Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FDDCF/ED44E9306A1B11EBBA744416F8AEA228/6y_2M0NFlzp0sAkALjaRcdk48DM.mft
File:                     6y_2M0NFlzp0sAkALjaRcdk48DM.mft (raw, json)
Hash identifier:          o0qdZxu9yddZhdLP25yYEfTAvT+NTapynr0gL67NUE4=
Subject key identifier:   35:B7:06:51:76:73:4D:85:5A:1D:0C:B7:72:95:CD:5C:FF:33:F0:C1
Authority key identifier: EB:2F:F6:33:43:45:97:3A:74:B0:09:00:2E:36:91:71:D9:38:F0:33
Certificate issuer:       /CN=F36FDDCFAF/serialNumber=EB2FF6334345973A74B009002E369171D938F033
Certificate serial:       0784
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/6y_2M0NFlzp0sAkALjaRcdk48DM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FDDCF/ED44E9306A1B11EBBA744416F8AEA228/6y_2M0NFlzp0sAkALjaRcdk48DM.mft
Manifest number:          0782
Signing time:             Thu 26 Mar 2026 02:16:51 +0000
Manifest this update:     Thu 26 Mar 2026 02:16:50 +0000
Manifest next update:     Sat 28 Mar 2026 02:16:50 +0000
Files and hashes:         1: 6y_2M0NFlzp0sAkALjaRcdk48DM.crl (hash: VmVw8P0iXgBhR/uM5ui2DGaqp0zbjk1iR4NT0870xl4=)
                          2: 3ED2C7FA73DF11F08938C08EDAE4EC9C.roa (hash: iyabqTBm+x48hvA2ztaOaTXns/fPRnTXSFF6KRFDSwY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FDDCF/ED44E9306A1B11EBBA744416F8AEA228/6y_2M0NFlzp0sAkALjaRcdk48DM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FDDCF/ED44E9306A1B11EBBA744416F8AEA228/6y_2M0NFlzp0sAkALjaRcdk48DM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/6y_2M0NFlzp0sAkALjaRcdk48DM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1924 (0x784)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FDDCFAF, serialNumber=EB2FF6334345973A74B009002E369171D938F033
        Validity
            Not Before: Mar 26 02:16:50 2026 GMT
            Not After : Mar 28 02:16:50 2026 GMT
        Subject: CN=69c49713-6467
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:31:01:36:f8:42:4e:53:43:14:d8:b2:62:d7:
                    57:6d:3f:12:4c:33:f0:29:4c:e5:d0:ea:e2:ad:03:
                    0b:2c:00:79:22:87:4e:02:01:da:50:e0:b8:0d:e6:
                    91:51:01:38:a0:fd:6c:a0:28:2e:11:e4:20:79:6b:
                    3b:07:81:3a:69:59:ab:1b:94:7b:17:e5:59:38:c5:
                    8d:07:af:35:2f:81:8c:3e:31:93:b8:48:bf:5f:b9:
                    82:e1:29:40:3f:7f:98:be:ef:71:90:52:0b:b5:b2:
                    06:a1:91:1c:5a:32:ea:17:40:7e:b0:8b:f2:79:13:
                    1a:5f:79:1a:1f:4a:a0:1f:97:fb:f1:82:4f:4b:de:
                    81:0f:79:a7:03:3c:d1:32:ad:aa:22:c1:bf:c6:d3:
                    53:15:d8:16:4c:9e:67:f1:97:29:c7:4c:1c:c6:bd:
                    07:ab:24:fd:eb:fb:c1:34:9c:c1:9a:00:61:40:96:
                    45:c9:91:bc:da:e3:a3:99:13:fa:bb:cf:a2:25:2e:
                    6c:5b:01:e7:dc:b7:93:c7:46:20:83:20:9e:d0:03:
                    8d:d0:5f:d9:c4:d0:d6:5d:02:7f:9d:ba:77:81:e2:
                    66:44:c7:94:4c:55:09:72:e0:a9:7b:d5:18:20:94:
                    50:8b:7f:13:2a:0a:4b:9c:d3:a2:b5:37:23:12:e2:
                    0b:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:B7:06:51:76:73:4D:85:5A:1D:0C:B7:72:95:CD:5C:FF:33:F0:C1
