Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363235D/677CFDEC4C3911F083EC3397DAE4EC9C/Bal449VH9Vk-SwMZcDhZhpRQWMY.mft
File:                     Bal449VH9Vk-SwMZcDhZhpRQWMY.mft (raw, json)
Hash identifier:          njjW9lXb6QDkPVyNGOOBYwI/1+OwKn9y2qeT5ruNfzI=
Subject key identifier:   6D:7B:DD:9C:0D:6E:F0:3D:2B:63:26:E4:09:E8:37:DA:50:17:DA:3F
Authority key identifier: 05:A9:78:E3:D5:47:F5:59:3E:4B:03:19:70:38:59:86:94:50:58:C6
Certificate issuer:       /CN=F363235DAF/serialNumber=05A978E3D547F5593E4B031970385986945058C6
Certificate serial:       0119
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Bal449VH9Vk-SwMZcDhZhpRQWMY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363235D/677CFDEC4C3911F083EC3397DAE4EC9C/Bal449VH9Vk-SwMZcDhZhpRQWMY.mft
Manifest number:          0114
Signing time:             Sun 01 Mar 2026 03:22:25 +0000
Manifest this update:     Sun 01 Mar 2026 03:22:25 +0000
Manifest next update:     Tue 03 Mar 2026 03:22:25 +0000
Files and hashes:         1: Bal449VH9Vk-SwMZcDhZhpRQWMY.crl (hash: u5kbMhkncl5CpJdBwDWqd9Ot0sMOHVfXkOUTRjZTP8I=)
                          2: 956D6C004C7A11F0941F5DBBDAE4EC9C.roa (hash: 4pbVD/R5drzn4R/PeVc+1JSe6FAId7REQJilHo0BefE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363235D/677CFDEC4C3911F083EC3397DAE4EC9C/Bal449VH9Vk-SwMZcDhZhpRQWMY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363235D/677CFDEC4C3911F083EC3397DAE4EC9C/Bal449VH9Vk-SwMZcDhZhpRQWMY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Bal449VH9Vk-SwMZcDhZhpRQWMY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 03 Mar 2026 00:07:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 281 (0x119)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363235DAF, serialNumber=05A978E3D547F5593E4B031970385986945058C6
        Validity
            Not Before: Mar  1 03:22:25 2026 GMT
            Not After : Mar  3 03:22:25 2026 GMT
        Subject: CN=69a3b0f1-c707
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:fe:5c:40:e4:e2:bb:53:6f:4c:6e:9c:a4:74:
                    ed:46:31:69:10:eb:fc:57:d1:dd:f6:1f:7a:77:b8:
                    eb:d5:27:9c:5a:b2:19:fa:bc:ad:46:58:98:f7:7a:
                    4a:8a:f0:10:b9:7d:8e:e7:a5:5a:4d:8b:38:c2:d6:
                    62:0c:50:18:5e:bd:4e:d7:6c:3f:6c:18:dc:68:2a:
                    a0:7e:e7:13:57:46:21:35:e6:80:31:15:62:4f:e4:
                    92:9d:20:95:cb:e9:9a:0a:ae:4e:20:45:95:7c:8d:
                    db:21:74:04:c6:7c:8c:5f:6f:47:31:b4:4e:cc:cf:
                    75:1b:a8:b6:12:36:79:83:64:f1:79:14:46:a5:ae:
                    76:46:6b:ec:9a:53:c7:9e:3d:ce:48:c5:6e:f1:09:
                    54:05:e0:2d:df:f9:2c:dc:2d:6c:79:15:2e:89:63:
                    3f:74:86:49:be:e4:6a:b8:33:66:ff:07:ec:6e:51:
                    1e:eb:88:4f:64:65:f3:4e:a7:6c:62:c0:6f:5e:03:
                    39:25:53:43:7b:9c:aa:ce:18:80:aa:8f:6b:1a:c0:
                    88:82:5b:a4:d6:43:f6:34:90:61:0c:0a:e0:cd:c4:
                    43:bb:72:82:47:17:52:72:37:a1:6a:b3:16:25:d9:
                    6f:a0:32:b6:e7:55:c4:2b:bd:61:68:39:45:dd:d5:
                    3d:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:7B:DD:9C:0D:6E:F0:3D:2B:63:26:E4:09:E8:37:DA:50:17:DA:3F
            X509v3 Authority Key Identifier:
                keyid:05:A9:78:E3:D5:47:F5:59:3E:4B:03:19:70:38:59:86:94:50:58:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363235D/677CFDEC4C3911F083EC3397DAE4EC9C/Bal449VH9Vk-SwMZcDhZhpRQWMY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Bal449VH9Vk-SwMZcDhZhpRQWMY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363235D/677CFDEC4C3911F083EC3397DAE4EC9C/Bal449VH9Vk-SwMZcDhZhpRQWMY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:8d:dc:1c:a0:12:08:5c:38:f4:af:a7:e1:14:81:c8:ad:f4:
         73:79:c9:db:6e:6a:0f:90:a5:8b:a8:b5:eb:6a:e2:f7:2a:fd:
         66:99:55:1f:57:16:b9:84:42:11:70:fa:66:5d:9d:04:43:32:
         bc:31:b5:63:89:4f:96:f8:02:93:da:29:96:84:9b:1f:90:88:
         00:50:99:77:ed:55:c2:bf:33:8b:d9:32:c2:0f:5f:b7:32:c2:
         3b:07:3b:cf:66:92:09:1f:68:af:01:fa:a8:97:82:9f:4f:06:
         fb:1f:de:8f:0a:32:dd:28:ab:6a:b9:99:b4:8e:24:8b:b8:56:
         94:0b:8e:0e:1e:ec:48:37:72:19:ef:d2:f2:98:da:57:e6:e3:
         f7:cf:3d:1c:9b:4f:32:13:b6:6e:30:01:15:a2:bc:40:ba:80:
         f2:ed:fd:b8:8a:41:ec:14:23:d0:29:a2:67:d7:d6:7f:21:fe:
         b6:8e:7f:13:34:6b:9d:e4:ee:c0:3e:1b:f6:be:27:d8:33:84:
         35:a3:d6:5b:84:b0:8b:56:ea:7b:f8:9d:c0:bc:5f:8d:45:d8:
         80:e7:95:5c:5e:e4:07:34:85:c6:62:28:88:e4:1e:b3:2c:31:
         00:01:dc:17:1c:3e:81:97:f0:17:ed:6f:75:a7:c1:8f:23:d0:
         b3:00:b4:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:18:45 2026 by rpki-client