Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36390A9/1B3A425486E211EFB4686096762E951A/8GzMRNUs-b4RXOx6TaaxMJukOaU.mft
File:                     8GzMRNUs-b4RXOx6TaaxMJukOaU.mft (raw, json)
Hash identifier:          0iwtjPW2+cRqF+Pl+6mhT5ZNBfwo96VGlnVN7LNH9uA=
Subject key identifier:   03:75:5A:BF:17:4A:FF:D9:94:4E:B7:E1:A8:67:3E:11:35:AA:E7:91
Authority key identifier: F0:6C:CC:44:D5:2C:F9:BE:11:5C:EC:7A:4D:A6:B1:30:9B:A4:39:A5
Certificate issuer:       /CN=F36390A9RI/serialNumber=F06CCC44D52CF9BE115CEC7A4DA6B1309BA439A5
Certificate serial:       020A
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/8GzMRNUs-b4RXOx6TaaxMJukOaU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36390A9/1B3A425486E211EFB4686096762E951A/8GzMRNUs-b4RXOx6TaaxMJukOaU.mft
Manifest number:          0209
Signing time:             Mon 02 Mar 2026 03:08:38 +0000
Manifest this update:     Mon 02 Mar 2026 03:08:37 +0000
Manifest next update:     Wed 04 Mar 2026 03:08:37 +0000
Files and hashes:         1: 8GzMRNUs-b4RXOx6TaaxMJukOaU.crl (hash: 00tl9ksS4Ty/Wxqw1Xz7xKc4WhO7GlmozUaEztxpFgs=)
                          2: 7F1695F2871411EF981CC64F762E951A.roa (hash: y+9csfTO7VjobZ1q8Iv+RH3EIrHQat1B/mZ0hIosNpk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36390A9/1B3A425486E211EFB4686096762E951A/8GzMRNUs-b4RXOx6TaaxMJukOaU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36390A9/1B3A425486E211EFB4686096762E951A/8GzMRNUs-b4RXOx6TaaxMJukOaU.mft
                          rsync://rpki.afrinic.net/repository/ripe/8GzMRNUs-b4RXOx6TaaxMJukOaU.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 522 (0x20a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36390A9RI, serialNumber=F06CCC44D52CF9BE115CEC7A4DA6B1309BA439A5
        Validity
            Not Before: Mar  2 03:08:37 2026 GMT
            Not After : Mar  4 03:08:37 2026 GMT
        Subject: CN=69a4ff36-21d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:22:8e:8c:0a:75:9d:66:e8:4e:bc:9f:80:9f:
                    cd:51:49:85:9c:c6:1b:a2:3e:87:87:92:b1:79:d3:
                    2a:55:e3:8d:9a:51:79:3d:98:e8:cb:e0:73:57:1b:
                    cb:0b:a9:e4:e7:2b:dd:77:bd:18:b5:d8:8b:79:82:
                    9f:c7:27:d7:9d:cb:c4:b6:35:40:b6:6a:f4:74:b4:
                    48:8e:f3:a4:73:0c:f7:ed:4d:68:05:ca:b8:30:cc:
                    f4:33:94:a2:ed:68:71:d5:52:fe:59:4b:9d:55:01:
                    45:8a:60:11:9d:b3:da:14:08:c6:d5:bd:48:01:35:
                    99:63:1e:25:91:dd:64:ad:0e:cf:ba:f5:76:a5:32:
                    c0:4f:18:c4:21:5d:b3:64:57:7f:f3:cd:57:98:4a:
                    87:34:89:7f:28:3f:58:5d:5c:23:68:68:4f:ca:b9:
                    8c:77:93:4e:6d:fd:53:dd:7f:ca:40:1f:15:44:d0:
                    f9:26:bf:f2:56:16:c8:7d:8a:6e:8f:b7:88:2b:00:
                    92:dd:a0:9c:19:c5:ac:44:11:eb:a2:32:40:16:8a:
                    a8:64:d1:c4:40:a7:68:7d:02:b5:12:4c:fe:e2:71:
                    8a:4b:88:6e:9e:89:f3:76:1a:2b:ed:8c:14:b8:f7:
                    b4:86:5e:8f:dc:cb:67:ef:24:f7:af:11:6e:2c:4e:
                    0d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:75:5A:BF:17:4A:FF:D9:94:4E:B7:E1:A8:67:3E:11:35:AA:E7:91
