Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E8DA8/4C970B5E495C11ED9E7604E8F1222468/Po64WOYVOSGtsL9fC8lbTQbHw-8.mft
File:                     Po64WOYVOSGtsL9fC8lbTQbHw-8.mft (raw, json)
Hash identifier:          zQx9Y65QKxyOTE7o40bvJTJgRGqP0YdB+4dL+q4HmtA=
Subject key identifier:   73:DF:4B:40:20:91:2F:54:DC:F9:AB:46:7A:6A:A2:F7:E8:51:1D:EB
Authority key identifier: 3E:8E:B8:58:E6:15:39:21:AD:B0:BF:5F:0B:C9:5B:4D:06:C7:C3:EF
Certificate issuer:       /CN=F36E8DA8AF/serialNumber=3E8EB858E6153921ADB0BF5F0BC95B4D06C7C3EF
Certificate serial:       051B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Po64WOYVOSGtsL9fC8lbTQbHw-8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E8DA8/4C970B5E495C11ED9E7604E8F1222468/Po64WOYVOSGtsL9fC8lbTQbHw-8.mft
Manifest number:          0519
Signing time:             Thu 26 Mar 2026 03:32:47 +0000
Manifest this update:     Thu 26 Mar 2026 03:32:45 +0000
Manifest next update:     Sat 28 Mar 2026 03:32:45 +0000
Files and hashes:         1: Po64WOYVOSGtsL9fC8lbTQbHw-8.crl (hash: bFsDv35yDgVi0wJWw86QY4WD9/WiZsH+RiZHmGFf7f0=)
                          2: CC3720D6188111F197F8BFABDAE4EC9C.roa (hash: +QgPl8TD1nfFzmVUj7KB6S1al9ZfPHgMAGHnCFB4BHU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E8DA8/4C970B5E495C11ED9E7604E8F1222468/Po64WOYVOSGtsL9fC8lbTQbHw-8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E8DA8/4C970B5E495C11ED9E7604E8F1222468/Po64WOYVOSGtsL9fC8lbTQbHw-8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Po64WOYVOSGtsL9fC8lbTQbHw-8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1307 (0x51b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E8DA8AF, serialNumber=3E8EB858E6153921ADB0BF5F0BC95B4D06C7C3EF
        Validity
            Not Before: Mar 26 03:32:45 2026 GMT
            Not After : Mar 28 03:32:45 2026 GMT
        Subject: CN=69c4a8de-b3e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ae:81:e9:55:64:e3:d9:d3:2b:7b:f1:47:6a:
                    89:3c:37:80:dd:5a:25:57:1e:74:22:df:82:ac:be:
                    d5:78:8a:44:c8:48:a5:db:80:3e:f4:ce:e8:9d:07:
                    9b:ee:e8:b1:d2:97:a7:36:0c:0b:7b:70:e3:dc:68:
                    7f:1c:33:b4:21:6a:44:60:2a:21:a8:c2:9d:21:23:
                    63:3a:c4:e5:cc:92:eb:12:c4:8d:81:22:46:94:35:
                    8f:0f:2a:cb:60:c8:1e:c0:5b:92:05:06:4a:f4:2a:
                    3a:b2:a0:29:60:85:d0:87:68:e3:8d:ea:9d:23:f4:
                    f3:45:a1:a8:a2:94:10:13:f7:c7:7b:ac:57:d2:27:
                    b5:87:07:e0:ea:53:c2:35:82:cb:f9:72:1a:95:fa:
                    9c:88:94:c4:be:e3:0b:cd:cf:a1:66:ae:fb:22:ee:
                    a2:db:6c:b9:8d:c6:63:b8:8f:c4:92:a0:67:47:67:
                    f1:41:c3:e2:42:98:b3:7b:27:f7:61:a7:85:74:3d:
                    eb:e4:10:5f:e3:3b:df:12:1b:4a:4c:5f:e9:12:ab:
                    47:aa:85:65:12:c2:54:0b:fc:be:57:74:8a:f7:8f:
                    5e:ee:12:71:9e:f4:28:8d:4e:07:75:7d:29:5f:c7:
                    e3:6a:84:76:d7:7d:f4:b3:df:fa:ba:99:ac:bf:54:
                    34:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:DF:4B:40:20:91:2F:54:DC:F9:AB:46:7A:6A:A2:F7:E8:51:1D:EB
            X509v3 Authority Key Identifier:
                keyid:3E:8E:B8:58:E6:15:39:21:AD:B0:BF:5F:0B:C9:5B:4D:06:C7:C3:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E8DA8/4C970B5E495C11ED9E7604E8F1222468/Po64WOYVOSGtsL9fC8lbTQbHw-8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Po64WOYVOSGtsL9fC8lbTQbHw-8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E8DA8/4C970B5E495C11ED9E7604E8F1222468/Po64WOYVOSGtsL9fC8lbTQbHw-8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:4f:1a:3a:dc:9a:db:84:32:5a:03:df:18:81:5f:8b:f1:b4:
         45:dc:fa:d0:64:8d:d0:b4:ab:07:2e:cb:18:9b:48:1e:3c:f1:
         41:2b:53:6d:5e:d0:b4:a2:6f:80:c6:74:cc:8e:b5:f9:20:98:
         e1:61:ca:84:1b:fd:98:ab:c7:50:e7:06:c7:25:e6:ff:dd:ef:
         49:c7:c9:5a:e1:43:d6:87:d4:3c:41:cc:a1:dc:88:96:3e:88:
         9b:ea:43:bc:94:77:77:a4:80:55:fe:fb:82:54:2c:e0:ed:7f:
         6f:21:96:2e:8c:56:20:8c:9d:20:f2:bb:7f:2c:a7:f0:c7:c2:
         06:56:ef:e3:96:6a:6c:e3:16:0c:3b:22:c3:ee:6e:a7:2e:3d:
         27:93:5a:1c:e3:7d:59:18:5c:55:58:41:e6:5b:51:a4:bf:de:
         d5:89:04:d1:29:c3:25:72:09:1e:e2:13:ed:95:04:0c:fa:e8:
         a7:c6:33:71:5f:37:1b:d3:c9:a2:98:af:d8:31:2e:0e:82:ac:
         15:76:c2:a1:27:36:c3:2b:97:3e:70:5b:60:6f:dc:f2:7b:dd:
         ed:7b:ba:60:46:89:78:57:6e:83:ad:e9:00:bf:43:b5:d9:e4:
         a2:ea:38:b2:a6:86:64:3c:cf:7d:c6:86:7b:38:df:39:75:f7:
         80:e2:e2:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:21:08 2026 by rpki-client