT
        Subject: CN=69c4badb-c3e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:fb:c7:20:b4:a4:53:31:41:53:e3:c1:e1:00:
                    da:cd:bb:a2:d4:8b:d7:b5:d1:08:30:50:30:5b:cd:
                    86:86:65:fb:7a:88:4f:cd:7a:09:4f:6f:03:0c:3f:
                    22:9e:7f:a6:d0:f2:e9:89:84:b1:86:30:70:6a:c9:
                    ef:39:ed:ad:db:e0:25:03:33:64:d6:4e:bb:df:a5:
                    12:be:87:49:2c:8f:3b:37:79:d8:c2:e6:16:17:7c:
                    4f:c5:ef:d2:63:3e:f7:02:fb:3d:61:4d:66:43:5d:
                    b6:33:dc:49:0b:7a:11:52:bf:d3:0e:02:22:ef:f3:
                    c8:36:49:4d:33:d2:38:78:1a:d6:26:45:ad:86:a8:
                    af:31:b6:ec:70:fd:e2:74:5b:51:5a:f0:8f:f9:ec:
                    b7:d5:10:6d:97:20:00:01:14:eb:f8:11:62:3d:49:
                    21:9f:20:06:60:a9:d2:db:ac:79:c2:0d:d7:23:1c:
                    91:44:49:be:8f:10:94:6e:f2:e8:e7:47:f3:2b:04:
                    3e:58:ab:43:8d:e1:df:8e:74:13:3e:fd:88:c1:13:
                    5f:73:ae:31:e1:b6:7f:fd:d7:e3:dc:51:fb:e8:9e:
                    c1:87:44:ef:a9:63:da:f4:ee:44:11:07:97:38:e3:
                    28:4a:6e:f2:92:2a:85:37:11:3a:91:e6:e4:c9:4c:
                    f6:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:05:DA:89:14:DC:3A:87:A0:65:B1:36:07:26:5D:0C:5D:2D:A9:D9
            X509v3 Authority Key Identifier:
                keyid:C3:30:38:7C:D2:18:C4:CC:FA:52:2B:C5:35:D7:70:75:5B:CF:7B:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D591B/1F6B567CD7C111EE8F2917A2775412E6/wzA4fNIYxMz6UivFNddwdVvPe28.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wzA4fNIYxMz6UivFNddwdVvPe28.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D591B/1F6B567CD7C111EE8F2917A2775412E6/wzA4fNIYxMz6UivFNddwdVvPe28.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:fb:7f:91:34:cd:75:74:36:38:a7:2d:54:e1:6b:19:93:65:
         36:88:1f:f2:3b:a7:65:eb:37:72:f1:de:03:c8:8e:96:8d:88:
         23:cb:13:d7:e9:2a:0b:86:49:0c:d7:43:86:b5:dc:ea:e9:13:
         1e:f8:90:9d:17:87:c9:f9:3e:a7:21:47:f0:2c:5b:cf:6e:63:
         bf:c3:99:b0:49:e0:07:78:20:9d:db:c4:5c:b5:47:96:cd:a3:
         e0:eb:e1:0a:1f:8d:c4:f6:d9:77:e9:62:ee:9a:d7:7d:fc:6f:
         3f:84:7a:ec:bd:af:1e:d2:eb:8d:e7:57:c1:2a:e6:e6:22:6e:
         14:e0:20:63:34:8d:22:66:73:8a:9d:b7:66:7f:c5:e5:10:fc:
         93:64:98:48:64:22:4a:ff:f0:06:4b:1f:46:9e:85:b6:fd:85:
         54:a8:32:d0:37:ec:47:8d:e8:a1:7e:4c:83:a2:58:03:b4:9c:
         ec:9b:63:c2:01:be:c1:d2:5d:8a:39:be:20:5a:5c:40:e1:67:
         25:18:b2:1f:53:df:66:f6:3f:aa:61:c2:28:d6:77:ed:92:d7:
         09:0c:46:47:e2:41:44:aa:f3:2f:c3:cc:1a:aa:04:12:6e:cb:
         09:c1:d9:6f:d0:04:6f:a0:77:12:09:80:3e:b8:20:38:6b:82:
         33:3c:c9:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:12:21 2026 by rpki-client