Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3619AFB/CE504C0A9BA511ED9841AEC7F1222468/UD0YKNTvDNxjpYpU9cDJktI7wao.mft
File:                     UD0YKNTvDNxjpYpU9cDJktI7wao.mft (raw, json)
Hash identifier:          8T+7H31otRKW/X8g3tyFMEHA1vnbUSUgRi+IYPjr0p0=
Subject key identifier:   24:90:79:D4:4A:8A:7C:61:60:E7:D5:49:AB:53:7E:46:DC:D3:06:6C
Authority key identifier: 50:3D:18:28:D4:EF:0C:DC:63:A5:8A:54:F5:C0:C9:92:D2:3B:C1:AA
Certificate issuer:       /CN=F3619AFBAF/serialNumber=503D1828D4EF0CDC63A58A54F5C0C992D23BC1AA
Certificate serial:       0498
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/UD0YKNTvDNxjpYpU9cDJktI7wao.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3619AFB/CE504C0A9BA511ED9841AEC7F1222468/UD0YKNTvDNxjpYpU9cDJktI7wao.mft
Manifest number:          0494
Signing time:             Sun 01 Mar 2026 02:17:29 +0000
Manifest this update:     Sun 01 Mar 2026 02:17:28 +0000
Manifest next update:     Tue 03 Mar 2026 02:17:28 +0000
Files and hashes:         1: UD0YKNTvDNxjpYpU9cDJktI7wao.crl (hash: Y9435a5WCVTcP8h3G9ultmFLLdQ7cuzRaAYlv494xMc=)
                          2: 7BADB9E6F07211EF92AD9376762E951A.roa (hash: B2o+mnnPb8VJ0KXGT1vN0Wq4qZm+iGs6+p3J/guAPnc=)
                          3: F1E5F272F07211EFAFA7997A762E951A.roa (hash: zuqVO/yJxreB8Tl25mp3hH6BAgTW+c+L7Zu/GOdPyYc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3619AFB/CE504C0A9BA511ED9841AEC7F1222468/UD0YKNTvDNxjpYpU9cDJktI7wao.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3619AFB/CE504C0A9BA511ED9841AEC7F1222468/UD0YKNTvDNxjpYpU9cDJktI7wao.mft
                          rsync://rpki.afrinic.net/repository/afrinic/UD0YKNTvDNxjpYpU9cDJktI7wao.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 03 Mar 2026 00:07:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1176 (0x498)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3619AFBAF, serialNumber=503D1828D4EF0CDC63A58A54F5C0C992D23BC1AA
        Validity
            Not Before: Mar  1 02:17:28 2026 GMT
            Not After : Mar  3 02:17:28 2026 GMT
        Subject: CN=69a3a1b8-4d57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ed:35:55:63:38:44:71:33:0a:4a:7e:55:a4:
                    b6:5b:00:7d:af:3c:d9:d5:bc:77:90:28:43:d4:3f:
                    26:20:12:4f:af:98:0a:56:a3:80:e3:12:fc:39:05:
                    db:20:1d:c3:64:12:18:25:e1:72:e5:7a:8d:16:53:
                    d8:0a:75:fe:a8:c3:13:a1:ab:da:00:a3:f3:76:99:
                    e5:e7:8a:a5:0b:6a:8d:33:3d:1b:a7:73:05:5d:cd:
                    5d:a4:f3:28:7c:0b:38:82:b0:e9:85:89:ad:d9:5d:
                    d7:4d:10:f1:26:b6:98:bc:54:51:35:37:fe:16:95:
                    a8:7a:15:cb:a4:c2:15:58:58:30:08:83:50:55:78:
                    e2:d6:99:d9:21:7f:84:c0:2e:9a:16:81:56:47:c9:
                    01:f0:cb:28:81:f0:89:84:d1:9f:b4:ab:8c:1f:5c:
                    fc:e5:a7:25:47:3d:17:39:6c:17:69:c7:c3:40:ee:
                    40:6f:8d:87:74:2d:d5:96:df:54:52:89:a3:16:d1:
                    1d:99:c1:0d:85:29:13:4e:c0:e7:1b:7c:d5:fb:5e:
                    cd:30:a7:92:e6:2d:79:b8:2e:a9:25:f5:5e:81:00:
                    d3:e4:c3:50:27:d5:7c:a2:2a:25:66:e3:f8:f6:87:
                    76:91:e6:18:4b:d8:fc:95:6d:2b:33:e7:a5:e5:e1:
