Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E0C57/A4AE8D863AC211EFA189D362762E951A/Rh3mXlosn0bNsVRHChQs6rACo-g.mft
File:                     Rh3mXlosn0bNsVRHChQs6rACo-g.mft (raw, json)
Hash identifier:          oXafazq+3H2a0IXmDO7vVnvKwESQrr9/nw3FxOlB64Y=
Subject key identifier:   8B:31:74:8B:F1:59:F7:D5:B8:61:08:21:E5:2B:8F:35:31:78:9E:8F
Authority key identifier: 46:1D:E6:5E:5A:2C:9F:46:CD:B1:54:47:0A:14:2C:EA:B0:02:A3:E8
Certificate issuer:       /CN=F36E0C57AF/serialNumber=461DE65E5A2C9F46CDB154470A142CEAB002A3E8
Certificate serial:       0285
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Rh3mXlosn0bNsVRHChQs6rACo-g.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E0C57/A4AE8D863AC211EFA189D362762E951A/Rh3mXlosn0bNsVRHChQs6rACo-g.mft
Manifest number:          0284
Signing time:             Thu 26 Mar 2026 05:06:25 +0000
Manifest this update:     Thu 26 Mar 2026 05:06:24 +0000
Manifest next update:     Sat 28 Mar 2026 05:06:24 +0000
Files and hashes:         1: Rh3mXlosn0bNsVRHChQs6rACo-g.crl (hash: ev2MADTzyTdlRORF+9rLUzqgPSmD2i4BXRcQNnvjUTo=)
                          2: C398885E3AC311EF90F6DF67762E951A.roa (hash: ul3nn21hDO7UgXCYkLGPryVSInddXUiuHuE7QBhZSgU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E0C57/A4AE8D863AC211EFA189D362762E951A/Rh3mXlosn0bNsVRHChQs6rACo-g.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E0C57/A4AE8D863AC211EFA189D362762E951A/Rh3mXlosn0bNsVRHChQs6rACo-g.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Rh3mXlosn0bNsVRHChQs6rACo-g.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 645 (0x285)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E0C57AF, serialNumber=461DE65E5A2C9F46CDB154470A142CEAB002A3E8
        Validity
            Not Before: Mar 26 05:06:24 2026 GMT
            Not After : Mar 28 05:06:24 2026 GMT
        Subject: CN=69c4bed0-07ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:36:98:6f:75:1a:f2:7f:f5:23:33:21:f3:02:
                    68:5e:de:a7:ec:3e:94:c7:b6:22:24:a2:00:1c:36:
                    d9:6c:42:89:95:e6:2b:f5:2b:9b:2a:3c:5f:76:4c:
                    b7:14:ee:ea:03:12:18:30:21:5c:6a:2a:58:8e:69:
                    13:ec:9e:9e:8a:a3:ed:e0:32:34:08:b5:67:bf:3e:
                    1f:27:f5:18:d8:21:c0:d3:3f:2d:ec:8c:61:cd:b5:
                    3d:f7:6c:c3:be:e5:f9:96:9f:e6:0f:c9:36:6c:43:
                    cb:21:df:fe:bb:51:51:48:e0:3d:3b:90:94:e0:8f:
                    81:6d:d2:82:13:76:ff:7f:89:2e:7b:96:ef:2c:dc:
                    db:47:f5:ff:8a:e3:08:ea:b7:11:09:7f:ff:1d:16:
                    76:3f:90:0f:50:46:32:b5:97:ec:0a:97:6e:f6:55:
                    23:d2:b8:e5:83:2d:96:fc:ff:46:cf:de:19:88:98:
                    06:c2:50:f8:46:01:5d:0b:11:3c:f3:cf:3b:fb:27:
                    2b:da:02:b4:2c:5f:92:86:81:dd:93:29:2f:42:12:
                    94:83:a8:4e:37:31:3b:2b:b0:46:91:1f:26:9d:03:
                    a1:78:2a:9c:22:4c:c9:0e:51:93:1c:9f:30:f2:08:
                    76:36:01:16:a1:fa:34:b6:cf:99:2e:ac:bb:a7:ec:
                    52:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:31:74:8B:F1:59:F7:D5:B8:61:08:21:E5:2B:8F:35:31:78:9E:8F
