Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361CA27/65AC04E001C911F1AF2D178EDAE4EC9C/kL4BhbknyIKl6feqNl6TXL9FWfg.mft
File:                     kL4BhbknyIKl6feqNl6TXL9FWfg.mft (raw, json)
Hash identifier:          DfqWh41XAOXeogAXAmXKlPrq4m3CSI5Trl+pbHNdrHI=
Subject key identifier:   C3:6F:95:28:A6:B6:7F:D2:D4:7B:D0:C9:3C:9F:70:CB:EE:08:56:EF
Authority key identifier: 90:BE:01:85:B9:27:C8:82:A5:E9:F7:AA:36:5E:93:5C:BF:45:59:F8
Certificate issuer:       /CN=F361CA27AF/serialNumber=90BE0185B927C882A5E9F7AA365E935CBF4559F8
Certificate serial:       1B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/kL4BhbknyIKl6feqNl6TXL9FWfg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361CA27/65AC04E001C911F1AF2D178EDAE4EC9C/kL4BhbknyIKl6feqNl6TXL9FWfg.mft
Manifest number:          1B
Signing time:             Mon 02 Mar 2026 03:39:56 +0000
Manifest this update:     Mon 02 Mar 2026 03:39:56 +0000
Manifest next update:     Wed 04 Mar 2026 03:39:56 +0000
Files and hashes:         1: kL4BhbknyIKl6feqNl6TXL9FWfg.crl (hash: Oefl4VbK67SkDfCajGNbRMCGMpu1nLX/nZTERp2Wni4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361CA27/65AC04E001C911F1AF2D178EDAE4EC9C/kL4BhbknyIKl6feqNl6TXL9FWfg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361CA27/65AC04E001C911F1AF2D178EDAE4EC9C/kL4BhbknyIKl6feqNl6TXL9FWfg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/kL4BhbknyIKl6feqNl6TXL9FWfg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27 (0x1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361CA27AF, serialNumber=90BE0185B927C882A5E9F7AA365E935CBF4559F8
        Validity
            Not Before: Mar  2 03:39:56 2026 GMT
            Not After : Mar  4 03:39:56 2026 GMT
        Subject: CN=69a5068c-9594
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:c0:d2:d4:0d:cf:60:85:35:b8:f9:c7:01:45:
                    88:0e:6a:1e:d2:a5:20:d1:56:be:38:33:87:4b:89:
                    d9:7a:49:de:bf:4e:65:fb:32:c3:ad:14:1b:31:d9:
                    69:c0:38:18:d0:d3:ca:14:56:75:fc:01:82:0a:da:
                    a7:5a:90:83:97:4e:78:77:e3:36:f4:23:f1:21:90:
                    c3:02:f8:26:7f:54:d7:69:6f:c3:c6:d2:ac:7e:db:
                    89:d0:a8:5f:66:4c:73:0f:5d:fc:06:6a:b8:57:b0:
                    00:d0:46:e7:47:fc:69:8d:04:ad:d8:d0:e4:22:9a:
                    bf:d9:b8:12:5b:64:f2:3f:35:24:c7:07:c9:93:15:
                    28:92:31:e2:0b:65:ac:04:e0:a1:26:2d:96:8a:33:
                    df:73:31:72:db:f5:7a:5c:7c:14:96:c4:23:dd:2e:
                    e4:72:cc:f4:23:47:a8:eb:66:98:1a:d9:91:62:05:
                    d7:97:eb:30:9a:ec:65:52:7c:12:32:f7:d5:ef:10:
                    86:1c:dd:a7:08:2b:7c:37:9c:9a:fe:50:3f:7a:ab:
                    61:d6:f8:1a:7f:01:c3:46:be:07:03:78:fe:d9:f1:
                    08:aa:db:63:57:1c:f8:1b:d6:e5:3e:5d:41:23:eb:
                    6d:7c:f8:62:cb:97:82:6e:21:ba:4d:7e:0e:28:92:
                    c0:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:6F:95:28:A6:B6:7F:D2:D4:7B:D0:C9:3C:9F:70:CB:EE:08:56:EF
            X509v3 Authority Key Identifier:
                keyid:90:BE:01:85:B9:27:C8:82:A5:E9:F7:AA:36:5E:93:5C:BF:45:59:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361CA27/65AC04E001C911F1AF2D178EDAE4EC9C/kL4BhbknyIKl6feqNl6TXL9FWfg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kL4BhbknyIKl6feqNl6TXL9FWfg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361CA27/65AC04E001C911F1AF2D178EDAE4EC9C/kL4BhbknyIKl6feqNl6TXL9FWfg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:9c:b0:8a:89:d1:49:04:71:01:f2:09:6a:1b:d2:36:62:a5:
         25:65:71:79:67:d3:f0:7f:99:01:78:49:79:2e:ca:87:e7:44:
         8a:8c:18:14:b8:bc:04:f9:90:63:79:19:0a:4a:85:fa:a8:de:
         55:ca:c8:b2:ae:31:a1:3a:a9:82:64:9c:da:d1:6e:16:0b:03:
         fe:0b:a5:5b:5e:86:aa:bf:d5:4f:20:d6:66:0c:da:b6:77:67:
         f8:a9:4d:f6:a2:fa:33:d8:19:bb:04:6a:49:8e:52:ae:e1:99:
         17:b9:65:d4:aa:86:58:41:ca:9a:f2:a5:29:06:4b:6c:8b:b3:
         9d:b6:de:e9:b5:86:ed:69:2a:b2:5f:6f:69:3a:80:94:be:28:
         23:d2:f9:b7:2c:27:0f:b4:f0:dc:5b:75:e0:4f:8e:8d:35:54:
         18:b5:d7:e1:b8:e1:db:64:5b:8a:35:bc:f5:8a:7e:95:fe:eb:
         50:42:7d:4e:0b:89:3e:1a:71:10:1e:89:9d:94:52:b5:ad:fc:
         b7:44:91:76:3e:b8:4f:84:89:da:5b:68:76:24:c7:4a:7f:e5:
         90:a1:45:7e:49:a7:41:39:93:88:2b:02:78:a6:6a:49:09:a5:
         0e:eb:0a:02:da:49:09:bf:b8:da:cb:5a:d3:ff:f4:5f:03:f7:
         78:45:13:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:19:15 2026 by rpki-client