Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F0522/0F530264279411EDB2C767F3F1222468/aFg2dgHVM90hnMnjOq3p4BLA070.mft
File:                     aFg2dgHVM90hnMnjOq3p4BLA070.mft (raw, json)
Hash identifier:          kvLwP6TOwmECKd/JDXgDUgcmeGQBYbOQsZk8ZaZpmYE=
Subject key identifier:   24:B5:A3:C8:61:AC:54:0C:E6:85:A6:0E:1D:8E:E2:96:6A:3F:D4:31
Authority key identifier: 68:58:36:76:01:D5:33:DD:21:9C:C9:E3:3A:AD:E9:E0:12:C0:D3:BD
Certificate issuer:       /CN=F36F0522AF/serialNumber=6858367601D533DD219CC9E33AADE9E012C0D3BD
Certificate serial:       0545
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/aFg2dgHVM90hnMnjOq3p4BLA070.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F0522/0F530264279411EDB2C767F3F1222468/aFg2dgHVM90hnMnjOq3p4BLA070.mft
Manifest number:          0543
Signing time:             Thu 26 Mar 2026 03:24:33 +0000
Manifest this update:     Thu 26 Mar 2026 03:24:32 +0000
Manifest next update:     Sat 28 Mar 2026 03:24:32 +0000
Files and hashes:         1: aFg2dgHVM90hnMnjOq3p4BLA070.crl (hash: HrIb+wdSXVDzVzqWEDX7B1ubYIYAXoQGclc46nO+RN8=)
                          2: F8655580279C11ED8AC3E690F1222468.roa (hash: x+l5je5hrDHkIdSRJfbUPuD6coe8HjIrW/1dz5GPwZg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F0522/0F530264279411EDB2C767F3F1222468/aFg2dgHVM90hnMnjOq3p4BLA070.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F0522/0F530264279411EDB2C767F3F1222468/aFg2dgHVM90hnMnjOq3p4BLA070.mft
                          rsync://rpki.afrinic.net/repository/afrinic/aFg2dgHVM90hnMnjOq3p4BLA070.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1349 (0x545)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F0522AF, serialNumber=6858367601D533DD219CC9E33AADE9E012C0D3BD
        Validity
            Not Before: Mar 26 03:24:32 2026 GMT
            Not After : Mar 28 03:24:32 2026 GMT
        Subject: CN=69c4a6f1-f971
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:71:fd:24:9a:86:33:b8:ca:be:70:2c:9e:98:
                    eb:c0:0d:e9:01:51:f9:85:df:00:68:71:00:89:a1:
                    91:31:89:1b:c2:a0:99:76:a8:db:d0:80:e6:74:dc:
                    9f:00:35:db:7d:df:f4:82:48:f4:d2:dd:0a:90:4a:
                    2f:bc:67:dc:ec:7c:88:d5:eb:4d:f3:52:46:e5:96:
                    a2:9b:76:91:f2:ea:f1:91:22:ac:ba:22:91:65:8a:
                    e5:cd:75:b9:bb:6b:98:7c:7e:17:4f:3c:81:97:61:
                    44:3c:55:40:98:11:a0:31:ae:f8:69:ae:25:8f:40:
                    02:a2:d3:9b:6f:c9:c4:6c:4b:23:12:5f:cd:5d:38:
                    7a:f7:01:3f:a3:80:e2:42:1b:4b:e7:e6:fa:60:07:
                    0f:a2:d9:1c:bc:ff:f0:b7:f3:0b:0e:91:59:2d:6f:
                    ed:11:9d:40:45:6b:b9:4e:53:2c:13:b8:cd:7e:79:
                    2f:f4:db:2a:46:d8:87:9d:5f:3e:78:19:e3:0c:3f:
                    fc:90:ce:d7:3e:04:1c:3b:3b:47:c9:b1:2a:f1:6b:
                    22:7b:55:87:bc:c0:41:30:73:51:0b:68:01:8b:9d:
                    e9:d4:c3:73:56:2c:43:a2:7c:20:f7:56:56:e6:29:
                    e6:66:ee:2b:07:f3:da:78:b7:4d:ff:61:67:0b:a6:
                    38:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:B5:A3:C8:61:AC:54:0C:E6:85:A6:0E:1D:8E:E2:96:6A:3F:D4:31
            X509v3 Authority Key Identifier:
                keyid:68:58:36:76:01:D5:33:DD:21:9C:C9:E3:3A:AD:E9:E0:12:C0:D3:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0522/0F530264279411EDB2C767F3F1222468/aFg2dgHVM90hnMnjOq3p4BLA070.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/aFg2dgHVM90hnMnjOq3p4BLA070.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0522/0F530264279411EDB2C767F3F1222468/aFg2dgHVM90hnMnjOq3p4BLA070.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:31:2b:5b:7f:b1:c1:21:b2:e7:52:05:71:6c:49:cc:b5:04:
         ff:5e:42:1a:5d:bf:04:f9:3b:fb:08:50:c4:16:25:53:30:14:
         95:c0:55:6e:76:49:a5:60:d1:ae:22:03:27:4c:64:19:fe:47:
         ee:dc:8c:1f:05:95:ee:01:1d:35:6f:4a:85:f2:b0:22:7e:3c:
         f1:19:56:09:52:e4:0c:a2:8a:67:46:2a:18:24:91:23:c0:38:
         a1:4b:ea:89:ec:cd:d2:93:b3:1f:9b:b5:3c:55:ad:d2:7a:5d:
         1d:76:57:f6:68:bf:11:3a:0d:14:3f:1e:9a:18:76:58:43:2a:
         33:40:ba:8f:0b:0a:95:21:30:9a:a7:3d:d6:5e:a3:66:6a:a9:
         d5:5c:23:46:59:05:2f:8c:29:69:4b:4d:d7:46:96:a3:82:71:
         be:cd:09:d9:5b:9a:fa:3c:e9:37:1e:c4:fd:da:51:a3:72:8e:
         2e:25:92:cf:e7:e7:54:70:7c:67:61:c2:0d:5e:95:aa:6c:0e:
         d8:be:fb:fa:4f:63:10:d4:a0:0b:93:b0:eb:1e:92:aa:a3:79:
         1c:5d:f4:b2:07:a9:3f:66:93:7b:57:82:92:ef:73:e7:80:ab:
         38:31:bb:a7:ff:e0:1c:84:6c:aa:55:96:9a:78:bc:9c:0b:a5:
         a4:b5:ab:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:52:44 2026 by rpki-client