Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F8F86/43159886192911EFA70CC06E017001B1/sbo9fH2OzVEf2kvw7Cn2qZssMbs.mft
File:                     sbo9fH2OzVEf2kvw7Cn2qZssMbs.mft (raw, json)
Hash identifier:          Ylj+e1+LQdxrzjDx7AHtXWa/0iCCCzPEMGuNfUAB0LM=
Subject key identifier:   40:9A:73:13:78:4D:4D:EC:D0:F9:5A:9A:52:88:E0:F1:0B:69:93:17
Authority key identifier: B1:BA:3D:7C:7D:8E:CD:51:1F:DA:4B:F0:EC:29:F6:A9:9B:2C:31:BB
Certificate issuer:       /CN=F36F8F86AF/serialNumber=B1BA3D7C7D8ECD511FDA4BF0EC29F6A99B2C31BB
Certificate serial:       02BE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/sbo9fH2OzVEf2kvw7Cn2qZssMbs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F8F86/43159886192911EFA70CC06E017001B1/sbo9fH2OzVEf2kvw7Cn2qZssMbs.mft
Manifest number:          02B8
Signing time:             Thu 26 Mar 2026 04:59:53 +0000
Manifest this update:     Thu 26 Mar 2026 04:59:52 +0000
Manifest next update:     Sat 28 Mar 2026 04:59:52 +0000
Files and hashes:         1: sbo9fH2OzVEf2kvw7Cn2qZssMbs.crl (hash: itsXhj1WopT6p6Cg96MjBB0cwwJerQujNUW+P7a9Zv0=)
                          2: 0EB2B67C8FAE11EFB0C6F19A762E951A.roa (hash: dRhtvM/2t47z2JwA9sfqbVs7olYpopo1AghyJCkiJnU=)
                          3: A3E369B88FAD11EF84E8C298762E951A.roa (hash: KHj93NQJWTZ8oMi0gw+QEnklPoZI/vRnCOYhgqAuDO0=)
                          4: 7017818A912B11EFA858BC80762E951A.roa (hash: 8BIH5JeOynzixiDGrMvrW3MY/Y2dPuOtFBanjsebARk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F8F86/43159886192911EFA70CC06E017001B1/sbo9fH2OzVEf2kvw7Cn2qZssMbs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F8F86/43159886192911EFA70CC06E017001B1/sbo9fH2OzVEf2kvw7Cn2qZssMbs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/sbo9fH2OzVEf2kvw7Cn2qZssMbs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 702 (0x2be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F8F86AF, serialNumber=B1BA3D7C7D8ECD511FDA4BF0EC29F6A99B2C31BB
        Validity
            Not Before: Mar 26 04:59:52 2026 GMT
            Not After : Mar 28 04:59:52 2026 GMT
        Subject: CN=69c4bd49-71de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e5:2d:19:6c:91:0c:37:27:de:67:df:12:43:
                    2c:25:d2:b0:b0:eb:52:ba:72:9e:d3:5a:e9:97:57:
                    97:12:a4:99:eb:2d:b9:b0:23:75:7c:a0:40:bc:cb:
                    5c:70:f2:d9:73:c9:42:bc:49:3b:fd:2b:9f:6d:fc:
                    31:31:0e:5f:e8:05:67:9b:62:2a:7f:1a:04:26:33:
                    d4:fc:09:c6:a4:86:6c:ce:da:09:6d:7c:5b:99:5d:
                    3e:36:9a:00:14:01:a7:82:b3:38:bb:fa:0c:e2:8b:
                    27:51:13:62:aa:62:5d:ea:dc:82:6a:49:37:33:8d:
                    cb:b9:59:b6:83:ba:8a:72:b1:36:e3:a4:3e:28:f4:
                    48:e2:33:e2:ff:1a:08:63:37:ac:1b:ae:99:c7:67:
                    05:b4:1d:86:a8:b7:7b:e0:e1:8d:56:5b:4c:05:cd:
                    b4:2b:18:24:a3:a5:30:07:50:a9:4b:34:7d:e7:ba:
                    f1:f2:52:ab:49:83:2d:6a:e8:8c:c8:8f:16:9b:a4:
                    38:b3:4a:6c:8d:24:00:3f:db:eb:ef:fc:68:6b:b7:
                    44:1f:b1:96:7a:2b:57:0a:84:ff:d7:f8:6e:ef:84:
                    78:35:21:82:42:9b:fb:d3:58:3e:fa:95:bb:a4:60:
                    59:10:b6:80:fe:67:db:26:36:ef:91:58:8a:b6:6d:
                    23:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:9A:73:13:78:4D:4D:EC:D0:F9:5A:9A:52:88:E0:F1:0B:69:93:17
            X509v3 Authority Key Identifier:
                keyid:B1:BA:3D:7C:7D:8E:CD:51:1F:DA:4B:F0:EC:29:F6:A9:9B:2C:31:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8F86/43159886192911EFA70CC06E017001B1/sbo9fH2OzVEf2kvw7Cn2qZssMbs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/sbo9fH2OzVEf2kvw7Cn2qZssMbs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8F86/43159886192911EFA70CC06E017001B1/sbo9fH2OzVEf2kvw7Cn2qZssMbs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:6c:c0:d6:42:16:12:84:ec:d6:03:b0:25:9e:35:04:33:d1:
         98:f6:67:76:c6:55:96:b1:79:45:44:8b:82:46:87:7e:b6:af:
         1f:06:cb:f9:53:80:81:75:db:ad:e6:23:82:a7:44:45:88:28:
         d0:e6:01:de:f2:a7:d6:74:2f:1d:d8:85:79:15:68:28:7a:2f:
         c9:0c:be:c2:5d:8c:57:19:6d:47:ec:30:f4:be:c7:f2:e4:46:
         e6:4b:71:83:42:2d:58:7f:3f:5e:c6:a1:9e:2f:af:27:b3:f9:
         79:71:5f:cb:e1:62:00:be:e4:d2:97:f9:bb:ed:54:9a:78:48:
         fa:26:ea:4c:e4:f2:6c:ae:a1:10:fd:6a:35:70:f2:9f:2c:58:
         1a:62:19:64:3b:e9:bc:6f:e9:a5:43:80:68:18:15:64:31:6f:
         ac:89:66:73:5e:3b:ac:6a:e5:5a:dc:ba:f1:20:85:e4:11:e4:
         97:19:7f:35:1b:3f:73:0a:a6:64:13:e0:07:f9:e5:0e:c0:32:
         6a:de:87:c6:1a:af:a8:57:f5:4d:6e:c8:b0:66:12:86:25:4a:
         84:f7:9f:e2:95:d2:05:81:d7:58:8b:d6:ca:2f:b4:be:bc:ba:
         0b:0f:52:4b:b8:ee:93:c7:89:c7:f0:07:6a:b7:31:1a:43:4d:
         f2:45:be:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:49:36 2026 by rpki-client