Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361C63D/5342378C74D211EFA0CA8366762E951A/8WD77pBHtMM9L6HZ04IBrg0Yw58.mft
File:                     8WD77pBHtMM9L6HZ04IBrg0Yw58.mft (raw, json)
Hash identifier:          eBJHvTYYIULrFQFRgTIfD9ALLJeVPUISPA4zyW84sPw=
Subject key identifier:   98:BC:EF:50:2C:8D:33:0B:F5:31:D7:B5:87:15:74:3F:22:42:1E:4E
Authority key identifier: F1:60:FB:EE:90:47:B4:C3:3D:2F:A1:D9:D3:82:01:AE:0D:18:C3:9F
Certificate issuer:       /CN=F361C63DAF/serialNumber=F160FBEE9047B4C33D2FA1D9D38201AE0D18C39F
Certificate serial:       0222
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/8WD77pBHtMM9L6HZ04IBrg0Yw58.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361C63D/5342378C74D211EFA0CA8366762E951A/8WD77pBHtMM9L6HZ04IBrg0Yw58.mft
Manifest number:          0221
Signing time:             Mon 02 Mar 2026 03:06:25 +0000
Manifest this update:     Mon 02 Mar 2026 03:06:25 +0000
Manifest next update:     Wed 04 Mar 2026 03:06:25 +0000
Files and hashes:         1: 8WD77pBHtMM9L6HZ04IBrg0Yw58.crl (hash: nHwKKTc1e8E+9ORvZry0Z1aqYgIwu7voT4x3CuLZ6lA=)
                          2: C7ECF7DE74D211EFA2250567762E951A.roa (hash: 2JN5T3Dym/uP+aQB4QDNBNpdJtMGonjqC1jPbmHacMk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361C63D/5342378C74D211EFA0CA8366762E951A/8WD77pBHtMM9L6HZ04IBrg0Yw58.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361C63D/5342378C74D211EFA0CA8366762E951A/8WD77pBHtMM9L6HZ04IBrg0Yw58.mft
                          rsync://rpki.afrinic.net/repository/afrinic/8WD77pBHtMM9L6HZ04IBrg0Yw58.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 546 (0x222)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361C63DAF, serialNumber=F160FBEE9047B4C33D2FA1D9D38201AE0D18C39F
        Validity
            Not Before: Mar  2 03:06:25 2026 GMT
            Not After : Mar  4 03:06:25 2026 GMT
        Subject: CN=69a4feb1-26d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d6:ef:66:f3:58:1f:ff:a3:8a:a0:89:1f:50:
                    a2:4b:5e:25:3f:55:18:9b:c8:44:c8:ac:03:0a:84:
                    8a:eb:f7:a9:5c:0e:fb:b6:5d:48:50:b6:3c:14:40:
                    2d:af:95:9b:c1:0e:24:b0:f0:cb:0b:68:2b:86:7f:
                    e3:b6:43:18:3f:79:3b:3c:b3:f3:ba:0f:66:09:58:
                    9f:e2:40:ca:f4:4b:00:5b:dd:16:01:c8:0e:21:c9:
                    ad:0b:d6:43:7e:e8:e0:91:1e:fb:64:bb:65:49:f2:
                    62:86:29:3b:eb:70:31:c3:88:d0:d1:e7:f9:a9:c3:
                    15:2a:9c:5b:c2:2b:1d:89:94:ef:8d:03:04:0a:ba:
                    f2:67:77:8c:75:b4:94:23:6f:7c:06:50:c9:26:06:
                    92:30:05:22:30:ae:a6:41:91:9f:15:1a:bb:d1:86:
                    da:8a:18:b8:7b:64:0c:ce:4a:84:a0:bb:a2:41:43:
                    5b:df:bb:7a:68:84:3c:c6:bf:cc:44:f2:49:4c:f0:
                    f1:90:9b:82:27:34:c2:05:bd:2c:64:27:e3:f7:42:
                    2e:bc:b2:55:60:a6:84:89:c9:9b:4e:3c:ba:20:0e:
                    49:f6:cf:7f:71:33:86:3c:9b:d6:d8:19:20:02:57:
                    a8:13:6b:60:eb:8b:a2:68:76:71:29:82:43:e8:e5:
                    93:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:BC:EF:50:2C:8D:33:0B:F5:31:D7:B5:87:15:74:3F:22:42:1E:4E
