Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/KjzJ5VGaWluxPQgxDKk0gkiW-lo.mft
File:                     KjzJ5VGaWluxPQgxDKk0gkiW-lo.mft (raw, json)
Hash identifier:          H2yqUNFjoqkEKAjXvQ8ACCbffMMgJWx3QXOW8ZkE59A=
Subject key identifier:   D3:DC:F5:B8:2C:50:76:40:FC:BD:1B:0E:1F:DD:CA:21:6A:4B:A7:59
Authority key identifier: 2A:3C:C9:E5:51:9A:5A:5B:B1:3D:08:31:0C:A9:34:82:48:96:FA:5A
Certificate issuer:       /CN=F36E29EDAF/serialNumber=2A3CC9E5519A5A5BB13D08310CA934824896FA5A
Certificate serial:       05B6
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/KjzJ5VGaWluxPQgxDKk0gkiW-lo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/KjzJ5VGaWluxPQgxDKk0gkiW-lo.mft
Manifest number:          05AE
Signing time:             Thu 26 Mar 2026 03:11:16 +0000
Manifest this update:     Thu 26 Mar 2026 03:11:15 +0000
Manifest next update:     Sat 28 Mar 2026 03:11:15 +0000
Files and hashes:         1: KjzJ5VGaWluxPQgxDKk0gkiW-lo.crl (hash: QGb+/5rlTf/IRCq9+fVHEh1Ure7zuMsiuxVvKPoWcKQ=)
                          2: 073BD64605C911EE95E74F304AD9E6FC.roa (hash: In9Q3d/Y0USLa0Qt9FonWtXn6zDCpfpzJ3Ey6VoUa4c=)
                          3: 16A921E4DC0B11EC947D03A2F1222468.roa (hash: vGBFcYwGWSd28shsl6wLto7Mn3qQgY7dKVAEPsi5kBs=)
                          4: A9F0CED005CB11EEAE1D25384AD9E6FC.roa (hash: zxEwyc9gplQBJFrp7SAoD+b4/1ve107UCm4IoIpj8I0=)
                          5: BF8426E405CA11EE92157D354AD9E6FC.roa (hash: A+WykTSmvAsx1MAKq+Pb3eSJ+oLcJkndPTp4NaD0n4Y=)
                          6: 3DA37FA805CA11EE97650D344AD9E6FC.roa (hash: qnjPAnaVGfXdRft23JxV+6Cp0V+QdoJKnDCoKaZOhOc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/KjzJ5VGaWluxPQgxDKk0gkiW-lo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/KjzJ5VGaWluxPQgxDKk0gkiW-lo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/KjzJ5VGaWluxPQgxDKk0gkiW-lo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1462 (0x5b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E29EDAF, serialNumber=2A3CC9E5519A5A5BB13D08310CA934824896FA5A
        Validity
            Not Before: Mar 26 03:11:15 2026 GMT
            Not After : Mar 28 03:11:15 2026 GMT
        Subject: CN=69c4a3d4-b196
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:83:77:5f:b1:3e:ff:70:06:56:29:50:aa:09:
                    2b:78:56:85:ef:43:17:e3:f1:fc:2f:54:ce:f2:0a:
                    73:97:3a:e2:86:17:71:b2:7d:5c:28:e2:17:6c:94:
                    ac:67:cc:43:20:ee:d9:4b:16:17:df:70:27:eb:f3:
                    8c:5c:c6:1b:bb:7f:60:65:16:f5:15:4b:e4:f0:18:
                    e4:d1:20:f2:a5:25:e9:dc:f6:31:67:31:a5:15:f9:
                    7b:61:78:0d:6d:ef:44:87:a4:f2:c3:76:c7:72:a7:
                    e8:e1:20:0a:af:54:db:6f:c5:65:cb:7d:a4:7d:3c:
                    ed:1b:1b:1c:da:52:06:f2:4e:c9:17:cf:f7:9c:4d:
                    52:4a:f8:06:e4:3a:02:ba:58:dd:b1:69:99:35:8f:
                    2f:87:a1:ac:67:4f:cb:db:64:5c:c1:8a:40:31:46:
                    ce:22:4b:b0:bf:ce:54:10:16:41:b6:93:be:03:ad:
                    08:7b:20:11:5c:48:5a:85:44:0e:f9:fc:7d:40:28:
                    fb:60:92:8a:be:ba:0b:96:48:2f:7d:e6:41:3e:ee:
                    ab:97:65:96:f6:98:02:06:8d:ed:87:c0:1e:34:e5:
                    7b:b9:77:a1:c5:31:f3:1a:f4:77:09:a3:5b:35:21:
                    83:9b:19:ab:42:0f:be:62:30:36:c3:25:d3:9d:18:
                    89:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:DC:F5:B8:2C:50:76:40:FC:BD:1B:0E:1F:DD:CA:21:6A:4B:A7:59
            X509v3 Authority Key Identifier:
                keyid:2A:3C:C9:E5:51:9A:5A:5B:B1:3D:08:31:0C:A9:34:82:48:96:FA:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/KjzJ5VGaWluxPQgxDKk0gkiW-lo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KjzJ5VGaWluxPQgxDKk0gkiW-lo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/KjzJ5VGaWluxPQgxDKk0gkiW-lo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:d7:13:c2:07:e3:95:6a:8d:41:5b:4d:49:39:59:c4:61:f0:
         c4:38:ad:ea:0d:92:ce:6b:07:c2:91:d4:8c:5b:51:2a:ba:81:
         71:a5:da:4c:33:6b:3f:a1:54:cd:ff:82:5b:8d:a4:d9:38:9c:
         a7:55:9e:3d:1f:0c:c3:a4:d1:85:cd:79:ab:91:e7:82:42:24:
         be:8e:47:29:1d:fa:1b:49:2c:83:60:3e:75:f3:f6:ef:3a:ac:
         54:e3:47:4f:d5:c3:60:f8:e7:3f:e4:33:05:16:31:f8:17:86:
         29:e6:2b:92:89:1d:58:12:51:47:96:0b:4c:ab:36:4f:4e:ce:
         8d:14:51:5a:a3:14:43:9d:33:c4:68:66:a5:e2:4a:67:89:7a:
         f5:aa:86:3a:eb:7d:ba:5e:ec:2f:ce:2c:14:18:33:f5:6a:05:
         c1:1c:6c:ec:d1:66:14:e4:d3:5b:de:8e:ca:f3:1a:90:2c:72:
         3d:41:76:c2:db:a1:f7:e9:c1:cd:d9:0b:c5:4a:70:b6:0f:d0:
         37:f2:b3:a7:34:5a:a9:15:54:d4:f9:22:18:c3:20:ff:4a:b9:
         85:ff:d7:c9:37:30:1b:d0:b6:55:3b:4c:c2:16:eb:f5:c8:43:
         63:57:d8:b9:95:1c:20:60:d9:e4:b5:4d:bc:c9:7a:1c:7c:05:
         dd:41:97:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:04:52 2026 by rpki-client