Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3611B04/78F95A183D5011F080DBDA86DAE4EC9C/TiOqeg2oNA4u3f0hXrbEUzdC_PA.mft
File:                     TiOqeg2oNA4u3f0hXrbEUzdC_PA.mft (raw, json)
Hash identifier:          5dFsHnCeUWh2dpIjZzWKfu90x3WEBC8zXSbfcmM47hk=
Subject key identifier:   E8:45:4F:7C:3A:6D:AA:1E:81:99:22:7E:35:04:70:D2:EB:E9:29:15
Authority key identifier: 4E:23:AA:7A:0D:A8:34:0E:2E:DD:FD:21:5E:B6:C4:53:37:42:FC:F0
Certificate issuer:       /CN=F3611B04AF/serialNumber=4E23AA7A0DA8340E2EDDFD215EB6C4533742FCF0
Certificate serial:       011B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/TiOqeg2oNA4u3f0hXrbEUzdC_PA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3611B04/78F95A183D5011F080DBDA86DAE4EC9C/TiOqeg2oNA4u3f0hXrbEUzdC_PA.mft
Manifest number:          011A
Signing time:             Sun 01 Mar 2026 03:21:35 +0000
Manifest this update:     Sun 01 Mar 2026 03:21:34 +0000
Manifest next update:     Tue 03 Mar 2026 03:21:34 +0000
Files and hashes:         1: TiOqeg2oNA4u3f0hXrbEUzdC_PA.crl (hash: cIzSv4Nf5v6pWwPfUwm43gUqZ4+RFTaKalitlNcNfUA=)
                          2: D4D84B9E3D5211F08FF5E995DAE4EC9C.roa (hash: /d1iMp/ZT/BMLsfn6Ybe9u0ARPnAxFGfjCR2WymN//o=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3611B04/78F95A183D5011F080DBDA86DAE4EC9C/TiOqeg2oNA4u3f0hXrbEUzdC_PA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3611B04/78F95A183D5011F080DBDA86DAE4EC9C/TiOqeg2oNA4u3f0hXrbEUzdC_PA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/TiOqeg2oNA4u3f0hXrbEUzdC_PA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 03 Mar 2026 00:07:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 283 (0x11b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3611B04AF, serialNumber=4E23AA7A0DA8340E2EDDFD215EB6C4533742FCF0
        Validity
            Not Before: Mar  1 03:21:34 2026 GMT
            Not After : Mar  3 03:21:34 2026 GMT
        Subject: CN=69a3b0bf-b85f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:ea:5e:6e:2a:31:07:d6:d6:1f:b2:64:29:6c:
                    a7:b3:f6:68:13:f6:3f:d8:85:66:3b:ba:ac:50:dc:
                    eb:0d:4f:c6:6a:83:b7:39:91:4e:52:a2:62:60:6d:
                    8e:9b:be:f8:78:46:47:8e:a7:9b:95:4f:f1:cc:6d:
                    70:7c:2c:4c:d4:c6:6e:ff:52:bc:4c:0c:e9:34:72:
                    09:bd:e3:4e:c9:87:e0:6b:b2:bd:5a:79:79:10:c6:
                    d7:3f:78:e0:4e:d7:63:57:10:58:1f:d8:76:61:51:
                    d1:d4:a4:ad:ee:e2:c5:82:87:79:13:04:15:c9:d4:
                    1b:88:b1:2d:39:77:b2:d9:62:ab:a7:26:0f:1d:42:
                    be:43:aa:93:b7:3b:fb:2e:97:c5:4e:6f:1c:9c:eb:
                    2c:c7:46:e6:2f:a1:e6:8a:5f:e0:71:e6:2f:36:5e:
                    b0:16:64:81:34:fd:84:ca:c8:d0:2c:44:47:28:f5:
                    fe:f3:5f:4c:8d:01:72:ed:a4:c0:6d:d5:52:b3:94:
                    7b:35:7a:00:d4:b4:77:fd:40:34:2a:54:6c:fd:04:
                    1d:84:6d:39:25:60:c2:44:27:21:f3:50:60:a5:37:
                    11:fa:24:3d:2c:1b:aa:64:76:2e:8b:7c:88:bb:11:
                    f1:eb:a5:5e:4b:db:47:c8:0c:1b:dc:bc:b2:4f:59:
