Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E4CC6/3FBFCE2E025711EF893557F4007001B1/M5TfcBkjRDxfmPA9t_8Fc663ZJI.mft
File:                     M5TfcBkjRDxfmPA9t_8Fc663ZJI.mft (raw, json)
Hash identifier:          6CYoMs+9CcKtemm4l6T3y2jHszhikczfWjGNvNwa7h4=
Subject key identifier:   CA:5A:F9:7D:4A:B4:4C:7A:F0:59:D3:1A:6D:95:F1:57:0F:9B:F9:A6
Authority key identifier: 33:94:DF:70:19:23:44:3C:5F:98:F0:3D:B7:FF:05:73:AE:B7:64:92
Certificate issuer:       /CN=F36E4CC6AF/serialNumber=3394DF701923443C5F98F03DB7FF0573AEB76492
Certificate serial:       02CF
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/M5TfcBkjRDxfmPA9t_8Fc663ZJI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E4CC6/3FBFCE2E025711EF893557F4007001B1/M5TfcBkjRDxfmPA9t_8Fc663ZJI.mft
Manifest number:          02CE
Signing time:             Thu 26 Mar 2026 04:57:38 +0000
Manifest this update:     Thu 26 Mar 2026 04:57:37 +0000
Manifest next update:     Sat 28 Mar 2026 04:57:37 +0000
Files and hashes:         1: M5TfcBkjRDxfmPA9t_8Fc663ZJI.crl (hash: qjC048v4nPdSMfU5uWxWpoMu+XIT11La6+VzLeTuFkw=)
                          2: C0E88DD6025E11EFB5BAAD30017001B1.roa (hash: DJWXY1V0N/SZP8fVnsyyzg0SRQs5AOjIUrDn4upoYrc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E4CC6/3FBFCE2E025711EF893557F4007001B1/M5TfcBkjRDxfmPA9t_8Fc663ZJI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E4CC6/3FBFCE2E025711EF893557F4007001B1/M5TfcBkjRDxfmPA9t_8Fc663ZJI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/M5TfcBkjRDxfmPA9t_8Fc663ZJI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 719 (0x2cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E4CC6AF, serialNumber=3394DF701923443C5F98F03DB7FF0573AEB76492
        Validity
            Not Before: Mar 26 04:57:37 2026 GMT
            Not After : Mar 28 04:57:37 2026 GMT
        Subject: CN=69c4bcc2-978e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e9:d4:8c:cc:ae:79:6c:5d:3d:1a:ce:97:fb:
                    09:19:1e:71:02:27:bf:7a:ba:e9:59:00:42:99:22:
                    c5:33:d2:f2:8b:b4:61:60:15:b8:57:6a:d2:60:2e:
                    fd:7b:41:cf:fd:27:e7:5f:07:16:74:f1:08:8d:7f:
                    a9:b0:97:58:2e:f2:d4:4e:dd:79:a0:95:bc:f0:16:
                    4f:9d:b1:f1:68:8d:a3:d2:53:45:c1:4e:29:ce:a8:
                    76:cb:f2:93:4f:4d:91:3a:cf:6b:78:f5:2c:a0:cd:
                    9d:38:6b:22:ba:98:56:c6:31:15:49:b0:40:99:74:
                    ec:7a:10:00:ea:85:66:f6:9b:55:81:bb:58:7b:92:
                    05:d7:8c:6a:4e:45:a1:bf:74:9e:19:a7:6b:73:a1:
                    b5:82:84:e1:fb:58:99:f8:59:1d:ba:1f:dd:b1:6a:
                    cb:b9:59:32:54:88:9e:4e:c7:7f:b8:2a:66:0e:6f:
                    7c:5e:39:cf:5a:7f:29:0f:73:f8:48:4c:3c:4a:7e:
                    7d:23:bc:dd:c4:19:b4:1e:f2:e3:a5:7f:80:52:aa:
                    47:b8:c7:03:70:06:75:25:2f:a2:ae:25:21:06:5b:
                    31:44:b0:50:d1:42:16:7c:b3:bb:e8:3b:dc:4f:c2:
                    46:4d:ee:17:57:d7:ec:b5:7b:f1:67:60:d4:76:ab:
                    7f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:5A:F9:7D:4A:B4:4C:7A:F0:59:D3:1A:6D:95:F1:57:0F:9B:F9:A6
            X509v3 Authority Key Identifier:
                keyid:33:94:DF:70:19:23:44:3C:5F:98:F0:3D:B7:FF:05:73:AE:B7:64:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E4CC6/3FBFCE2E025711EF893557F4007001B1/M5TfcBkjRDxfmPA9t_8Fc663ZJI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/M5TfcBkjRDxfmPA9t_8Fc663ZJI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E4CC6/3FBFCE2E025711EF893557F4007001B1/M5TfcBkjRDxfmPA9t_8Fc663ZJI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:23:bf:b9:c2:92:24:70:46:51:fb:8e:b5:88:61:bc:c7:78:
         57:16:78:e2:35:7a:79:e0:21:2d:15:61:50:ea:0a:40:21:10:
         e1:70:4f:d9:66:2c:8f:af:e1:b0:70:9c:a8:0f:ef:60:43:80:
         12:66:21:0b:36:3c:38:33:07:19:75:42:34:0e:e5:1a:5a:6b:
         6a:6f:49:0a:fd:a8:b5:71:58:10:a5:13:4c:93:a7:c7:f8:3b:
         79:ad:6a:13:be:5c:68:96:6f:b4:ee:f7:91:91:fc:06:14:88:
         1f:6c:3b:81:b9:24:5d:36:c2:82:49:3c:b6:c4:88:87:48:05:
         67:e4:05:5a:80:f2:fa:e0:f9:de:57:2a:74:86:94:8f:3f:2b:
         7e:58:0d:1f:b9:d5:98:74:ac:2d:47:bd:83:c1:c4:b4:37:44:
         ae:93:09:f1:a2:a6:3f:66:02:b2:6c:8b:f6:29:9c:55:54:8f:
         6c:b6:dd:c4:e4:3f:21:08:9c:a5:b1:d1:9d:47:26:87:b0:88:
         f3:d0:2c:03:8d:e9:73:45:ba:d9:7a:3e:1d:3e:a7:27:76:44:
         f1:90:09:66:d9:fb:41:2e:c4:1a:05:4e:8c:00:cd:0e:0d:cd:
         63:f8:02:b2:ef:7f:14:4b:39:c6:f5:a6:46:ef:6e:8f:f0:0d:
         ea:5c:90:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:10:52 2026 by rpki-client