Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F6E4A/9D594F7241A611EA88863E28F8AEA228/T-4SnQmrhQ2gOef1uyS2aZoPgXk.mft
File:                     T-4SnQmrhQ2gOef1uyS2aZoPgXk.mft (raw, json)
Hash identifier:          +iIhzHYsPBDau2cE7OpirMTn2URtQ5IpxMc1UjqOgyk=
Subject key identifier:   21:30:C3:01:0B:4B:07:C9:0D:01:F2:32:EC:E2:86:9C:FE:0C:09:A2
Authority key identifier: 4F:EE:12:9D:09:AB:85:0D:A0:39:E7:F5:BB:24:B6:69:9A:0F:81:79
Certificate issuer:       /CN=F36F6E4AAF/serialNumber=4FEE129D09AB850DA039E7F5BB24B6699A0F8179
Certificate serial:       0925
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/T-4SnQmrhQ2gOef1uyS2aZoPgXk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F6E4A/9D594F7241A611EA88863E28F8AEA228/T-4SnQmrhQ2gOef1uyS2aZoPgXk.mft
Manifest number:          0914
Signing time:             Thu 26 Mar 2026 01:53:05 +0000
Manifest this update:     Thu 26 Mar 2026 01:53:04 +0000
Manifest next update:     Sat 28 Mar 2026 01:53:04 +0000
Files and hashes:         1: T-4SnQmrhQ2gOef1uyS2aZoPgXk.crl (hash: XefdscSVlJJOiOi0AECrrIyVVSHAeNJLTtcDy1KUer0=)
                          2: D2CA8558427911EAA3FED044F8AEA228.roa (hash: wurkYmqla/v4WBGYx1KQBTG96SHI4XZxvbfOZjy6dDc=)
                          3: 63CD6D381C6F11F1A8701690DAE4EC9C.roa (hash: c9onQMQ9ZUC32jP7lmDEH4I1JLO7mXPuFSF2QEzOxqk=)
                          4: B6B99F861C6E11F18CC2268CDAE4EC9C.roa (hash: Nk9KcupgaFrT9HYjwhwayvcsckASnFKmSYP5X4ruEFg=)
                          5: FDA49C78427911EABA58F344F8AEA228.roa (hash: eNItvTIs3jbqReG8otIUPR5mjUnULKzx6gvlJCH+hbE=)
                          6: 582A85201C6E11F196474E8ADAE4EC9C.roa (hash: tXQNq5anGZuKI/N3ls0PiguA4/6L6XRyM0QYo8OFjRw=)
                          7: 41B6AD86469C11EA81469227F8AEA228.roa (hash: GFpsTEOd32IACxfCYv+4g0rk0Bgklgcuemi0F5TjBIo=)
                          8: C856574C41AB11EA9C27F52BF8AEA228.roa (hash: bz5TA1squK7Ifl9jqtLCRwvkOyW8Qa1kaJWgUXUsT5Y=)
                          9: 57CE8E244FFF11EF959DB964762E951A.roa (hash: fyxQpuVFjDxsdPdxESeE+9woq7cT+VNLSx/q/+d4MIo=)
                          10: F7DDD5EA1C6E11F19C8F3F8EDAE4EC9C.roa (hash: PW/BAXgHvih22srJgbVXfOqpna8bQSUwnKdkd55yiKw=)
                          11: 3281CE182B7211EEAF2893194AD9E6FC.roa (hash: fkff7v1iK+AxXqvd4C6nSAa4nFagy3GTQ4X7UfCbswc=)
                          12: FEE338541C6D11F196022388DAE4EC9C.roa (hash: LVUzPTIff1K9PHg6hyLX45CbcDuYQrRZVEGZDDm6Rkg=)
                          13: D3167F64BBA311EA84581016F8AEA228.roa (hash: olteyMOY4v7fnBH8LXpkJqIEF+laR8HIc07JsyM+o9Y=)
                          14: 482F6A4C583F11EDA5C92AB4F1222468.roa (hash: 1bNHg5hR2N1EwB0UNF89B2hLunHKeyd9Nx1pg6+rORw=)
                          15: 7576B97E4FFF11EF84A6EB64762E951A.roa (hash: 33ok2yqrTl57C64Sr4/sUY8EF0IDi0i5pKehUOrq0+s=)
                          16: 168D8CF6BBA411EA82D06016F8AEA228.roa (hash: GX7T680/ieOsGwBZtEWumw47ki7Ge95lGqYGrmNJnos=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F6E4A/9D594F7241A611EA88863E28F8AEA228/T-4SnQmrhQ2gOef1uyS2aZoPgXk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F6E4A/9D594F7241A611EA88863E28F8AEA228/T-4SnQmrhQ2gOef1uyS2aZoPgXk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/T-4SnQmrhQ2gOef1uyS2aZoPgXk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2341 (0x925)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F6E4AAF, serialNumber=4FEE129D09AB850DA039E7F5BB24B6699A0F8179
