Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F3412/E82C776A177E11EA9CA7BC0EF8AEA228/k4vok1GoGkLfhHvzkxNy0JgwREY.mft
File:                     k4vok1GoGkLfhHvzkxNy0JgwREY.mft (raw, json)
Hash identifier:          jl5LJIbdpf6WR/QfmmGn1vCNx4HGz/QGWcQDoUmUiyw=
Subject key identifier:   20:76:1D:13:52:6C:B5:D1:9A:C1:4F:9A:56:46:C3:E5:FA:E5:4A:02
Authority key identifier: 93:8B:E8:93:51:A8:1A:42:DF:84:7B:F3:93:13:72:D0:98:30:44:46
Certificate issuer:       /CN=F36F3412AF/serialNumber=938BE89351A81A42DF847BF3931372D098304446
Certificate serial:       094C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/k4vok1GoGkLfhHvzkxNy0JgwREY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F3412/E82C776A177E11EA9CA7BC0EF8AEA228/k4vok1GoGkLfhHvzkxNy0JgwREY.mft
Manifest number:          0944
Signing time:             Thu 26 Mar 2026 01:52:06 +0000
Manifest this update:     Thu 26 Mar 2026 01:52:05 +0000
Manifest next update:     Sat 28 Mar 2026 01:52:05 +0000
Files and hashes:         1: k4vok1GoGkLfhHvzkxNy0JgwREY.crl (hash: jVunNII5rV2X3EPAS9UbJqH9plQt6SARWhovw1fn+Ws=)
                          2: F9B24804FDF611EDB9858F624AD9E6FC.roa (hash: XgiYHOYx4wcOXrZza9zqvfH5aFmrwXDAfxqyTM9D+GI=)
                          3: 3455CE3C6B3911ED8B33D1C3F1222468.roa (hash: toOai8ZBR3vTvdHeg3LaLL6gpVJazukKbGn3v/cuk0k=)
                          4: 4C042A44496311ED9930A0F9F1222468.roa (hash: e9ujQQYc0OEqAyhghA9cLn0dfJy3UKXs4mNrpCrPXck=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F3412/E82C776A177E11EA9CA7BC0EF8AEA228/k4vok1GoGkLfhHvzkxNy0JgwREY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F3412/E82C776A177E11EA9CA7BC0EF8AEA228/k4vok1GoGkLfhHvzkxNy0JgwREY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/k4vok1GoGkLfhHvzkxNy0JgwREY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2380 (0x94c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F3412AF, serialNumber=938BE89351A81A42DF847BF3931372D098304446
        Validity
            Not Before: Mar 26 01:52:05 2026 GMT
            Not After : Mar 28 01:52:05 2026 GMT
        Subject: CN=69c49146-4f4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4c:58:14:3a:f5:51:1a:2a:16:e7:0c:13:64:
                    c7:0b:e2:74:99:c1:06:72:bf:a1:2e:fe:2a:fb:92:
                    e5:e8:59:53:ed:4d:a2:ff:53:5b:63:9f:69:54:6c:
                    f4:7c:19:f0:7e:5c:cd:e9:65:37:78:40:8f:91:95:
                    10:da:17:d0:f7:cb:00:2b:bb:74:3a:fb:cc:88:98:
                    44:9e:57:49:db:09:1b:44:59:41:e1:cc:4c:f7:2d:
                    06:cd:b0:ac:a9:d3:d4:75:5b:c4:85:ca:e1:83:ee:
                    9e:1b:64:86:ee:25:fa:b6:f8:37:46:77:a5:9c:8b:
                    1a:4b:2c:7f:30:85:8e:cb:d3:33:fe:cf:77:69:72:
                    dc:27:60:69:5d:39:e4:ab:30:93:9a:e0:cf:30:52:
                    a8:79:10:9c:8b:02:50:b2:48:39:66:80:e2:26:2e:
                    71:8d:5c:dd:26:27:26:42:49:05:9c:0d:34:84:02:
                    c0:9a:a9:02:c3:32:25:85:ce:63:7b:30:9e:de:44:
                    7c:bf:c7:f6:c2:71:ca:a4:b2:51:50:ee:39:7c:b3:
                    2e:69:9a:b8:47:dc:1f:90:c0:25:83:f0:96:a1:c0:
                    4f:2e:34:37:2f:80:73:f3:90:36:6a:8a:0d:2e:00:
                    4a:d9:79:1e:1f:ac:4d:1c:a6:c3:a2:80:13:d3:b0:
