Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F387A/1CA710B0C4D511EE99F0246A775412E6/JIykhYdpP_HNXYNmIkrKDSuXyjs.mft
File:                     JIykhYdpP_HNXYNmIkrKDSuXyjs.mft (raw, json)
Hash identifier:          umgl+09Mc9RbBF0KKd5LMvNK1yg4rRqd2C7+QA37J5Q=
Subject key identifier:   38:3B:69:FC:C1:38:EF:DE:16:C7:A0:1A:44:C2:7A:67:5F:DA:5D:DA
Authority key identifier: 24:8C:A4:85:87:69:3F:F1:CD:5D:83:66:22:4A:CA:0D:2B:97:CA:3B
Certificate issuer:       /CN=F36F387AAF/serialNumber=248CA48587693FF1CD5D8366224ACA0D2B97CA3B
Certificate serial:       0325
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JIykhYdpP_HNXYNmIkrKDSuXyjs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F387A/1CA710B0C4D511EE99F0246A775412E6/JIykhYdpP_HNXYNmIkrKDSuXyjs.mft
Manifest number:          0323
Signing time:             Thu 26 Mar 2026 04:45:47 +0000
Manifest this update:     Thu 26 Mar 2026 04:45:46 +0000
Manifest next update:     Sat 28 Mar 2026 04:45:46 +0000
Files and hashes:         1: JIykhYdpP_HNXYNmIkrKDSuXyjs.crl (hash: F0kvb3SFugq5XwoQivdT5nFn2uoEScAt9HGxCr8vu0A=)
                          2: 3FF210A8625711F08B604AD6DAE4EC9C.roa (hash: zNyQHQEUKkigM9g+wWCSuCKgDN1DQE+TD5fh7VtDwxw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F387A/1CA710B0C4D511EE99F0246A775412E6/JIykhYdpP_HNXYNmIkrKDSuXyjs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F387A/1CA710B0C4D511EE99F0246A775412E6/JIykhYdpP_HNXYNmIkrKDSuXyjs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JIykhYdpP_HNXYNmIkrKDSuXyjs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 805 (0x325)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F387AAF, serialNumber=248CA48587693FF1CD5D8366224ACA0D2B97CA3B
        Validity
            Not Before: Mar 26 04:45:46 2026 GMT
            Not After : Mar 28 04:45:46 2026 GMT
        Subject: CN=69c4b9fb-aa66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:7c:a3:88:54:55:ce:2c:7a:f3:98:ba:c7:94:
                    f6:1b:7f:6a:2f:91:93:16:4d:cc:29:0e:74:a5:9d:
                    d1:02:f0:d4:b8:20:7e:24:be:96:85:32:9a:3d:20:
                    96:ef:3a:75:71:8b:35:e1:f0:db:55:98:ef:7a:a9:
                    45:30:2f:f8:2c:53:27:43:80:9c:52:6f:d4:36:fc:
                    a3:98:b1:38:8a:ec:99:81:c0:ee:f0:5b:e8:65:f4:
                    5e:f6:58:bc:e7:44:55:c6:29:45:64:05:e7:fb:f7:
                    c0:f4:63:5e:0c:6b:55:c5:f4:ea:07:87:36:20:a2:
                    cd:5f:8f:ba:07:28:3b:35:67:8c:b4:1b:b5:d6:92:
                    7d:e9:61:8e:96:8d:a7:b5:86:df:ed:68:8f:79:49:
                    7d:b0:0e:8e:7f:23:ac:62:36:44:d0:0b:de:5b:86:
                    85:3f:a8:d9:02:9e:ff:38:8e:6c:ac:dc:06:85:df:
                    06:ae:97:a1:43:b1:c5:12:f6:2c:c3:ff:7f:05:75:
                    67:bc:f8:ed:96:22:8e:5e:94:18:1f:a1:9c:f8:c4:
                    7c:21:35:36:f3:27:68:2e:1c:b3:38:46:83:1d:2d:
                    3e:c4:1d:e9:f3:1b:33:b3:40:f5:c5:58:27:21:6e:
                    5d:32:ab:db:a4:64:08:a9:b1:cb:b1:5d:05:66:5f:
                    2f:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:3B:69:FC:C1:38:EF:DE:16:C7:A0:1A:44:C2:7A:67:5F:DA:5D:DA
            X509v3 Authority Key Identifier:
                keyid:24:8C:A4:85:87:69:3F:F1:CD:5D:83:66:22:4A:CA:0D:2B:97:CA:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F387A/1CA710B0C4D511EE99F0246A775412E6/JIykhYdpP_HNXYNmIkrKDSuXyjs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JIykhYdpP_HNXYNmIkrKDSuXyjs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F387A/1CA710B0C4D511EE99F0246A775412E6/JIykhYdpP_HNXYNmIkrKDSuXyjs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:d2:16:52:bd:68:0d:a2:2f:64:e5:e8:da:ea:14:a6:7d:45:
         aa:ff:82:e3:c2:4b:ef:dd:23:10:a4:8f:ff:6a:70:54:62:f5:
         9a:23:43:cc:aa:23:49:1e:df:34:c3:65:d7:5d:7f:25:45:9c:
         75:89:30:f9:d5:ef:a9:7d:ea:91:5f:03:27:34:15:24:14:cc:
         27:dc:c8:f0:47:bd:7d:99:d6:dc:bc:af:25:0f:02:e1:5d:13:
         3c:20:47:c1:2c:b1:76:97:d7:37:56:60:32:3b:03:53:75:50:
         52:4f:41:e9:a5:ce:01:13:55:c3:9e:f8:a2:01:79:21:94:90:
         49:4a:4e:f0:2d:4e:4e:e8:df:a7:8f:33:c5:51:e6:48:c7:5b:
         44:64:16:e2:70:9c:87:99:9b:b2:80:02:50:ba:b0:05:53:fd:
         07:39:b4:6f:3b:01:07:ab:c3:06:7e:d8:bb:16:d0:24:fa:a8:
         b6:88:6f:4d:ef:e1:fe:7d:ae:8a:e0:a9:d1:28:4b:e8:13:37:
         f8:c2:2e:c9:cd:3e:ae:64:a0:fa:3d:68:30:63:61:53:1a:cf:
         01:8c:95:8b:e9:51:f9:f4:4a:c3:a2:11:7c:3a:af:f4:31:d9:
         13:71:22:eb:98:56:9a:60:8f:c3:4d:1e:c4:b7:54:44:b2:70:
         09:3c:f9:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:33:39 2026 by rpki-client