        Validity
            Not Before: Mar 26 01:53:04 2026 GMT
            Not After : Mar 28 01:53:04 2026 GMT
        Subject: CN=69c49181-73cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:44:b2:1c:4c:42:c2:b0:62:15:0d:57:e8:02:
                    ab:73:01:05:24:98:42:b1:37:36:d4:9d:0c:cb:38:
                    d3:20:89:8d:6a:2c:0a:f8:1a:fe:aa:90:db:a2:3b:
                    43:35:60:40:fb:e2:7d:25:de:b3:be:b0:d4:08:15:
                    14:dc:f0:e4:03:9d:98:c7:26:93:e1:55:d6:e9:1e:
                    4e:94:bd:d5:c4:fa:e1:a4:a6:3c:cd:cc:a1:e2:a0:
                    fc:6a:cb:a8:9c:16:ed:15:f3:cb:bc:ef:03:f1:93:
                    31:26:7e:a4:73:b2:1c:29:fe:5a:ae:3e:c9:10:e2:
                    1f:9f:4c:69:60:0d:67:14:e4:b5:ba:1b:d1:a8:d5:
                    84:b9:d1:18:f8:0e:02:8d:83:f2:3a:6f:af:70:2e:
                    b7:72:54:29:d8:6e:6a:d7:18:48:4d:63:35:ae:1e:
                    1d:2c:ab:e5:75:0a:23:59:ce:8f:26:72:0e:bc:62:
                    5f:75:ac:2f:d4:7c:25:42:e9:c2:f7:5f:0f:3a:c6:
                    e8:2f:68:1c:41:84:93:6d:89:12:79:47:81:9f:d1:
                    18:ac:4f:00:e4:d9:af:55:a7:4c:9a:b8:b7:f4:20:
                    32:1c:29:c1:f7:66:0f:6f:a1:e4:84:17:cb:06:f8:
                    ec:9b:50:1a:44:b3:a9:3f:be:4a:c9:41:2f:d7:38:
                    00:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:30:C3:01:0B:4B:07:C9:0D:01:F2:32:EC:E2:86:9C:FE:0C:09:A2
            X509v3 Authority Key Identifier:
                keyid:4F:EE:12:9D:09:AB:85:0D:A0:39:E7:F5:BB:24:B6:69:9A:0F:81:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F6E4A/9D594F7241A611EA88863E28F8AEA228/T-4SnQmrhQ2gOef1uyS2aZoPgXk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/T-4SnQmrhQ2gOef1uyS2aZoPgXk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F6E4A/9D594F7241A611EA88863E28F8AEA228/T-4SnQmrhQ2gOef1uyS2aZoPgXk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:ab:b1:15:f7:bc:a9:60:71:eb:af:5e:91:69:6b:c8:ab:b5:
         56:2b:e9:1c:ca:24:d2:52:e7:d7:db:cc:9c:76:49:e2:4f:24:
         01:a8:4e:94:15:20:89:bd:b8:66:44:bf:5d:a9:a5:f1:37:71:
         fc:7a:13:9c:4f:ef:57:77:b8:c8:94:6f:17:10:24:41:68:20:
         60:e6:73:14:2c:84:d6:d8:2c:ec:56:37:a2:ec:80:d7:04:98:
         06:08:6a:c6:80:33:d0:c5:c5:a4:91:33:50:1f:3f:b8:a6:25:
         d8:c6:7d:0c:68:d8:42:58:55:d5:d3:d1:8e:40:21:c8:97:c3:
         81:5e:d1:7a:8c:d9:0b:7c:0e:55:cc:f3:3c:1a:fd:e1:c0:e5:
         5b:a5:13:a8:cf:c3:0d:57:4d:d9:0e:43:d9:3f:95:22:c7:bb:
         ff:87:41:6c:e7:c8:c9:fa:78:7a:d2:01:f4:ac:1e:b9:d2:02:
         17:d9:5a:c5:24:83:6d:3f:40:0a:8b:54:ac:32:16:97:2c:81:
         5d:90:a7:03:b0:60:22:e1:94:03:76:39:f0:0f:59:4a:03:3f:
         68:93:e1:5a:f7:95:67:e1:3e:d3:71:9b:9c:12:52:65:0d:68:
         95:90:78:4c:34:97:67:c0:0c:f4:7f:54:77:95:45:1d:51:e3:
         7b:60:0d:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:33:32 2026 by rpki-client