Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E8936/7CC16FAE90EC11EDB3D1D3F7F1222468/PSrzU0Rl4_rsqVu9Ix9yPIoG9dE.mft
File:                     PSrzU0Rl4_rsqVu9Ix9yPIoG9dE.mft (raw, json)
Hash identifier:          eKYspzD6+54WFdsxc30kFRarSJozT6XCdlZ6iPoMJIE=
Subject key identifier:   A3:50:EF:1C:B5:FA:C5:93:EF:F8:D9:86:3B:82:7A:72:C8:B1:97:DF
Authority key identifier: 3D:2A:F3:53:44:65:E3:FA:EC:A9:5B:BD:23:1F:72:3C:8A:06:F5:D1
Certificate issuer:       /CN=F36E8936AF/serialNumber=3D2AF3534465E3FAECA95BBD231F723C8A06F5D1
Certificate serial:       04BB
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PSrzU0Rl4_rsqVu9Ix9yPIoG9dE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E8936/7CC16FAE90EC11EDB3D1D3F7F1222468/PSrzU0Rl4_rsqVu9Ix9yPIoG9dE.mft
Manifest number:          04BA
Signing time:             Thu 26 Mar 2026 03:41:45 +0000
Manifest this update:     Thu 26 Mar 2026 03:41:44 +0000
Manifest next update:     Sat 28 Mar 2026 03:41:44 +0000
Files and hashes:         1: PSrzU0Rl4_rsqVu9Ix9yPIoG9dE.crl (hash: ftwC6PH9+03Y49PFRGs0SzY1VZRJS0unin49WNpR3I8=)
                          2: DFF1E77490ED11ED942A0B7DF1222468.roa (hash: 9WA9paanDgVyhx1/5/CO95xKP5kF7OW8npO/gngIuxQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E8936/7CC16FAE90EC11EDB3D1D3F7F1222468/PSrzU0Rl4_rsqVu9Ix9yPIoG9dE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E8936/7CC16FAE90EC11EDB3D1D3F7F1222468/PSrzU0Rl4_rsqVu9Ix9yPIoG9dE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PSrzU0Rl4_rsqVu9Ix9yPIoG9dE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1211 (0x4bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E8936AF, serialNumber=3D2AF3534465E3FAECA95BBD231F723C8A06F5D1
        Validity
            Not Before: Mar 26 03:41:44 2026 GMT
            Not After : Mar 28 03:41:44 2026 GMT
        Subject: CN=69c4aaf8-aa11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:9c:fb:b7:2b:a3:a4:ff:07:16:c0:5a:ac:ef:
                    f7:76:7f:2f:12:8c:99:5a:2a:6a:51:f5:06:88:cb:
                    a2:98:cd:9b:bd:18:83:d9:fd:85:73:af:f8:e9:16:
                    6f:10:dd:87:5d:aa:5e:33:5c:e3:1d:48:2b:62:11:
                    ad:e1:30:9c:94:11:62:9e:d3:8c:f1:60:6b:f8:d7:
                    fc:f4:ea:f5:bb:c6:14:63:eb:53:60:ab:80:e3:a6:
                    30:06:85:b3:e9:ba:82:a6:af:bf:b1:b2:f4:56:75:
                    3d:51:d8:8b:5d:36:98:37:b8:57:98:f9:52:d5:20:
                    11:a7:f8:60:6f:c7:f7:46:8a:a0:17:cf:95:37:af:
                    41:dc:cb:b2:cb:f2:38:17:48:6f:7d:97:b3:ab:7d:
                    62:fc:7f:09:b9:22:cd:a6:d8:06:83:56:c1:27:ef:
                    e7:85:b2:0b:7a:34:14:4b:ce:31:35:3b:bb:f6:a5:
                    11:9a:d4:1e:18:0e:d1:57:ac:88:34:fc:b6:1c:60:
                    79:f6:53:a0:dd:2e:d0:61:4c:7a:50:a1:53:bd:36:
                    00:2c:47:c2:65:d2:d6:77:a3:be:77:82:ec:fe:ba:
                    42:9a:b6:bb:52:c9:39:49:8c:d9:fc:85:7c:db:5a:
                    de:4d:96:61:ce:1f:65:80:d5:b1:4e:0c:2d:80:d1:
                    4c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:50:EF:1C:B5:FA:C5:93:EF:F8:D9:86:3B:82:7A:72:C8:B1:97:DF
            X509v3 Authority Key Identifier:
                keyid:3D:2A:F3:53:44:65:E3:FA:EC:A9:5B:BD:23:1F:72:3C:8A:06:F5:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E8936/7CC16FAE90EC11EDB3D1D3F7F1222468/PSrzU0Rl4_rsqVu9Ix9yPIoG9dE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PSrzU0Rl4_rsqVu9Ix9yPIoG9dE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E8936/7CC16FAE90EC11EDB3D1D3F7F1222468/PSrzU0Rl4_rsqVu9Ix9yPIoG9dE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:dc:93:06:fe:d4:7e:10:41:10:a5:b7:3e:e4:da:5b:7b:e6:
         60:9f:2c:45:d6:b0:96:bc:70:e6:55:30:5e:70:03:9b:b1:64:
         cf:e6:14:52:cc:8a:19:b1:47:c7:72:47:cd:ed:fc:df:2d:77:
         50:f6:06:db:e1:e3:52:1f:5f:7a:52:9c:55:2f:cd:36:8f:aa:
         b5:22:59:41:fb:6d:7c:45:b1:e2:0b:9d:58:0c:4b:d0:58:2c:
         3c:52:18:c2:6c:ed:44:00:f6:39:f3:d6:7e:97:fe:07:37:de:
         8c:cb:71:bd:38:81:c9:3d:6e:17:8c:a9:f9:8b:7d:2b:16:e5:
         48:25:98:d0:25:9d:21:2a:1d:20:d6:17:14:98:62:e1:a1:6f:
         86:d6:56:e4:72:bd:e1:2a:41:68:10:df:e3:ed:b4:fe:90:22:
         ab:54:73:2e:80:84:de:ce:8b:2d:07:17:38:9f:8d:69:12:71:
         a0:99:8b:ca:2a:a2:c9:4d:64:3b:34:3a:b4:50:e4:6b:a1:75:
         5d:33:d9:f5:a7:0f:29:46:71:97:e8:4d:0e:73:fe:57:53:96:
         72:ad:3a:44:4d:31:ba:df:13:ad:ed:bf:7a:97:16:bd:02:71:
         fd:c7:55:85:37:67:02:37:f7:18:ff:dc:1b:9d:10:f7:99:41:
         c2:f5:e9:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:49:42 2026 by rpki-client