Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3610F96/5233202E10D611EE975DEC154AD9E6FC/OUFjT32VZbVrGXoQ7DTFCqlHNVk.mft
File:                     OUFjT32VZbVrGXoQ7DTFCqlHNVk.mft (raw, json)
Hash identifier:          hIgKs5imZ7YlMocu03bNAa/y+ubSeDlGjvOcncVqd0c=
Subject key identifier:   4B:C8:33:A9:C1:E2:D3:DC:73:3C:62:98:C5:DB:39:01:37:4F:9A:A9
Authority key identifier: 39:41:63:4F:7D:95:65:B5:6B:19:7A:10:EC:34:C5:0A:A9:47:35:59
Certificate issuer:       /CN=F3610F96AF/serialNumber=3941634F7D9565B56B197A10EC34C50AA9473559
Certificate serial:       0400
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/OUFjT32VZbVrGXoQ7DTFCqlHNVk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3610F96/5233202E10D611EE975DEC154AD9E6FC/OUFjT32VZbVrGXoQ7DTFCqlHNVk.mft
Manifest number:          03FB
Signing time:             Mon 02 Mar 2026 02:30:29 +0000
Manifest this update:     Mon 02 Mar 2026 02:30:28 +0000
Manifest next update:     Wed 04 Mar 2026 02:30:28 +0000
Files and hashes:         1: OUFjT32VZbVrGXoQ7DTFCqlHNVk.crl (hash: q/VwVHHuptc8KXNUU8nPJ9lTHtL0s2JDOSMHoBZJSd4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3610F96/5233202E10D611EE975DEC154AD9E6FC/OUFjT32VZbVrGXoQ7DTFCqlHNVk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3610F96/5233202E10D611EE975DEC154AD9E6FC/OUFjT32VZbVrGXoQ7DTFCqlHNVk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/OUFjT32VZbVrGXoQ7DTFCqlHNVk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1024 (0x400)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3610F96AF, serialNumber=3941634F7D9565B56B197A10EC34C50AA9473559
        Validity
            Not Before: Mar  2 02:30:28 2026 GMT
            Not After : Mar  4 02:30:28 2026 GMT
        Subject: CN=69a4f645-1c7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:07:40:be:43:a0:83:79:bc:ac:16:ef:11:67:
                    ff:de:64:e1:cf:17:10:79:fc:d2:66:1e:00:62:3b:
                    a4:fe:0e:41:56:4d:c0:12:db:12:c6:4c:f2:73:8d:
                    80:28:0b:1d:23:f7:86:a8:8d:31:ec:8e:d7:b5:13:
                    0e:e0:78:3b:1d:8b:ed:e4:2f:a0:82:13:60:c2:7e:
                    a9:86:45:62:2f:58:a8:51:f4:44:09:92:25:69:83:
                    ea:da:ff:b8:f3:d4:b5:3b:c0:a4:23:03:fb:c8:19:
                    6a:79:35:7a:7e:d8:3d:14:bb:31:f0:c1:34:9f:48:
                    df:77:a0:71:1b:d4:ff:0e:1f:6b:b2:0c:2f:81:54:
                    8e:90:dd:51:6b:0a:7a:b1:a3:09:3e:0f:22:83:84:
                    35:67:90:6e:a3:14:00:3a:09:73:cd:ff:14:95:9a:
                    aa:b0:a7:e6:02:1b:7c:8c:d7:1e:7f:55:5d:82:35:
                    05:94:6e:3b:24:3e:7d:8e:a1:8d:7d:c7:cc:8a:c7:
                    4e:70:91:45:24:eb:7e:20:64:9d:35:43:4c:c5:48:
                    80:2f:0c:4d:f9:11:43:68:ee:9e:35:05:74:56:df:
                    a6:f2:de:55:46:0a:57:39:f9:74:a4:05:4e:0e:cb:
                    d1:e4:74:fe:33:41:6e:62:93:a6:17:9a:2a:06:0d:
                    b7:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:C8:33:A9:C1:E2:D3:DC:73:3C:62:98:C5:DB:39:01:37:4F:9A:A9
            X509v3 Authority Key Identifier:
                keyid:39:41:63:4F:7D:95:65:B5:6B:19:7A:10:EC:34:C5:0A:A9:47:35:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3610F96/5233202E10D611EE975DEC154AD9E6FC/OUFjT32VZbVrGXoQ7DTFCqlHNVk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OUFjT32VZbVrGXoQ7DTFCqlHNVk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3610F96/5233202E10D611EE975DEC154AD9E6FC/OUFjT32VZbVrGXoQ7DTFCqlHNVk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:79:ab:99:4b:46:1f:cb:57:5f:66:ad:f7:ff:45:1b:60:8e:
         9e:df:e5:d2:d2:f6:e3:a6:64:89:ca:5d:7d:df:7f:63:0d:1b:
         94:d9:da:2d:23:18:ad:18:29:ba:60:25:e8:d7:40:b1:c0:e5:
         4c:f6:b6:fc:71:63:26:7a:99:e2:26:91:70:b0:e3:55:f3:bf:
         65:b0:d4:94:3f:cc:72:83:36:55:45:d9:d1:9e:c5:5f:af:54:
         2a:d4:48:d6:79:bb:0b:cd:e6:93:97:f3:05:13:d5:42:a4:d5:
         c7:a4:5c:68:e9:33:36:41:0f:f6:98:e0:be:eb:32:08:ca:b8:
         a4:3a:7a:b2:d9:aa:2b:e3:a7:6e:9b:69:dd:64:d0:31:dc:13:
         fc:57:08:f3:67:16:fe:6c:cd:5b:a3:89:af:f3:9b:9f:93:df:
         d4:a4:a6:b6:01:9e:ac:b6:e4:22:77:84:3b:3c:86:74:1c:61:
         33:d3:f8:b6:5e:f2:63:e5:6f:02:29:88:ff:ae:85:31:df:a8:
         20:16:8c:e7:05:0c:41:bc:fb:91:4f:1b:2a:e4:d5:14:8a:ee:
         09:77:85:00:e6:5a:2b:6a:fd:89:33:8a:9b:7b:3f:8e:d1:df:
         01:91:be:cc:f5:d4:11:39:94:20:1f:f8:f5:60:68:b0:1b:87:
         84:10:97:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:28:59 2026 by rpki-client