Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E558E/8AD037A48CEF11F091627E7CDAE4EC9C/9e2RvGqsS_b5N0e41TmTDZwMAis.mft
File:                     9e2RvGqsS_b5N0e41TmTDZwMAis.mft (raw, json)
Hash identifier:          LZCGuWQVepysbBnRF0ZW0dchbl6/Gi05ZjyNho4TDYw=
Subject key identifier:   D6:88:69:38:10:AF:FB:94:4A:3D:41:5E:36:2A:DB:D4:0A:C0:52:CF
Authority key identifier: F5:ED:91:BC:6A:AC:4B:F6:F9:37:47:B8:D5:39:93:0D:9C:0C:02:2B
Certificate issuer:       /CN=F36E558EAF/serialNumber=F5ED91BC6AAC4BF6F93747B8D539930D9C0C022B
Certificate serial:       CA
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/9e2RvGqsS_b5N0e41TmTDZwMAis.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E558E/8AD037A48CEF11F091627E7CDAE4EC9C/9e2RvGqsS_b5N0e41TmTDZwMAis.mft
Manifest number:          CA
Signing time:             Wed 25 Mar 2026 06:11:22 +0000
Manifest this update:     Wed 25 Mar 2026 06:11:21 +0000
Manifest next update:     Fri 27 Mar 2026 06:11:21 +0000
Files and hashes:         1: 9e2RvGqsS_b5N0e41TmTDZwMAis.crl (hash: QeAt6gere/jyV8Gl+CSH68c+Z79pFB0BJyGVeghjxAo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E558E/8AD037A48CEF11F091627E7CDAE4EC9C/9e2RvGqsS_b5N0e41TmTDZwMAis.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E558E/8AD037A48CEF11F091627E7CDAE4EC9C/9e2RvGqsS_b5N0e41TmTDZwMAis.mft
                          rsync://rpki.afrinic.net/repository/afrinic/9e2RvGqsS_b5N0e41TmTDZwMAis.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 27 Mar 2026 06:11:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 202 (0xca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E558EAF, serialNumber=F5ED91BC6AAC4BF6F93747B8D539930D9C0C022B
        Validity
            Not Before: Mar 25 06:11:21 2026 GMT
            Not After : Mar 27 06:11:21 2026 GMT
        Subject: CN=69c37c8a-d2b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:91:d1:d8:13:8d:ce:30:83:96:d4:c6:b7:ad:
                    ba:d3:8b:47:10:a9:d6:f9:c8:06:e3:75:e8:a0:00:
                    03:f9:81:5e:11:93:8a:13:14:5f:9a:d8:a5:96:ae:
                    f2:1c:3c:1d:66:f8:b4:e2:66:38:4b:2c:06:58:52:
                    d7:ae:71:2c:ea:58:b1:62:3d:63:7c:02:ab:c5:66:
                    73:2b:b0:cd:fc:5c:b5:8e:7f:df:ae:27:3c:34:9f:
                    f1:bc:ef:66:e6:b1:f6:b9:22:b9:b0:16:dd:ab:75:
                    16:8d:cb:63:3c:8a:a5:91:a9:5e:22:0a:77:af:0b:
                    ec:50:21:64:0c:e5:cf:3b:a9:06:8e:12:f8:25:22:
                    6c:7f:0f:3e:56:a0:6b:58:d1:be:ae:94:a7:f2:16:
                    43:ec:ac:6c:53:f7:98:94:bf:de:24:aa:ad:63:91:
                    57:cc:91:63:e9:65:6d:42:2c:5d:5c:8f:d9:b1:5b:
                    d6:9b:0d:c3:63:15:64:0b:5a:5b:f7:51:43:5d:79:
                    11:bd:c6:7c:c3:f4:c9:8a:83:af:84:8b:5b:57:18:
                    e6:38:29:db:68:a2:a4:48:e7:36:b8:b0:29:13:18:
                    b8:d6:88:ea:1d:f6:6a:97:35:41:69:62:d5:f2:b7:
                    99:37:e0:fc:0a:76:7d:1b:bc:10:75:a4:f0:8f:ff:
                    21:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:88:69:38:10:AF:FB:94:4A:3D:41:5E:36:2A:DB:D4:0A:C0:52:CF
