Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364AFEC/C1CCFE3680F711EFACC908AA762E951A/RkZtNWrLGVGdZM2Cm-1APQQgBOw.mft
File:                     RkZtNWrLGVGdZM2Cm-1APQQgBOw.mft (raw, json)
Hash identifier:          nL21LGUvXZG93VR6NZUeUe7cgC9wp1yMx9KyWYXYwPc=
Subject key identifier:   6D:05:16:30:05:18:05:86:27:4D:03:12:8D:14:50:0C:EB:A7:5E:FF
Authority key identifier: 46:46:6D:35:6A:CB:19:51:9D:64:CD:82:9B:ED:40:3D:04:20:04:EC
Certificate issuer:       /CN=F364AFECAF/serialNumber=46466D356ACB19519D64CD829BED403D042004EC
Certificate serial:       021A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/RkZtNWrLGVGdZM2Cm-1APQQgBOw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364AFEC/C1CCFE3680F711EFACC908AA762E951A/RkZtNWrLGVGdZM2Cm-1APQQgBOw.mft
Manifest number:          0217
Signing time:             Sun 01 Mar 2026 03:08:25 +0000
Manifest this update:     Sun 01 Mar 2026 03:08:25 +0000
Manifest next update:     Tue 03 Mar 2026 03:08:25 +0000
Files and hashes:         1: RkZtNWrLGVGdZM2Cm-1APQQgBOw.crl (hash: CA7WADARW0qjwDO1doIvLfI6W6ypvPIAoU225YLCIGI=)
                          2: DAF72AF6FB0511F0937243EFDAE4EC9C.roa (hash: xagpnItyhctkTvDzffDMRA8DAPhk4/gHbOx7gcUFdps=)
                          3: 3115BA58AC9A11EFBB666976762E951A.roa (hash: bHbD7weS2dip8Z+GiQXd9+abXSVFw+tU7+Gs29hWT0o=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364AFEC/C1CCFE3680F711EFACC908AA762E951A/RkZtNWrLGVGdZM2Cm-1APQQgBOw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364AFEC/C1CCFE3680F711EFACC908AA762E951A/RkZtNWrLGVGdZM2Cm-1APQQgBOw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/RkZtNWrLGVGdZM2Cm-1APQQgBOw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 03 Mar 2026 00:07:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 538 (0x21a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364AFECAF, serialNumber=46466D356ACB19519D64CD829BED403D042004EC
        Validity
            Not Before: Mar  1 03:08:25 2026 GMT
            Not After : Mar  3 03:08:25 2026 GMT
        Subject: CN=69a3ada9-4d4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:aa:76:43:a8:33:70:12:52:f0:b8:b0:d1:4f:
                    4b:ba:a0:27:6c:96:33:93:b4:c1:f0:f5:64:4e:8e:
                    55:07:e1:aa:32:84:d0:89:29:f9:14:9d:c9:f5:07:
                    bd:52:fa:7d:d9:46:39:95:59:e7:2b:f4:35:d1:86:
                    a3:19:96:ff:36:88:48:3a:3f:6f:8e:ec:3f:7f:d5:
                    c5:44:74:d0:84:66:1f:c0:93:38:2f:65:ff:c7:62:
                    49:0d:35:77:ec:b3:1e:e3:60:8a:84:c0:05:79:2e:
                    c9:70:c6:e6:8a:45:1e:43:ca:39:bd:7e:f5:3e:cb:
                    65:2d:60:45:04:cd:85:d9:5a:5f:76:cd:15:d5:a3:
                    4c:08:b8:55:61:41:c6:39:26:8d:74:bb:af:6b:ab:
                    79:af:7f:90:26:86:53:01:db:20:dc:9d:23:6d:68:
                    df:2d:ae:a9:c9:ad:8d:64:29:fb:e3:20:64:4f:a5:
                    f2:d3:6a:b0:83:5d:f2:a9:ae:20:cf:36:55:83:00:
                    7f:0c:53:67:fa:15:1e:a0:21:34:68:90:b0:a8:24:
                    45:eb:5f:dc:49:ae:8f:18:95:75:e9:ed:a3:9b:a4:
                    bf:99:2f:71:02:de:38:0f:1f:3f:dd:7b:a4:0c:df:
                    ba:2e:81:5c:f5:ad:76:2b:79:2d:f1:5a:75:ae:b2:
                    98:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:05:16:30:05:18:05:86:27:4D:03:12:8D:14:50:0C:EB:A7:5E:FF
            X509v3 Authority Key Identifier:
                keyid:46:46:6D:35:6A:CB:19:51:9D:64:CD:82:9B:ED:40:3D:04:20:04:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364AFEC/C1CCFE3680F711EFACC908AA762E951A/RkZtNWrLGVGdZM2Cm-1APQQgBOw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/RkZtNWrLGVGdZM2Cm-1APQQgBOw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364AFEC/C1CCFE3680F711EFACC908AA762E951A/RkZtNWrLGVGdZM2Cm-1APQQgBOw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:89:bf:f0:ce:ad:0b:56:b6:4a:48:f0:a9:92:27:6c:59:de:
         15:8b:cb:bb:ea:f9:53:b4:ca:16:66:2f:ac:37:70:38:59:22:
         df:ef:dd:4f:c9:cf:fb:8e:30:0d:d5:b1:09:d7:ca:d7:1a:8d:
         1e:e2:bb:ef:42:3b:71:86:31:8d:68:fc:3d:36:b1:9d:89:22:
         27:97:73:a5:83:ac:8e:a5:55:33:3b:ad:d6:a3:49:33:60:4e:
         4f:4d:11:ba:9d:24:15:a2:1f:44:64:5c:b8:7a:a9:a2:26:18:
         2c:ad:6b:93:8c:29:4f:0f:ba:3a:fe:56:37:10:28:e4:bd:9b:
         db:f4:49:df:7b:3d:08:6f:0d:b3:a5:e3:ac:24:5a:16:33:e1:
         57:b8:98:eb:8a:99:e4:33:a4:e8:00:34:15:07:cf:c3:1e:f2:
         bb:4a:c5:bf:bf:e6:2c:83:98:74:a2:b8:a6:49:64:44:16:6c:
         85:71:ec:28:a0:ed:a1:a4:1d:b7:24:89:b9:9f:60:03:55:93:
         cc:7f:e2:ac:b0:1e:f3:d2:64:c5:35:d1:40:38:42:d9:6f:b7:
         bd:9c:e2:43:ae:c3:37:76:87:b4:1a:e8:ee:59:78:f7:72:12:
         94:9d:9a:5d:0a:fc:27:97:17:e2:33:a8:f8:6f:4a:dc:22:b3:
         a3:5f:15:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:41:17 2026 by rpki-client