Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3652C3A/D607CF289A8111EE8A7BF12BD25BE465/Pw7qWRltFKMq812hcQ8VDV-d3dg.mft
File:                     Pw7qWRltFKMq812hcQ8VDV-d3dg.mft (raw, json)
Hash identifier:          R0wUMstDGh9kSQl6RUtV9gcQOb1KjmlACflCmBCIS5Y=
Subject key identifier:   20:59:D9:DF:1C:58:6B:65:BE:D9:76:D6:B6:74:B7:F3:85:36:FD:FA
Authority key identifier: 3F:0E:EA:59:19:6D:14:A3:2A:F3:5D:A1:71:0F:15:0D:5F:9D:DD:D8
Certificate issuer:       /CN=F3652C3AAF/serialNumber=3F0EEA59196D14A32AF35DA1710F150D5F9DDDD8
Certificate serial:       0348
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Pw7qWRltFKMq812hcQ8VDV-d3dg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3652C3A/D607CF289A8111EE8A7BF12BD25BE465/Pw7qWRltFKMq812hcQ8VDV-d3dg.mft
Manifest number:          0344
Signing time:             Mon 02 Mar 2026 02:43:27 +0000
Manifest this update:     Mon 02 Mar 2026 02:43:26 +0000
Manifest next update:     Wed 04 Mar 2026 02:43:26 +0000
Files and hashes:         1: Pw7qWRltFKMq812hcQ8VDV-d3dg.crl (hash: b8A8C31ljAE34fXIcDsDkrNJXN2m1Z1syfZ5pUwXQm8=)
                          2: D15451B8AEF411EE804D56A3775412E6.roa (hash: YBWjlP8F+YdvA9ozU69TQggPOcEWkXW+zdvhhb0CYsA=)
                          3: 9DB45F1AAEF411EEBD21E1A2775412E6.roa (hash: zk4qjNpUR6ox7pi92CW344nHF3kKf96YYdu89XzhQ3o=)
                          4: B918F940B04E11EEBBD2E697775412E6.roa (hash: ZrUlsRanFtsZhQlEVluoYbwWKfggdoIE9yZOZzdy4S4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3652C3A/D607CF289A8111EE8A7BF12BD25BE465/Pw7qWRltFKMq812hcQ8VDV-d3dg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3652C3A/D607CF289A8111EE8A7BF12BD25BE465/Pw7qWRltFKMq812hcQ8VDV-d3dg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Pw7qWRltFKMq812hcQ8VDV-d3dg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 840 (0x348)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3652C3AAF, serialNumber=3F0EEA59196D14A32AF35DA1710F150D5F9DDDD8
        Validity
            Not Before: Mar  2 02:43:26 2026 GMT
            Not After : Mar  4 02:43:26 2026 GMT
        Subject: CN=69a4f94e-f33d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:0d:3e:70:6e:00:da:ba:d1:8e:f9:7a:b2:5f:
                    43:3b:8e:97:89:c9:8f:1a:09:76:e4:dc:d3:bf:c5:
                    34:8d:f5:23:ae:e2:a6:60:d4:6d:43:65:ec:d7:11:
                    24:2d:4e:00:6c:eb:ea:86:cd:92:77:d6:10:05:28:
                    63:e5:6b:a8:20:b9:e2:e5:5b:93:2b:33:08:8c:89:
                    fb:ff:7f:6a:b0:0b:77:bc:a2:64:20:30:2d:a0:4a:
                    75:47:c6:3a:12:26:81:cc:8b:b3:ff:bb:c3:e7:06:
                    0b:e5:0a:39:12:13:2c:14:29:b0:90:22:a1:08:91:
                    a7:e7:f1:dc:0c:c6:0d:71:ca:22:04:7e:db:c3:0c:
                    07:36:b9:6a:fe:64:7f:2c:45:a8:0f:7f:88:8d:28:
                    09:94:80:f4:f4:ec:9b:74:df:48:25:1f:2f:70:0e:
                    94:d2:eb:44:e0:7f:b7:fa:e7:53:3d:8c:31:23:46:
                    de:3b:49:a7:28:ed:b1:a8:b6:31:a5:ee:2b:2b:bc:
                    53:d1:7c:c7:1a:e7:72:f3:62:a3:b0:69:67:bb:9f:
                    a1:eb:44:23:ac:d5:2c:b0:54:49:88:23:f8:a5:c3:
                    24:f8:63:f3:90:42:be:81:d4:d4:a3:c8:62:23:d2:
                    ee:40:73:d6:68:a4:13:0a:d4:63:16:75:ac:75:6c:
                    72:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:59:D9:DF:1C:58:6B:65:BE:D9:76:D6:B6:74:B7:F3:85:36:FD:FA
            X509v3 Authority Key Identifier:
                keyid:3F:0E:EA:59:19:6D:14:A3:2A:F3:5D:A1:71:0F:15:0D:5F:9D:DD:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3652C3A/D607CF289A8111EE8A7BF12BD25BE465/Pw7qWRltFKMq812hcQ8VDV-d3dg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Pw7qWRltFKMq812hcQ8VDV-d3dg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3652C3A/D607CF289A8111EE8A7BF12BD25BE465/Pw7qWRltFKMq812hcQ8VDV-d3dg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:5b:56:3a:29:b6:6b:b8:2e:9c:83:c6:c4:0a:9c:d5:ad:69:
         eb:4d:49:26:70:eb:00:78:39:40:17:01:cb:b3:f2:b8:ff:f6:
         57:fc:3b:f8:84:69:73:b0:3d:9f:2f:6e:0e:2e:03:e9:06:af:
         b8:90:53:a0:fd:01:d9:f6:a2:70:09:9a:82:42:fd:e2:ad:4e:
         53:f8:24:0b:f8:66:ee:dc:31:21:58:d7:bf:7e:35:a0:75:45:
         e2:78:f2:94:b2:a6:71:a1:4f:3e:6f:3b:61:22:b4:b7:68:90:
         0b:f1:0a:ae:a2:ad:69:09:f0:f9:ae:f4:56:8a:e2:fc:a5:34:
         7d:3f:db:1d:05:38:f0:18:dd:72:98:40:4f:a3:f5:85:78:58:
         73:b3:19:6c:18:89:f7:aa:d2:14:ed:86:79:b0:a1:55:b5:46:
         4f:f9:d9:68:21:9e:d3:5d:fe:a0:5a:4d:8c:ef:8f:e8:27:f4:
         f4:e0:3c:85:90:38:65:67:8e:95:ca:56:22:01:85:6f:84:19:
         aa:90:e8:8b:d4:45:62:a7:5e:ed:d0:87:71:5e:b0:36:00:c5:
         fe:aa:ad:73:ff:d8:38:75:39:e9:8e:8b:8c:87:b9:a3:14:b4:
         57:55:7f:f2:78:b6:22:d0:a8:4e:58:5b:81:d3:5d:cc:3a:49:
         33:36:de:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:53:19 2026 by rpki-client