Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365C79E/1FC34BE6BEDA11EB8F5CE243F8AEA228/3XSZqMjBKrZ-FetJKAimku1LWfQ.mft
File:                     3XSZqMjBKrZ-FetJKAimku1LWfQ.mft (raw, json)
Hash identifier:          wYom6CdwIxyHNzuB+LLj60+HSkrsisIVBQZ1LZtF2lQ=
Subject key identifier:   02:A3:4D:96:CF:AA:22:9C:1A:AE:88:A0:27:80:79:B7:E6:C8:48:AD
Authority key identifier: DD:74:99:A8:C8:C1:2A:B6:7E:15:EB:49:28:08:A6:92:ED:4B:59:F4
Certificate issuer:       /CN=F365C79EAF/serialNumber=DD7499A8C8C12AB67E15EB492808A692ED4B59F4
Certificate serial:       070C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/3XSZqMjBKrZ-FetJKAimku1LWfQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365C79E/1FC34BE6BEDA11EB8F5CE243F8AEA228/3XSZqMjBKrZ-FetJKAimku1LWfQ.mft
Manifest number:          0706
Signing time:             Mon 02 Mar 2026 01:39:57 +0000
Manifest this update:     Mon 02 Mar 2026 01:39:56 +0000
Manifest next update:     Wed 04 Mar 2026 01:39:56 +0000
Files and hashes:         1: 3XSZqMjBKrZ-FetJKAimku1LWfQ.crl (hash: qotaN1fJiZsfwqIBDJ9VmITNbT1wqS1XlSJJCkJ0BCA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365C79E/1FC34BE6BEDA11EB8F5CE243F8AEA228/3XSZqMjBKrZ-FetJKAimku1LWfQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365C79E/1FC34BE6BEDA11EB8F5CE243F8AEA228/3XSZqMjBKrZ-FetJKAimku1LWfQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/3XSZqMjBKrZ-FetJKAimku1LWfQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1804 (0x70c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365C79EAF, serialNumber=DD7499A8C8C12AB67E15EB492808A692ED4B59F4
        Validity
            Not Before: Mar  2 01:39:56 2026 GMT
            Not After : Mar  4 01:39:56 2026 GMT
        Subject: CN=69a4ea6c-cdaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:a9:ae:af:04:26:5c:0c:51:74:e2:62:77:7a:
                    36:af:5d:e2:b9:47:59:6f:76:fb:c7:01:a4:bc:b0:
                    e4:dc:61:c2:bb:25:c8:10:d9:ea:7b:b2:54:3e:ae:
                    77:6d:93:0b:e7:09:34:8d:ca:0f:67:13:30:da:17:
                    3a:eb:40:f1:b9:c3:a7:2a:bb:7f:26:37:f5:69:29:
                    bf:86:ad:ba:48:f4:5d:c1:1d:66:97:f0:fb:29:7f:
                    2e:a7:8f:3a:d3:0d:85:16:a9:a5:df:d9:0b:90:a7:
                    89:8b:e2:90:3a:ea:cc:6f:70:b7:6a:a4:ea:4e:42:
                    42:10:e9:9b:f3:e9:92:a9:fc:43:24:00:8b:08:a5:
                    22:82:2f:25:10:7a:f0:5d:df:58:f3:1e:a2:5c:f1:
                    02:d0:fc:ce:a9:98:14:3d:75:fb:65:cf:8b:bf:68:
                    b8:c5:c5:d8:5d:a9:5e:dc:ec:d2:73:5c:31:fe:4e:
                    a7:6a:48:06:40:03:94:3a:49:2c:9c:72:80:85:28:
                    05:be:28:a4:bc:0e:93:a5:0f:ef:d9:13:af:f1:5b:
                    9f:40:ab:b0:d7:b0:b3:33:4a:7d:5c:af:5d:25:7c:
                    e4:b2:f7:8e:40:37:c6:fc:2f:b7:96:df:2b:ca:6d:
                    c7:a0:1a:86:d4:e7:9d:00:06:b4:3a:22:59:c8:3f:
                    c6:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:A3:4D:96:CF:AA:22:9C:1A:AE:88:A0:27:80:79:B7:E6:C8:48:AD
