Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D7B70/311539A0AD6111ED8C82DB9DF1222468/1dvrzXwb7_KENX_wZHrIt0liD9Q.mft
File:                     1dvrzXwb7_KENX_wZHrIt0liD9Q.mft (raw, json)
Hash identifier:          /WEtOHWzH0KFxlzJuUxsgUn7Sdmu4UHyGnu1/l6eYRY=
Subject key identifier:   B0:09:E5:70:75:C5:89:26:4D:F0:23:4A:A6:00:15:A0:33:9F:93:74
Authority key identifier: D5:DB:EB:CD:7C:1B:EF:F2:84:35:7F:F0:64:7A:C8:B7:49:62:0F:D4
Certificate issuer:       /CN=F36D7B70AF/serialNumber=D5DBEBCD7C1BEFF284357FF0647AC8B749620FD4
Certificate serial:       0496
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/1dvrzXwb7_KENX_wZHrIt0liD9Q.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D7B70/311539A0AD6111ED8C82DB9DF1222468/1dvrzXwb7_KENX_wZHrIt0liD9Q.mft
Manifest number:          0494
Signing time:             Thu 26 Mar 2026 03:49:31 +0000
Manifest this update:     Thu 26 Mar 2026 03:49:31 +0000
Manifest next update:     Sat 28 Mar 2026 03:49:31 +0000
Files and hashes:         1: 1dvrzXwb7_KENX_wZHrIt0liD9Q.crl (hash: TNZJb6YRfSdTokDj2HUJrePlw13Gbbm1rGnRaLROU+k=)
                          2: BE9F0310ADB511ED9BFAA497F1222468.roa (hash: QYIDCJXoNqvHg1YdgKjgPsS1L4uv/2EzjaMHwhM8yjk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D7B70/311539A0AD6111ED8C82DB9DF1222468/1dvrzXwb7_KENX_wZHrIt0liD9Q.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D7B70/311539A0AD6111ED8C82DB9DF1222468/1dvrzXwb7_KENX_wZHrIt0liD9Q.mft
                          rsync://rpki.afrinic.net/repository/afrinic/1dvrzXwb7_KENX_wZHrIt0liD9Q.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1174 (0x496)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D7B70AF, serialNumber=D5DBEBCD7C1BEFF284357FF0647AC8B749620FD4
        Validity
            Not Before: Mar 26 03:49:31 2026 GMT
            Not After : Mar 28 03:49:31 2026 GMT
        Subject: CN=69c4accb-f9d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:71:34:03:44:88:17:1a:9c:b5:89:6f:e7:82:
                    97:88:84:13:e9:0f:c5:03:6c:7e:05:51:27:03:28:
                    f8:58:ae:f7:d3:09:7c:f3:0f:c4:50:e8:f3:49:21:
                    7a:22:4b:76:79:6b:4a:67:2d:96:40:b1:03:c5:d0:
                    89:d4:19:77:c1:87:63:52:54:0b:38:fb:7b:2d:0e:
                    60:a1:bb:ec:05:1b:50:74:f5:a6:45:28:70:bf:25:
                    ac:54:02:3a:a8:e9:3d:64:54:9d:45:12:d6:73:d6:
                    a8:07:62:94:99:92:e4:fa:ef:28:28:c8:42:d0:5f:
                    f0:09:62:66:6f:04:1b:3c:1b:5f:a7:46:d0:22:fa:
                    fd:4e:fb:a1:aa:ab:0e:dc:72:b8:f4:1d:ae:0f:87:
                    89:ac:d2:18:48:eb:d9:35:58:89:30:75:5d:da:e7:
                    88:0c:38:43:7b:0c:67:15:ef:e8:ec:86:14:21:d6:
                    8d:db:3f:39:25:d9:f2:da:43:a5:1d:13:80:b6:e7:
                    35:f6:e0:c7:b4:03:b2:63:88:e6:04:7d:a2:23:45:
                    b6:a4:de:e0:68:33:e4:18:38:68:48:7e:c2:09:f1:
                    7d:ea:a0:ee:5f:53:00:89:63:25:32:85:b1:bc:36:
                    52:a4:8d:f7:67:00:d4:ff:b9:c5:c3:70:f7:da:51:
                    de:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:09:E5:70:75:C5:89:26:4D:F0:23:4A:A6:00:15:A0:33:9F:93:74
            X509v3 Authority Key Identifier:
                keyid:D5:DB:EB:CD:7C:1B:EF:F2:84:35:7F:F0:64:7A:C8:B7:49:62:0F:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D7B70/311539A0AD6111ED8C82DB9DF1222468/1dvrzXwb7_KENX_wZHrIt0liD9Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/1dvrzXwb7_KENX_wZHrIt0liD9Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D7B70/311539A0AD6111ED8C82DB9DF1222468/1dvrzXwb7_KENX_wZHrIt0liD9Q.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:74:9a:76:c9:61:6f:8a:e4:7e:ff:d1:6e:5a:ca:fe:b0:e8:
         9f:88:09:cb:72:18:44:03:7c:98:f7:8f:66:ba:bd:ea:9e:f7:
         50:a2:8d:45:15:2b:c6:f2:b3:c5:d2:b0:47:b4:01:3f:9a:4f:
         ec:f5:b6:68:b3:ab:f1:eb:ad:ec:11:e9:02:3d:77:41:c3:f2:
         f1:4e:7c:f8:6e:3f:e8:2a:8e:18:08:a2:87:4a:e7:a9:57:7e:
         f2:b6:22:17:7e:c4:bc:c4:5c:88:ac:87:60:ee:41:9f:94:a7:
         fb:99:0c:02:07:99:ef:ef:2c:b7:bd:f3:f7:c1:00:a9:aa:2d:
         36:1d:e2:5a:6c:f9:00:9e:b6:c8:5e:76:90:e5:8f:88:b3:10:
         85:56:eb:96:4f:df:4f:1e:ba:e9:e2:0b:cd:08:6c:1a:2c:3c:
         16:2a:f6:7a:13:0e:fa:2d:82:b7:7d:cf:db:d1:ef:ec:45:5d:
         e8:48:81:bd:21:19:51:99:dd:07:25:1d:c1:92:cc:eb:0f:b6:
         e2:53:26:40:c0:89:7f:cd:3b:9a:4c:b4:e1:ef:6a:ab:10:95:
         13:10:92:9f:42:5d:74:73:54:ac:97:f4:48:e2:66:38:ab:a1:
         5f:0c:71:b3:08:84:1b:00:25:e4:9a:0a:01:c5:ab:78:51:3a:
         36:3f:cd:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:18:14 2026 by rpki-client