Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3654A44/4A23DA369CA511ED8D0D4D9AF1222468/SmpmPntGkDU9Lfe5UMmAl8KA1Zg.mft
File:                     SmpmPntGkDU9Lfe5UMmAl8KA1Zg.mft (raw, json)
Hash identifier:          9QB0SUJgMcMVXstmfLSAu5n57BjrJt8wJozn02A4ahE=
Subject key identifier:   0F:F8:0F:ED:FA:69:3C:27:1C:EC:4B:7B:FE:84:36:9A:B6:DB:B5:12
Authority key identifier: 4A:6A:66:3E:7B:46:90:35:3D:2D:F7:B9:50:C9:80:97:C2:80:D5:98
Certificate issuer:       /CN=F3654A44AF/serialNumber=4A6A663E7B4690353D2DF7B950C98097C280D598
Certificate serial:       048E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SmpmPntGkDU9Lfe5UMmAl8KA1Zg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3654A44/4A23DA369CA511ED8D0D4D9AF1222468/SmpmPntGkDU9Lfe5UMmAl8KA1Zg.mft
Manifest number:          048E
Signing time:             Mon 02 Mar 2026 02:18:09 +0000
Manifest this update:     Mon 02 Mar 2026 02:18:08 +0000
Manifest next update:     Wed 04 Mar 2026 02:18:08 +0000
Files and hashes:         1: SmpmPntGkDU9Lfe5UMmAl8KA1Zg.crl (hash: aB+/NgbPYdqxN/emusioHBCyQ67QvfsxiNOA81fAW7M=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3654A44/4A23DA369CA511ED8D0D4D9AF1222468/SmpmPntGkDU9Lfe5UMmAl8KA1Zg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3654A44/4A23DA369CA511ED8D0D4D9AF1222468/SmpmPntGkDU9Lfe5UMmAl8KA1Zg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SmpmPntGkDU9Lfe5UMmAl8KA1Zg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1166 (0x48e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3654A44AF, serialNumber=4A6A663E7B4690353D2DF7B950C98097C280D598
        Validity
            Not Before: Mar  2 02:18:08 2026 GMT
            Not After : Mar  4 02:18:08 2026 GMT
        Subject: CN=69a4f361-f809
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:5d:c2:45:bc:32:df:29:94:9f:7d:9b:59:8a:
                    99:db:01:ba:1a:d0:95:22:37:68:7d:60:67:ef:5a:
                    9d:27:4f:91:5a:a7:61:0f:ac:cd:24:3e:fd:d4:48:
                    79:56:3d:63:e9:0c:d2:c9:be:93:83:e7:3f:a4:3e:
                    11:bd:79:5f:58:e3:e4:24:fe:1e:d0:ef:b0:ee:67:
                    08:bb:83:5f:ce:75:d2:77:41:ec:d9:8b:3e:d0:bc:
                    59:d7:b6:6e:86:be:3b:a8:33:c4:68:cc:d8:13:65:
                    08:8e:8f:8b:a7:cb:ca:63:a5:91:c2:c1:27:e5:d2:
                    ca:b7:99:94:9c:09:34:9a:43:e2:ba:67:a8:5e:97:
                    5d:8b:04:b0:3a:db:f6:bb:81:4e:59:ea:93:f1:68:
                    57:6b:5b:ea:59:06:25:6c:48:31:be:dc:df:72:67:
                    26:6e:a8:41:5c:db:1c:96:c5:52:33:35:8c:bb:15:
                    61:9b:d3:c0:5a:6a:ae:3b:66:ce:b8:e6:24:de:ea:
                    57:c8:24:b4:ac:b0:aa:c4:24:6a:11:68:83:f0:91:
                    19:74:a0:7a:d5:b6:5a:58:03:c3:8f:89:71:d4:bd:
                    84:ed:34:af:3b:bb:73:27:10:0f:ed:dc:d1:00:e9:
                    e6:26:53:28:4e:c7:84:52:f0:39:8f:51:91:87:bd:
                    5b:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:F8:0F:ED:FA:69:3C:27:1C:EC:4B:7B:FE:84:36:9A:B6:DB:B5:12