                    c7:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:76:1D:13:52:6C:B5:D1:9A:C1:4F:9A:56:46:C3:E5:FA:E5:4A:02
            X509v3 Authority Key Identifier:
                keyid:93:8B:E8:93:51:A8:1A:42:DF:84:7B:F3:93:13:72:D0:98:30:44:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F3412/E82C776A177E11EA9CA7BC0EF8AEA228/k4vok1GoGkLfhHvzkxNy0JgwREY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/k4vok1GoGkLfhHvzkxNy0JgwREY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F3412/E82C776A177E11EA9CA7BC0EF8AEA228/k4vok1GoGkLfhHvzkxNy0JgwREY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:79:af:65:c8:07:6d:67:f7:bb:27:71:8c:1d:5a:4d:bb:cd:
         5f:95:e7:b0:a1:80:6a:cc:85:c5:d4:0c:e4:db:21:ae:5e:a0:
         dc:df:f4:46:77:c0:11:b0:a6:09:f8:25:76:4b:88:3a:74:b1:
         2e:d7:df:39:20:1c:22:a8:4d:13:a1:a7:9c:37:36:be:95:04:
         ca:05:be:78:94:b6:6b:18:ab:c1:a2:db:bc:56:22:1a:8f:14:
         50:e8:c4:9b:39:a7:0d:c6:bd:3d:03:1c:09:a8:b8:54:d3:08:
         48:9b:8b:b1:91:75:ee:d2:e0:5c:05:fd:83:35:56:80:86:8c:
         87:ac:67:da:a4:29:d2:c3:ed:6a:ba:a4:74:75:1c:f8:49:91:
         9e:d4:05:4f:33:e4:ad:f7:5a:78:99:ba:c9:70:aa:eb:1a:83:
         8a:ed:e3:b3:88:ee:cf:06:ea:61:66:47:4a:7a:0b:df:38:22:
         8b:7f:73:71:8e:9e:72:dc:7f:16:c0:b7:d2:e3:aa:c1:03:f6:
         11:95:4b:4b:a5:bc:d3:e8:93:74:b4:4b:c5:47:b8:88:4f:b3:
         8b:45:10:06:fd:eb:9d:4d:e9:a9:0e:56:16:97:ba:3f:a0:44:
         ff:01:6d:06:1c:3a:45:3c:74:5e:1b:f4:ce:d0:b6:a3:01:16:
         93:58:58:a1
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCUwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RjM0MTJBRjExMC8GA1UEBRMoOTM4QkU4OTM1MUE4MUE0MkRGODQ3QkYzOTMxMzcy
RDA5ODMwNDQ0NjAeFw0yNjAzMjYwMTUyMDVaFw0yNjAzMjgwMTUyMDVaMBgxFjAU
BgNVBAMTDTY5YzQ5MTQ2LTRmNGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDATFgUOvVRGioW5wwTZMcL4nSZwQZyv6Eu/ir7kuXoWVPtTaL/U1tjn2lU
bPR8GfB+XM3pZTd4QI+RlRDaF9D3ywAru3Q6+8yImESeV0nbCRtEWUHhzEz3LQbN
sKyp09R1W8SFyuGD7p4bZIbuJfq2+DdGd6WcixpLLH8whY7L0zP+z3dpctwnYGld
OeSrMJOa4M8wUqh5EJyLAlCySDlmgOImLnGNXN0mJyZCSQWcDTSEAsCaqQLDMiWF
zmN7MJ7eRHy/x/bCccqkslFQ7jl8sy5pmrhH3B+QwCWD8JahwE8uNDcvgHPzkDZq
ig0uAErZeR4frE0cpsOigBPTsMcXAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUIHYd
E1JstdGawU+aVkbD5frlSgIwHwYDVR0jBBgwFoAUk4vok1GoGkLfhHvzkxNy0Jgw
REYwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkYzNDEyL0U4MkM3NzZBMTc3RTExRUE5Q0E3QkMwRUY4QUVBMjI4L2s0dm9r
MUdvR2tMZmhIdnpreE55MEpnd1JFWS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2s0dm9rMUdvR2tMZmhIdnpreE55MEpnd1JFWS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RjM0MTIvRTgyQzc3NkExNzdFMTFFQTlDQTdCQzBFRjhB
RUEyMjgvazR2b2sxR29Ha0xmaEh2emt4TnkwSmd3UkVZLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQANea9lyAdtZ/e7J3GMHVpNu81fleew
oYBqzIXF1Azk2yGuXqDc3/RGd8ARsKYJ+CV2S4g6dLEu1985IBwiqE0ToaecNza+
lQTKBb54lLZrGKvBotu8ViIajxRQ6MSbOacNxr09AxwJqLhU0whIm4uxkXXu0uBc
Bf2DNVaAhoyHrGfapCnSw+1quqR0dRz4SZGe1AVPM+St91p4mbrJcKrrGoOK7eOz
iO7PBuphZkdKegvfOCKLf3Nxjp5y3H8WwLfS46rBA/YRlUtLpbzT6JN0tEvFR7iI
T7OLRRAG/eudTempDlYWl7o/oET/AW0GHDpFPHReG/TO0LajARaTWFih
-----END CERTIFICATE-----
Generated at Thu Mar 26 23:07:41 2026 by rpki-client