Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36280C9/892916D0895911F0B0F640C1DAE4EC9C/Vznp0pMq2FvMIkCBO_OrOUKEMCA.mft
File:                     Vznp0pMq2FvMIkCBO_OrOUKEMCA.mft (raw, json)
Hash identifier:          eOOMTzJTwiXt6trTGVzA72s5xuJ72+/J9HSI8csMFnQ=
Subject key identifier:   2E:DB:6D:E1:D3:DF:C1:05:ED:DC:F9:28:77:91:F9:AC:11:F8:50:CB
Authority key identifier: 57:39:E9:D2:93:2A:D8:5B:CC:22:40:81:3B:F3:AB:39:42:84:30:20
Certificate issuer:       /CN=F36280C9AF/serialNumber=5739E9D2932AD85BCC2240813BF3AB3942843020
Certificate serial:       BA
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Vznp0pMq2FvMIkCBO_OrOUKEMCA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36280C9/892916D0895911F0B0F640C1DAE4EC9C/Vznp0pMq2FvMIkCBO_OrOUKEMCA.mft
Manifest number:          B9
Signing time:             Mon 02 Mar 2026 03:29:22 +0000
Manifest this update:     Mon 02 Mar 2026 03:29:21 +0000
Manifest next update:     Wed 04 Mar 2026 03:29:21 +0000
Files and hashes:         1: Vznp0pMq2FvMIkCBO_OrOUKEMCA.crl (hash: 3zFFvbcbcTFXGJJcdUeAi8iLrYj1Ye/IO6XhjwkRFuQ=)
                          2: A19BA40E895D11F0BE8951DBDAE4EC9C.roa (hash: Et+VW4knLp0d295uH8UgXrH5+8q9h3SexmR3jtKPDNI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36280C9/892916D0895911F0B0F640C1DAE4EC9C/Vznp0pMq2FvMIkCBO_OrOUKEMCA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36280C9/892916D0895911F0B0F640C1DAE4EC9C/Vznp0pMq2FvMIkCBO_OrOUKEMCA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Vznp0pMq2FvMIkCBO_OrOUKEMCA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 186 (0xba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36280C9AF, serialNumber=5739E9D2932AD85BCC2240813BF3AB3942843020
        Validity
            Not Before: Mar  2 03:29:21 2026 GMT
            Not After : Mar  4 03:29:21 2026 GMT
        Subject: CN=69a50412-f920
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:28:67:b8:ab:e4:6f:f8:67:81:51:81:50:78:
                    74:6f:5d:0b:df:22:4e:83:17:41:7a:d5:fe:3d:a2:
                    3a:d7:e8:63:9b:9d:53:b7:2f:fa:e8:b8:1e:26:ed:
                    59:b9:06:72:c6:06:ff:39:0d:e6:a2:6c:21:d6:19:
                    f6:7f:88:7f:2b:98:93:2a:c2:01:45:2c:a1:6d:8a:
                    10:ff:4c:6b:0c:70:7a:ea:36:0f:27:df:b4:b7:e5:
                    f6:14:98:b8:d7:00:2b:69:69:9c:9f:6d:b5:24:98:
                    3f:94:24:83:1a:40:2b:27:7c:55:4a:d8:59:20:ea:
                    35:59:82:ba:29:d9:01:4d:77:7e:14:f1:77:95:ea:
                    f3:a9:da:ae:31:37:e1:f0:1b:40:ea:25:74:75:79:
                    f0:1a:3c:cf:18:56:5a:ba:e4:04:ca:34:f0:97:03:
                    88:e1:4b:d5:ed:c1:9d:88:98:cf:41:6f:f4:ef:18:
                    41:ce:9e:72:6d:84:1f:6e:b6:33:89:67:3a:bd:52:
                    89:8c:bc:c3:0f:38:69:4b:73:4b:b6:9e:13:71:e7:
                    d5:56:5c:d7:7f:b2:2e:b0:03:39:ea:15:d4:22:e0:
                    73:63:f6:ee:9b:ba:3e:ed:a8:56:31:83:7b:42:8b:
                    68:b1:ab:df:a8:7b:00:a8:10:a3:50:64:1c:fa:47:
                    86:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:DB:6D:E1:D3:DF:C1:05:ED:DC:F9:28:77:91:F9:AC:11:F8:50:CB
