Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FB872/74BDC64010BE11F180215979DAE4EC9C/FV4_ZRpEPaX_G-DOYwufUp4Ni4I.mft
File:                     FV4_ZRpEPaX_G-DOYwufUp4Ni4I.mft (raw, json)
Hash identifier:          zvL4Qtdfa3RXj6342kSPMC+V/ZalzJUu6Oh5EiBRZ78=
Subject key identifier:   F5:1C:08:28:EC:4D:1D:77:24:59:39:6C:6F:78:69:67:C7:65:17:57
Authority key identifier: 15:5E:3F:65:1A:44:3D:A5:FF:1B:E0:CE:63:0B:9F:52:9E:0D:8B:82
Certificate issuer:       /CN=F36FB872AF/serialNumber=155E3F651A443DA5FF1BE0CE630B9F529E0D8B82
Certificate serial:       21
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/FV4_ZRpEPaX_G-DOYwufUp4Ni4I.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FB872/74BDC64010BE11F180215979DAE4EC9C/FV4_ZRpEPaX_G-DOYwufUp4Ni4I.mft
Manifest number:          21
Signing time:             Thu 26 Mar 2026 06:36:51 +0000
Manifest this update:     Thu 26 Mar 2026 06:36:50 +0000
Manifest next update:     Sat 28 Mar 2026 06:36:50 +0000
Files and hashes:         1: FV4_ZRpEPaX_G-DOYwufUp4Ni4I.crl (hash: PH0CI4z8ouJ28ylHRaSOAGy/dQR0Ozgj9av/s0vwT+c=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FB872/74BDC64010BE11F180215979DAE4EC9C/FV4_ZRpEPaX_G-DOYwufUp4Ni4I.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FB872/74BDC64010BE11F180215979DAE4EC9C/FV4_ZRpEPaX_G-DOYwufUp4Ni4I.mft
                          rsync://rpki.afrinic.net/repository/afrinic/FV4_ZRpEPaX_G-DOYwufUp4Ni4I.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 33 (0x21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FB872AF, serialNumber=155E3F651A443DA5FF1BE0CE630B9F529E0D8B82
        Validity
            Not Before: Mar 26 06:36:50 2026 GMT
            Not After : Mar 28 06:36:50 2026 GMT
        Subject: CN=69c4d403-f9cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:71:5b:93:89:14:4a:53:d4:42:f8:17:97:5b:
                    09:c9:08:a6:86:3c:56:8c:f1:0a:c5:3e:c4:79:4a:
                    46:7b:34:d6:2f:b1:e7:74:06:2c:6d:e4:b0:29:53:
                    9a:b1:4c:33:b1:39:60:d4:2b:bb:df:da:62:40:ba:
                    20:0f:7e:ed:68:a3:a3:af:29:c6:10:ad:6a:14:3a:
                    0c:9c:ab:4d:c0:c9:38:44:c1:75:c1:85:ce:58:ba:
                    9f:5c:fa:b4:47:59:f2:6b:7f:bf:1f:d5:66:88:e4:
                    76:da:b5:22:a4:e7:e9:54:9d:f1:a3:f1:de:fc:b7:
                    58:e4:17:0a:6c:64:fd:d5:f4:bd:3e:23:06:5d:87:
                    22:cf:f0:2f:cf:e9:f3:d3:32:e8:76:0f:40:ba:36:
                    ba:5c:e1:db:ce:4f:81:30:c7:d4:66:1a:4f:90:b5:
                    c7:ef:af:7c:a0:08:4d:2a:48:28:ea:e4:bf:58:20:
                    51:0b:15:fc:e1:f6:85:da:cb:ac:20:a2:fa:e3:93:
                    15:dd:b0:3a:ec:52:87:bd:37:fd:69:df:38:5e:e2:
                    d4:79:38:38:4a:de:24:78:63:50:1d:25:46:1a:3e:
                    48:83:9e:bc:d2:49:19:e2:1b:22:42:7d:bf:c3:08:
                    32:1e:1b:8a:5f:94:97:6e:4a:bf:2f:9e:e5:3b:2f:
                    ad:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:1C:08:28:EC:4D:1D:77:24:59:39:6C:6F:78:69:67:C7:65:17:57
            X509v3 Authority Key Identifier:
                keyid:15:5E:3F:65:1A:44:3D:A5:FF:1B:E0:CE:63:0B:9F:52:9E:0D:8B:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FB872/74BDC64010BE11F180215979DAE4EC9C/FV4_ZRpEPaX_G-DOYwufUp4Ni4I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/FV4_ZRpEPaX_G-DOYwufUp4Ni4I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FB872/74BDC64010BE11F180215979DAE4EC9C/FV4_ZRpEPaX_G-DOYwufUp4Ni4I.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:d1:92:7b:ff:50:0a:09:6a:62:38:fe:ee:ec:ee:a2:c6:06:
         ea:bf:74:7e:76:86:8d:16:68:1a:44:ee:3c:46:20:51:9e:9b:
         a1:4c:52:ea:36:b7:9f:d5:e9:07:b9:8c:40:6c:e7:16:a8:d3:
         62:13:44:15:a4:72:52:1b:83:18:aa:6d:1d:14:92:a0:49:3c:
         c7:4f:b1:01:70:45:90:53:dc:f7:16:45:4b:ee:b5:de:82:b6:
         7f:2b:4c:55:a7:3c:38:4b:52:57:51:f0:da:d9:b9:9a:50:f5:
         82:24:e0:a7:f2:0c:33:44:ac:2d:54:0b:23:b7:7c:cf:df:dd:
         4f:a3:83:8d:52:d3:f3:4a:95:3d:4f:e3:f2:87:32:6c:2e:aa:
         7a:03:1d:76:86:6c:21:51:e7:e6:79:8d:68:9d:69:9c:d4:ca:
         18:58:ad:81:2c:d7:33:14:df:77:b4:4b:cb:15:88:36:39:00:
         8c:13:02:f6:c7:9c:a9:bb:72:1b:ea:55:b1:8f:8c:e7:fc:d2:
         ba:1c:45:2c:11:d3:9d:8a:35:c6:e8:76:9b:24:d3:2d:36:6e:
         1a:df:67:b0:a5:08:fc:95:69:4f:6d:97:83:34:be:31:ea:c4:
         47:43:a9:ba:23:88:fd:cf:ee:85:cb:53:a8:50:fe:b6:bb:6a:
         5e:5f:d0:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:12:45 2026 by rpki-client