Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361F1DA/2DA8F37A77E011EEA233EA7B4AD9E6FC/U3W2ePNrjZxrXcMoG29etnFqEQk.mft
File:                     U3W2ePNrjZxrXcMoG29etnFqEQk.mft (raw, json)
Hash identifier:          HvuthOHpspNUBrhExBic/LvHoBE5bnZhQC/lRAjfPG4=
Subject key identifier:   17:9F:30:15:04:99:62:13:B5:56:D2:81:65:54:38:6A:CF:96:BF:E1
Authority key identifier: 53:75:B6:78:F3:6B:8D:9C:6B:5D:C3:28:1B:6F:5E:B6:71:6A:11:09
Certificate issuer:       /CN=F361F1DAAF/serialNumber=5375B678F36B8D9C6B5DC3281B6F5EB6716A1109
Certificate serial:       0375
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/U3W2ePNrjZxrXcMoG29etnFqEQk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361F1DA/2DA8F37A77E011EEA233EA7B4AD9E6FC/U3W2ePNrjZxrXcMoG29etnFqEQk.mft
Manifest number:          0370
Signing time:             Sun 01 Mar 2026 02:39:42 +0000
Manifest this update:     Sun 01 Mar 2026 02:39:42 +0000
Manifest next update:     Tue 03 Mar 2026 02:39:42 +0000
Files and hashes:         1: U3W2ePNrjZxrXcMoG29etnFqEQk.crl (hash: 6fuoF7J0CnUjpbJal0fvdgvqMG/IS3ELMFvYe5vipsM=)
                          2: DBC979D8CFB411F0BD144F9CDAE4EC9C.roa (hash: 4zbQGzXYjWG9pUVTMR7RzWQtxqPrQhTqI/M5Rc7TchA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361F1DA/2DA8F37A77E011EEA233EA7B4AD9E6FC/U3W2ePNrjZxrXcMoG29etnFqEQk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361F1DA/2DA8F37A77E011EEA233EA7B4AD9E6FC/U3W2ePNrjZxrXcMoG29etnFqEQk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/U3W2ePNrjZxrXcMoG29etnFqEQk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 03 Mar 2026 00:07:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 885 (0x375)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361F1DAAF, serialNumber=5375B678F36B8D9C6B5DC3281B6F5EB6716A1109
        Validity
            Not Before: Mar  1 02:39:42 2026 GMT
            Not After : Mar  3 02:39:42 2026 GMT
        Subject: CN=69a3a6ee-ad78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a5:4e:1d:dd:3c:a7:73:28:46:15:13:b4:4e:
                    44:bf:f3:eb:01:f7:bf:38:f9:d1:39:2e:4c:7a:77:
                    b1:de:e1:f4:19:56:29:11:d4:71:72:96:f2:40:12:
                    78:3d:43:18:32:0e:24:ce:61:38:b3:2c:2f:a3:2f:
                    ec:1c:37:2d:ec:71:3c:25:9a:77:c8:9d:2d:9b:45:
                    03:ec:d4:1a:32:83:f6:3b:e7:7b:39:1d:e1:eb:db:
                    f8:22:18:00:c2:3e:58:39:99:d2:a5:9f:16:39:8f:
                    9a:fe:21:70:38:4a:59:5f:e0:69:77:d2:63:8a:00:
                    27:a5:0f:b4:ae:10:24:cd:92:0c:df:86:0b:37:e7:
                    63:da:a7:ef:8f:81:82:83:b9:5b:49:10:52:b8:82:
                    c5:b3:2d:44:de:77:13:30:2a:0e:87:da:32:b0:31:
                    bd:91:f5:23:ea:23:e3:81:e4:29:37:2a:77:a4:50:
                    0f:d5:d5:f4:6b:a0:1e:e4:23:c1:56:32:5c:7a:1a:
                    4e:26:49:dd:52:96:75:8f:d9:6a:a3:49:64:70:94:
                    b7:cb:15:be:07:7a:31:c4:e8:bb:87:a8:af:ce:c3:
                    0d:35:c1:24:b4:58:d9:4e:f4:3c:0f:b1:5e:5c:16:
                    2a:46:9b:cc:ab:d6:a1:c6:68:8a:87:81:e9:aa:f4:
                    cf:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:9F:30:15:04:99:62:13:B5:56:D2:81:65:54:38:6A:CF:96:BF:E1
            X509v3 Authority Key Identifier:
                keyid:53:75:B6:78:F3:6B:8D:9C:6B:5D:C3:28:1B:6F:5E:B6:71:6A:11:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361F1DA/2DA8F37A77E011EEA233EA7B4AD9E6FC/U3W2ePNrjZxrXcMoG29etnFqEQk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/U3W2ePNrjZxrXcMoG29etnFqEQk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361F1DA/2DA8F37A77E011EEA233EA7B4AD9E6FC/U3W2ePNrjZxrXcMoG29etnFqEQk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:d1:99:4c:f8:9b:f7:2e:c5:9a:d9:31:25:c8:71:83:4c:cc:
         23:6e:ea:24:77:5a:96:aa:cc:85:2b:72:56:ad:fc:02:7d:69:
         e2:17:1a:fa:dd:fe:ee:e3:a8:bb:48:68:4e:30:6c:e1:8d:ce:
         ab:e7:a9:3e:39:e3:fa:a4:37:c6:c3:eb:fe:6a:1d:1e:af:9f:
         66:c3:da:8c:4a:59:57:10:ef:28:46:c7:39:1c:65:b5:ab:6b:
         b8:e4:2d:2c:ea:80:81:02:98:1b:7f:53:b7:12:d2:4e:1a:0c:
         55:fd:fc:ba:c5:52:b0:3f:19:bf:1b:c0:f0:60:a4:a4:b0:22:
         cf:fe:42:a6:94:c8:11:23:82:46:cc:c4:58:4d:3b:80:7a:d1:
         4c:17:da:27:e5:24:00:4d:b2:a0:06:03:e5:69:60:a0:1f:da:
         e1:51:a2:ad:3e:60:86:f1:b6:9c:6c:fc:ac:92:f3:33:3c:99:
         89:1b:2f:f8:35:ce:27:6a:0d:30:30:8b:5f:95:12:12:03:a2:
         a6:34:6c:e3:be:d4:de:a0:5d:15:3d:1e:56:21:ca:22:6f:7f:
         af:be:05:7b:31:d2:e3:e5:b0:f4:d2:27:7b:bc:8b:b4:39:ae:
         cd:4f:63:87:30:e6:82:c4:96:77:50:14:3d:b1:d2:47:e2:d2:
         1b:b9:8e:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:26:12 2026 by rpki-client