            X509v3 Authority Key Identifier:
                keyid:F1:60:FB:EE:90:47:B4:C3:3D:2F:A1:D9:D3:82:01:AE:0D:18:C3:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361C63D/5342378C74D211EFA0CA8366762E951A/8WD77pBHtMM9L6HZ04IBrg0Yw58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/8WD77pBHtMM9L6HZ04IBrg0Yw58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361C63D/5342378C74D211EFA0CA8366762E951A/8WD77pBHtMM9L6HZ04IBrg0Yw58.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:73:48:d4:c5:ec:4b:01:88:f1:ec:39:62:a0:e2:46:ae:5c:
         fa:28:6a:23:9a:2f:70:9b:98:77:e9:25:9e:43:78:16:d8:01:
         02:57:8e:32:14:bb:ce:de:98:18:52:e6:83:91:d7:87:74:0d:
         28:c8:91:aa:32:56:b5:f9:a9:3e:79:aa:82:cf:8f:a4:c2:1a:
         95:f9:fb:d9:7b:4f:3d:09:fb:45:8d:e2:21:7f:1e:77:de:d7:
         01:5e:9a:f2:f6:2f:13:03:ba:16:d1:8f:f2:05:80:b1:53:f8:
         0b:f7:bd:05:f2:c1:64:91:54:58:fc:96:a8:ec:ee:92:ea:1d:
         d0:a6:84:2f:f6:60:86:e5:8a:c0:95:c4:76:cd:e4:eb:06:ff:
         87:40:fc:7e:da:44:cd:e1:c0:87:fc:72:af:db:f0:62:01:28:
         a2:1e:0a:6c:f7:82:9f:a6:9f:0f:e4:d5:dd:0d:c9:bd:a9:51:
         44:ef:10:a8:78:c1:8f:8b:83:c9:75:43:b4:f2:57:8f:5f:f1:
         9d:f7:b8:0e:9a:8b:be:66:49:68:c1:da:35:bb:76:cd:e2:ff:
         40:e8:d5:b3:f3:ae:36:e9:89:b2:75:46:e5:f2:be:ff:b6:9d:
         6b:e1:bd:3f:a7:1b:8b:2f:f2:9a:20:9b:f2:ca:a5:2c:dc:29:
         33:4c:52:fa
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAiIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MUM2M0RBRjExMC8GA1UEBRMoRjE2MEZCRUU5MDQ3QjRDMzNEMkZBMUQ5RDM4MjAx
QUUwRDE4QzM5RjAeFw0yNjAzMDIwMzA2MjVaFw0yNjAzMDQwMzA2MjVaMBgxFjAU
BgNVBAMTDTY5YTRmZWIxLTI2ZDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCx1u9m81gf/6OKoIkfUKJLXiU/VRibyETIrAMKhIrr96lcDvu2XUhQtjwU
QC2vlZvBDiSw8MsLaCuGf+O2Qxg/eTs8s/O6D2YJWJ/iQMr0SwBb3RYByA4hya0L
1kN+6OCRHvtku2VJ8mKGKTvrcDHDiNDR5/mpwxUqnFvCKx2JlO+NAwQKuvJnd4x1
tJQjb3wGUMkmBpIwBSIwrqZBkZ8VGrvRhtqKGLh7ZAzOSoSgu6JBQ1vfu3pohDzG
v8xE8klM8PGQm4InNMIFvSxkJ+P3Qi68slVgpoSJyZtOPLogDkn2z39xM4Y8m9bY
GSACV6gTa2Dri6JodnEpgkPo5ZP5AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUmLzv
UCyNMwv1Mde1hxV0PyJCHk4wHwYDVR0jBBgwFoAU8WD77pBHtMM9L6HZ04IBrg0Y
w58wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjFDNjNELzUzNDIzNzhDNzREMjExRUZBMENBODM2Njc2MkU5NTFBLzhXRDc3
cEJIdE1NOUw2SFowNElCcmcwWXc1OC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzhXRDc3cEJIdE1NOUw2SFowNElCcmcwWXc1OC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MUM2M0QvNTM0MjM3OEM3NEQyMTFFRkEwQ0E4MzY2NzYy
RTk1MUEvOFdENzdwQkh0TU05TDZIWjA0SUJyZzBZdzU4Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBuc0jUxexLAYjx7DlioOJGrlz6KGoj
mi9wm5h36SWeQ3gW2AECV44yFLvO3pgYUuaDkdeHdA0oyJGqMla1+ak+eaqCz4+k
whqV+fvZe089CftFjeIhfx533tcBXpry9i8TA7oW0Y/yBYCxU/gL970F8sFkkVRY
/Jao7O6S6h3QpoQv9mCG5YrAlcR2zeTrBv+HQPx+2kTN4cCH/HKv2/BiASiiHgps
94Kfpp8P5NXdDcm9qVFE7xCoeMGPi4PJdUO08lePX/Gd97gOmou+Zklowdo1u3bN
4v9A6NWz86426YmydUbl8r7/tp1r4b0/pxuLL/KaIJvyyqUs3CkzTFL6
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:42:58 2026 by rpki-client