Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/KyRChIF0qoiURpp3m5_X2klYxmk.mft
File:                     KyRChIF0qoiURpp3m5_X2klYxmk.mft (raw, json)
Hash identifier:          Uth+FNZ3ygvsF5OkNaBPgIfrw6YMhF7/hJOU6ub/e/M=
Subject key identifier:   3F:31:FB:3B:30:25:64:A2:0D:CF:15:EB:7C:7F:96:53:7E:0A:94:32
Authority key identifier: 2B:24:42:84:81:74:AA:88:94:46:9A:77:9B:9F:D7:DA:49:58:C6:69
Certificate issuer:       /CN=F361D299AF/serialNumber=2B2442848174AA8894469A779B9FD7DA4958C669
Certificate serial:       0F5F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/KyRChIF0qoiURpp3m5_X2klYxmk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/KyRChIF0qoiURpp3m5_X2klYxmk.mft
Manifest number:          0F51
Signing time:             Mon 02 Mar 2026 00:53:24 +0000
Manifest this update:     Mon 02 Mar 2026 00:53:24 +0000
Manifest next update:     Wed 04 Mar 2026 00:53:24 +0000
Files and hashes:         1: KyRChIF0qoiURpp3m5_X2klYxmk.crl (hash: 3oDj7m9HqT8dCntQ+TAenRDljeSOhDthCYzwNJYOIaQ=)
                          2: 7C0BFD26F4F511EFB3E4B9B5762E951A.roa (hash: 5wXs7RMJiyud6JyXFkR1o4z/jMZs+dRUug3mlkais2g=)
                          3: 603F44FEF4F511EF825958B5762E951A.roa (hash: Ba8AFZPMa3HGsyKURqI70r5EW0Munyy3hZ7Nh86XhXk=)
                          4: E90F871CA09811ECA7CC64845A40D577.roa (hash: oxWlZcS9cWEi0+CZBGrhmI9nrUQ78IAE+xwjMFu/v9A=)
                          5: BE403084F2A411EFA60BB451762E951A.roa (hash: ia48RiXRj/TS/ZIH2z01yABB9uM5rlXdHXcHKIZJfs4=)
                          6: 30DA2FD2D99011EBB3AFA075F8AEA228.roa (hash: p31uwZZBrdaLtBzico1EAerpqK+JUtNLbRhjPY74axU=)
                          7: E5D310BCF2A411EF9A7E2652762E951A.roa (hash: ZQkJvtNfrwoPVbwO+rTZ+tWRmqiD9tIx3HghRCOVm/Y=)
                          8: CAFDB41AD1C211F0A9C2D38DDAE4EC9C.roa (hash: otkoUIeVC07ZHogmrq0P3r+9c9Hq45HdG/7TPnP6EBo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/KyRChIF0qoiURpp3m5_X2klYxmk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/KyRChIF0qoiURpp3m5_X2klYxmk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/KyRChIF0qoiURpp3m5_X2klYxmk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3935 (0xf5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361D299AF, serialNumber=2B2442848174AA8894469A779B9FD7DA4958C669
        Validity
            Not Before: Mar  2 00:53:24 2026 GMT
            Not After : Mar  4 00:53:24 2026 GMT
        Subject: CN=69a4df84-9dfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:31:72:b8:ae:44:9e:36:56:fc:90:a8:d5:d8:
                    db:60:04:2f:c6:a0:af:0c:d3:40:d6:43:79:ee:39:
                    54:2b:56:5f:e3:a9:2c:28:0f:9f:c7:1e:04:a2:bf:
                    8e:c8:23:46:62:5d:53:c4:6e:04:d5:09:36:7c:8c:
                    50:ea:f1:53:a2:f1:0b:a3:09:0e:a1:d1:cf:ad:ad:
                    90:98:f9:e1:f7:2e:2f:70:ca:a8:fd:cd:7c:e1:29:
                    de:65:05:0d:a9:51:25:72:18:1e:ba:82:11:8b:34:
                    b3:b8:bc:71:9f:1e:38:dd:fe:10:26:12:df:57:7d:
                    84:00:6e:e6:54:39:3d:a3:05:05:7f:9a:11:4f:9d:
                    83:d7:df:2f:7e:24:ae:26:17:a1:aa:7e:ac:e9:21:
                    7b:ab:cd:0d:bb:cd:c3:1a:fc:cb:86:89:53:b1:59:
                    73:a1:13:fc:f9:79:52:06:ab:8c:f4:a0:5d:9d:c7:
                    eb:01:b9:eb:64:f1:d5:fd:bc:d0:26:bc:62:1d:d5:
                    7f:75:4f:00:8c:c8:0a:db:5e:fd:8a:4b:d0:7d:71:
