Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361D9FB/0B03F3D696D011F0857559ACDAE4EC9C/25_jdH_rhCaNYEmeC74Pm_Q7LqM.mft
File:                     25_jdH_rhCaNYEmeC74Pm_Q7LqM.mft (raw, json)
Hash identifier:          yC3dBN+Cj/Y2PATvYsNWSY3hGLDD/zR8LlcBC274z7s=
Subject key identifier:   05:DF:4A:0D:0F:2E:50:93:A2:B9:F5:94:EB:27:2E:BD:CD:51:4F:EB
Authority key identifier: DB:9F:E3:74:7F:EB:84:26:8D:60:49:9E:0B:BE:0F:9B:F4:3B:2E:A3
Certificate issuer:       /CN=F361D9FBAF/serialNumber=DB9FE3747FEB84268D60499E0BBE0F9BF43B2EA3
Certificate serial:       A8
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/25_jdH_rhCaNYEmeC74Pm_Q7LqM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361D9FB/0B03F3D696D011F0857559ACDAE4EC9C/25_jdH_rhCaNYEmeC74Pm_Q7LqM.mft
Manifest number:          A7
Signing time:             Mon 02 Mar 2026 03:30:20 +0000
Manifest this update:     Mon 02 Mar 2026 03:30:19 +0000
Manifest next update:     Wed 04 Mar 2026 03:30:19 +0000
Files and hashes:         1: 25_jdH_rhCaNYEmeC74Pm_Q7LqM.crl (hash: DwwEX0hLD8OPFFWzvalnbeiHntnFwC44jeFeFMaI6oY=)
                          2: F0E25D4296D111F0B15D59B9DAE4EC9C.roa (hash: vnm/ifaL7Ebf2vByDeiWlvUsn0dciMWBz8R2eRYAChk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361D9FB/0B03F3D696D011F0857559ACDAE4EC9C/25_jdH_rhCaNYEmeC74Pm_Q7LqM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361D9FB/0B03F3D696D011F0857559ACDAE4EC9C/25_jdH_rhCaNYEmeC74Pm_Q7LqM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/25_jdH_rhCaNYEmeC74Pm_Q7LqM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 168 (0xa8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361D9FBAF, serialNumber=DB9FE3747FEB84268D60499E0BBE0F9BF43B2EA3
        Validity
            Not Before: Mar  2 03:30:19 2026 GMT
            Not After : Mar  4 03:30:19 2026 GMT
        Subject: CN=69a5044b-d21b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:85:cc:67:dd:26:03:be:02:4e:24:47:6d:b9:
                    40:82:5f:44:ea:f6:42:71:6b:12:e1:2f:01:39:00:
                    a2:e9:27:56:73:7b:b8:63:73:3b:ef:6b:0a:b5:74:
                    b8:8f:5e:34:bc:81:29:6b:6d:a3:90:e3:fb:4f:c3:
                    6c:77:a2:e0:59:04:d1:cb:59:32:6d:b8:ed:fb:fc:
                    93:f6:bb:ca:00:14:b5:db:30:d7:3b:41:a9:eb:35:
                    01:18:eb:3c:7b:5d:6e:47:69:d5:05:ad:a1:9e:42:
                    2c:b4:f3:9a:4c:49:e5:27:21:b8:56:89:21:15:52:
                    53:af:b6:5c:32:b6:97:20:5e:9a:92:57:41:16:56:
                    1f:74:a6:c6:c8:fc:37:0c:bc:8a:de:cb:99:c6:aa:
                    92:3b:33:0f:b4:bb:41:ca:46:4f:c1:99:90:89:c7:
                    5d:a2:4e:19:d6:84:5e:0c:61:82:34:a2:e9:71:af:
                    70:b3:f6:24:46:af:f9:66:a4:e2:10:20:1d:47:98:
                    ed:9d:e0:18:3e:3b:d5:fb:8e:22:6d:0e:33:9b:35:
                    69:2d:ee:9e:6d:0f:1f:0e:e0:d6:d3:a4:d7:81:29:
                    ee:f5:9e:0f:67:21:d1:aa:07:84:f1:c8:20:ff:3a:
                    26:b7:47:c9:90:f1:2b:2d:a0:cc:bf:06:1b:2b:8a:
                    14:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:DF:4A:0D:0F:2E:50:93:A2:B9:F5:94:EB:27:2E:BD:CD:51:4F:EB
            X509v3 Authority Key Identifier:
                keyid:DB:9F:E3:74:7F:EB:84:26:8D:60:49:9E:0B:BE:0F:9B:F4:3B:2E:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361D9FB/0B03F3D696D011F0857559ACDAE4EC9C/25_jdH_rhCaNYEmeC74Pm_Q7LqM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/25_jdH_rhCaNYEmeC74Pm_Q7LqM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361D9FB/0B03F3D696D011F0857559ACDAE4EC9C/25_jdH_rhCaNYEmeC74Pm_Q7LqM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:57:22:1f:0c:52:c1:60:8e:16:c4:6b:67:de:cb:da:db:be:
         10:9d:59:5e:aa:3c:8a:38:cc:1f:40:c7:ab:1b:ff:a1:c3:ce:
         d2:c3:49:9e:f5:08:02:91:35:49:d0:42:34:8c:f0:ba:5a:0f:
         d7:a8:c1:fa:56:cb:46:89:55:30:92:30:07:6a:3d:c0:62:58:
         a6:3a:66:55:43:22:9f:c3:4f:bb:c4:7b:41:c9:f0:54:e1:29:
         2b:68:7e:a3:57:7d:cd:33:a3:9c:90:ed:d5:7c:1a:71:cf:bf:
         68:23:14:f8:a2:da:28:90:e8:5b:62:9c:14:70:ec:7f:06:02:
         22:d3:c8:40:f1:fd:5e:9d:b8:40:4e:88:49:33:e1:74:aa:7e:
         cc:ab:9f:bf:cc:15:79:ef:d6:bc:2c:76:48:c8:b4:54:2b:46:
         58:5a:0b:02:fe:81:a7:28:74:50:4a:e4:62:a6:9d:51:9a:78:
         b6:79:3b:7f:2c:bd:6c:8e:96:07:30:1e:5b:7a:55:27:64:c3:
         a8:30:24:e6:75:39:1e:6d:29:cd:f0:e4:19:b9:3b:5f:7b:98:
         a7:e3:ec:29:1b:8d:a2:79:35:08:ba:10:5e:b9:df:85:e8:fc:
         aa:76:d1:f1:15:be:ed:1b:8b:ef:f8:fd:29:f9:bf:53:5f:e6:
         94:87:0d:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:58:37 2026 by rpki-client