Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3619CE0/FC275A24AD5F11EF91E30957762E951A/v1plQpwwfXk7DXBa2V_P60lCIWo.mft
File:                     v1plQpwwfXk7DXBa2V_P60lCIWo.mft (raw, json)
Hash identifier:          GtUaoq4bzbRR3KTAO6pYGxaL5NKf1YT9jwEKIaz8sMc=
Subject key identifier:   E7:61:F5:7A:82:3A:01:06:4D:90:A2:65:EB:CE:F4:CD:82:69:E8:CD
Authority key identifier: BF:5A:65:42:9C:30:7D:79:3B:0D:70:5A:D9:5F:CF:EB:49:42:21:6A
Certificate issuer:       /CN=F3619CE0AF/serialNumber=BF5A65429C307D793B0D705AD95FCFEB4942216A
Certificate serial:       01D8
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/v1plQpwwfXk7DXBa2V_P60lCIWo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3619CE0/FC275A24AD5F11EF91E30957762E951A/v1plQpwwfXk7DXBa2V_P60lCIWo.mft
Manifest number:          01D7
Signing time:             Mon 02 Mar 2026 03:11:55 +0000
Manifest this update:     Mon 02 Mar 2026 03:11:54 +0000
Manifest next update:     Wed 04 Mar 2026 03:11:54 +0000
Files and hashes:         1: v1plQpwwfXk7DXBa2V_P60lCIWo.crl (hash: LM/01B6t+E23dujQCB1d9YTtDptsWnZMkv98riSHasY=)
                          2: 3995E772B22911EF8FFA5C88762E951A.roa (hash: q5GdnXuThvMc7lFNIre+h57AswQCqM5v2uH6+3ENceQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3619CE0/FC275A24AD5F11EF91E30957762E951A/v1plQpwwfXk7DXBa2V_P60lCIWo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3619CE0/FC275A24AD5F11EF91E30957762E951A/v1plQpwwfXk7DXBa2V_P60lCIWo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/v1plQpwwfXk7DXBa2V_P60lCIWo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 472 (0x1d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3619CE0AF, serialNumber=BF5A65429C307D793B0D705AD95FCFEB4942216A
        Validity
            Not Before: Mar  2 03:11:54 2026 GMT
            Not After : Mar  4 03:11:54 2026 GMT
        Subject: CN=69a4fffa-d7d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:81:62:5d:da:30:8e:1a:45:e8:66:f4:e7:71:
                    59:f6:83:b6:87:6e:40:80:df:a0:4e:54:3f:d5:f3:
                    19:6d:94:e9:0d:e9:af:f6:db:a7:88:8c:a2:8c:d7:
                    38:54:8d:fd:59:eb:bf:33:c5:cc:c6:16:76:67:e2:
                    f5:b3:28:0e:91:0c:d7:7a:84:2d:59:47:96:23:7f:
                    d6:b0:36:f1:d1:be:95:30:ba:fb:8b:a5:37:b3:ec:
                    63:a3:09:85:58:ea:73:28:ca:de:54:63:c8:d6:e9:
                    81:8f:c8:2a:85:d4:53:93:0c:44:8d:a9:99:5c:35:
                    9a:b3:43:3b:c8:36:dc:56:9f:92:ad:a8:29:a2:6a:
                    2c:09:5e:46:59:ff:72:97:1d:90:3c:45:4b:85:fa:
                    72:ad:5c:c6:9e:ad:fc:39:73:ed:ac:16:d2:ac:4c:
                    0b:70:41:89:67:6b:99:27:e5:b5:30:d7:f0:24:02:
                    1c:fc:58:58:db:db:8d:69:1a:5c:11:2c:7b:b2:30:
                    1d:68:d8:c3:57:aa:6b:af:a4:e3:f3:1f:0f:bf:29:
                    7b:81:c5:bc:35:8c:97:17:4b:72:33:a7:9e:a0:28:
                    cf:ec:17:40:0d:bf:22:7e:a2:71:13:b0:fb:71:fd:
                    10:13:3a:fa:96:50:ea:fa:54:f9:cc:2c:12:16:c4:
                    d0:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:61:F5:7A:82:3A:01:06:4D:90:A2:65:EB:CE:F4:CD:82:69:E8:CD
            X509v3 Authority Key Identifier:
                keyid:BF:5A:65:42:9C:30:7D:79:3B:0D:70:5A:D9:5F:CF:EB:49:42:21:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3619CE0/FC275A24AD5F11EF91E30957762E951A/v1plQpwwfXk7DXBa2V_P60lCIWo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/v1plQpwwfXk7DXBa2V_P60lCIWo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3619CE0/FC275A24AD5F11EF91E30957762E951A/v1plQpwwfXk7DXBa2V_P60lCIWo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:ac:e2:78:97:43:f1:a6:ac:ac:51:9d:e0:ad:70:3e:b9:e9:
         2a:02:03:e3:ec:d0:1c:2a:21:cc:b3:65:ad:46:0f:f5:14:6f:
         40:63:66:f5:d4:1e:08:fc:5d:68:9a:5d:5b:5a:7f:7e:8a:94:
         4c:31:dd:24:2a:9e:8b:0c:d0:d7:51:b4:0e:c9:c7:c7:b3:d2:
         fb:d1:57:fe:28:a8:37:d2:7b:0c:7e:81:f3:56:50:ae:82:2f:
         95:43:a3:2b:e0:7d:c4:e2:66:e2:bf:13:09:95:d4:d1:fb:d8:
         9f:c6:bc:8d:a3:dc:3d:1a:d4:67:7a:52:4d:96:50:d4:86:5b:
         40:db:0c:a9:7e:9a:c4:86:3c:f7:63:8d:4e:17:cd:43:ab:9e:
         00:1c:c0:81:07:86:81:01:9e:b5:8c:53:1f:77:0e:25:02:34:
         d9:3f:85:a3:4e:86:74:45:85:f7:40:71:e0:68:ed:61:4a:7c:
         90:ad:90:2a:2f:9d:24:a5:98:de:1f:52:33:2a:91:81:94:af:
         4b:48:98:5e:db:6c:fc:92:9c:fc:6a:b7:fe:d9:47:f6:48:b6:
         3b:c5:a3:45:ef:76:ad:da:a2:d6:e7:85:16:2d:98:d3:ee:1e:
         dd:c7:94:43:e5:65:b5:b9:dc:1b:23:2b:90:a2:57:76:d1:9b:
         e5:c1:8d:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:20:01 2026 by rpki-client