            X509v3 Authority Key Identifier:
                keyid:F5:ED:91:BC:6A:AC:4B:F6:F9:37:47:B8:D5:39:93:0D:9C:0C:02:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E558E/8AD037A48CEF11F091627E7CDAE4EC9C/9e2RvGqsS_b5N0e41TmTDZwMAis.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9e2RvGqsS_b5N0e41TmTDZwMAis.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E558E/8AD037A48CEF11F091627E7CDAE4EC9C/9e2RvGqsS_b5N0e41TmTDZwMAis.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:50:52:8a:19:48:93:78:20:67:7f:c6:2f:d7:d8:e1:09:9c:
         9c:6f:73:2f:8a:95:15:18:2a:4a:2a:52:4a:f7:1b:3d:f4:04:
         1f:13:6c:7b:81:12:4d:9b:d9:78:e7:d2:d6:8b:4a:1a:5d:2f:
         cd:81:0d:b0:da:a8:67:13:63:c8:08:7f:99:83:ab:6f:3b:b1:
         a3:a8:a7:91:28:28:fb:db:2b:04:17:29:45:fa:63:f9:23:2b:
         d8:e2:70:cd:6e:85:db:25:73:50:e9:88:ea:c3:6b:28:b9:74:
         5a:a4:d4:57:b8:b3:36:3d:1d:32:06:9a:71:1c:61:28:a3:3f:
         6b:40:ac:3f:19:49:b0:aa:7f:e5:50:e4:2d:1c:d2:80:9b:ac:
         2f:f6:1a:0b:07:14:97:08:b5:e5:08:25:08:24:5f:6b:7e:f3:
         c4:0a:c4:4e:0a:c4:07:b4:c2:be:02:d2:0b:87:30:d0:1f:61:
         8e:70:a5:fa:3c:f0:dc:b5:78:ea:ec:a8:3c:20:7f:98:40:9f:
         19:c1:5d:00:d9:f8:25:ff:fa:6a:e6:45:ca:ec:46:7c:45:05:
         29:08:6d:63:16:1b:ab:43:38:cb:ce:83:79:de:ce:49:e1:dc:
         4f:7d:6a:9e:49:0a:55:20:11:cd:c7:c1:57:d5:58:bc:2f:97:
         d4:1f:fc:24
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAMowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RTU1OEVBRjExMC8GA1UEBRMoRjVFRDkxQkM2QUFDNEJGNkY5Mzc0N0I4RDUzOTkz
MEQ5QzBDMDIyQjAeFw0yNjAzMjUwNjExMjFaFw0yNjAzMjcwNjExMjFaMBgxFjAU
BgNVBAMTDTY5YzM3YzhhLWQyYjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDAkdHYE43OMIOW1Ma3rbrTi0cQqdb5yAbjdeigAAP5gV4Rk4oTFF+a2KWW
rvIcPB1m+LTiZjhLLAZYUteucSzqWLFiPWN8AqvFZnMrsM38XLWOf9+uJzw0n/G8
72bmsfa5IrmwFt2rdRaNy2M8iqWRqV4iCnevC+xQIWQM5c87qQaOEvglImx/Dz5W
oGtY0b6ulKfyFkPsrGxT95iUv94kqq1jkVfMkWPpZW1CLF1cj9mxW9abDcNjFWQL
Wlv3UUNdeRG9xnzD9MmKg6+Ei1tXGOY4KdtooqRI5za4sCkTGLjWiOod9mqXNUFp
YtXyt5k34PwKdn0bvBB1pPCP/yGtAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU1ohp
OBCv+5RKPUFeNirb1ArAUs8wHwYDVR0jBBgwFoAU9e2RvGqsS/b5N0e41TmTDZwM
AiswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkU1NThFLzhBRDAzN0E0OENFRjExRjA5MTYyN0U3Q0RBRTRFQzlDLzllMlJ2
R3FzU19iNU4wZTQxVG1URFp3TUFpcy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzllMlJ2R3FzU19iNU4wZTQxVG1URFp3TUFpcy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RTU1OEUvOEFEMDM3QTQ4Q0VGMTFGMDkxNjI3RTdDREFF
NEVDOUMvOWUyUnZHcXNTX2I1TjBlNDFUbVREWndNQWlzLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQArUFKKGUiTeCBnf8Yv19jhCZycb3Mv
ipUVGCpKKlJK9xs99AQfE2x7gRJNm9l459LWi0oaXS/NgQ2w2qhnE2PICH+Zg6tv
O7GjqKeRKCj72ysEFylF+mP5IyvY4nDNboXbJXNQ6Yjqw2souXRapNRXuLM2PR0y
BppxHGEooz9rQKw/GUmwqn/lUOQtHNKAm6wv9hoLBxSXCLXlCCUIJF9rfvPECsRO
CsQHtMK+AtILhzDQH2GOcKX6PPDctXjq7Kg8IH+YQJ8ZwV0A2fgl//pq5kXK7EZ8
RQUpCG1jFhurQzjLzoN53s5J4dxPfWqeSQpVIBHNx8FX1Vi8L5fUH/wk
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:29:25 2026 by rpki-client