Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3654AD1/228F5B32CF0111EE94F586B9775412E6/gNQ1u8dwlOhbe_MIJYDRJ7kQd54.mft
File:                     gNQ1u8dwlOhbe_MIJYDRJ7kQd54.mft (raw, json)
Hash identifier:          QlY1VOEh99F+BOyX97Wba3/oUfeW7/Tg0ttBgozTLOo=
Subject key identifier:   FF:72:AF:44:36:35:D2:03:14:7F:60:BA:E1:F1:3D:4B:9C:36:95:FE
Authority key identifier: 80:D4:35:BB:C7:70:94:E8:5B:7B:F3:08:25:80:D1:27:B9:10:77:9E
Certificate issuer:       /CN=F3654AD1AF/serialNumber=80D435BBC77094E85B7BF3082580D127B910779E
Certificate serial:       030B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/gNQ1u8dwlOhbe_MIJYDRJ7kQd54.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3654AD1/228F5B32CF0111EE94F586B9775412E6/gNQ1u8dwlOhbe_MIJYDRJ7kQd54.mft
Manifest number:          0302
Signing time:             Sun 01 Mar 2026 02:48:49 +0000
Manifest this update:     Sun 01 Mar 2026 02:48:48 +0000
Manifest next update:     Tue 03 Mar 2026 02:48:48 +0000
Files and hashes:         1: gNQ1u8dwlOhbe_MIJYDRJ7kQd54.crl (hash: dDLPCqK6zAd5NOcsBfZ38+zwlvgbT/4HP8jVGCL0QLc=)
                          2: 2AA9064EA65E11EF9B4C49B3762E951A.roa (hash: l3UjS75Wddi3tQ56JCO9mzw04osMIVHGG4lmyDGrGpo=)
                          3: 12F6BC8EA65F11EFBD05BFB7762E951A.roa (hash: As2odCsPm4vEHElY0hwwZoUwDbYLoyLhd4dK1enI6Hg=)
                          4: 3566B206A65F11EFA911EDB9762E951A.roa (hash: BmgLIdkjAVVpbq4Muw+sVecnxg7GBO2Ss9+TP+TqAns=)
                          5: B2F145D4A65E11EF8E98B0B5762E951A.roa (hash: D8cU2N+EHK3tg0aoMbKQ1AquxfaJi2Vqr4i3VqzQqrQ=)
                          6: 2DD1E2A2C11811F09F7B83BEDAE4EC9C.roa (hash: wvL1zVkk4PrEbO1hOI+/jbrgVbiJrtyBQ/7aczeZOJg=)
                          7: 615FFEA4A65E11EF903E76B3762E951A.roa (hash: AaKVjZQe73GcXnsIAj31QxOm6ROcXoPa0qfMAokaUHI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3654AD1/228F5B32CF0111EE94F586B9775412E6/gNQ1u8dwlOhbe_MIJYDRJ7kQd54.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3654AD1/228F5B32CF0111EE94F586B9775412E6/gNQ1u8dwlOhbe_MIJYDRJ7kQd54.mft
                          rsync://rpki.afrinic.net/repository/afrinic/gNQ1u8dwlOhbe_MIJYDRJ7kQd54.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 03 Mar 2026 02:48:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 779 (0x30b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3654AD1AF, serialNumber=80D435BBC77094E85B7BF3082580D127B910779E
        Validity
            Not Before: Mar  1 02:48:48 2026 GMT
            Not After : Mar  3 02:48:48 2026 GMT
        Subject: CN=69a3a911-33b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:41:15:84:b8:ae:7c:e9:c4:aa:35:0d:bd:19:
                    73:d0:36:20:f7:5b:c4:7d:5e:c0:e4:55:e2:42:0f:
                    55:5f:58:fc:e7:0f:20:7e:92:0e:27:90:73:cc:9f:
                    86:3d:e5:fe:ab:3c:12:5f:36:91:63:bf:dd:6a:27:
                    05:fd:ba:9c:f9:8b:a7:a8:d6:72:8c:e0:a0:39:82:
                    ec:4f:d1:c4:9d:ab:0a:c4:97:95:fe:42:ba:39:28:
                    a7:2d:b5:5f:a8:32:1d:17:2b:1b:db:ee:54:77:7d:
                    d9:40:aa:7a:96:0f:26:ef:16:f4:56:a5:c4:aa:ea:
                    08:4b:d6:a8:18:f6:1c:9e:98:ba:8b:2b:2d:d6:ec:
                    a2:5f:16:70:78:39:14:d9:9c:27:74:da:51:43:0d:
                    22:2a:d0:b7:7f:70:00:d7:a3:6c:47:85:87:68:a8:
                    ce:4d:86:b2:1e:fc:f4:62:20:6e:ca:a9:a5:45:7d:
                    94:cb:b5:30:b2:df:c5:7c:12:55:eb:cc:29:7a:ad:
                    d5:c9:b6:23:de:f2:ad:de:4b:3b:bb:ce:61:1f:c3:
                    1c:43:85:ca:8f:67:62:6f:5a:00:4f:58:87:1f:3d:
                    68:46:89:44:94:9b:8c:dc:b1:78:e0:b8:1d:05:fd:
                    c3:14:9e:39:52:2e:5c:4a:4c:e4:fd:34:69:f7:2c:
                    f9:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:72:AF:44:36:35:D2:03:14:7F:60:BA:E1:F1:3D:4B:9C:36:95:FE
            X509v3 Authority Key Identifier:
                keyid:80:D4:35:BB:C7:70:94:E8:5B:7B:F3:08:25:80:D1:27:B9:10:77:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3654AD1/228F5B32CF0111EE94F586B9775412E6/gNQ1u8dwlOhbe_MIJYDRJ7kQd54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gNQ1u8dwlOhbe_MIJYDRJ7kQd54.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3654AD1/228F5B32CF0111EE94F586B9775412E6/gNQ1u8dwlOhbe_MIJYDRJ7kQd54.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:a0:4c:37:ee:8f:42:1b:eb:42:20:a2:26:3e:7c:0e:72:44:
         52:41:1e:60:13:7c:e6:8d:34:e3:67:2a:6b:77:1e:93:d6:e8:
         fa:77:b0:bd:62:98:e7:3b:d5:ec:c2:c0:11:08:19:49:0d:c6:
         bc:1b:e3:a4:09:60:51:23:66:27:ff:31:2d:64:15:2d:d9:e3:
         4e:58:7f:6b:5e:a4:aa:a8:ae:aa:cd:fd:ed:66:34:f9:ce:42:
         8e:89:d2:b7:28:04:90:95:5d:75:a4:4d:4d:50:3e:df:c1:34:
         a8:f2:b3:25:31:70:90:fb:ff:da:9b:96:97:79:4b:93:9e:3e:
         51:63:ad:0f:d4:66:d2:d4:46:77:dd:6c:6b:cf:e9:b5:85:26:
         88:da:b4:23:78:70:b4:24:04:ea:f1:fb:34:d8:ae:03:de:1a:
         75:5d:16:8d:90:6c:d8:18:97:4b:94:4d:7b:d8:01:5a:f0:4b:
         94:51:3f:cb:84:d1:b9:6b:b3:27:35:3e:0a:6e:4e:08:08:dc:
         f9:b0:24:49:bc:0c:48:46:6c:74:d4:bb:46:91:08:a7:7d:83:
         e7:b3:c6:01:0f:38:b7:8a:7c:b5:73:23:9b:52:58:d3:e8:f2:
         bc:d1:66:30:ed:f5:59:24:7e:c8:13:c3:2a:b4:28:3c:0e:76:
         9c:ca:44:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:59:29 2026 by rpki-client