Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E1A95/28A3BF58EFA811F0A6B991B8DAE4EC9C/zgfVJCGaKb9NDax9tiqIO3WsSUA.mft
File:                     zgfVJCGaKb9NDax9tiqIO3WsSUA.mft (raw, json)
Hash identifier:          2+Se0zPZYMoOhwrD+xyfUTtYhPcmyiuapQD+Usb0Xjo=
Subject key identifier:   0C:36:D3:0D:FD:36:2E:4B:B1:CC:58:8E:ED:7D:04:A8:5A:70:D1:28
Authority key identifier: CE:07:D5:24:21:9A:29:BF:4D:0D:AC:7D:B6:2A:88:3B:75:AC:49:40
Certificate issuer:       /CN=F36E1A95AF/serialNumber=CE07D524219A29BF4D0DAC7DB62A883B75AC4940
Certificate serial:       4D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/zgfVJCGaKb9NDax9tiqIO3WsSUA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E1A95/28A3BF58EFA811F0A6B991B8DAE4EC9C/zgfVJCGaKb9NDax9tiqIO3WsSUA.mft
Manifest number:          4C
Signing time:             Thu 26 Mar 2026 06:28:32 +0000
Manifest this update:     Thu 26 Mar 2026 06:28:31 +0000
Manifest next update:     Sat 28 Mar 2026 06:28:31 +0000
Files and hashes:         1: zgfVJCGaKb9NDax9tiqIO3WsSUA.crl (hash: xw9NWPWC5ruGH2yd17tqcWunUktWtZNy+bIDg6gIS1Q=)
                          2: 0836D574EFA911F0AD3786BEDAE4EC9C.roa (hash: s34q98p+j1656mmnmZ5OjzaYIjMbFPtO6WF3YwxXSiA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E1A95/28A3BF58EFA811F0A6B991B8DAE4EC9C/zgfVJCGaKb9NDax9tiqIO3WsSUA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E1A95/28A3BF58EFA811F0A6B991B8DAE4EC9C/zgfVJCGaKb9NDax9tiqIO3WsSUA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/zgfVJCGaKb9NDax9tiqIO3WsSUA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 77 (0x4d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E1A95AF, serialNumber=CE07D524219A29BF4D0DAC7DB62A883B75AC4940
        Validity
            Not Before: Mar 26 06:28:31 2026 GMT
            Not After : Mar 28 06:28:31 2026 GMT
        Subject: CN=69c4d210-d531
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:7c:90:55:f1:40:f1:83:52:1b:77:1f:b3:1a:
                    34:54:4e:3d:0f:1e:88:d8:3b:60:6a:a1:16:7d:66:
                    85:2a:c2:09:89:63:85:19:55:70:11:8c:0a:cb:74:
                    bb:b4:27:ed:8d:85:d6:87:09:05:a5:13:ad:f2:bd:
                    0c:2c:bd:b8:6f:59:63:df:5d:2f:ee:78:bd:0e:86:
                    10:a1:c9:9c:28:58:4d:ce:21:b5:58:b4:d3:63:9d:
                    d3:b9:d8:20:50:5e:74:10:7e:d4:e1:af:4d:bf:f2:
                    c1:7f:95:a8:f0:e4:5e:61:c9:f1:64:14:7a:c8:e2:
                    be:41:d4:3a:a6:76:39:ba:08:73:ed:9d:54:b9:bf:
                    ef:2e:e8:00:d9:59:a8:cb:fc:4e:3a:be:da:98:8d:
                    3d:c5:0a:2a:8d:1c:7a:18:f1:3e:32:f8:75:98:0b:
                    1c:3d:33:a9:30:61:c2:5f:e0:f4:27:92:a9:eb:97:
                    2d:a1:16:21:a7:bc:04:0f:3c:62:5f:1b:ac:a9:be:
                    7b:85:9d:d3:4f:46:75:a4:6c:cf:ee:f7:00:97:bf:
                    c4:14:1b:f0:9f:d2:9c:82:81:42:69:7d:4e:c8:ba:
                    4c:9e:0c:bc:82:0b:88:3d:b3:24:80:71:e9:00:23:
                    b5:8b:e8:63:d2:6b:91:07:f2:c5:f1:b4:3c:ba:30:
                    91:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:36:D3:0D:FD:36:2E:4B:B1:CC:58:8E:ED:7D:04:A8:5A:70:D1:28
            X509v3 Authority Key Identifier:
                keyid:CE:07:D5:24:21:9A:29:BF:4D:0D:AC:7D:B6:2A:88:3B:75:AC:49:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E1A95/28A3BF58EFA811F0A6B991B8DAE4EC9C/zgfVJCGaKb9NDax9tiqIO3WsSUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zgfVJCGaKb9NDax9tiqIO3WsSUA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E1A95/28A3BF58EFA811F0A6B991B8DAE4EC9C/zgfVJCGaKb9NDax9tiqIO3WsSUA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:21:8d:dd:aa:67:e1:af:28:85:f6:1a:5d:c8:ff:e6:af:71:
         ff:90:aa:c1:f6:f0:33:70:0c:8e:d6:0e:10:94:e3:98:55:b8:
         c6:7c:dc:b5:2f:61:aa:77:1d:d9:11:8f:15:61:93:27:52:75:
         95:e0:df:b5:49:38:2d:7e:3a:ea:91:d6:1b:81:c0:0e:2d:cb:
         ea:f0:21:ea:ed:ff:d8:a7:01:70:a3:90:f2:2c:35:00:e8:67:
         ce:94:61:f1:a3:a3:b7:bf:60:a3:12:ed:de:5a:f0:60:0e:d6:
         4c:ef:80:34:86:be:85:72:7d:bd:57:e6:a5:34:2f:6e:7a:6e:
         cf:f6:f2:c5:17:7a:8d:0f:06:cc:64:fb:b8:46:33:d8:ae:25:
         f3:f9:11:23:36:f8:c3:91:3c:d9:69:7b:e0:29:fb:98:40:d5:
         d9:ed:55:ad:68:c5:66:94:d2:de:06:9b:a6:0e:a5:19:16:42:
         fd:9f:05:af:dc:de:ba:7a:4e:85:33:73:c6:37:47:ce:4a:f4:
         d9:26:be:e0:16:70:42:a9:1d:e0:93:91:c2:54:b7:12:74:a7:
         28:61:e7:47:8c:6c:d1:d2:d1:da:85:2c:06:6b:f8:99:9b:06:
         e8:5b:db:5d:36:3a:79:f9:4e:7a:52:d4:09:32:47:36:9e:8b:
         9d:c7:4b:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:46:05 2026 by rpki-client