                    ea:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:45:4F:7C:3A:6D:AA:1E:81:99:22:7E:35:04:70:D2:EB:E9:29:15
            X509v3 Authority Key Identifier:
                keyid:4E:23:AA:7A:0D:A8:34:0E:2E:DD:FD:21:5E:B6:C4:53:37:42:FC:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3611B04/78F95A183D5011F080DBDA86DAE4EC9C/TiOqeg2oNA4u3f0hXrbEUzdC_PA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/TiOqeg2oNA4u3f0hXrbEUzdC_PA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3611B04/78F95A183D5011F080DBDA86DAE4EC9C/TiOqeg2oNA4u3f0hXrbEUzdC_PA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:8c:72:9f:2e:60:90:6c:3e:89:6d:d2:2f:2f:52:a2:e6:2f:
         df:8d:9e:23:eb:33:bb:ae:30:2e:19:00:dc:42:c9:40:cb:f6:
         d3:1c:7e:38:92:23:0c:f3:f7:2c:1f:f2:6d:5f:70:f1:e5:17:
         20:52:4b:9b:e8:fe:17:8a:5e:ef:95:a9:2e:07:c7:5d:a5:5e:
         68:45:e5:b3:fb:61:1b:c7:7d:08:56:72:01:ea:f6:80:bc:a1:
         f2:20:8e:c3:55:89:e6:8f:1a:0b:6b:18:37:81:50:f7:a5:0e:
         c3:37:4a:ea:09:7b:23:e0:b4:45:15:46:38:e9:97:09:8e:25:
         9c:19:4b:eb:fc:13:27:dc:68:c3:28:48:a1:1e:c6:2f:88:ba:
         d2:bb:b0:1f:18:fe:20:3d:b4:ec:4a:4a:60:a9:f9:d7:ec:fb:
         be:40:7b:71:76:a0:9a:42:a9:61:74:a9:66:8f:91:ad:15:fc:
         64:63:c8:e3:52:fd:1d:cb:f4:da:fd:76:1e:fa:8c:d0:b0:e6:
         e3:1a:a9:24:d9:78:0d:7c:9a:f9:62:3e:a7:cd:03:d8:50:ae:
         4f:15:d1:b4:c7:a2:67:57:4e:c5:c8:42:c5:9c:29:41:5b:77:
         27:6a:2b:f6:d8:ea:a3:fe:33:24:29:2d:2b:de:d9:03:b1:22:
         f4:69:7d:cb
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICARswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MTFCMDRBRjExMC8GA1UEBRMoNEUyM0FBN0EwREE4MzQwRTJFRERGRDIxNUVCNkM0
NTMzNzQyRkNGMDAeFw0yNjAzMDEwMzIxMzRaFw0yNjAzMDMwMzIxMzRaMBgxFjAU
BgNVBAMTDTY5YTNiMGJmLWI4NWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDn6l5uKjEH1tYfsmQpbKez9mgT9j/YhWY7uqxQ3OsNT8Zqg7c5kU5SomJg
bY6bvvh4RkeOp5uVT/HMbXB8LEzUxm7/UrxMDOk0cgm9407Jh+Brsr1aeXkQxtc/
eOBO12NXEFgf2HZhUdHUpK3u4sWCh3kTBBXJ1BuIsS05d7LZYqunJg8dQr5DqpO3
O/sul8VObxyc6yzHRuYvoeaKX+Bx5i82XrAWZIE0/YTKyNAsREco9f7zX0yNAXLt
pMBt1VKzlHs1egDUtHf9QDQqVGz9BB2EbTklYMJEJyHzUGClNxH6JD0sG6pkdi6L
fIi7EfHrpV5L20fIDBvcvLJPWeqtAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU6EVP
fDptqh6BmSJ+NQRw0uvpKRUwHwYDVR0jBBgwFoAUTiOqeg2oNA4u3f0hXrbEUzdC
/PAwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjExQjA0Lzc4Rjk1QTE4M0Q1MDExRjA4MERCREE4NkRBRTRFQzlDL1RpT3Fl
ZzJvTkE0dTNmMGhYcmJFVXpkQ19QQS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1RpT3FlZzJvTkE0dTNmMGhYcmJFVXpkQ19QQS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MTFCMDQvNzhGOTVBMTgzRDUwMTFGMDgwREJEQTg2REFF
NEVDOUMvVGlPcWVnMm9OQTR1M2YwaFhyYkVVemRDX1BBLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB2jHKfLmCQbD6JbdIvL1Ki5i/fjZ4j
6zO7rjAuGQDcQslAy/bTHH44kiMM8/csH/JtX3Dx5RcgUkub6P4Xil7vlakuB8dd
pV5oReWz+2Ebx30IVnIB6vaAvKHyII7DVYnmjxoLaxg3gVD3pQ7DN0rqCXsj4LRF
FUY46ZcJjiWcGUvr/BMn3GjDKEihHsYviLrSu7AfGP4gPbTsSkpgqfnX7Pu+QHtx
dqCaQqlhdKlmj5GtFfxkY8jjUv0dy/Ta/XYe+ozQsObjGqkk2XgNfJr5Yj6nzQPY
UK5PFdG0x6JnV07FyELFnClBW3cnaiv22Oqj/jMkKS0r3tkDsSL0aX3L
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:38:02 2026 by rpki-client