Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FCD8D/2EB9F7C4E0E111EC939DEDD6F1222468/-dz45IZ0npp0P-Rz662BTRzsX6k.mft
File:                     -dz45IZ0npp0P-Rz662BTRzsX6k.mft (raw, json)
Hash identifier:          ZFmudAzq9cpisMyGTL6zh87QAQ/JDDqrqC5bxj3EAB8=
Subject key identifier:   AB:0D:A9:66:CC:79:91:FD:26:00:70:16:57:E9:A9:D9:1D:04:EE:A9
Authority key identifier: F9:DC:F8:E4:86:74:9E:9A:74:3F:E4:73:EB:AD:81:4D:1C:EC:5F:A9
Certificate issuer:       /CN=F36FCD8DAF/serialNumber=F9DCF8E486749E9A743FE473EBAD814D1CEC5FA9
Certificate serial:       059D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/-dz45IZ0npp0P-Rz662BTRzsX6k.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FCD8D/2EB9F7C4E0E111EC939DEDD6F1222468/-dz45IZ0npp0P-Rz662BTRzsX6k.mft
Manifest number:          059C
Signing time:             Thu 26 Mar 2026 03:11:46 +0000
Manifest this update:     Thu 26 Mar 2026 03:11:45 +0000
Manifest next update:     Sat 28 Mar 2026 03:11:45 +0000
Files and hashes:         1: -dz45IZ0npp0P-Rz662BTRzsX6k.crl (hash: 9DxOD3byi+FDCnnStundEPPMJxKbyTfoDpRlv1f7ybo=)
                          2: 60D2AC14E0E211EC817382DAF1222468.roa (hash: //5aRoRjO3zpCQq4iVOAY/MrzQveZBFgcw+KQ8Nh8YM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FCD8D/2EB9F7C4E0E111EC939DEDD6F1222468/-dz45IZ0npp0P-Rz662BTRzsX6k.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FCD8D/2EB9F7C4E0E111EC939DEDD6F1222468/-dz45IZ0npp0P-Rz662BTRzsX6k.mft
                          rsync://rpki.afrinic.net/repository/afrinic/-dz45IZ0npp0P-Rz662BTRzsX6k.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1437 (0x59d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FCD8DAF, serialNumber=F9DCF8E486749E9A743FE473EBAD814D1CEC5FA9
        Validity
            Not Before: Mar 26 03:11:45 2026 GMT
            Not After : Mar 28 03:11:45 2026 GMT
        Subject: CN=69c4a3f2-6e8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:cb:48:ba:19:9c:d6:31:7c:5c:50:24:4d:b9:
                    ed:01:8c:fc:ac:9b:1d:41:43:b0:36:11:0d:6e:85:
                    a8:5d:52:f0:85:7d:ca:06:d4:eb:42:26:10:e2:1c:
                    3e:be:d9:67:47:95:a6:59:3a:34:8e:26:63:b9:fc:
                    84:5a:4f:b3:52:56:eb:1e:1a:01:3f:e9:32:e6:b4:
                    fd:42:4f:db:56:d6:8f:9a:60:62:aa:b7:77:9a:21:
                    e1:18:55:6c:b8:ac:92:0a:01:24:7b:6f:be:d8:d6:
                    1f:3f:29:fc:09:3a:49:08:f0:ca:d7:ba:79:7e:a7:
                    b9:4a:5f:e3:bd:b4:1a:c1:21:34:ef:96:8e:92:8b:
                    14:80:62:15:65:05:d5:c9:d0:9e:e1:06:12:fb:ff:
                    b4:79:2c:29:d5:51:83:a9:e6:e6:2d:86:0e:a6:6a:
                    7d:ab:29:b7:01:aa:6c:94:69:fd:4a:9e:cf:0e:39:
                    38:fa:68:7f:60:54:31:5a:a9:f9:2b:58:fe:ec:0d:
                    5d:f0:a8:f4:05:f1:1b:fd:1b:79:e5:c9:c5:67:a1:
                    83:69:21:83:d7:dc:46:cb:d5:fe:93:70:72:02:aa:
                    b4:52:ec:9c:b3:89:58:5d:c3:3a:c5:12:c0:6c:2d:
                    e2:7d:3f:79:d0:c7:3c:f8:be:a7:eb:cc:20:47:c1:
                    bb:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:0D:A9:66:CC:79:91:FD:26:00:70:16:57:E9:A9:D9:1D:04:EE:A9
            X509v3 Authority Key Identifier:
                keyid:F9:DC:F8:E4:86:74:9E:9A:74:3F:E4:73:EB:AD:81:4D:1C:EC:5F:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FCD8D/2EB9F7C4E0E111EC939DEDD6F1222468/-dz45IZ0npp0P-Rz662BTRzsX6k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-dz45IZ0npp0P-Rz662BTRzsX6k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FCD8D/2EB9F7C4E0E111EC939DEDD6F1222468/-dz45IZ0npp0P-Rz662BTRzsX6k.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:e9:d0:6f:b3:c1:8f:63:b7:7b:f0:22:1d:59:d0:dc:a7:d5:
         66:d1:45:93:19:7a:8c:37:7a:64:d4:80:0a:b5:38:ce:96:4c:
         63:52:c3:5e:82:ed:b7:17:ff:ca:78:88:47:a4:80:13:94:40:
         44:da:84:96:93:5a:bf:52:26:ba:44:af:41:44:a9:34:83:0b:
         d9:af:2d:6e:8c:d6:4b:c3:a1:a3:7e:7e:82:75:c7:ac:88:74:
         5e:81:c4:83:86:a0:e7:5c:71:6d:90:e5:5a:f9:9e:52:95:d1:
         c0:0c:60:fc:fa:5d:f4:a3:0b:f6:5f:fd:23:c5:de:66:14:e8:
         a7:4d:f4:ec:e4:d6:ba:1f:3a:8f:62:f4:33:41:bc:24:df:aa:
         70:34:c4:26:84:19:75:d8:f9:6f:f7:55:27:45:44:23:48:8c:
         22:65:73:5f:10:5a:41:b0:83:db:07:fa:3d:63:59:2f:a3:fd:
         5a:65:34:8f:a5:2c:2f:30:58:08:5d:38:dc:83:bc:1c:34:ac:
         03:05:67:2c:68:59:06:0c:53:0b:dc:51:e0:3f:4e:8a:8e:d5:
         22:51:ee:39:20:e4:39:36:e8:a0:c8:5b:fa:1c:d5:5d:1b:c8:
         02:c2:65:f0:da:37:48:18:ff:a1:3a:0c:95:19:2e:f2:70:98:
         e1:fa:b4:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:25:32 2026 by rpki-client