                    2f:07:17:45:2d:f4:b6:59:17:48:5a:fe:ae:1a:24:
                    19:37:15:38:c4:ed:88:a6:a5:ee:67:37:1c:75:d3:
                    db:58:f1:2f:1b:c1:f4:36:8e:06:0f:92:2f:c9:c8:
                    8d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:31:FB:3B:30:25:64:A2:0D:CF:15:EB:7C:7F:96:53:7E:0A:94:32
            X509v3 Authority Key Identifier:
                keyid:2B:24:42:84:81:74:AA:88:94:46:9A:77:9B:9F:D7:DA:49:58:C6:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/KyRChIF0qoiURpp3m5_X2klYxmk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KyRChIF0qoiURpp3m5_X2klYxmk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/KyRChIF0qoiURpp3m5_X2klYxmk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:32:cf:c9:f8:44:7c:0e:d6:d4:e8:7b:31:a3:f7:80:d1:cb:
         48:28:06:ef:a6:b6:0f:2b:cb:e2:9b:d8:6c:f8:06:06:e5:c3:
         f4:5c:3a:f3:e5:65:17:79:04:ff:9e:de:23:64:59:0f:49:c5:
         d5:f2:35:68:5c:32:c3:fe:87:5c:ed:9a:8c:6a:43:8c:d2:11:
         e2:75:01:b5:a5:bc:ed:9a:23:91:1a:47:8f:77:4a:dd:a5:b4:
         04:7b:95:79:6f:a5:4b:80:f7:67:a7:20:94:b1:31:b1:d2:4b:
         22:48:9a:4d:bb:9e:70:da:36:1a:55:77:7a:8c:4d:dd:e5:e7:
         a9:59:69:47:90:37:70:3f:08:dc:56:26:de:8c:56:3c:5f:3e:
         ca:45:69:71:e7:66:1f:c8:41:3e:17:81:5e:31:a2:31:f2:c1:
         72:f1:cd:70:36:0e:5f:17:99:9c:3d:43:e0:94:23:7a:5d:48:
         3d:a1:6f:15:b3:d3:de:6e:70:21:3d:0c:8a:93:79:e2:2b:ea:
         91:27:ba:aa:3b:85:56:fe:e8:56:a1:88:d3:dd:6f:8c:ae:f4:
         c8:ae:d2:b1:6b:5b:21:f3:1f:2b:4e:18:b1:52:1f:dc:5c:bb:
         83:33:4a:5c:40:a3:01:1e:79:40:54:ca:81:11:3e:c9:43:e9:
         93:d8:30:c7
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICD18wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MUQyOTlBRjExMC8GA1UEBRMoMkIyNDQyODQ4MTc0QUE4ODk0NDY5QTc3OUI5RkQ3
REE0OTU4QzY2OTAeFw0yNjAzMDIwMDUzMjRaFw0yNjAzMDQwMDUzMjRaMBgxFjAU
BgNVBAMTDTY5YTRkZjg0LTlkZmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDDMXK4rkSeNlb8kKjV2NtgBC/GoK8M00DWQ3nuOVQrVl/jqSwoD5/HHgSi
v47II0ZiXVPEbgTVCTZ8jFDq8VOi8QujCQ6h0c+trZCY+eH3Li9wyqj9zXzhKd5l
BQ2pUSVyGB66ghGLNLO4vHGfHjjd/hAmEt9XfYQAbuZUOT2jBQV/mhFPnYPX3y9+
JK4mF6GqfqzpIXurzQ27zcMa/MuGiVOxWXOhE/z5eVIGq4z0oF2dx+sBuetk8dX9
vNAmvGId1X91TwCMyArbXv2KS9B9cS8HF0Ut9LZZF0ha/q4aJBk3FTjE7Yimpe5n
Nxx109tY8S8bwfQ2jgYPki/JyI0zAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUPzH7
OzAlZKINzxXrfH+WU34KlDIwHwYDVR0jBBgwFoAUKyRChIF0qoiURpp3m5/X2klY
xmkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjFEMjk5LzQ4RjAwOEQ4NTZENTExRTU4NDVFRjg1Q0Y4QUVBMjI4L0t5UkNo
SUYwcW9pVVJwcDNtNV9YMmtsWXhtay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0t5UkNoSUYwcW9pVVJwcDNtNV9YMmtsWXhtay5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MUQyOTkvNDhGMDA4RDg1NkQ1MTFFNTg0NUVGODVDRjhB
RUEyMjgvS3lSQ2hJRjBxb2lVUnBwM201X1gya2xZeG1rLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBaMs/J+ER8DtbU6Hsxo/eA0ctIKAbv
prYPK8vim9hs+AYG5cP0XDrz5WUXeQT/nt4jZFkPScXV8jVoXDLD/odc7ZqMakOM
0hHidQG1pbztmiORGkePd0rdpbQEe5V5b6VLgPdnpyCUsTGx0ksiSJpNu55w2jYa
VXd6jE3d5eepWWlHkDdwPwjcVibejFY8Xz7KRWlx52YfyEE+F4FeMaIx8sFy8c1w
Ng5fF5mcPUPglCN6XUg9oW8Vs9PebnAhPQyKk3niK+qRJ7qqO4VW/uhWoYjT3W+M
rvTIrtKxa1sh8x8rThixUh/cXLuDM0pcQKMBHnlAVMqBET7JQ+mT2DDH
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:19:11 2026 by rpki-client