Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363DCF2/8827F5DCDCBE11EFB15840BB762E951A/JEaS2sYhhOTIg1elJqucZvlKTH4.mft
File:                     JEaS2sYhhOTIg1elJqucZvlKTH4.mft (raw, json)
Hash identifier:          7ZRQrTZBFnOdlx/zTxFI+0eOQehv2IWboOxS+y3zUp8=
Subject key identifier:   5F:18:1C:0B:FB:DB:68:82:18:CD:DA:84:B6:33:E9:CC:C1:45:06:58
Authority key identifier: 24:46:92:DA:C6:21:84:E4:C8:83:57:A5:26:AB:9C:66:F9:4A:4C:7E
Certificate issuer:       /CN=F363DCF2AF/serialNumber=244692DAC62184E4C88357A526AB9C66F94A4C7E
Certificate serial:       019E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JEaS2sYhhOTIg1elJqucZvlKTH4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363DCF2/8827F5DCDCBE11EFB15840BB762E951A/JEaS2sYhhOTIg1elJqucZvlKTH4.mft
Manifest number:          019A
Signing time:             Mon 02 Mar 2026 03:15:13 +0000
Manifest this update:     Mon 02 Mar 2026 03:15:12 +0000
Manifest next update:     Wed 04 Mar 2026 03:15:12 +0000
Files and hashes:         1: JEaS2sYhhOTIg1elJqucZvlKTH4.crl (hash: GKA696VxxNAXBfe1sd4rGAstkmB9b/IneaE1JoCWe+c=)
                          2: 7E8AB1F2210D11F0BF867894DAE4EC9C.roa (hash: DjV7nCg+4hB07UZMYzd0xmACSMYBPBQfqRJs7j2MoEM=)
                          3: 201348D2210D11F0ABE7E991DAE4EC9C.roa (hash: LUo+fZ8ICythu7NN9JfJV1LkDsZAEGtwMfGmobKx8es=)
                          4: D6E208F6210C11F0A4C7E78FDAE4EC9C.roa (hash: UTbJHvdCycZUQvLa3nWOWV1moJ9jZms3ZBFk0hjIuSc=)
                          5: E21E90EE210D11F0934A7996DAE4EC9C.roa (hash: iUS+8IiwQWTC3KosgvVLrgeHR5LzZ/YYi+HkfN+5rAw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363DCF2/8827F5DCDCBE11EFB15840BB762E951A/JEaS2sYhhOTIg1elJqucZvlKTH4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363DCF2/8827F5DCDCBE11EFB15840BB762E951A/JEaS2sYhhOTIg1elJqucZvlKTH4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JEaS2sYhhOTIg1elJqucZvlKTH4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 414 (0x19e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363DCF2AF, serialNumber=244692DAC62184E4C88357A526AB9C66F94A4C7E
        Validity
            Not Before: Mar  2 03:15:12 2026 GMT
            Not After : Mar  4 03:15:12 2026 GMT
        Subject: CN=69a500c1-a1da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:25:2c:0e:1d:2d:3f:3c:8b:5e:ee:62:7b:a0:
                    ff:1d:b8:11:82:97:0d:9f:ca:42:d2:83:03:ec:28:
                    a2:8d:15:e4:9b:74:3c:7e:69:33:a9:57:f7:65:5f:
                    f8:9c:3b:dc:bf:95:43:10:a0:dc:e8:c7:e1:8c:79:
                    6c:f5:be:4e:ab:ae:de:16:92:f5:ba:b5:7a:b3:4f:
                    30:38:cd:f8:ed:59:35:16:0c:ce:e3:51:bf:f3:c8:
                    d8:93:f7:4f:d3:e7:1f:1b:04:49:cc:65:87:ac:3a:
                    e6:df:8c:41:23:81:82:0b:c7:a5:cc:07:f3:58:ee:
                    82:1e:42:9c:1c:97:26:e1:bb:77:a0:6b:3a:e9:4b:
                    b8:1a:f6:ee:94:e3:68:41:ff:9a:58:b9:b1:65:b7:
                    30:1e:cc:aa:24:b9:aa:7a:1c:86:96:1e:5d:d0:0e:
                    90:66:37:80:ae:7d:9a:43:f2:2c:9d:2a:01:01:47:
                    cf:b5:ca:26:01:75:00:c7:f8:dc:e3:66:70:ea:53:
                    fd:50:43:0d:a6:f6:34:0e:11:56:1e:88:a9:e0:e1:
                    84:d3:d8:f2:39:ab:66:dc:c9:e5:b2:5e:14:c8:f2:
                    d8:d2:f2:81:63:9f:39:e7:a6:52:aa:81:3e:84:48:
                    52:d8:e8:41:7d:4c:93:b0:6b:00:53:f5:d7:20:8d:
                    ca:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:18:1C:0B:FB:DB:68:82:18:CD:DA:84:B6:33:E9:CC:C1:45:06:58
            X509v3 Authority Key Identifier:
                keyid:24:46:92:DA:C6:21:84:E4:C8:83:57:A5:26:AB:9C:66:F9:4A:4C:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363DCF2/8827F5DCDCBE11EFB15840BB762E951A/JEaS2sYhhOTIg1elJqucZvlKTH4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JEaS2sYhhOTIg1elJqucZvlKTH4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363DCF2/8827F5DCDCBE11EFB15840BB762E951A/JEaS2sYhhOTIg1elJqucZvlKTH4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:a4:11:6e:d8:71:a3:02:fb:51:b7:e6:ad:ec:c6:43:e5:d1:
         f0:b5:60:c3:d6:72:39:c4:61:8f:3f:84:3e:bd:21:a8:41:25:
         16:e2:99:44:3f:55:ff:ec:be:e4:53:4d:be:1c:71:3a:35:9f:
         7c:bd:4b:59:06:98:09:8e:39:63:81:ab:b1:7f:ec:06:c9:49:
         32:09:73:95:ac:ab:d3:fb:4a:bb:39:48:5c:38:69:a2:35:80:
         e2:b8:74:10:21:39:e1:95:00:00:e2:3e:7a:c4:03:14:e8:15:
         5d:a2:0d:05:5e:f9:c4:0b:90:08:0a:5a:9a:be:ed:a6:5d:33:
         0d:a5:70:fe:a7:de:77:58:af:bb:2e:6e:5e:52:17:c2:1b:c8:
         34:be:7e:8a:22:7a:c6:d2:47:5d:a3:44:1f:89:4e:09:58:ff:
         1b:86:2c:8b:53:cf:8b:5a:5c:8b:ab:bd:ed:55:6e:87:25:7d:
         bf:4f:7f:1a:46:0f:58:72:96:83:42:e8:3d:ec:9d:02:0e:da:
         c1:f4:d4:5c:18:09:29:de:96:6a:b5:d9:32:54:56:e0:a0:ff:
         cb:8c:c7:7e:2d:92:94:60:81:57:d9:28:1f:30:7c:dd:5a:c7:
         de:67:50:a2:47:37:31:d6:44:f9:7c:86:f5:33:1e:81:cc:42:
         6a:c4:f3:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:44:22 2026 by rpki-client