Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362A277/C259389EF17E11F0A7CEF57EDAE4EC9C/4CHIx8UoCk9ahEY7VfB-of5s1qU.mft
File:                     4CHIx8UoCk9ahEY7VfB-of5s1qU.mft (raw, json)
Hash identifier:          RxW4sAcQ3ufYA+mLw6U3lFbmmGGGkBssycLF/uwFICc=
Subject key identifier:   26:2B:5E:DD:7F:92:22:CB:72:77:1E:05:78:55:25:29:37:C7:14:AF
Authority key identifier: E0:21:C8:C7:C5:28:0A:4F:5A:84:46:3B:55:F0:7E:A1:FE:6C:D6:A5
Certificate issuer:       /CN=F362A277AF/serialNumber=E021C8C7C5280A4F5A84463B55F07EA1FE6CD6A5
Certificate serial:       32
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/4CHIx8UoCk9ahEY7VfB-of5s1qU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362A277/C259389EF17E11F0A7CEF57EDAE4EC9C/4CHIx8UoCk9ahEY7VfB-of5s1qU.mft
Manifest number:          31
Signing time:             Mon 02 Mar 2026 03:37:59 +0000
Manifest this update:     Mon 02 Mar 2026 03:37:59 +0000
Manifest next update:     Wed 04 Mar 2026 03:37:59 +0000
Files and hashes:         1: 4CHIx8UoCk9ahEY7VfB-of5s1qU.crl (hash: VGUfjW7WcYgia4MBQ8+FRmunAklhA2qf9qwbNMd12jo=)
                          2: 35088E64F2D111F080879F85DAE4EC9C.roa (hash: 15uh+glgz7knRoenJ8yS1Q8GBqNFF56yVyjL+9QdwzA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362A277/C259389EF17E11F0A7CEF57EDAE4EC9C/4CHIx8UoCk9ahEY7VfB-of5s1qU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362A277/C259389EF17E11F0A7CEF57EDAE4EC9C/4CHIx8UoCk9ahEY7VfB-of5s1qU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/4CHIx8UoCk9ahEY7VfB-of5s1qU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 50 (0x32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362A277AF, serialNumber=E021C8C7C5280A4F5A84463B55F07EA1FE6CD6A5
        Validity
            Not Before: Mar  2 03:37:59 2026 GMT
            Not After : Mar  4 03:37:59 2026 GMT
        Subject: CN=69a50617-6688
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c7:11:d9:21:83:43:7d:c5:73:56:ce:2c:6f:
                    e0:bb:1c:e9:69:d5:35:2f:28:62:9b:fc:02:6b:29:
                    36:7b:03:78:49:10:2a:0b:17:93:59:4c:5c:f5:47:
                    1d:71:cd:05:ec:4d:9c:59:47:70:1c:5f:a1:98:a6:
                    fd:de:ad:37:4c:8f:64:25:30:8e:45:dd:ea:93:ad:
                    b2:18:49:61:7a:34:4c:01:9a:16:1c:11:ff:2f:fe:
                    a8:0d:7d:83:bd:db:7a:f8:a5:14:f4:49:d0:b7:a7:
                    ad:35:77:18:82:ec:80:b0:9a:75:68:23:66:4b:f1:
                    56:d4:27:a7:42:9d:9b:e5:22:cc:56:f4:03:9f:0a:
                    ea:4d:50:77:73:46:20:e1:7c:d7:e0:6b:87:6f:78:
                    e9:ca:e8:a4:9f:89:c0:f0:8d:85:d6:8c:51:05:2b:
                    19:8e:ec:bf:6f:ce:49:51:93:4b:03:04:1a:43:4f:
                    4d:46:f6:47:4a:32:3e:20:72:a5:4a:60:eb:44:10:
                    90:4a:a8:37:c3:da:44:cc:77:e2:ba:41:82:da:82:
                    01:69:eb:e2:2f:43:b9:8b:4d:15:c8:bb:6c:5e:12:
                    93:e8:82:44:32:1d:24:9e:6e:2a:37:e3:43:61:ac:
                    13:d6:61:57:3c:a3:1e:4b:6d:77:15:7d:81:34:6f:
                    d7:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:2B:5E:DD:7F:92:22:CB:72:77:1E:05:78:55:25:29:37:C7:14:AF
            X509v3 Authority Key Identifier:
                keyid:E0:21:C8:C7:C5:28:0A:4F:5A:84:46:3B:55:F0:7E:A1:FE:6C:D6:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362A277/C259389EF17E11F0A7CEF57EDAE4EC9C/4CHIx8UoCk9ahEY7VfB-of5s1qU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4CHIx8UoCk9ahEY7VfB-of5s1qU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362A277/C259389EF17E11F0A7CEF57EDAE4EC9C/4CHIx8UoCk9ahEY7VfB-of5s1qU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:00:ac:91:4e:21:37:75:3c:54:26:97:2a:47:51:d3:5b:4f:
         39:52:af:3e:7d:9a:eb:35:c1:d3:d4:56:28:01:0f:1e:63:2e:
         7a:33:33:cc:7f:57:ee:04:4b:72:32:a1:3c:9e:86:27:65:54:
         37:30:a3:2f:b6:d8:32:e4:a5:1b:49:26:48:1b:25:81:23:4f:
         07:18:91:36:36:77:3b:9a:82:a0:e0:70:56:b7:90:63:47:b1:
         8e:68:72:cd:66:3a:87:19:92:9c:32:e0:ab:9b:67:f6:0d:39:
         e7:ac:8b:9e:40:9c:fa:3e:0e:ca:97:a7:49:04:49:14:c9:3e:
         1b:11:f4:3e:30:5e:41:ae:10:72:be:38:9e:db:50:a4:d8:04:
         be:d7:37:9d:9d:49:bf:ef:a7:04:0f:40:e4:a6:78:52:78:a5:
         b8:1e:28:f1:51:1f:66:12:99:61:bf:13:b5:ac:0e:ec:f2:91:
         5a:01:2b:75:3b:46:5b:da:f6:e1:92:92:f2:7e:14:d6:c4:71:
         43:6b:04:16:bb:0e:29:d4:82:21:b0:f8:ae:6c:f2:c9:43:4e:
         3b:c1:26:8b:e5:61:95:9c:be:22:02:8a:40:c3:db:94:37:12:
         f2:9e:80:c1:8e:76:6d:2c:2e:f9:70:53:5a:c2:18:55:9b:3b:
         0d:a9:51:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:06:34 2026 by rpki-client