Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3645501/9CDFC738915111EAA5A73044F8AEA228/C7pA9VDeSe7FcpFxJO4AiiTETQ8.mft
File:                     C7pA9VDeSe7FcpFxJO4AiiTETQ8.mft (raw, json)
Hash identifier:          JCQKlHwvlPK1Qh5vFDe9NauCqrUJW7+nx/sULXO87HI=
Subject key identifier:   10:1C:37:B8:F0:30:04:84:D8:91:69:5E:8C:7B:40:84:89:6E:E6:79
Authority key identifier: 0B:BA:40:F5:50:DE:49:EE:C5:72:91:71:24:EE:00:8A:24:C4:4D:0F
Certificate issuer:       /CN=F3645501AF/serialNumber=0BBA40F550DE49EEC572917124EE008A24C44D0F
Certificate serial:       088E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/C7pA9VDeSe7FcpFxJO4AiiTETQ8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3645501/9CDFC738915111EAA5A73044F8AEA228/C7pA9VDeSe7FcpFxJO4AiiTETQ8.mft
Manifest number:          0889
Signing time:             Sun 01 Mar 2026 01:26:34 +0000
Manifest this update:     Sun 01 Mar 2026 01:26:34 +0000
Manifest next update:     Tue 03 Mar 2026 01:26:34 +0000
Files and hashes:         1: C7pA9VDeSe7FcpFxJO4AiiTETQ8.crl (hash: gW7KWvZbOnWv3Gu8h0D+jC3rFGtzvzdRftQjxjphAtQ=)
                          2: C69507C6303111F08DE721DEDAE4EC9C.roa (hash: n1LnT/xuX8ossK6e1Qu5ErVwbY8lo9OUKGVmWsM35RE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3645501/9CDFC738915111EAA5A73044F8AEA228/C7pA9VDeSe7FcpFxJO4AiiTETQ8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3645501/9CDFC738915111EAA5A73044F8AEA228/C7pA9VDeSe7FcpFxJO4AiiTETQ8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/C7pA9VDeSe7FcpFxJO4AiiTETQ8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 03 Mar 2026 00:07:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2190 (0x88e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3645501AF, serialNumber=0BBA40F550DE49EEC572917124EE008A24C44D0F
        Validity
            Not Before: Mar  1 01:26:34 2026 GMT
            Not After : Mar  3 01:26:34 2026 GMT
        Subject: CN=69a395ca-6e92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:40:68:08:4f:a8:ad:6e:63:74:b6:54:2b:86:
                    86:94:ca:8f:91:df:df:d3:c8:9b:bf:81:29:22:97:
                    2a:41:4d:0f:5f:10:fa:fe:da:e7:c6:d0:1e:d4:5a:
                    e9:4b:89:b2:bd:72:45:58:ec:96:20:5d:82:fa:a0:
                    8a:15:41:74:f7:f7:d4:dc:e3:b9:58:f6:c7:4e:17:
                    55:9b:30:32:7b:1d:5a:9f:4e:fb:00:69:55:4b:b3:
                    cc:06:7b:06:7d:58:36:22:c2:fe:89:91:f7:93:b6:
                    b1:a1:98:67:41:5f:41:26:63:0a:5b:38:0f:a3:64:
                    e2:dd:8a:33:0b:24:89:3a:02:d2:9c:62:d3:ac:bf:
                    5b:f1:d9:7f:bc:ef:7b:15:0c:3d:0f:6d:33:20:5e:
                    56:3a:45:94:b2:5e:bd:79:8e:00:6d:51:37:e6:1b:
                    cf:8e:64:c7:09:43:7e:85:9c:a7:f6:ff:90:63:b4:
                    59:7d:88:3f:11:db:44:48:87:da:52:62:62:96:1b:
                    44:78:17:9d:78:24:23:e0:99:8f:76:d7:3a:b4:8d:
                    5e:3e:83:da:6f:6f:92:03:d0:c6:0c:d7:c3:2f:10:
                    a7:bf:63:1f:44:0e:ab:62:62:57:51:b4:14:c2:69:
                    b0:32:a2:2a:d8:f2:8c:ef:4f:e2:ad:13:1a:9f:17:
                    f2:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:1C:37:B8:F0:30:04:84:D8:91:69:5E:8C:7B:40:84:89:6E:E6:79
            X509v3 Authority Key Identifier:
                keyid:0B:BA:40:F5:50:DE:49:EE:C5:72:91:71:24:EE:00:8A:24:C4:4D:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3645501/9CDFC738915111EAA5A73044F8AEA228/C7pA9VDeSe7FcpFxJO4AiiTETQ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/C7pA9VDeSe7FcpFxJO4AiiTETQ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3645501/9CDFC738915111EAA5A73044F8AEA228/C7pA9VDeSe7FcpFxJO4AiiTETQ8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:f7:61:79:2a:4a:bd:01:d8:3d:b3:96:c5:95:14:99:1d:53:
         89:31:d8:75:fb:0d:e2:ee:8e:4f:bb:39:4b:5b:cc:27:65:08:
         e2:52:6f:ee:fd:72:6d:f7:35:13:66:41:41:5a:99:c9:19:16:
         71:45:ff:93:28:9c:88:4d:54:be:ae:ee:fb:e0:71:36:4a:ba:
         42:92:10:99:78:e6:92:97:c5:71:4c:09:d4:eb:bf:e6:d0:c1:
         f6:3a:f6:5c:d9:b9:dc:ad:17:b2:da:4d:14:72:1e:e0:06:5f:
         af:e3:70:48:94:59:89:47:1c:bb:e1:ba:ca:e0:74:86:23:05:
         01:da:86:46:66:c3:cc:ec:ef:14:ee:b6:36:a6:f9:3a:87:44:
         7d:35:4b:bc:b5:a8:70:c8:bb:28:33:a9:cb:af:b0:25:6f:91:
         e8:d4:0b:dc:30:59:bc:72:f8:7c:12:15:56:ae:e9:03:98:a2:
         fc:7f:e5:57:d8:b1:33:28:e7:66:33:90:4c:c8:31:ef:29:24:
         e3:e9:a1:3e:0b:e7:89:1d:be:53:d9:f9:79:d1:45:95:25:71:
         b6:e7:e9:1a:ac:27:4e:fe:d3:f8:db:b2:2a:eb:5c:9b:06:73:
         18:6a:3d:00:28:39:cd:70:51:64:e2:48:f2:68:76:7d:95:a7:
         d6:dd:88:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:17:43 2026 by rpki-client