            X509v3 Authority Key Identifier:
                keyid:EB:2F:F6:33:43:45:97:3A:74:B0:09:00:2E:36:91:71:D9:38:F0:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FDDCF/ED44E9306A1B11EBBA744416F8AEA228/6y_2M0NFlzp0sAkALjaRcdk48DM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/6y_2M0NFlzp0sAkALjaRcdk48DM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FDDCF/ED44E9306A1B11EBBA744416F8AEA228/6y_2M0NFlzp0sAkALjaRcdk48DM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:57:d1:10:03:9c:f5:bc:88:af:45:c4:86:8c:cb:79:ba:bc:
         8c:ed:06:5b:f0:c0:c3:c9:8c:29:c1:b6:7d:46:fc:70:29:09:
         87:30:bb:a6:7d:ac:54:bc:79:b1:93:ed:50:8c:45:ed:b3:dc:
         cf:ff:13:96:b1:8e:9b:38:f5:d5:90:4f:13:cc:c9:ea:eb:4f:
         ec:1b:35:d3:0e:f4:94:cf:89:4b:0e:93:6f:49:b3:bc:24:9c:
         7f:e1:6b:04:e6:fd:ec:40:b4:6d:2d:55:02:41:5a:6d:39:17:
         b7:85:59:0f:9a:79:2f:b6:85:34:90:c4:8f:02:73:21:7a:3e:
         9d:65:2e:18:e7:8e:25:70:ad:78:f3:af:17:3a:c0:d9:a1:01:
         8b:4f:8e:7a:db:ea:8d:5a:c1:7c:6d:ca:71:5b:ae:0a:0b:56:
         ec:91:51:44:fd:42:ae:bc:96:9e:40:3d:4c:db:17:b2:c5:58:
         e9:ab:a0:95:8e:8d:a1:7b:85:0f:d0:05:95:9f:3a:05:83:e0:
         13:df:bc:12:13:d6:bb:fb:40:eb:23:41:53:da:4a:00:dd:52:
         74:9c:db:57:8d:9c:34:3c:f8:5d:ae:42:17:3e:a7:1b:9b:90:
         a5:f0:ed:4e:ca:ca:fa:e7:4a:35:94:ac:38:fd:f5:92:2c:bc:
         88:fd:4d:fe
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICB4QwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RkREQ0ZBRjExMC8GA1UEBRMoRUIyRkY2MzM0MzQ1OTczQTc0QjAwOTAwMkUzNjkx
NzFEOTM4RjAzMzAeFw0yNjAzMjYwMjE2NTBaFw0yNjAzMjgwMjE2NTBaMBgxFjAU
BgNVBAMTDTY5YzQ5NzEzLTY0NjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC1MQE2+EJOU0MU2LJi11dtPxJMM/ApTOXQ6uKtAwssAHkih04CAdpQ4LgN
5pFRATig/WygKC4R5CB5azsHgTppWasblHsX5Vk4xY0HrzUvgYw+MZO4SL9fuYLh
KUA/f5i+73GQUgu1sgahkRxaMuoXQH6wi/J5ExpfeRofSqAfl/vxgk9L3oEPeacD
PNEyraoiwb/G01MV2BZMnmfxlynHTBzGvQerJP3r+8E0nMGaAGFAlkXJkbza46OZ
E/q7z6IlLmxbAefct5PHRiCDIJ7QA43QX9nE0NZdAn+duneB4mZEx5RMVQly4Kl7
1RgglFCLfxMqCkuc06K1NyMS4gu3AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUNbcG
UXZzTYVaHQy3cpXNXP8z8MEwHwYDVR0jBBgwFoAU6y/2M0NFlzp0sAkALjaRcdk4
8DMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZERENGL0VENDRFOTMwNkExQjExRUJCQTc0NDQxNkY4QUVBMjI4LzZ5XzJN
ME5GbHpwMHNBa0FMamFSY2RrNDhETS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzZ5XzJNME5GbHpwMHNBa0FMamFSY2RrNDhETS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RkREQ0YvRUQ0NEU5MzA2QTFCMTFFQkJBNzQ0NDE2RjhB
RUEyMjgvNnlfMk0wTkZsenAwc0FrQUxqYVJjZGs0OERNLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBoV9EQA5z1vIivRcSGjMt5uryM7QZb
8MDDyYwpwbZ9RvxwKQmHMLumfaxUvHmxk+1QjEXts9zP/xOWsY6bOPXVkE8TzMnq
60/sGzXTDvSUz4lLDpNvSbO8JJx/4WsE5v3sQLRtLVUCQVptORe3hVkPmnkvtoU0
kMSPAnMhej6dZS4Y544lcK14868XOsDZoQGLT4562+qNWsF8bcpxW64KC1bskVFE
/UKuvJaeQD1M2xeyxVjpq6CVjo2he4UP0AWVnzoFg+AT37wSE9a7+0DrI0FT2koA
3VJ0nNtXjZw0PPhdrkIXPqcbm5Cl8O1Oysr650o1lKw4/fWSLLyI/U3+
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:17:15 2026 by rpki-client