Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3644EA8/C396ACEE60A811F0B48991E5DAE4EC9C/2cDlwkl6yIv_-87Z9V1goiiYkn8.mft
File:                     2cDlwkl6yIv_-87Z9V1goiiYkn8.mft (raw, json)
Hash identifier:          0DtWWTbEehGFq3bRoNizOKGhli1Ippk5Hx7da8/mhjU=
Subject key identifier:   2E:2E:81:B3:F1:CA:93:F0:C6:49:C6:54:39:96:85:6E:4D:68:8A:E9
Authority key identifier: D9:C0:E5:C2:49:7A:C8:8B:FF:FB:CE:D9:F5:5D:60:A2:28:98:92:7F
Certificate issuer:       /CN=F3644EA8AF/serialNumber=D9C0E5C2497AC88BFFFBCED9F55D60A22898927F
Certificate serial:       EE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/2cDlwkl6yIv_-87Z9V1goiiYkn8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3644EA8/C396ACEE60A811F0B48991E5DAE4EC9C/2cDlwkl6yIv_-87Z9V1goiiYkn8.mft
Manifest number:          ED
Signing time:             Mon 02 Mar 2026 03:24:25 +0000
Manifest this update:     Mon 02 Mar 2026 03:24:24 +0000
Manifest next update:     Wed 04 Mar 2026 03:24:24 +0000
Files and hashes:         1: 2cDlwkl6yIv_-87Z9V1goiiYkn8.crl (hash: vnUIyXG6O59GKtzIHlt3pUKHh18LlEW5QNqbBS/iynk=)
                          2: 696CD0C060B411F0907E96B2DAE4EC9C.roa (hash: 5bAy/PZpHx90ghvP8O3g7YznUOeX+iyLW+PI1ddCQfo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3644EA8/C396ACEE60A811F0B48991E5DAE4EC9C/2cDlwkl6yIv_-87Z9V1goiiYkn8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3644EA8/C396ACEE60A811F0B48991E5DAE4EC9C/2cDlwkl6yIv_-87Z9V1goiiYkn8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/2cDlwkl6yIv_-87Z9V1goiiYkn8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 238 (0xee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3644EA8AF, serialNumber=D9C0E5C2497AC88BFFFBCED9F55D60A22898927F
        Validity
            Not Before: Mar  2 03:24:24 2026 GMT
            Not After : Mar  4 03:24:24 2026 GMT
        Subject: CN=69a502e9-5915
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ba:8d:45:39:08:b7:b7:45:07:7c:18:e2:d4:
                    45:c0:89:eb:d3:d3:6a:43:4d:45:b3:1c:3b:a5:dc:
                    2a:bf:0a:92:63:77:70:0a:4e:85:40:b4:cb:95:33:
                    79:29:81:eb:b6:21:3c:dc:fc:f6:56:d1:78:fb:24:
                    df:e3:49:6e:8d:e2:ab:aa:5a:58:ad:6d:04:db:31:
                    dd:88:9e:61:52:5e:74:1f:0c:ea:4d:b5:d3:17:df:
                    3d:3d:46:c0:b9:9d:13:b4:c7:4f:3c:9c:46:9f:9e:
                    89:61:9d:57:bd:30:06:9f:be:00:98:b7:fb:41:7e:
                    aa:45:94:27:cd:c4:c2:f7:bb:f8:70:35:8d:7d:b4:
                    dd:ae:e5:85:53:c2:93:d6:c1:fe:66:cd:bf:b4:ad:
                    fb:8a:8b:7e:f8:37:9d:91:df:b6:99:38:53:ed:75:
                    cc:1d:d5:44:38:23:f6:d5:8a:08:58:05:90:0c:93:
                    eb:4b:80:a4:0b:f3:bc:ea:ed:04:ae:17:a5:f6:d7:
                    61:71:09:a7:15:f9:41:50:da:81:df:c8:9e:64:54:
                    d1:e0:bd:3f:16:d1:a3:97:d3:cf:e1:43:ba:a2:59:
                    b4:b2:5a:de:fc:64:b0:4d:33:72:1f:5a:6b:a3:7c:
                    1b:e1:4d:02:bc:6c:fb:1b:27:df:a0:b2:61:54:c8:
                    59:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:2E:81:B3:F1:CA:93:F0:C6:49:C6:54:39:96:85:6E:4D:68:8A:E9