            X509v3 Authority Key Identifier:
                keyid:4A:6A:66:3E:7B:46:90:35:3D:2D:F7:B9:50:C9:80:97:C2:80:D5:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3654A44/4A23DA369CA511ED8D0D4D9AF1222468/SmpmPntGkDU9Lfe5UMmAl8KA1Zg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SmpmPntGkDU9Lfe5UMmAl8KA1Zg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3654A44/4A23DA369CA511ED8D0D4D9AF1222468/SmpmPntGkDU9Lfe5UMmAl8KA1Zg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:25:a1:f9:8a:46:cd:ab:cb:6f:b9:50:b1:8e:ee:21:98:61:
         2f:9b:af:1b:01:34:fd:d5:d4:0a:38:48:d1:4a:67:62:7f:c4:
         a4:4c:d0:d1:fc:7d:4f:33:a7:9f:44:ba:19:a2:88:fe:8d:ef:
         3b:da:3d:40:62:1a:7f:6a:1f:7a:87:53:b9:ef:bf:b6:03:7a:
         96:bb:1f:98:be:cf:79:2d:08:3b:46:63:eb:c0:29:db:c9:29:
         9d:6a:99:5c:c1:4e:64:e2:23:f4:c6:13:6c:9f:47:dc:c7:1e:
         2c:67:33:31:de:82:e9:65:a1:4a:96:08:f6:fc:bd:24:56:44:
         7c:88:0d:d2:65:60:08:27:4e:52:f8:85:b2:c9:52:40:de:ed:
         ff:80:0f:5b:83:41:69:86:c5:94:8d:57:ed:6c:53:f3:e6:f8:
         bf:09:da:15:42:5d:23:42:d1:51:b3:d0:f4:e8:d2:f8:13:d5:
         05:1c:5c:3d:14:c3:d0:48:7c:4e:61:b4:89:36:ba:9e:12:80:
         67:12:ea:62:db:98:88:fe:2c:4f:d2:96:e0:9a:5f:70:4e:5f:
         97:6a:42:e0:3f:c4:2e:c3:fd:dd:e0:96:69:16:d9:b4:80:95:
         bd:57:e6:57:e7:16:a1:f9:c8:a2:83:02:7c:3f:e6:7a:be:51:
         c3:86:88:63
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBI4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NTRBNDRBRjExMC8GA1UEBRMoNEE2QTY2M0U3QjQ2OTAzNTNEMkRGN0I5NTBDOTgw
OTdDMjgwRDU5ODAeFw0yNjAzMDIwMjE4MDhaFw0yNjAzMDQwMjE4MDhaMBgxFjAU
BgNVBAMTDTY5YTRmMzYxLWY4MDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDDXcJFvDLfKZSffZtZipnbAboa0JUiN2h9YGfvWp0nT5Fap2EPrM0kPv3U
SHlWPWPpDNLJvpOD5z+kPhG9eV9Y4+Qk/h7Q77DuZwi7g1/OddJ3QezZiz7QvFnX
tm6GvjuoM8RozNgTZQiOj4uny8pjpZHCwSfl0sq3mZScCTSaQ+K6Z6hel12LBLA6
2/a7gU5Z6pPxaFdrW+pZBiVsSDG+3N9yZyZuqEFc2xyWxVIzNYy7FWGb08Baaq47
Zs645iTe6lfIJLSssKrEJGoRaIPwkRl0oHrVtlpYA8OPiXHUvYTtNK87u3MnEA/t
3NEA6eYmUyhOx4RS8DmPUZGHvVuXAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUD/gP
7fppPCcc7Et7/oQ2mrbbtRIwHwYDVR0jBBgwFoAUSmpmPntGkDU9Lfe5UMmAl8KA
1ZgwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjU0QTQ0LzRBMjNEQTM2OUNBNTExRUQ4RDBENEQ5QUYxMjIyNDY4L1NtcG1Q
bnRHa0RVOUxmZTVVTW1BbDhLQTFaZy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NtcG1QbnRHa0RVOUxmZTVVTW1BbDhLQTFaZy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NTRBNDQvNEEyM0RBMzY5Q0E1MTFFRDhEMEQ0RDlBRjEy
MjI0NjgvU21wbVBudEdrRFU5TGZlNVVNbUFsOEtBMVpnLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQALJaH5ikbNq8tvuVCxju4hmGEvm68b
ATT91dQKOEjRSmdif8SkTNDR/H1PM6efRLoZooj+je872j1AYhp/ah96h1O577+2
A3qWux+Yvs95LQg7RmPrwCnbySmdaplcwU5k4iP0xhNsn0fcxx4sZzMx3oLpZaFK
lgj2/L0kVkR8iA3SZWAIJ05S+IWyyVJA3u3/gA9bg0FphsWUjVftbFPz5vi/CdoV
Ql0jQtFRs9D06NL4E9UFHFw9FMPQSHxOYbSJNrqeEoBnEupi25iI/ixP0pbgml9w
Tl+XakLgP8Quw/3d4JZpFtm0gJW9V+ZX5xah+ciigwJ8P+Z6vlHDhohj
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:02:15 2026 by rpki-client