Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363EA80/23D54B28DDDA11ED86532E0D306D8C1D/xnxiMRIJQSNVgdWUJWWr90Gdzsw.mft
File:                     xnxiMRIJQSNVgdWUJWWr90Gdzsw.mft (raw, json)
Hash identifier:          EwLkENSs4KjsdEh1lo77rXPhMioY1Jc0FuJvMGswfHQ=
Subject key identifier:   EF:E8:EB:2A:F9:27:78:6B:77:DD:74:3B:9C:AE:C8:39:EF:69:F2:BE
Authority key identifier: C6:7C:62:31:12:09:41:23:55:81:D5:94:25:65:AB:F7:41:9D:CE:CC
Certificate issuer:       /CN=F363EA80AF/serialNumber=C67C6231120941235581D5942565ABF7419DCECC
Certificate serial:       045D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/xnxiMRIJQSNVgdWUJWWr90Gdzsw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363EA80/23D54B28DDDA11ED86532E0D306D8C1D/xnxiMRIJQSNVgdWUJWWr90Gdzsw.mft
Manifest number:          044E
Signing time:             Mon 02 Mar 2026 02:25:11 +0000
Manifest this update:     Mon 02 Mar 2026 02:25:11 +0000
Manifest next update:     Wed 04 Mar 2026 02:25:11 +0000
Files and hashes:         1: xnxiMRIJQSNVgdWUJWWr90Gdzsw.crl (hash: NSNlyK5Nt1vZmJEoCt3L9WmK1uQ7lkSp7I9dkttzlno=)
                          2: 916580AACA5A11EEBC5AFA9D775412E6.roa (hash: ztp7/02g9RTHkUR+QiE90a3d75LjUNCsuA1EVWoHlVU=)
                          3: 9291A14C941E11EEBBAE4A1ED25BE465.roa (hash: hoQ0WHzltGfNVqWYNvwkPi5gw4CWcPqSrUNOVflBYxw=)
                          4: 05E09FE07B3C11EFA2CFEB45762E951A.roa (hash: cVeBq/iu4EVAtdwg8HApbjb07OUiv7eyhugdvSJdFOo=)
                          5: AE10BD027B3D11EFA19A5950762E951A.roa (hash: pBZPZsU0a4Hyx7jC1O2ChKZlKrJuIUtFfo6uMv2dY6Q=)
                          6: 151F2E827B3B11EF80BDC540762E951A.roa (hash: +sFHoHgCQHoGDtM7InUTilsDdnQATx775LFAedkvfBU=)
                          7: 71B9ADBAF48311ED8AC17D2C4AD9E6FC.roa (hash: H2R++FRMLxMiqVXy8BRmuUKzD8njGoupil4sDGEQyh4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363EA80/23D54B28DDDA11ED86532E0D306D8C1D/xnxiMRIJQSNVgdWUJWWr90Gdzsw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363EA80/23D54B28DDDA11ED86532E0D306D8C1D/xnxiMRIJQSNVgdWUJWWr90Gdzsw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/xnxiMRIJQSNVgdWUJWWr90Gdzsw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1117 (0x45d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363EA80AF, serialNumber=C67C6231120941235581D5942565ABF7419DCECC
        Validity
            Not Before: Mar  2 02:25:11 2026 GMT
            Not After : Mar  4 02:25:11 2026 GMT
        Subject: CN=69a4f507-b7a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:25:21:61:c1:a7:89:fd:7a:f2:fb:08:48:e9:
                    3a:df:84:d8:8b:42:1c:cc:c6:32:01:9b:b9:c5:d3:
                    a1:51:d4:c8:8b:cb:fc:17:ae:ee:71:e8:76:19:ea:
                    4b:cb:f7:9f:de:51:f6:e9:56:4c:01:f4:5b:f9:86:
                    45:88:9e:4b:f2:d9:aa:e9:31:52:ef:8f:ce:e0:0e:
                    09:51:d5:32:f3:5d:2e:43:95:1f:9a:f1:81:01:44:
                    44:2f:be:c2:dc:69:cd:55:b7:42:81:be:b8:d1:ad:
                    68:04:f7:d3:f3:37:bd:1e:98:37:02:79:6f:6e:10:
                    08:65:6d:a5:e6:3f:f6:44:df:be:28:cd:30:44:48:
                    50:9d:63:e8:84:03:ae:72:35:ee:b2:82:47:0a:25:
                    68:77:99:8c:8e:00:2c:37:7e:f7:8d:98:cc:1d:21:
                    67:62:7d:30:ad:3a:e3:c8:34:31:39:02:6c:3d:f5:
                    b3:b4:86:43:9b:00:d7:cf:79:f1:5c:76:d3:e5:63:
                    cc:d7:ac:ac:d1:27:f3:73:6d:84:26:c3:33:11:b1:
                    42:6b:c7:69:ff:70:1f:de:b3:9e:59:db:3b:2f:cf:
                    81:7a:65:ba:45:4c:6e:69:dc:80:ef:5b:4c:a4:25:
                    ec:f0:69:94:35:e0:38:84:2b:37:be:32:01:04:09:
                    55:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:E8:EB:2A:F9:27:78:6B:77:DD:74:3B:9C:AE:C8:39:EF:69:F2:BE
            X509v3 Authority Key Identifier:
                keyid:C6:7C:62:31:12:09:41:23:55:81:D5:94:25:65:AB:F7:41:9D:CE:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363EA80/23D54B28DDDA11ED86532E0D306D8C1D/xnxiMRIJQSNVgdWUJWWr90Gdzsw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xnxiMRIJQSNVgdWUJWWr90Gdzsw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363EA80/23D54B28DDDA11ED86532E0D306D8C1D/xnxiMRIJQSNVgdWUJWWr90Gdzsw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:5e:33:74:42:d1:9f:75:69:27:b5:78:ee:7d:d8:46:f9:c7:
         01:69:11:93:30:96:bd:9d:e2:22:04:ca:61:94:fb:a4:58:14:
         9c:42:ab:f8:09:c5:93:91:12:c4:ae:60:b1:ee:30:52:ae:3b:
         30:3b:c8:ef:0c:90:66:c4:7f:d1:48:bf:c5:3e:25:89:b9:fe:
         f3:66:85:70:f0:9e:a0:2a:1c:1a:f8:d0:5b:be:94:d7:05:35:
         d8:05:8d:60:7d:af:38:79:bb:71:17:ed:df:18:17:af:fb:7e:
         76:f7:45:04:ef:80:a9:da:e8:1f:f1:f7:ae:38:38:aa:37:9c:
         97:01:9c:d4:1a:77:0c:7b:27:cc:93:d4:15:41:b2:bc:fa:1e:
         a9:c4:9a:5b:ae:20:55:ea:ca:2b:04:0e:f3:09:f4:ff:06:18:
         2f:d2:f3:82:85:13:e8:4d:07:8b:c5:d4:f0:e3:37:a2:c1:16:
         e4:2f:e2:f9:0b:c5:04:a5:c8:48:0d:f7:c3:c2:cd:47:82:32:
         a1:e1:00:65:99:d3:39:f1:59:3e:f2:be:70:da:5f:9f:d7:af:
         da:cf:b5:52:63:3f:33:1d:6c:3c:ab:74:7e:a2:00:78:fb:b7:
         b6:bc:a6:be:b9:1e:15:67:fb:e7:04:1d:a2:97:94:df:9d:12:
         28:d3:69:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:19:52 2026 by rpki-client