            X509v3 Authority Key Identifier:
                keyid:DD:74:99:A8:C8:C1:2A:B6:7E:15:EB:49:28:08:A6:92:ED:4B:59:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365C79E/1FC34BE6BEDA11EB8F5CE243F8AEA228/3XSZqMjBKrZ-FetJKAimku1LWfQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3XSZqMjBKrZ-FetJKAimku1LWfQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365C79E/1FC34BE6BEDA11EB8F5CE243F8AEA228/3XSZqMjBKrZ-FetJKAimku1LWfQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:0e:09:e5:3a:87:2c:62:dc:7f:ad:56:52:d5:1c:65:e2:67:
         0c:0a:be:8f:66:68:c4:78:10:66:bb:2d:ee:94:c3:46:79:82:
         ed:dd:fb:24:0d:d3:df:17:23:97:75:e3:b2:97:11:c9:73:0d:
         0b:9a:ad:a4:ec:8d:48:db:98:48:b3:05:aa:ed:01:f9:75:cc:
         5f:79:3b:b5:1d:af:c6:a6:e0:c8:6f:be:8e:2e:36:a7:3a:43:
         fd:41:9b:15:56:cb:47:2c:46:53:2a:1c:fa:73:da:4d:5e:c5:
         97:dd:91:80:3a:2c:42:ee:a2:4a:d8:be:31:f9:bc:70:d5:e5:
         78:99:fc:01:d1:21:87:63:d2:3c:a0:d0:72:ae:fc:a3:fd:a7:
         35:44:ea:3e:d5:49:ad:58:79:ea:1a:fd:e2:7b:b4:83:3b:bb:
         cf:ba:06:33:b5:74:14:b8:14:e8:af:e1:94:55:94:29:97:a2:
         ff:3b:c9:5f:78:83:22:2e:b4:88:c4:b9:ef:1d:0a:b2:2f:ba:
         a9:60:8e:0f:cc:f1:5b:3c:89:56:e9:45:62:ae:e0:28:a0:07:
         8b:98:2d:e5:a7:7a:d8:92:f5:2f:a9:24:f1:6c:82:f5:69:83:
         97:de:31:f4:db:0c:00:61:7a:e8:37:37:17:f2:ac:31:00:27:
         4f:6c:a2:9f
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBwwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NUM3OUVBRjExMC8GA1UEBRMoREQ3NDk5QThDOEMxMkFCNjdFMTVFQjQ5MjgwOEE2
OTJFRDRCNTlGNDAeFw0yNjAzMDIwMTM5NTZaFw0yNjAzMDQwMTM5NTZaMBgxFjAU
BgNVBAMTDTY5YTRlYTZjLWNkYWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCWqa6vBCZcDFF04mJ3ejavXeK5R1lvdvvHAaS8sOTcYcK7JcgQ2ep7slQ+
rndtkwvnCTSNyg9nEzDaFzrrQPG5w6cqu38mN/VpKb+GrbpI9F3BHWaX8Pspfy6n
jzrTDYUWqaXf2QuQp4mL4pA66sxvcLdqpOpOQkIQ6Zvz6ZKp/EMkAIsIpSKCLyUQ
evBd31jzHqJc8QLQ/M6pmBQ9dftlz4u/aLjFxdhdqV7c7NJzXDH+TqdqSAZAA5Q6
SSyccoCFKAW+KKS8DpOlD+/ZE6/xW59Aq7DXsLMzSn1cr10lfOSy945AN8b8L7eW
3yvKbcegGobU550ABrQ6IlnIP8aPAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUAqNN
ls+qIpwaroigJ4B5t+bISK0wHwYDVR0jBBgwFoAU3XSZqMjBKrZ+FetJKAimku1L
WfQwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjVDNzlFLzFGQzM0QkU2QkVEQTExRUI4RjVDRTI0M0Y4QUVBMjI4LzNYU1px
TWpCS3JaLUZldEpLQWlta3UxTFdmUS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzNYU1pxTWpCS3JaLUZldEpLQWlta3UxTFdmUS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NUM3OUUvMUZDMzRCRTZCRURBMTFFQjhGNUNFMjQzRjhB
RUEyMjgvM1hTWnFNakJLclotRmV0SktBaW1rdTFMV2ZRLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBHDgnlOocsYtx/rVZS1Rxl4mcMCr6P
ZmjEeBBmuy3ulMNGeYLt3fskDdPfFyOXdeOylxHJcw0Lmq2k7I1I25hIswWq7QH5
dcxfeTu1Ha/GpuDIb76OLjanOkP9QZsVVstHLEZTKhz6c9pNXsWX3ZGAOixC7qJK
2L4x+bxw1eV4mfwB0SGHY9I8oNByrvyj/ac1ROo+1UmtWHnqGv3ie7SDO7vPugYz
tXQUuBTor+GUVZQpl6L/O8lfeIMiLrSIxLnvHQqyL7qpYI4PzPFbPIlW6UViruAo
oAeLmC3lp3rYkvUvqSTxbIL1aYOX3jH02wwAYXroNzcX8qwxACdPbKKf
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:39:11 2026 by rpki-client