            X509v3 Authority Key Identifier:
                keyid:46:1D:E6:5E:5A:2C:9F:46:CD:B1:54:47:0A:14:2C:EA:B0:02:A3:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E0C57/A4AE8D863AC211EFA189D362762E951A/Rh3mXlosn0bNsVRHChQs6rACo-g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Rh3mXlosn0bNsVRHChQs6rACo-g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E0C57/A4AE8D863AC211EFA189D362762E951A/Rh3mXlosn0bNsVRHChQs6rACo-g.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:75:e7:d8:c1:42:73:b9:21:00:61:f0:2a:d4:2a:6b:43:d1:
         69:99:d4:60:6a:1d:49:a4:21:2b:40:e7:31:fd:3b:e6:ff:c7:
         32:84:70:fb:93:ef:63:bc:27:bb:bb:ed:7e:6e:9a:6e:36:24:
         7f:1c:a5:05:8a:48:7d:f9:34:b2:d6:58:88:42:5e:3f:34:e6:
         4c:f8:be:4d:23:e5:ba:88:8a:fb:2e:61:dd:bb:4e:66:cb:ad:
         6d:aa:3a:e2:cb:dc:ef:69:e4:eb:a4:ba:4f:6d:cd:e9:f3:ee:
         2f:be:d4:02:e4:5e:e7:42:3d:9c:54:db:fa:63:62:91:e8:93:
         cf:fb:99:28:90:5f:63:b4:16:31:a9:77:94:10:cc:38:57:00:
         4f:2c:5c:a1:40:4f:d2:ee:3b:0c:5d:f3:ee:8a:d8:d9:77:9b:
         0f:37:69:0f:e7:97:a6:e3:cf:0e:8d:cd:14:60:a2:1b:bb:8c:
         46:6b:e8:6a:67:42:af:1a:16:88:69:67:5e:ba:74:f2:bb:15:
         fe:e1:86:66:b8:47:b5:4a:4b:88:82:6c:f2:fe:f7:7a:95:ab:
         7b:38:7d:24:2a:92:ef:5b:03:5a:d3:8b:6e:87:52:25:f1:09:
         4d:67:27:18:78:9f:56:32:58:e6:10:f7:20:24:26:a3:4e:74:
         66:b7:3b:6f
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAoUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RTBDNTdBRjExMC8GA1UEBRMoNDYxREU2NUU1QTJDOUY0NkNEQjE1NDQ3MEExNDJD
RUFCMDAyQTNFODAeFw0yNjAzMjYwNTA2MjRaFw0yNjAzMjgwNTA2MjRaMBgxFjAU
BgNVBAMTDTY5YzRiZWQwLTA3ZWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDtNphvdRryf/UjMyHzAmhe3qfsPpTHtiIkogAcNtlsQomV5iv1K5sqPF92
TLcU7uoDEhgwIVxqKliOaRPsnp6Ko+3gMjQItWe/Ph8n9RjYIcDTPy3sjGHNtT33
bMO+5fmWn+YPyTZsQ8sh3/67UVFI4D07kJTgj4Ft0oITdv9/iS57lu8s3NtH9f+K
4wjqtxEJf/8dFnY/kA9QRjK1l+wKl272VSPSuOWDLZb8/0bP3hmImAbCUPhGAV0L
ETzzzzv7JyvaArQsX5KGgd2TKS9CEpSDqE43MTsrsEaRHyadA6F4KpwiTMkOUZMc
nzDyCHY2ARah+jS2z5kurLun7FLxAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUizF0
i/FZ99W4YQgh5SuPNTF4no8wHwYDVR0jBBgwFoAURh3mXlosn0bNsVRHChQs6rAC
o+gwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkUwQzU3L0E0QUU4RDg2M0FDMjExRUZBMTg5RDM2Mjc2MkU5NTFBL1JoM21Y
bG9zbjBiTnNWUkhDaFFzNnJBQ28tZy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1JoM21YbG9zbjBiTnNWUkhDaFFzNnJBQ28tZy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RTBDNTcvQTRBRThEODYzQUMyMTFFRkExODlEMzYyNzYy
RTk1MUEvUmgzbVhsb3NuMGJOc1ZSSENoUXM2ckFDby1nLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBzdefYwUJzuSEAYfAq1CprQ9FpmdRg
ah1JpCErQOcx/Tvm/8cyhHD7k+9jvCe7u+1+bppuNiR/HKUFikh9+TSy1liIQl4/
NOZM+L5NI+W6iIr7LmHdu05my61tqjriy9zvaeTrpLpPbc3p8+4vvtQC5F7nQj2c
VNv6Y2KR6JPP+5kokF9jtBYxqXeUEMw4VwBPLFyhQE/S7jsMXfPuitjZd5sPN2kP
55em488Ojc0UYKIbu4xGa+hqZ0KvGhaIaWdeunTyuxX+4YZmuEe1SkuIgmzy/vd6
lat7OH0kKpLvWwNa04tuh1Il8QlNZycYeJ9WMljmEPcgJCajTnRmtztv
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:09:46 2026 by rpki-client