                    93:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:90:79:D4:4A:8A:7C:61:60:E7:D5:49:AB:53:7E:46:DC:D3:06:6C
            X509v3 Authority Key Identifier:
                keyid:50:3D:18:28:D4:EF:0C:DC:63:A5:8A:54:F5:C0:C9:92:D2:3B:C1:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3619AFB/CE504C0A9BA511ED9841AEC7F1222468/UD0YKNTvDNxjpYpU9cDJktI7wao.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/UD0YKNTvDNxjpYpU9cDJktI7wao.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3619AFB/CE504C0A9BA511ED9841AEC7F1222468/UD0YKNTvDNxjpYpU9cDJktI7wao.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:30:d6:26:86:e1:bf:13:04:a2:62:5e:cc:90:b6:86:bb:94:
         24:0e:31:8f:d0:ea:73:10:1d:b9:25:c4:db:cc:38:14:04:68:
         0a:70:69:77:f6:a6:d6:ba:66:52:e2:42:45:5c:46:16:24:fe:
         13:80:08:e0:40:bb:9d:ab:1b:d7:60:0a:30:f4:bf:42:b7:28:
         03:24:93:cd:1b:23:a9:3b:38:5c:c0:62:c8:2d:d1:94:43:26:
         c9:3c:17:34:1e:bd:e5:95:71:26:d2:cf:cb:90:11:15:62:be:
         c9:48:96:2f:0a:d2:84:b7:19:cc:6c:20:98:f1:5f:96:11:2a:
         1b:c6:20:2e:61:7d:63:e8:0d:c7:ad:26:27:0f:99:e1:08:ca:
         2b:37:e8:e7:e2:ac:94:31:16:22:56:e0:fc:7b:1c:4e:07:89:
         3e:67:1f:2a:15:53:5f:0d:4e:2f:47:9f:46:fe:27:66:85:72:
         cb:5d:32:af:77:25:1f:ca:a6:9d:28:b8:b5:ab:fe:39:98:1e:
         24:d9:65:e0:c0:8b:4c:91:95:e4:e0:9c:15:9a:97:4b:8c:e1:
         28:eb:c1:86:b9:1d:e1:7d:a4:d0:01:f1:e3:02:d2:65:1b:6d:
         d4:58:2b:7f:69:24:84:b2:7e:7d:b2:db:1b:8c:2a:7d:e6:90:
         a1:47:65:63
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBJgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MTlBRkJBRjExMC8GA1UEBRMoNTAzRDE4MjhENEVGMENEQzYzQTU4QTU0RjVDMEM5
OTJEMjNCQzFBQTAeFw0yNjAzMDEwMjE3MjhaFw0yNjAzMDMwMjE3MjhaMBgxFjAU
BgNVBAMTDTY5YTNhMWI4LTRkNTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC+7TVVYzhEcTMKSn5VpLZbAH2vPNnVvHeQKEPUPyYgEk+vmApWo4DjEvw5
BdsgHcNkEhgl4XLleo0WU9gKdf6owxOhq9oAo/N2meXniqULao0zPRuncwVdzV2k
8yh8CziCsOmFia3ZXddNEPEmtpi8VFE1N/4Wlah6FcukwhVYWDAIg1BVeOLWmdkh
f4TALpoWgVZHyQHwyyiB8ImE0Z+0q4wfXPzlpyVHPRc5bBdpx8NA7kBvjYd0LdWW
31RSiaMW0R2ZwQ2FKRNOwOcbfNX7Xs0wp5LmLXm4Lqkl9V6BANPkw1An1XyiKiVm
4/j2h3aR5hhL2PyVbSsz56Xl4ZP3AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUJJB5
1EqKfGFg59VJq1N+RtzTBmwwHwYDVR0jBBgwFoAUUD0YKNTvDNxjpYpU9cDJktI7
waowDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjE5QUZCL0NFNTA0QzBBOUJBNTExRUQ5ODQxQUVDN0YxMjIyNDY4L1VEMFlL
TlR2RE54anBZcFU5Y0RKa3RJN3dhby5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1VEMFlLTlR2RE54anBZcFU5Y0RKa3RJN3dhby5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MTlBRkIvQ0U1MDRDMEE5QkE1MTFFRDk4NDFBRUM3RjEy
MjI0NjgvVUQwWUtOVHZETnhqcFlwVTljREprdEk3d2FvLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBbMNYmhuG/EwSiYl7MkLaGu5QkDjGP
0OpzEB25JcTbzDgUBGgKcGl39qbWumZS4kJFXEYWJP4TgAjgQLudqxvXYAow9L9C
tygDJJPNGyOpOzhcwGLILdGUQybJPBc0Hr3llXEm0s/LkBEVYr7JSJYvCtKEtxnM
bCCY8V+WESobxiAuYX1j6A3HrSYnD5nhCMorN+jn4qyUMRYiVuD8exxOB4k+Zx8q
FVNfDU4vR59G/idmhXLLXTKvdyUfyqadKLi1q/45mB4k2WXgwItMkZXk4JwVmpdL
jOEo68GGuR3hfaTQAfHjAtJlG23UWCt/aSSEsn59stsbjCp95pChR2Vj
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:19:21 2026 by rpki-client