Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36580B0/24B7AD5841CE11EEB62278114AD9E6FC/g2HVptDz1JxnYMDqaGxnxBSd1t8.mft
File:                     g2HVptDz1JxnYMDqaGxnxBSd1t8.mft (raw, json)
Hash identifier:          WzbNkbJf8W3LTO5n5PHrwJTlHCUEpe+2yY/cuozHTa0=
Subject key identifier:   A3:C7:95:DA:69:3E:CA:B6:F1:55:D9:EE:62:E0:07:24:03:5F:A4:97
Authority key identifier: 83:61:D5:A6:D0:F3:D4:9C:67:60:C0:EA:68:6C:67:C4:14:9D:D6:DF
Certificate issuer:       /CN=F36580B0AF/serialNumber=8361D5A6D0F3D49C6760C0EA686C67C4149DD6DF
Certificate serial:       03BF
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/g2HVptDz1JxnYMDqaGxnxBSd1t8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36580B0/24B7AD5841CE11EEB62278114AD9E6FC/g2HVptDz1JxnYMDqaGxnxBSd1t8.mft
Manifest number:          03BA
Signing time:             Mon 02 Mar 2026 02:35:41 +0000
Manifest this update:     Mon 02 Mar 2026 02:35:41 +0000
Manifest next update:     Wed 04 Mar 2026 02:35:41 +0000
Files and hashes:         1: g2HVptDz1JxnYMDqaGxnxBSd1t8.crl (hash: d24EeXRx79saMOKYZ4oERelJJkZwXy8WIu7tQRiETSI=)
                          2: 1C32F8941A4511F0A5CA51D56DB8BCC6.roa (hash: KQ8ojeNuY+CC6+HeJZiLg2NTwLb/0OvPStW386IgOFQ=)
                          3: 5CA7913C41CF11EEABA50B154AD9E6FC.roa (hash: mPw4RDOXZXo/bpdC9fVPFx1LHe7Ee57R4RWVqSxmsVQ=)
                          4: F6014E24370D11F0A9AE9EC6DAE4EC9C.roa (hash: /c4sEFV6yDMdPKbHf6tAF/ORJg3oZvCxiMncTFmAdSI=)
                          5: 1E76759CB6E311EFB3CF7A44762E951A.roa (hash: W/c0Kk3I+J2yYg1lYlt6Jh0twnCYr8+m8FqL7jZfB8o=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36580B0/24B7AD5841CE11EEB62278114AD9E6FC/g2HVptDz1JxnYMDqaGxnxBSd1t8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36580B0/24B7AD5841CE11EEB62278114AD9E6FC/g2HVptDz1JxnYMDqaGxnxBSd1t8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/g2HVptDz1JxnYMDqaGxnxBSd1t8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 959 (0x3bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36580B0AF, serialNumber=8361D5A6D0F3D49C6760C0EA686C67C4149DD6DF
        Validity
            Not Before: Mar  2 02:35:41 2026 GMT
            Not After : Mar  4 02:35:41 2026 GMT
        Subject: CN=69a4f77d-115a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f8:02:a0:4e:95:08:0e:00:57:72:36:72:ac:
                    79:9b:aa:c1:b6:b8:ce:ee:81:0e:60:26:0f:6d:99:
                    fd:1a:80:5b:74:eb:60:b2:f6:4a:2b:d5:cc:b4:a2:
                    77:6c:f7:14:ad:1c:45:22:9e:15:b0:bd:b2:1d:24:
                    f0:59:07:fc:67:5d:cd:4a:1d:6d:b6:b6:b4:e1:3c:
                    75:2a:cb:45:00:73:a0:61:84:56:52:74:07:b4:2c:
                    8e:ec:52:c5:8d:c8:2c:8b:80:a8:87:14:46:05:75:
                    dc:47:ca:5d:67:6c:48:ee:98:eb:dc:5e:a3:54:27:
                    05:aa:56:18:01:f4:4b:62:9e:0c:3c:ae:37:84:a7:
                    a2:23:d9:0b:aa:3a:c0:f2:cb:d3:4c:10:f8:65:95:
                    90:50:5e:f1:0f:f4:6c:20:e9:4a:3a:52:24:47:b7:
                    f5:6e:52:2d:41:6a:b5:83:8a:6c:5c:d8:39:ed:4a:
                    65:5d:d8:aa:0d:b6:74:91:c4:d4:82:55:e4:3d:cc:
                    48:66:5a:75:d4:66:00:74:a2:dd:1c:c9:58:37:d1:
                    21:5f:c7:db:34:1e:62:21:84:06:c9:d4:d6:da:ac:
                    db:12:59:a6:27:fa:8f:74:72:ba:39:f1:77:1b:2d:
                    ec:82:71:45:c1:12:0f:4a:a4:86:fb:03:b1:e7:fd:
                    37:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:C7:95:DA:69:3E:CA:B6:F1:55:D9:EE:62:E0:07:24:03:5F:A4:97
            X509v3 Authority Key Identifier:
                keyid:83:61:D5:A6:D0:F3:D4:9C:67:60:C0:EA:68:6C:67:C4:14:9D:D6:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36580B0/24B7AD5841CE11EEB62278114AD9E6FC/g2HVptDz1JxnYMDqaGxnxBSd1t8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/g2HVptDz1JxnYMDqaGxnxBSd1t8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36580B0/24B7AD5841CE11EEB62278114AD9E6FC/g2HVptDz1JxnYMDqaGxnxBSd1t8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:d6:80:57:aa:41:dd:1a:28:ea:08:c3:ec:56:69:34:32:4e:
         ad:1b:bb:64:c6:8e:5c:23:c1:46:59:82:40:40:bd:ed:dd:2c:
         13:73:a8:4f:14:2c:e1:bf:c9:a8:61:b0:43:02:86:70:b0:ac:
         3e:36:25:fa:93:51:0f:c8:8a:41:d0:2e:b6:a9:cd:e9:31:b9:
         f1:46:17:78:43:2e:f9:94:bb:01:2e:be:46:f0:78:99:f5:71:
         28:b8:81:38:9c:b0:c3:93:9f:9b:fa:c6:20:48:9e:f8:f5:18:
         d8:de:3c:e2:28:f2:78:8f:ea:e9:8e:78:a8:d1:0e:a4:04:cd:
         57:b2:70:ed:6d:c5:3a:9a:0c:0f:02:6f:d2:e4:0f:b3:b9:d0:
         e1:c8:08:ae:46:c9:04:50:12:f4:34:24:bd:75:4b:4b:31:99:
         1f:b3:b2:41:aa:72:10:88:0f:17:37:b3:52:6a:79:72:dd:eb:
         8b:85:ea:14:0b:f3:51:15:40:fe:5e:b4:9e:58:b1:7d:0c:2e:
         fc:1f:46:7d:de:56:2b:ec:ee:82:0e:65:20:04:6d:c1:77:f9:
         40:ce:16:03:fb:9e:af:ee:a4:d7:c9:28:7e:70:85:dc:2e:ae:
         a4:60:3d:da:0a:79:88:9e:a3:3d:68:5f:f1:16:69:af:5e:41:
         07:f9:eb:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:40:46 2026 by rpki-client