Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3628288/4693761EBED711EF82A7A345762E951A/lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.mft
File:                     lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.mft (raw, json)
Hash identifier:          ggXhwSZ1iYOegGYtclEWW7B7g+Q7yGQbPvcA/nmRUiY=
Subject key identifier:   D3:A2:28:9C:48:EB:19:27:B5:94:E8:4A:D5:9C:35:40:E8:3E:59:48
Authority key identifier: 94:96:71:27:FF:64:EC:7C:72:A3:AB:EA:16:CE:69:AE:DA:7F:68:34
Certificate issuer:       /CN=F3628288AF/serialNumber=94967127FF64EC7C72A3ABEA16CE69AEDA7F6834
Certificate serial:       01C1
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3628288/4693761EBED711EF82A7A345762E951A/lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.mft
Manifest number:          01C0
Signing time:             Mon 02 Mar 2026 03:13:23 +0000
Manifest this update:     Mon 02 Mar 2026 03:13:23 +0000
Manifest next update:     Wed 04 Mar 2026 03:13:23 +0000
Files and hashes:         1: lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.crl (hash: RQsg8+uhSpzVXVVSU7GELz8lDBn+aQ23bp69yXoyIUA=)
                          2: 5607C3B0BEE211EFA4CEA589762E951A.roa (hash: OpcRwl+jfvnh8TAOsFlPTty/eZv7mZcg2dDEa8udpEA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3628288/4693761EBED711EF82A7A345762E951A/lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3628288/4693761EBED711EF82A7A345762E951A/lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 449 (0x1c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3628288AF, serialNumber=94967127FF64EC7C72A3ABEA16CE69AEDA7F6834
        Validity
            Not Before: Mar  2 03:13:23 2026 GMT
            Not After : Mar  4 03:13:23 2026 GMT
        Subject: CN=69a50053-0b23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:aa:09:09:25:17:bc:52:14:b2:97:8f:cc:87:
                    9c:71:44:ad:5a:f7:bc:c2:b1:37:a8:04:09:74:6d:
                    e0:c4:89:c7:07:0a:6f:f5:8e:0d:e0:29:c9:73:05:
                    73:e6:53:23:2d:c1:ab:f8:dd:f4:43:c2:e3:d1:58:
                    e7:e8:3c:43:e8:75:d5:87:40:df:e4:e9:c9:bd:f4:
                    b7:9a:83:8f:3c:c5:a0:8c:1d:38:49:d9:db:c7:fc:
                    80:a6:6e:96:dc:ad:af:84:16:22:c2:20:31:16:2e:
                    1b:89:bc:3c:1b:90:1a:54:ad:f5:50:b3:65:2e:7c:
                    a7:9e:e1:f4:29:d1:e8:2e:0d:31:33:d3:59:46:e3:
                    9d:d3:7e:dd:10:ca:d6:f2:7b:36:39:1b:4e:a7:88:
                    ca:64:74:b4:a6:63:52:2c:d6:40:34:f7:04:f3:d5:
                    cb:72:8e:f1:ca:65:2e:b6:08:ac:8c:41:73:5f:cd:
                    43:a8:29:1c:32:8a:b2:9d:32:5c:5d:b3:01:f1:c3:
                    0d:b6:f9:8e:ff:f5:0d:47:92:53:86:22:38:d9:da:
                    24:08:36:90:fe:3d:5a:35:d3:17:12:79:b2:b1:af:
                    f0:9f:c9:a7:7e:6b:94:f1:6f:b4:fc:f7:16:08:ac:
                    24:71:64:5a:f1:6c:fa:fd:bf:b5:15:06:f9:f7:65:
                    e7:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:A2:28:9C:48:EB:19:27:B5:94:E8:4A:D5:9C:35:40:E8:3E:59:48
            X509v3 Authority Key Identifier:
                keyid:94:96:71:27:FF:64:EC:7C:72:A3:AB:EA:16:CE:69:AE:DA:7F:68:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3628288/4693761EBED711EF82A7A345762E951A/lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3628288/4693761EBED711EF82A7A345762E951A/lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:83:08:b4:8f:64:6a:27:db:91:77:67:2e:9d:a0:74:3f:e0:
         2a:63:f7:be:fd:cd:0d:19:6a:2b:bc:1b:8a:f6:a3:e9:c3:c5:
         84:f4:d0:bd:ed:de:ce:45:f8:ff:df:ca:61:6f:b8:08:2d:26:
         91:09:19:55:bb:67:ae:8b:80:0c:cb:f8:9f:ce:a0:98:64:b0:
         60:4d:e1:d0:fb:ef:43:83:d9:0e:8c:ff:47:91:be:b6:3c:f7:
         cd:5e:44:8a:30:b5:a9:c9:0c:27:cc:21:78:21:f8:85:10:d8:
         c3:cb:62:6b:23:c0:7f:37:9e:1e:47:24:4e:ba:05:c1:21:b6:
         50:b8:b2:5d:ad:cc:0c:b3:67:48:dd:cf:5f:42:51:7a:2e:ed:
         88:f4:a5:b0:32:09:81:4b:db:21:ff:9a:7a:ae:ac:42:78:ef:
         db:82:5b:d6:c9:67:a1:0a:71:e3:2b:dc:70:25:5e:e3:53:57:
         c5:b5:e1:ad:b5:5a:55:32:fb:fd:17:cd:33:3e:92:79:f0:4c:
         dd:7d:dd:a5:b7:a4:89:20:e4:35:87:c7:4d:1c:16:35:16:75:
         51:39:1c:0d:ac:a4:de:ee:e2:1e:fb:ea:64:96:50:b5:64:d6:
         77:d6:59:c1:3d:98:9a:6e:be:a2:ae:60:24:80:17:d4:a0:72:
         5a:c1:58:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:19:56 2026 by rpki-client