Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362EFF3/AC085646F5B511EDA75CAF494AD9E6FC/zjU-BgcibJUeYP1ogM7M-5jSvEg.mft
File:                     zjU-BgcibJUeYP1ogM7M-5jSvEg.mft (raw, json)
Hash identifier:          iNGo9MlbUwh44hABmCoRnwpagjrKf1MIAnuqnV+LLas=
Subject key identifier:   58:3F:1F:63:5C:D7:64:10:8D:E6:C1:33:A6:8F:A6:F8:15:4D:F7:AA
Authority key identifier: CE:35:3E:06:07:22:6C:95:1E:60:FD:68:80:CE:CC:FB:98:D2:BC:48
Certificate issuer:       /CN=F362EFF3AF/serialNumber=CE353E0607226C951E60FD6880CECCFB98D2BC48
Certificate serial:       0424
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/zjU-BgcibJUeYP1ogM7M-5jSvEg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362EFF3/AC085646F5B511EDA75CAF494AD9E6FC/zjU-BgcibJUeYP1ogM7M-5jSvEg.mft
Manifest number:          0421
Signing time:             Mon 02 Mar 2026 02:26:39 +0000
Manifest this update:     Mon 02 Mar 2026 02:26:39 +0000
Manifest next update:     Wed 04 Mar 2026 02:26:39 +0000
Files and hashes:         1: zjU-BgcibJUeYP1ogM7M-5jSvEg.crl (hash: AZrG9NIgT8JtsTymi/aD/BdLkc6NY2xqwVe9EJzTzKU=)
                          2: 7FBA47FAF6EF11F0BB93DCCEDAE4EC9C.roa (hash: o3L0vuoDmUBUb+//mBzsTCTXHyVLpl7JtPp6VuXXuk8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362EFF3/AC085646F5B511EDA75CAF494AD9E6FC/zjU-BgcibJUeYP1ogM7M-5jSvEg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362EFF3/AC085646F5B511EDA75CAF494AD9E6FC/zjU-BgcibJUeYP1ogM7M-5jSvEg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/zjU-BgcibJUeYP1ogM7M-5jSvEg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1060 (0x424)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362EFF3AF, serialNumber=CE353E0607226C951E60FD6880CECCFB98D2BC48
        Validity
            Not Before: Mar  2 02:26:39 2026 GMT
            Not After : Mar  4 02:26:39 2026 GMT
        Subject: CN=69a4f55f-34cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:d6:0b:91:e6:d9:68:a5:6e:87:91:24:96:36:
                    86:ee:bf:80:cd:9b:65:b5:a6:12:17:c0:3a:05:04:
                    30:0d:43:c9:fd:e0:6a:e4:98:33:e1:46:73:09:b8:
                    e4:f2:3d:14:e3:df:6a:22:e4:27:61:28:6b:f5:3e:
                    91:bd:ab:28:bf:1c:0e:04:26:76:e7:48:77:c8:f7:
                    55:81:f0:23:b4:1a:d8:f3:07:74:a3:01:35:1f:b3:
                    56:fb:c2:a9:fe:0f:a1:80:36:b7:2a:05:3e:39:ce:
                    2b:02:97:7e:b9:e1:c4:42:30:4f:a1:a7:21:ce:ee:
                    d3:99:d8:1b:34:71:b1:89:44:26:eb:45:63:87:ee:
                    15:f2:71:6e:46:b2:38:b3:44:f8:25:67:0f:a5:d5:
                    77:90:b2:11:0f:bd:a8:2a:9e:db:c4:2b:90:de:ed:
                    c7:d8:37:19:92:a6:ed:99:cc:3b:c6:e2:07:3a:dd:
                    5a:63:31:eb:93:b6:c3:e8:4d:dc:a4:9e:38:05:d8:
                    ea:6a:b5:aa:af:4f:28:c5:b7:cc:51:2f:f9:01:45:
                    c8:31:7a:70:ef:31:66:9c:55:40:99:94:b6:3c:34:
                    ab:d7:a8:9a:d2:c7:60:f4:2a:10:48:d3:45:37:18:
                    41:f8:42:dc:42:58:b7:6b:a4:12:84:1a:2c:c2:8c:
                    b3:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:3F:1F:63:5C:D7:64:10:8D:E6:C1:33:A6:8F:A6:F8:15:4D:F7:AA
            X509v3 Authority Key Identifier:
                keyid:CE:35:3E:06:07:22:6C:95:1E:60:FD:68:80:CE:CC:FB:98:D2:BC:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362EFF3/AC085646F5B511EDA75CAF494AD9E6FC/zjU-BgcibJUeYP1ogM7M-5jSvEg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zjU-BgcibJUeYP1ogM7M-5jSvEg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362EFF3/AC085646F5B511EDA75CAF494AD9E6FC/zjU-BgcibJUeYP1ogM7M-5jSvEg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:22:1d:b9:8e:76:fb:9a:86:3d:30:fd:75:6d:24:85:12:05:
         07:33:44:59:7c:17:1b:d3:4f:14:6c:fb:07:84:bd:b0:a4:bb:
         bc:6b:bf:8a:f4:b4:e8:87:bd:1f:79:79:75:dd:90:a4:4c:26:
         ec:1a:cc:74:87:29:11:d5:fa:7e:0f:13:66:76:9a:f4:68:75:
         5d:8d:a4:08:7d:c7:10:8e:54:73:90:04:58:61:5a:5e:74:ff:
         3e:66:ac:16:4b:79:3a:ed:c2:41:79:87:ff:a9:7b:04:a8:ee:
         7c:5a:1d:20:3b:6e:08:61:c5:1a:31:e7:5d:78:ef:ce:47:ae:
         b1:05:ce:53:45:23:5c:b2:dc:40:ad:64:86:11:33:1a:7a:ab:
         bb:f7:5c:f6:06:fb:1c:e3:99:e1:5a:cf:fa:57:ed:17:f6:71:
         42:9f:50:c9:79:b6:7b:1f:5f:cc:e6:f6:99:1f:c2:33:fd:2d:
         6b:95:7c:6a:47:75:2c:37:ae:36:11:34:c6:fb:cf:99:f6:77:
         f6:5d:d9:90:8e:74:bb:fd:90:41:c5:d2:1a:84:9c:75:ea:ac:
         66:82:df:1f:65:38:fd:7a:7f:48:56:78:5c:9d:03:17:d4:4a:
         9c:bf:4f:aa:fd:d8:57:04:58:07:64:0c:68:d1:26:8b:b9:8e:
         a0:a6:9c:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:41:01 2026 by rpki-client