            X509v3 Authority Key Identifier:
                keyid:57:39:E9:D2:93:2A:D8:5B:CC:22:40:81:3B:F3:AB:39:42:84:30:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36280C9/892916D0895911F0B0F640C1DAE4EC9C/Vznp0pMq2FvMIkCBO_OrOUKEMCA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Vznp0pMq2FvMIkCBO_OrOUKEMCA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36280C9/892916D0895911F0B0F640C1DAE4EC9C/Vznp0pMq2FvMIkCBO_OrOUKEMCA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:db:41:f3:e6:e9:71:9b:d1:00:4f:1b:6c:8e:95:ac:1f:2f:
         61:6a:46:83:b9:d2:dc:cb:de:a6:c4:f4:2a:b8:d2:a4:6b:13:
         74:bd:53:da:12:cc:de:c6:21:b1:33:5c:0a:a9:36:4d:2c:fc:
         78:51:c9:87:b1:3f:9a:f9:88:ba:b7:73:73:0e:e2:c7:44:ff:
         66:03:c2:4d:d7:2b:f6:75:da:bb:dd:47:b4:8b:15:a4:a9:a0:
         25:4a:67:d2:71:f6:dc:91:37:09:ae:d1:8e:d5:1c:c0:56:fd:
         8e:5d:50:4d:70:62:f1:96:15:3b:67:16:29:48:8b:74:9f:15:
         13:23:97:2f:76:11:82:d9:d7:a6:a8:f8:45:17:25:04:97:6a:
         38:a0:03:07:bc:0e:16:de:a7:36:2f:12:36:64:c0:2b:37:9e:
         01:76:80:35:f3:c3:de:7b:fb:04:f5:b8:e9:b2:cb:b8:d8:90:
         5c:9b:85:f1:6c:b9:e5:f7:4c:d8:00:d3:ae:5d:5c:fa:29:60:
         af:68:7f:a1:88:ab:bc:42:ad:94:6b:cb:08:e8:6f:ab:ed:ff:
         15:84:48:31:e5:3e:f0:75:1a:2c:da:95:29:7e:91:aa:d7:7a:
         58:ef:37:77:19:12:73:6e:ea:6f:bb:dd:96:18:88:6a:c3:2f:
         24:23:98:8b
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICALowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MjgwQzlBRjExMC8GA1UEBRMoNTczOUU5RDI5MzJBRDg1QkNDMjI0MDgxM0JGM0FC
Mzk0Mjg0MzAyMDAeFw0yNjAzMDIwMzI5MjFaFw0yNjAzMDQwMzI5MjFaMBgxFjAU
BgNVBAMTDTY5YTUwNDEyLWY5MjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDnKGe4q+Rv+GeBUYFQeHRvXQvfIk6DF0F61f49ojrX6GObnVO3L/rouB4m
7Vm5BnLGBv85DeaibCHWGfZ/iH8rmJMqwgFFLKFtihD/TGsMcHrqNg8n37S35fYU
mLjXACtpaZyfbbUkmD+UJIMaQCsnfFVK2Fkg6jVZgrop2QFNd34U8XeV6vOp2q4x
N+HwG0DqJXR1efAaPM8YVlq65ATKNPCXA4jhS9XtwZ2ImM9Bb/TvGEHOnnJthB9u
tjOJZzq9UomMvMMPOGlLc0u2nhNx59VWXNd/si6wAznqFdQi4HNj9u6buj7tqFYx
g3tCi2ixq9+oewCoEKNQZBz6R4YFAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQULttt
4dPfwQXt3Pkod5H5rBH4UMswHwYDVR0jBBgwFoAUVznp0pMq2FvMIkCBO/OrOUKE
MCAwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjI4MEM5Lzg5MjkxNkQwODk1OTExRjBCMEY2NDBDMURBRTRFQzlDL1Z6bnAw
cE1xMkZ2TUlrQ0JPX09yT1VLRU1DQS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1Z6bnAwcE1xMkZ2TUlrQ0JPX09yT1VLRU1DQS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MjgwQzkvODkyOTE2RDA4OTU5MTFGMEIwRjY0MEMxREFF
NEVDOUMvVnpucDBwTXEyRnZNSWtDQk9fT3JPVUtFTUNBLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCQ20Hz5ulxm9EATxtsjpWsHy9hakaD
udLcy96mxPQquNKkaxN0vVPaEszexiGxM1wKqTZNLPx4UcmHsT+a+Yi6t3NzDuLH
RP9mA8JN1yv2ddq73Ue0ixWkqaAlSmfScfbckTcJrtGO1RzAVv2OXVBNcGLxlhU7
ZxYpSIt0nxUTI5cvdhGC2demqPhFFyUEl2o4oAMHvA4W3qc2LxI2ZMArN54BdoA1
88Pee/sE9bjpssu42JBcm4XxbLnl90zYANOuXVz6KWCvaH+hiKu8Qq2Ua8sI6G+r
7f8VhEgx5T7wdRos2pUpfpGq13pY7zd3GRJzbupvu92WGIhqwy8kI5iL
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:16:17 2026 by rpki-client