Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3618989/DE67E01AC03F11EA886D1D21F8AEA228/_CFqOFBDurE2eHrAmYJUYZDL3pI.mft
File:                     _CFqOFBDurE2eHrAmYJUYZDL3pI.mft (raw, json)
Hash identifier:          mjMgtPI+FBYmqmShyFPwaOrrQGsDRO08hIWbYk8lSoo=
Subject key identifier:   84:79:0E:6F:D8:0C:16:76:82:CE:81:5B:3A:C4:BA:0A:4B:A5:98:48
Authority key identifier: FC:21:6A:38:50:43:BA:B1:36:78:7A:C0:99:82:54:61:90:CB:DE:92
Certificate issuer:       /CN=F3618989AF/serialNumber=FC216A385043BAB136787AC09982546190CBDE92
Certificate serial:       0849
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/_CFqOFBDurE2eHrAmYJUYZDL3pI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3618989/DE67E01AC03F11EA886D1D21F8AEA228/_CFqOFBDurE2eHrAmYJUYZDL3pI.mft
Manifest number:          0846
Signing time:             Mon 02 Mar 2026 01:28:01 +0000
Manifest this update:     Mon 02 Mar 2026 01:28:01 +0000
Manifest next update:     Wed 04 Mar 2026 01:28:00 +0000
Files and hashes:         1: _CFqOFBDurE2eHrAmYJUYZDL3pI.crl (hash: JADtHTnIw+Frblk18pY2ZIKL8PxFWLq4Ol6YRmhMejA=)
                          2: 7D1D251CC04011EA957AEB21F8AEA228.roa (hash: t/ypp67l7oHU7gQc6/GfToKk0xAfDBleGGehP++nK88=)
                          3: 234A1CC0C04011EABDD07A21F8AEA228.roa (hash: qxLDaEM+dLvWNlnURJT6LsT7+vD5fBM4n0SH7Mu85No=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3618989/DE67E01AC03F11EA886D1D21F8AEA228/_CFqOFBDurE2eHrAmYJUYZDL3pI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3618989/DE67E01AC03F11EA886D1D21F8AEA228/_CFqOFBDurE2eHrAmYJUYZDL3pI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/_CFqOFBDurE2eHrAmYJUYZDL3pI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2121 (0x849)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3618989AF, serialNumber=FC216A385043BAB136787AC09982546190CBDE92
        Validity
            Not Before: Mar  2 01:28:01 2026 GMT
            Not After : Mar  4 01:28:00 2026 GMT
        Subject: CN=69a4e7a1-5bc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:2d:ca:e3:36:35:7e:8b:95:da:45:8c:3a:b5:
                    e3:4a:ec:7c:84:fb:87:b5:e5:a4:b4:e4:66:1e:5e:
                    86:05:57:db:0f:12:2d:71:03:2d:8d:fa:e0:49:82:
                    30:4a:a0:ea:17:a8:26:8c:60:fb:05:e8:4d:ee:5f:
                    fa:af:d6:eb:f8:c0:5b:68:a3:a7:df:a6:65:f4:69:
                    4b:5c:83:91:ec:81:7d:70:d3:d6:7b:ae:9b:1b:5f:
                    87:b8:b8:74:04:f5:bb:e6:2d:47:18:73:a1:00:15:
                    9d:c3:f7:8d:3a:1d:c5:bf:30:c4:fa:72:09:4b:46:
                    48:66:e1:c0:97:aa:c7:16:2f:10:7c:f8:22:b7:a9:
                    63:9e:60:37:01:02:f0:0c:3f:35:3e:0e:2e:44:54:
                    24:71:d1:6b:80:c0:d5:f5:38:1c:e4:ca:b4:4b:af:
                    50:e9:10:90:e3:a7:50:af:43:b9:a2:97:c7:b0:06:
                    80:67:b0:c8:4a:13:a9:7c:77:6f:93:3b:10:37:2a:
                    16:cf:87:fe:bb:ec:68:df:1e:67:32:24:56:ea:d7:
                    b3:51:35:df:e0:6d:74:c2:52:02:11:5e:ad:af:57:
                    49:36:7b:4a:c7:15:01:c4:bc:21:2b:95:b2:ba:d7:
                    0b:8f:52:fa:b6:3f:18:92:a9:08:a5:4d:a7:f5:9d:
                    42:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:79:0E:6F:D8:0C:16:76:82:CE:81:5B:3A:C4:BA:0A:4B:A5:98:48
            X509v3 Authority Key Identifier:
                keyid:FC:21:6A:38:50:43:BA:B1:36:78:7A:C0:99:82:54:61:90:CB:DE:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3618989/DE67E01AC03F11EA886D1D21F8AEA228/_CFqOFBDurE2eHrAmYJUYZDL3pI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_CFqOFBDurE2eHrAmYJUYZDL3pI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3618989/DE67E01AC03F11EA886D1D21F8AEA228/_CFqOFBDurE2eHrAmYJUYZDL3pI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:65:80:0d:0c:be:09:81:59:1a:4f:60:d2:46:57:33:5d:8f:
         c8:73:9c:43:74:be:d7:19:b2:36:b5:cb:df:70:4f:18:3e:5b:
         65:b7:7a:cf:5f:10:c3:5f:6f:3a:7c:b4:c0:d2:39:e9:6e:aa:
         24:63:02:d7:e1:94:9b:cc:1e:ac:4e:f9:98:8e:00:8d:06:1d:
         88:c8:80:af:1c:1a:db:95:2e:12:45:25:a5:9b:cd:53:74:6b:
         49:5e:1c:c2:e9:c3:9b:dd:64:57:01:b9:a2:e8:6d:4c:47:a1:
         8c:51:ff:0b:fa:11:4a:56:9d:fc:23:21:c1:8e:02:b1:e8:8f:
         10:0a:a4:d5:de:b7:2b:69:16:18:aa:a0:d4:00:2c:e9:cb:76:
         fa:8a:a5:07:20:62:7b:a9:27:f1:7d:fb:2d:57:18:93:4b:8c:
         88:75:5c:2f:ac:f9:68:25:54:3f:94:ff:28:39:a8:6a:5b:2d:
         53:ff:98:10:ca:f6:6a:79:08:4a:5d:2b:d0:a5:71:df:fa:a7:
         68:9d:69:0b:84:ed:1d:eb:b1:7c:d2:6b:43:30:08:37:81:3c:
         e8:d6:a8:08:40:f3:6b:1b:83:8d:8e:bf:c4:9f:b9:55:c7:8c:
         bf:2f:85:f7:b3:9a:0f:64:4e:c5:ba:b7:70:3b:0b:20:9a:e5:
         e1:4c:82:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:10:44 2026 by rpki-client