            X509v3 Authority Key Identifier:
                keyid:F0:6C:CC:44:D5:2C:F9:BE:11:5C:EC:7A:4D:A6:B1:30:9B:A4:39:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36390A9/1B3A425486E211EFB4686096762E951A/8GzMRNUs-b4RXOx6TaaxMJukOaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/8GzMRNUs-b4RXOx6TaaxMJukOaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36390A9/1B3A425486E211EFB4686096762E951A/8GzMRNUs-b4RXOx6TaaxMJukOaU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:d9:3e:22:92:b4:be:35:58:19:d7:8c:f3:01:1e:16:b2:5a:
         de:9b:c7:c3:d5:0d:c9:e9:d2:06:63:7a:97:ad:78:dc:4b:f5:
         fa:4b:84:74:39:ad:3d:22:a0:9f:d7:c2:b8:71:1f:0b:0d:be:
         de:ba:19:a4:a4:e2:d7:22:eb:c6:af:3b:bf:09:0d:1a:ba:de:
         de:ee:f5:41:5b:27:b8:ce:e1:fe:2f:68:bd:74:57:8b:ce:90:
         a3:04:a8:e9:f8:12:44:98:bc:9e:05:89:18:48:44:00:8b:1b:
         15:1e:67:6a:e0:3b:54:92:d5:ac:ef:e8:b2:1f:76:08:38:6a:
         55:bd:1f:00:b9:69:3f:6a:a5:10:78:c4:27:65:e6:fb:95:57:
         50:34:4a:ba:39:73:92:32:b0:ae:52:6d:0f:e2:f4:92:ca:17:
         d0:49:8e:af:3b:1d:d0:87:4a:16:62:1f:04:4f:69:6e:08:55:
         4e:de:9b:d8:42:3a:a5:41:da:65:f1:b7:9c:3e:5c:33:11:7a:
         2f:e4:c8:5e:74:80:c6:87:22:b1:ff:76:3d:a5:8d:66:49:3b:
         ff:b6:bf:0e:f7:61:0b:4e:59:e9:5f:4d:cf:31:ce:6c:92:6c:
         de:d9:1f:8e:31:ff:c7:3c:6e:6a:6a:cd:fa:db:07:b3:11:3d:
         bd:b7:fc:4c
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICAgowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MzkwQTlSSTExMC8GA1UEBRMoRjA2Q0NDNDRENTJDRjlCRTExNUNFQzdBNERBNkIx
MzA5QkE0MzlBNTAeFw0yNjAzMDIwMzA4MzdaFw0yNjAzMDQwMzA4MzdaMBgxFjAU
BgNVBAMTDTY5YTRmZjM2LTIxZDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCYIo6MCnWdZuhOvJ+An81RSYWcxhuiPoeHkrF50ypV442aUXk9mOjL4HNX
G8sLqeTnK913vRi12It5gp/HJ9edy8S2NUC2avR0tEiO86RzDPftTWgFyrgwzPQz
lKLtaHHVUv5ZS51VAUWKYBGds9oUCMbVvUgBNZljHiWR3WStDs+69XalMsBPGMQh
XbNkV3/zzVeYSoc0iX8oP1hdXCNoaE/KuYx3k05t/VPdf8pAHxVE0Pkmv/JWFsh9
im6Pt4grAJLdoJwZxaxEEeuiMkAWiqhk0cRAp2h9ArUSTP7icYpLiG6eifN2Givt
jBS497SGXo/cy2fvJPevEW4sTg07AgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUA3Va
vxdK/9mUTrfhqGc+ETWq55EwHwYDVR0jBBgwFoAU8GzMRNUs+b4RXOx6TaaxMJuk
OaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjM5MEE5LzFCM0E0MjU0ODZFMjExRUZCNDY4NjA5Njc2MkU5NTFBLzhHek1S
TlVzLWI0UlhPeDZUYWF4TUp1a09hVS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9yaXBl
LzhHek1STlVzLWI0UlhPeDZUYWF4TUp1a09hVS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2MzkwQTkvMUIzQTQyNTQ4NkUyMTFFRkI0Njg2MDk2NzYyRTk1
MUEvOEd6TVJOVXMtYjRSWE94NlRhYXhNSnVrT2FVLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCC2T4ikrS+NVgZ14zzAR4Wslrem8fD1Q3J
6dIGY3qXrXjcS/X6S4R0Oa09IqCf18K4cR8LDb7euhmkpOLXIuvGrzu/CQ0aut7e
7vVBWye4zuH+L2i9dFeLzpCjBKjp+BJEmLyeBYkYSEQAixsVHmdq4DtUktWs7+iy
H3YIOGpVvR8AuWk/aqUQeMQnZeb7lVdQNEq6OXOSMrCuUm0P4vSSyhfQSY6vOx3Q
h0oWYh8ET2luCFVO3pvYQjqlQdpl8becPlwzEXov5MhedIDGhyKx/3Y9pY1mSTv/
tr8O92ELTlnpX03PMc5skmze2R+OMf/HPG5qas362wezET29t/xM
-----END CERTIFICATE-----
Generated at Mon Mar 2 19:43:20 2026 by rpki-client