Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DBAE4/858F2982732211E9AEBC3184F8AEA228/QO4F_Q8xtfsOzFYlIIq1CFn56fk.mft
File:                     QO4F_Q8xtfsOzFYlIIq1CFn56fk.mft (raw, json)
Hash identifier:          Rt8qY78B9wk7IP6trLHNxrm/PjAJSz0Fx7xmN3yOb0c=
Subject key identifier:   EE:50:7D:2D:06:82:F1:72:F9:BF:B0:21:27:24:85:61:60:04:AD:82
Authority key identifier: 40:EE:05:FD:0F:31:B5:FB:0E:CC:56:25:20:8A:B5:08:59:F9:E9:F9
Certificate issuer:       /CN=F36DBAE4AF/serialNumber=40EE05FD0F31B5FB0ECC5625208AB50859F9E9F9
Certificate serial:       0A18
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QO4F_Q8xtfsOzFYlIIq1CFn56fk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DBAE4/858F2982732211E9AEBC3184F8AEA228/QO4F_Q8xtfsOzFYlIIq1CFn56fk.mft
Manifest number:          0A15
Signing time:             Thu 26 Mar 2026 01:27:20 +0000
Manifest this update:     Thu 26 Mar 2026 01:27:19 +0000
Manifest next update:     Sat 28 Mar 2026 01:27:19 +0000
Files and hashes:         1: QO4F_Q8xtfsOzFYlIIq1CFn56fk.crl (hash: UKnM4BgqvS/yAT9p+JgYQR+YHUsObFp07M8gPeYXeWg=)
                          2: 9441D5EEDAC711E9BF722B0BF8AEA228.roa (hash: axIaMQf67dy55F4A4FCaJkKKc0Bb9fF9saVchkeuCiI=)
                          3: A99AE7C0DAC511E985EBCE09F8AEA228.roa (hash: OIGU7l2JXL8/haZu4eER9KuF5vp4/ZseEXDNYZByKwk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DBAE4/858F2982732211E9AEBC3184F8AEA228/QO4F_Q8xtfsOzFYlIIq1CFn56fk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DBAE4/858F2982732211E9AEBC3184F8AEA228/QO4F_Q8xtfsOzFYlIIq1CFn56fk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/QO4F_Q8xtfsOzFYlIIq1CFn56fk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2584 (0xa18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DBAE4AF, serialNumber=40EE05FD0F31B5FB0ECC5625208AB50859F9E9F9
        Validity
            Not Before: Mar 26 01:27:19 2026 GMT
            Not After : Mar 28 01:27:19 2026 GMT
        Subject: CN=69c48b78-1c58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:af:69:59:14:16:9b:d4:34:d4:ee:e8:b4:c8:
                    ef:5a:3d:db:86:72:6c:35:53:af:80:94:3e:30:86:
                    05:80:f0:ba:6b:07:51:d2:50:1b:90:1f:72:e5:5c:
                    03:25:4e:c8:38:91:6b:ff:ed:e4:a6:76:57:45:72:
                    f8:70:06:b2:2b:b9:9f:97:20:d8:57:6a:ab:f1:d4:
                    59:2a:97:c4:0e:d1:87:da:32:19:7c:15:e1:24:ab:
                    8a:6e:0e:1d:91:c9:cc:61:8b:ac:fb:61:40:10:99:
                    bc:e7:cd:de:a2:22:56:72:5b:5a:c1:aa:d5:cf:b8:
                    66:11:05:ac:4f:c4:dd:a7:76:db:5f:c7:e2:e5:d4:
                    2a:16:cb:38:2e:72:cc:af:0d:99:30:17:4a:ba:33:
                    2d:9d:60:e6:bd:49:af:0b:6a:2c:1f:44:ef:42:cc:
                    70:79:00:17:ea:f5:37:d9:e7:5a:7c:71:ca:2a:7a:
                    1f:f1:bf:d7:56:9e:f0:de:8b:a3:97:de:ef:c0:92:
                    1c:f6:0a:9c:de:65:da:cb:fc:cb:bb:6d:9e:34:66:
                    52:87:9e:76:f4:84:6d:ff:64:24:55:5b:e8:ca:00:
                    ad:91:87:83:d7:b2:90:9a:83:b6:44:84:8e:c1:00:
                    6a:32:98:d9:6e:cf:27:cf:4d:c6:8f:13:75:d4:49:
                    08:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:50:7D:2D:06:82:F1:72:F9:BF:B0:21:27:24:85:61:60:04:AD:82
            X509v3 Authority Key Identifier:
                keyid:40:EE:05:FD:0F:31:B5:FB:0E:CC:56:25:20:8A:B5:08:59:F9:E9:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DBAE4/858F2982732211E9AEBC3184F8AEA228/QO4F_Q8xtfsOzFYlIIq1CFn56fk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QO4F_Q8xtfsOzFYlIIq1CFn56fk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DBAE4/858F2982732211E9AEBC3184F8AEA228/QO4F_Q8xtfsOzFYlIIq1CFn56fk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:7d:98:55:e3:a4:e6:95:60:27:b5:7d:94:de:b6:24:59:71:
         20:cb:92:8f:07:ce:74:cb:90:f6:97:75:8e:8b:5a:b0:07:97:
         6d:80:53:e3:b2:b2:0b:1d:08:cc:c0:f9:3a:ea:8b:79:9e:a5:
         a0:18:8c:32:e9:f6:fe:f7:77:89:6c:0c:aa:79:71:8f:fc:a0:
         c3:be:5b:3d:78:9b:6f:12:32:6d:e6:00:1c:ed:41:54:23:a4:
         03:a1:74:0c:35:e1:86:cd:0b:d5:63:3c:e2:32:8a:81:58:30:
         3d:50:a8:b2:fd:e0:1a:18:2c:2b:80:fc:d6:3a:8f:12:dd:aa:
         17:1d:78:e8:70:36:e1:9c:dc:0c:18:e6:64:d6:72:c5:2b:ff:
         b7:4d:01:0f:f3:ae:99:7c:4c:0d:e2:a5:08:e7:bf:f1:06:53:
         69:f6:dc:e2:b9:a5:9f:93:ad:7a:52:fa:7e:e9:97:e0:54:a6:
         81:ee:cd:99:f7:58:da:a7:50:85:58:44:0e:52:71:12:ba:d8:
         1e:9e:4d:72:a6:c9:8b:ff:98:7b:53:3b:cd:fd:4f:f1:9e:a4:
         0b:de:20:88:5a:8c:1b:d2:93:b6:83:f6:4b:8c:5f:72:ee:03:
         cb:47:f3:23:a0:7d:71:22:61:84:78:65:9e:3c:a9:04:26:ba:
         47:a2:42:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:29:48 2026 by rpki-client