Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3658583/6E5589404E4C11EFB3F067AF762E951A/-_THz17IYtQtyBCgQwAhG6K3xQg.mft
File:                     -_THz17IYtQtyBCgQwAhG6K3xQg.mft (raw, json)
Hash identifier:          N7b0wmctZYh0qCe6q3y6MTklOMI7reIwQCeCuj0fjrE=
Subject key identifier:   A8:B9:04:31:2B:A6:B8:E3:B2:B9:E1:5F:05:64:62:2E:21:37:78:76
Authority key identifier: FB:F4:C7:CF:5E:C8:62:D4:2D:C8:10:A0:43:00:21:1B:A2:B7:C5:08
Certificate issuer:       /CN=F3658583AF/serialNumber=FBF4C7CF5EC862D42DC810A04300211BA2B7C508
Certificate serial:       0256
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/-_THz17IYtQtyBCgQwAhG6K3xQg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3658583/6E5589404E4C11EFB3F067AF762E951A/-_THz17IYtQtyBCgQwAhG6K3xQg.mft
Manifest number:          0254
Signing time:             Mon 02 Mar 2026 03:00:30 +0000
Manifest this update:     Mon 02 Mar 2026 03:00:29 +0000
Manifest next update:     Wed 04 Mar 2026 03:00:29 +0000
Files and hashes:         1: -_THz17IYtQtyBCgQwAhG6K3xQg.crl (hash: RIPKuFpLnL1yZ21bjsJVy2ryG0ce030nufJocFSOBco=)
                          2: 77F1FD96F30311F0BB59B0B2DAE4EC9C.roa (hash: 27JN0a34HOJqzg6BUQSCN5NuMTh9XjW2kVc8l5WoK4A=)
                          3: CB2EDEFCF30311F09BBA82B6DAE4EC9C.roa (hash: ByzttdB9J3NGHz1Z3lKqffInl1ohB/rmI07GuVpfCBk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3658583/6E5589404E4C11EFB3F067AF762E951A/-_THz17IYtQtyBCgQwAhG6K3xQg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3658583/6E5589404E4C11EFB3F067AF762E951A/-_THz17IYtQtyBCgQwAhG6K3xQg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/-_THz17IYtQtyBCgQwAhG6K3xQg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 598 (0x256)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3658583AF, serialNumber=FBF4C7CF5EC862D42DC810A04300211BA2B7C508
        Validity
            Not Before: Mar  2 03:00:29 2026 GMT
            Not After : Mar  4 03:00:29 2026 GMT
        Subject: CN=69a4fd4e-348c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:97:6c:a1:50:1a:50:27:f8:b9:5d:df:68:3b:
                    2d:5b:40:a5:55:d2:2f:10:40:7e:f6:8d:76:9c:e5:
                    b6:e3:32:a8:fc:64:0f:2a:38:92:9f:15:cc:3e:42:
                    af:e6:bc:af:ac:b3:18:4f:d8:c8:1f:1c:19:ba:cd:
                    c2:a3:37:da:43:bf:d3:d0:cf:e2:89:a5:0b:b9:3e:
                    21:2d:bc:aa:96:96:23:4f:99:99:41:c6:e6:7c:58:
                    3a:47:4d:02:80:28:45:65:1f:2e:1a:b3:bc:8c:55:
                    2a:5c:cc:01:b9:2b:c2:cf:a9:55:1e:77:0f:4d:e1:
                    3f:43:90:a7:b5:47:37:19:5a:ca:c5:6f:da:38:0b:
                    01:f8:a4:e7:71:18:d0:9e:27:8c:e8:e1:8b:af:ad:
                    c6:97:66:b0:38:cb:65:2b:2e:89:83:ee:83:78:60:
                    6c:d9:16:0c:6d:0c:f7:4e:5e:ac:65:0d:99:28:b5:
                    f0:8e:f6:40:ae:30:22:2a:c3:96:b6:3f:81:8b:b9:
                    fe:f5:0b:66:3d:1f:61:54:13:f3:1a:ba:40:84:60:
                    b6:55:3f:bf:c3:08:6d:d9:48:9e:15:11:bc:a1:ba:
                    d0:0d:8f:e5:bc:ae:bc:3e:98:2c:19:bb:91:7b:a1:
                    b9:ce:5f:b4:6f:08:44:65:02:0b:00:b5:12:1d:d6:
                    8e:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:B9:04:31:2B:A6:B8:E3:B2:B9:E1:5F:05:64:62:2E:21:37:78:76
            X509v3 Authority Key Identifier:
                keyid:FB:F4:C7:CF:5E:C8:62:D4:2D:C8:10:A0:43:00:21:1B:A2:B7:C5:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3658583/6E5589404E4C11EFB3F067AF762E951A/-_THz17IYtQtyBCgQwAhG6K3xQg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-_THz17IYtQtyBCgQwAhG6K3xQg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3658583/6E5589404E4C11EFB3F067AF762E951A/-_THz17IYtQtyBCgQwAhG6K3xQg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:d9:f9:cd:3a:4f:31:3f:39:5b:c0:96:24:e1:f4:fc:48:7b:
         a3:f2:87:c5:a0:3b:24:fd:ac:7e:43:5a:f1:ff:46:a4:61:d7:
         53:7b:65:d7:96:d2:1f:06:c0:27:1b:c3:33:b0:a4:23:33:d1:
         c4:13:22:d5:2b:82:83:d1:cf:af:69:5f:3c:ac:0d:23:e5:31:
         16:16:b4:9c:13:40:43:ae:a5:fc:dc:0f:9b:8c:83:c3:65:22:
         9b:a7:01:40:e5:9f:ec:ad:30:9a:1a:43:37:d5:95:26:4b:43:
         07:de:03:81:6e:cd:6a:e4:d4:a8:9f:32:27:14:ee:5d:72:83:
         31:8f:01:b2:a4:dc:a1:6e:e1:a8:2b:84:b9:5e:79:72:40:e7:
         a2:8f:75:4e:ed:42:4d:8d:23:a0:01:1c:0b:80:3c:b9:45:80:
         54:e2:ed:0f:8f:5b:2f:39:01:cf:2a:cc:c3:95:d8:f8:84:35:
         81:98:24:7e:e4:db:ad:39:e9:17:c3:07:61:4b:c6:d8:0c:59:
         13:3e:6f:6f:bd:89:73:58:bf:69:2d:57:9a:c2:c2:83:de:a1:
         bd:47:dc:b9:f3:07:c7:dc:03:1f:01:41:fb:3d:be:7a:e8:a4:
         ed:51:2e:11:d2:39:1d:8d:92:99:a5:27:be:dd:8b:b6:ae:04:
         c9:25:98:d5
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAlYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NTg1ODNBRjExMC8GA1UEBRMoRkJGNEM3Q0Y1RUM4NjJENDJEQzgxMEEwNDMwMDIx
MUJBMkI3QzUwODAeFw0yNjAzMDIwMzAwMjlaFw0yNjAzMDQwMzAwMjlaMBgxFjAU
BgNVBAMTDTY5YTRmZDRlLTM0OGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCzl2yhUBpQJ/i5Xd9oOy1bQKVV0i8QQH72jXac5bbjMqj8ZA8qOJKfFcw+
Qq/mvK+ssxhP2MgfHBm6zcKjN9pDv9PQz+KJpQu5PiEtvKqWliNPmZlBxuZ8WDpH
TQKAKEVlHy4as7yMVSpczAG5K8LPqVUedw9N4T9DkKe1RzcZWsrFb9o4CwH4pOdx
GNCeJ4zo4YuvrcaXZrA4y2UrLomD7oN4YGzZFgxtDPdOXqxlDZkotfCO9kCuMCIq
w5a2P4GLuf71C2Y9H2FUE/MaukCEYLZVP7/DCG3ZSJ4VEbyhutANj+W8rrw+mCwZ
u5F7obnOX7RvCERlAgsAtRId1o5bAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUqLkE
MSumuOOyueFfBWRiLiE3eHYwHwYDVR0jBBgwFoAU+/THz17IYtQtyBCgQwAhG6K3
xQgwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjU4NTgzLzZFNTU4OTQwNEU0QzExRUZCM0YwNjdBRjc2MkU5NTFBLy1fVEh6
MTdJWXRRdHlCQ2dRd0FoRzZLM3hRZy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLy1fVEh6MTdJWXRRdHlCQ2dRd0FoRzZLM3hRZy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NTg1ODMvNkU1NTg5NDA0RTRDMTFFRkIzRjA2N0FGNzYy
RTk1MUEvLV9USHoxN0lZdFF0eUJDZ1F3QWhHNkszeFFnLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCQ2fnNOk8xPzlbwJYk4fT8SHuj8ofF
oDsk/ax+Q1rx/0akYddTe2XXltIfBsAnG8MzsKQjM9HEEyLVK4KD0c+vaV88rA0j
5TEWFrScE0BDrqX83A+bjIPDZSKbpwFA5Z/srTCaGkM31ZUmS0MH3gOBbs1q5NSo
nzInFO5dcoMxjwGypNyhbuGoK4S5XnlyQOeij3VO7UJNjSOgARwLgDy5RYBU4u0P
j1svOQHPKszDldj4hDWBmCR+5NutOekXwwdhS8bYDFkTPm9vvYlzWL9pLVeawsKD
3qG9R9y58wfH3AMfAUH7Pb566KTtUS4R0jkdjZKZpSe+3Yu2rgTJJZjV
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:56:52 2026 by rpki-client