            X509v3 Authority Key Identifier:
                keyid:D9:C0:E5:C2:49:7A:C8:8B:FF:FB:CE:D9:F5:5D:60:A2:28:98:92:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3644EA8/C396ACEE60A811F0B48991E5DAE4EC9C/2cDlwkl6yIv_-87Z9V1goiiYkn8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2cDlwkl6yIv_-87Z9V1goiiYkn8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3644EA8/C396ACEE60A811F0B48991E5DAE4EC9C/2cDlwkl6yIv_-87Z9V1goiiYkn8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:e2:30:1e:4d:29:33:7e:b0:f3:25:33:ba:38:1c:b4:84:7e:
         43:87:ce:a6:65:8c:7d:cc:a0:7a:b2:ef:8d:cc:ae:cf:17:2c:
         43:5d:6b:09:de:cc:44:b4:59:a7:40:fc:4a:30:91:21:40:11:
         0a:36:85:6c:70:6f:00:ee:b3:a7:a7:33:ad:71:94:50:e7:34:
         cf:b4:f8:b7:cb:b2:4d:b3:e2:b6:73:fe:41:e0:ca:70:08:32:
         15:2c:8f:1d:62:13:f2:98:3d:5f:08:b9:bb:62:be:fe:35:2b:
         32:72:ef:76:6e:b4:d0:10:16:04:8d:99:b3:5f:b5:53:40:c2:
         4f:24:6e:44:73:f9:58:eb:32:4b:df:43:66:73:13:57:01:5c:
         ba:b3:03:8c:ff:5c:43:a1:6e:dc:5f:61:76:2d:69:32:03:98:
         45:2d:a2:83:49:60:4e:eb:b7:2b:e4:e2:f7:08:4a:35:57:2e:
         d8:85:b4:c4:a2:11:ca:7e:1e:a9:38:5c:6b:db:7b:0b:88:0d:
         35:a3:04:b3:71:66:87:42:71:55:22:78:1e:f2:a2:af:6d:15:
         90:94:01:3e:db:32:ec:8d:05:5d:bf:f7:b6:ec:c1:23:6d:8d:
         54:ff:0d:c6:54:ba:f5:a2:74:38:31:9b:51:68:98:33:99:df:
         b5:73:6d:82
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAO4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NDRFQThBRjExMC8GA1UEBRMoRDlDMEU1QzI0OTdBQzg4QkZGRkJDRUQ5RjU1RDYw
QTIyODk4OTI3RjAeFw0yNjAzMDIwMzI0MjRaFw0yNjAzMDQwMzI0MjRaMBgxFjAU
BgNVBAMTDTY5YTUwMmU5LTU5MTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCfuo1FOQi3t0UHfBji1EXAievT02pDTUWzHDul3Cq/CpJjd3AKToVAtMuV
M3kpgeu2ITzc/PZW0Xj7JN/jSW6N4quqWlitbQTbMd2InmFSXnQfDOpNtdMX3z09
RsC5nRO0x088nEafnolhnVe9MAafvgCYt/tBfqpFlCfNxML3u/hwNY19tN2u5YVT
wpPWwf5mzb+0rfuKi374N52R37aZOFPtdcwd1UQ4I/bVighYBZAMk+tLgKQL87zq
7QSuF6X212FxCacV+UFQ2oHfyJ5kVNHgvT8W0aOX08/hQ7qiWbSyWt78ZLBNM3If
WmujfBvhTQK8bPsbJ9+gsmFUyFnbAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQULi6B
s/HKk/DGScZUOZaFbk1oiukwHwYDVR0jBBgwFoAU2cDlwkl6yIv/+87Z9V1goiiY
kn8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjQ0RUE4L0MzOTZBQ0VFNjBBODExRjBCNDg5OTFFNURBRTRFQzlDLzJjRGx3
a2w2eUl2Xy04N1o5VjFnb2lpWWtuOC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzJjRGx3a2w2eUl2Xy04N1o5VjFnb2lpWWtuOC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NDRFQTgvQzM5NkFDRUU2MEE4MTFGMEI0ODk5MUU1REFF
NEVDOUMvMmNEbHdrbDZ5SXZfLTg3WjlWMWdvaWlZa244Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBd4jAeTSkzfrDzJTO6OBy0hH5Dh86m
ZYx9zKB6su+NzK7PFyxDXWsJ3sxEtFmnQPxKMJEhQBEKNoVscG8A7rOnpzOtcZRQ
5zTPtPi3y7JNs+K2c/5B4MpwCDIVLI8dYhPymD1fCLm7Yr7+NSsycu92brTQEBYE
jZmzX7VTQMJPJG5Ec/lY6zJL30NmcxNXAVy6swOM/1xDoW7cX2F2LWkyA5hFLaKD
SWBO67cr5OL3CEo1Vy7YhbTEohHKfh6pOFxr23sLiA01owSzcWaHQnFVInge8qKv
bRWQlAE+2zLsjQVdv/e27MEjbY1U/w3GVLr1onQ4MZtRaJgzmd+1c22C
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:46:59 2026 by rpki-client