Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FAE49/A7AE1658BFDE11F080720F79DAE4EC9C/MjlPmgUImlFA6Eyv6J4tGcG1IyA.mft
File:                     MjlPmgUImlFA6Eyv6J4tGcG1IyA.mft (raw, json)
Hash identifier:          XsyaKa7bhGTAvof7mKEYZBZzZcZXBcqhvCT+W1mu5Vs=
Subject key identifier:   D3:F8:FB:76:35:65:09:DC:E8:6E:7B:20:B7:99:B6:8C:0C:E4:EA:E3
Authority key identifier: 32:39:4F:9A:05:08:9A:51:40:E8:4C:AF:E8:9E:2D:19:C1:B5:23:20
Certificate issuer:       /CN=F36FAE49AF/serialNumber=32394F9A05089A5140E84CAFE89E2D19C1B52320
Certificate serial:       A0
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/MjlPmgUImlFA6Eyv6J4tGcG1IyA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FAE49/A7AE1658BFDE11F080720F79DAE4EC9C/MjlPmgUImlFA6Eyv6J4tGcG1IyA.mft
Manifest number:          99
Signing time:             Thu 26 Mar 2026 06:19:16 +0000
Manifest this update:     Thu 26 Mar 2026 06:19:15 +0000
Manifest next update:     Sat 28 Mar 2026 06:19:15 +0000
Files and hashes:         1: MjlPmgUImlFA6Eyv6J4tGcG1IyA.crl (hash: PTsl8+JFA7Kp+ob9k60CCYcxqX8Yb8dj+u2D/mWZBSQ=)
                          2: 1A11F9A6C43711F08C008AEFDAE4EC9C.roa (hash: PrDHrRVwFxmq9wa+36gsz1hsGADjZsCN6pmTpGbWs7s=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FAE49/A7AE1658BFDE11F080720F79DAE4EC9C/MjlPmgUImlFA6Eyv6J4tGcG1IyA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FAE49/A7AE1658BFDE11F080720F79DAE4EC9C/MjlPmgUImlFA6Eyv6J4tGcG1IyA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/MjlPmgUImlFA6Eyv6J4tGcG1IyA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 160 (0xa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FAE49AF, serialNumber=32394F9A05089A5140E84CAFE89E2D19C1B52320
        Validity
            Not Before: Mar 26 06:19:15 2026 GMT
            Not After : Mar 28 06:19:15 2026 GMT
        Subject: CN=69c4cfe4-3c58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:81:83:76:af:dc:f5:79:6b:95:8e:39:6f:d0:
                    7a:a1:44:f8:65:60:b3:f2:c0:b2:30:a5:92:29:9e:
                    d0:c7:e0:06:57:a9:7e:82:b2:92:74:b7:e8:3e:51:
                    a5:c0:40:86:8d:63:3a:a9:89:90:cc:6d:f3:11:11:
                    bd:de:3b:81:51:b8:d6:0b:55:6d:a6:f6:e1:df:b7:
                    28:25:74:87:a5:b6:20:51:20:11:d9:f7:c5:c2:8f:
                    95:53:10:9a:0b:86:d7:fd:ef:19:bc:02:eb:3d:41:
                    1f:77:2b:97:40:04:11:f6:ef:0b:eb:57:76:5d:25:
                    8f:76:27:d6:7f:c8:7b:30:ea:bc:0d:5b:16:49:ff:
                    d0:c2:87:45:8d:34:5b:dc:d7:2d:1b:c5:03:2a:9e:
                    35:0c:75:b4:f3:65:aa:9d:0a:1f:39:88:68:66:fd:
                    04:02:b3:45:e9:99:04:4e:bf:05:f7:e6:cf:9e:7f:
                    63:d1:53:17:82:c3:b1:2b:de:f2:2a:cb:52:5b:b1:
                    ef:1e:11:7e:26:17:ab:df:48:24:39:95:b9:a0:4c:
                    0b:c8:78:2d:0d:ce:e9:04:25:89:23:16:26:eb:ef:
                    c7:c3:37:3e:5f:3f:76:bf:e7:7e:3a:cb:6b:17:c3:
                    b3:91:31:56:f1:cb:ef:f2:d7:c3:de:ea:15:59:9b:
                    84:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:F8:FB:76:35:65:09:DC:E8:6E:7B:20:B7:99:B6:8C:0C:E4:EA:E3
            X509v3 Authority Key Identifier:
                keyid:32:39:4F:9A:05:08:9A:51:40:E8:4C:AF:E8:9E:2D:19:C1:B5:23:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FAE49/A7AE1658BFDE11F080720F79DAE4EC9C/MjlPmgUImlFA6Eyv6J4tGcG1IyA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/MjlPmgUImlFA6Eyv6J4tGcG1IyA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FAE49/A7AE1658BFDE11F080720F79DAE4EC9C/MjlPmgUImlFA6Eyv6J4tGcG1IyA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:bf:20:74:80:4a:d3:5e:23:47:30:04:7b:12:db:df:1a:39:
         ed:ab:cc:64:a4:16:dc:5c:e3:8c:2e:58:75:94:66:86:39:47:
         32:c9:a9:a8:90:18:51:33:a5:f2:5e:1f:db:10:60:66:12:c9:
         5e:53:8e:be:9b:1e:75:7c:5e:af:cf:24:a6:02:b2:66:a7:25:
         f5:89:55:36:28:9b:d4:ba:e3:51:34:84:c6:43:1d:29:ee:2e:
         d1:e3:c3:8f:69:ed:6b:e1:68:30:bb:d2:da:a5:f3:93:3f:89:
         5e:ff:e6:a6:06:d9:cf:85:e1:b1:cc:a5:02:6c:ff:74:22:27:
         96:76:ff:d5:d9:b2:17:73:2a:a9:04:1a:b4:bd:00:03:bf:e5:
         11:ac:ce:e1:30:e4:35:6a:42:1e:1c:6d:f7:b3:14:71:28:88:
         26:f5:b6:83:df:fd:4e:cd:59:18:6e:8f:e0:57:46:02:7d:06:
         fd:40:ce:e9:eb:dc:43:25:58:a5:77:03:40:eb:e9:04:88:78:
         8e:3f:64:cf:46:15:f0:57:c5:1b:e0:b5:80:7e:e6:b1:c9:b1:
         d5:cf:58:bc:5d:9c:a5:da:8a:84:8a:17:58:3c:60:55:d5:e0:
         0f:62:f4:22:f8:bb:67:24:c4:18:29:4b:b6:da:3f:18:93:95:
         e8:3e:a9:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:48:44 2026 by rpki-client