Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362438E/87C7511678D911F0A0053193DAE4EC9C/-wB7KUv_2n8YvxAiZXr2TarOGL8.mft
File:                     -wB7KUv_2n8YvxAiZXr2TarOGL8.mft (raw, json)
Hash identifier:          +b+fRjawO8U8/OHNRvzHp+pKzmAaBazY8QqKHAyazhg=
Subject key identifier:   E3:57:08:FC:E0:25:A9:F3:DD:B4:0D:BE:CF:FB:19:21:41:43:3F:D6
Authority key identifier: FB:00:7B:29:4B:FF:DA:7F:18:BF:10:22:65:7A:F6:4D:AA:CE:18:BF
Certificate issuer:       /CN=F362438EAF/serialNumber=FB007B294BFFDA7F18BF1022657AF64DAACE18BF
Certificate serial:       CF
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/-wB7KUv_2n8YvxAiZXr2TarOGL8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362438E/87C7511678D911F0A0053193DAE4EC9C/-wB7KUv_2n8YvxAiZXr2TarOGL8.mft
Manifest number:          CD
Signing time:             Sun 01 Mar 2026 03:28:19 +0000
Manifest this update:     Sun 01 Mar 2026 03:28:19 +0000
Manifest next update:     Tue 03 Mar 2026 03:28:19 +0000
Files and hashes:         1: -wB7KUv_2n8YvxAiZXr2TarOGL8.crl (hash: xBjLAEiSJZ3M0OiFuN2Q0sDVSKIf5ns7Ky/pBfR1q8Q=)
                          2: ACA77C287C1B11F0AB1307CEDAE4EC9C.roa (hash: 6BnYFcUifcR3Iy0hgeVZEvBCKEWqd+xpwV9gtPX4zbE=)
                          3: 960E24087E9611F0915EEA8BDAE4EC9C.roa (hash: AoOLr/Z22+VLviKJUBQXS/ZKbdH8bJ/WQtXUAjA/6SM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362438E/87C7511678D911F0A0053193DAE4EC9C/-wB7KUv_2n8YvxAiZXr2TarOGL8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362438E/87C7511678D911F0A0053193DAE4EC9C/-wB7KUv_2n8YvxAiZXr2TarOGL8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/-wB7KUv_2n8YvxAiZXr2TarOGL8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 03 Mar 2026 00:07:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 207 (0xcf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362438EAF, serialNumber=FB007B294BFFDA7F18BF1022657AF64DAACE18BF
        Validity
            Not Before: Mar  1 03:28:19 2026 GMT
            Not After : Mar  3 03:28:19 2026 GMT
        Subject: CN=69a3b253-6928
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:3b:28:41:63:82:c6:4b:95:8d:c6:62:d6:fe:
                    bf:c0:75:34:50:08:eb:c9:38:c7:49:f0:59:57:e2:
                    19:12:2e:b9:b1:2c:24:4f:99:36:2e:ce:20:24:2d:
                    1c:81:b8:8e:a3:40:e7:d7:2a:9d:3b:49:4d:89:30:
                    e6:09:9f:87:a8:8a:16:ab:55:3c:90:b9:f6:ec:c6:
                    92:85:d2:2d:29:48:4d:4c:55:08:b8:39:76:c3:4e:
                    0e:0d:f9:f9:f7:5a:0f:70:99:0b:fa:e4:3f:d5:93:
                    ca:94:ce:35:77:f5:d9:e3:0c:4c:ce:54:29:49:bb:
                    f8:17:a4:17:17:07:92:e7:28:83:44:53:9a:83:68:
                    69:69:b5:61:dc:39:51:fd:82:e8:cd:bd:57:ed:39:
                    20:68:f3:c6:c5:c6:62:9b:64:4b:ae:3c:cf:35:a3:
                    4f:9f:1b:44:e3:73:2d:e0:8b:31:be:5a:f8:c4:91:
                    12:66:80:bc:e7:24:66:ae:1d:d1:91:f9:d0:01:b8:
                    cc:dc:24:72:fa:72:80:4c:2c:4d:f7:01:fb:bb:81:
                    3d:77:79:3f:43:b2:e0:86:04:16:34:2d:b8:4c:20:
                    80:c7:94:96:9c:ba:32:2e:06:55:14:fc:94:02:83:
                    de:d7:3c:b9:19:3d:b8:d0:a5:c7:83:38:81:0d:e4:
                    39:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:57:08:FC:E0:25:A9:F3:DD:B4:0D:BE:CF:FB:19:21:41:43:3F:D6
            X509v3 Authority Key Identifier:
                keyid:FB:00:7B:29:4B:FF:DA:7F:18:BF:10:22:65:7A:F6:4D:AA:CE:18:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362438E/87C7511678D911F0A0053193DAE4EC9C/-wB7KUv_2n8YvxAiZXr2TarOGL8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-wB7KUv_2n8YvxAiZXr2TarOGL8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362438E/87C7511678D911F0A0053193DAE4EC9C/-wB7KUv_2n8YvxAiZXr2TarOGL8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:cb:a2:23:e3:72:e1:b0:5d:e3:39:51:f0:66:f3:cc:96:0a:
         08:32:17:be:da:3d:67:d7:00:7b:8b:de:13:cd:5a:7b:11:f6:
         c3:5b:d7:df:f3:3c:ed:76:ab:79:87:ae:2f:11:20:a6:36:f9:
         15:fb:9f:18:88:d8:d7:16:f3:c1:6c:69:68:e4:34:f2:70:c6:
         1c:aa:53:88:64:3b:f4:fd:cb:db:59:e8:4e:23:cf:83:2f:e2:
         83:e0:74:7f:50:d2:d8:de:fd:7f:68:b1:e9:d9:8e:c3:9e:43:
         cb:3c:a0:b8:17:ea:f1:29:e5:b8:71:55:cb:55:bc:3b:4a:42:
         1d:d5:ad:48:0c:c9:fd:1f:64:18:6f:63:e5:dc:cc:7f:60:1c:
         44:88:bd:bb:d8:dc:48:d1:ff:02:fa:b2:0b:9c:77:e0:7b:fb:
         48:15:5b:36:13:c5:e3:22:92:dc:74:ec:66:3f:71:a5:a2:cd:
         d6:bd:fa:f2:ce:b8:db:9c:be:f4:a0:23:f8:e5:09:8d:8d:7f:
         ed:71:14:a5:b4:a9:96:34:02:96:77:bd:78:d4:fc:29:17:a6:
         1e:d0:9e:b2:35:e2:b6:fc:45:a4:3e:7e:51:f7:a8:4c:9b:17:
         f0:d1:64:99:78:76:b6:f1:7e:ed:6e:19:d7:c7:06:0c:27:50:
         0e:e2:55:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:15:39 2026 by rpki-client