Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DD92B/F4F4F3EA0BBD11EF8655910D017001B1/mSzTGdelFaVjcylM4EkVP4w-AEs.mft
File:                     mSzTGdelFaVjcylM4EkVP4w-AEs.mft (raw, json)
Hash identifier:          DeS41HNMRG2Xoju6q06XOoqvk89QsaXyrj8O/UzOQR0=
Subject key identifier:   D1:7E:93:A1:68:70:28:5C:5B:34:33:BD:78:45:D9:9B:1A:D8:51:48
Authority key identifier: 99:2C:D3:19:D7:A5:15:A5:63:73:29:4C:E0:49:15:3F:8C:3E:00:4B
Certificate issuer:       /CN=F36DD92BAF/serialNumber=992CD319D7A515A56373294CE049153F8C3E004B
Certificate serial:       02C6
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/mSzTGdelFaVjcylM4EkVP4w-AEs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DD92B/F4F4F3EA0BBD11EF8655910D017001B1/mSzTGdelFaVjcylM4EkVP4w-AEs.mft
Manifest number:          02C4
Signing time:             Thu 26 Mar 2026 04:59:08 +0000
Manifest this update:     Thu 26 Mar 2026 04:59:07 +0000
Manifest next update:     Sat 28 Mar 2026 04:59:07 +0000
Files and hashes:         1: mSzTGdelFaVjcylM4EkVP4w-AEs.crl (hash: ycwrxutqv0OnDEWVtcs0Am9rM0Q9gmzs/k+Kbge78qE=)
                          2: 9A80206C9E9F11F08B5173C7DAE4EC9C.roa (hash: zMpoEJiydkEB9R9gGzSBD+NZusOfsnt8eXXZDmo8PjE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DD92B/F4F4F3EA0BBD11EF8655910D017001B1/mSzTGdelFaVjcylM4EkVP4w-AEs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DD92B/F4F4F3EA0BBD11EF8655910D017001B1/mSzTGdelFaVjcylM4EkVP4w-AEs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/mSzTGdelFaVjcylM4EkVP4w-AEs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 710 (0x2c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DD92BAF, serialNumber=992CD319D7A515A56373294CE049153F8C3E004B
        Validity
            Not Before: Mar 26 04:59:07 2026 GMT
            Not After : Mar 28 04:59:07 2026 GMT
        Subject: CN=69c4bd1c-fc27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c2:8e:5b:30:ec:ab:6d:df:c4:0f:a0:f3:2d:
                    5a:2b:d4:48:ee:c1:f8:94:b4:23:dc:84:7f:ca:5e:
                    b8:ec:20:bd:8a:34:c8:d9:aa:59:2a:54:e1:14:dd:
                    c4:70:3a:b4:ea:df:eb:12:0f:68:51:96:48:65:86:
                    b4:9e:62:14:df:95:23:99:b2:ca:60:0f:d9:5b:d0:
                    ce:4a:46:48:10:0d:fb:2e:67:5e:07:b0:91:5d:f7:
                    0e:34:1d:39:ba:d6:a9:43:b5:87:e3:27:40:7d:bb:
                    e8:d1:8d:74:5a:34:55:f5:11:cf:90:50:b4:37:1f:
                    e6:94:ac:60:a6:6e:0d:43:9b:c8:d6:6a:cb:c2:ba:
                    a3:07:96:90:53:6e:68:19:86:43:23:da:43:fc:05:
                    29:76:43:6d:6a:d9:c0:cc:12:98:e6:0a:6c:74:93:
                    c8:63:af:0f:35:95:95:be:90:5a:2a:39:72:38:12:
                    fc:03:84:44:3a:21:11:83:eb:3c:a6:06:4d:1e:3a:
                    47:51:3d:2c:99:d4:f6:16:23:57:52:11:15:be:2e:
                    7b:10:b0:51:47:05:59:6f:52:fb:00:47:de:d7:4e:
                    f2:4e:40:c0:65:f3:5f:81:cd:91:ee:4c:ab:c2:b4:
                    dd:ea:75:ca:dd:21:10:42:07:92:4e:0f:af:54:d8:
                    47:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:7E:93:A1:68:70:28:5C:5B:34:33:BD:78:45:D9:9B:1A:D8:51:48
            X509v3 Authority Key Identifier:
                keyid:99:2C:D3:19:D7:A5:15:A5:63:73:29:4C:E0:49:15:3F:8C:3E:00:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DD92B/F4F4F3EA0BBD11EF8655910D017001B1/mSzTGdelFaVjcylM4EkVP4w-AEs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/mSzTGdelFaVjcylM4EkVP4w-AEs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DD92B/F4F4F3EA0BBD11EF8655910D017001B1/mSzTGdelFaVjcylM4EkVP4w-AEs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:83:91:c2:a3:ef:11:60:f6:b0:d2:05:5c:c3:0d:d4:61:ad:
         48:61:f6:7e:e4:2a:54:7d:22:d0:f6:cf:38:02:60:33:ac:5c:
         bc:b0:2f:7c:85:3a:4e:9a:ef:0f:82:d0:71:0e:6d:d5:ed:21:
         4d:0b:7f:1d:bc:0c:f5:f4:b4:89:6e:da:4e:07:fd:f3:36:7a:
         ea:4c:19:3c:b3:16:f4:25:63:8a:a2:fc:30:0b:9f:f4:cc:f0:
         3c:c7:0f:18:5b:5d:88:10:00:b2:0b:af:fd:d6:47:55:30:7f:
         15:9b:16:c6:13:f8:17:a2:1e:34:64:54:ab:2c:7e:33:92:33:
         e6:31:e4:ea:35:3c:3d:90:f6:bf:ec:61:da:44:c6:b9:55:e2:
         a6:b8:36:c0:b5:24:8b:f8:2d:3a:15:e6:f8:73:d6:a0:84:c4:
         cb:0b:11:72:d6:22:e6:b4:7e:d5:50:cf:d0:9f:9f:8f:8f:7e:
         1e:7b:ca:5a:7e:b7:df:8e:a0:33:ec:49:c0:9e:5f:42:9d:dc:
         11:7a:1c:ea:b3:d4:b7:2b:17:86:57:21:64:f6:6b:e5:1c:b1:
         46:08:d3:6d:ef:13:33:d4:cd:f3:60:84:89:18:62:19:cd:51:
         c6:5b:6c:29:9e:5c:c7:08:1d:3d:7f:12:ef:50:90:e8:82:1d:
         df:14:db:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:46:19 2026 by rpki-client