Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365F2BD/552C6D641A6B11EEA55ACF204AD9E6FC/EyGrNeMXocYBskT-yXbli9oLszM.mft
File:                     EyGrNeMXocYBskT-yXbli9oLszM.mft (raw, json)
Hash identifier:          UPbgAPQQLIDggNNu5jYt+TmuzQ1Re2cz1I9y3wi6VAo=
Subject key identifier:   75:68:F0:81:4D:E4:5D:9B:54:10:5D:94:5B:EE:A3:1D:F1:0C:08:BE
Authority key identifier: 13:21:AB:35:E3:17:A1:C6:01:B2:44:FE:C9:76:E5:8B:DA:0B:B3:33
Certificate issuer:       /CN=F365F2BDAF/serialNumber=1321AB35E317A1C601B244FEC976E58BDA0BB333
Certificate serial:       03EB
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/EyGrNeMXocYBskT-yXbli9oLszM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365F2BD/552C6D641A6B11EEA55ACF204AD9E6FC/EyGrNeMXocYBskT-yXbli9oLszM.mft
Manifest number:          03E9
Signing time:             Mon 02 Mar 2026 02:31:20 +0000
Manifest this update:     Mon 02 Mar 2026 02:31:19 +0000
Manifest next update:     Wed 04 Mar 2026 02:31:19 +0000
Files and hashes:         1: EyGrNeMXocYBskT-yXbli9oLszM.crl (hash: KRLNGud09tJp/7CpZVwLVEFZZY2fjaUsw9Yz71hQDQk=)
                          2: 3D1407C47CB611EFAC71A891762E951A.roa (hash: 9cjcvkV8WiknZRld6/vpk/RCy4/zP+e++V0fqwQhvWo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365F2BD/552C6D641A6B11EEA55ACF204AD9E6FC/EyGrNeMXocYBskT-yXbli9oLszM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365F2BD/552C6D641A6B11EEA55ACF204AD9E6FC/EyGrNeMXocYBskT-yXbli9oLszM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/EyGrNeMXocYBskT-yXbli9oLszM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1003 (0x3eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365F2BDAF, serialNumber=1321AB35E317A1C601B244FEC976E58BDA0BB333
        Validity
            Not Before: Mar  2 02:31:19 2026 GMT
            Not After : Mar  4 02:31:19 2026 GMT
        Subject: CN=69a4f677-9c9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:7b:bb:6d:d7:7c:b9:79:74:7a:6c:11:4c:e7:
                    a8:ce:ca:66:2c:a6:fd:4e:04:ab:6e:dd:43:29:5d:
                    25:c8:9e:37:c2:02:09:96:be:be:63:33:7e:c5:71:
                    86:34:53:b8:87:ba:a3:9f:46:4b:8e:17:94:73:ae:
                    f7:ec:42:39:4b:32:f6:a5:e4:9e:29:b1:2e:68:69:
                    d3:90:8a:fa:40:48:6f:8f:2d:bf:87:80:99:45:7a:
                    d7:86:55:5c:18:5e:44:25:c6:4a:29:5e:77:f8:71:
                    30:3e:f2:4f:55:a3:4c:0b:2a:ce:75:e4:b7:01:14:
                    6e:58:c1:0e:0c:fd:15:c9:08:ca:83:28:96:af:59:
                    4e:f6:c8:29:53:a3:d7:81:6b:ca:9a:66:ef:bf:6e:
                    fb:c2:dc:1f:38:f6:e9:e7:ca:90:14:01:c7:93:f7:
                    b9:d0:c1:3b:2a:4d:de:cb:86:e7:e6:7b:43:55:c4:
                    35:b9:d6:98:6c:e6:8c:34:3c:5f:e0:b9:46:10:73:
                    b9:d8:fd:6e:ae:47:67:fb:17:dd:d9:fa:51:90:5d:
                    96:57:94:bd:da:ea:87:4e:99:a9:42:8d:ab:79:f4:
                    ae:cb:b0:7a:9b:8b:70:86:d1:fe:b5:ec:6b:68:84:
                    6c:f7:c3:a0:5b:e3:6c:43:d5:0d:cd:c2:ec:cc:3b:
                    20:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:68:F0:81:4D:E4:5D:9B:54:10:5D:94:5B:EE:A3:1D:F1:0C:08:BE
            X509v3 Authority Key Identifier:
                keyid:13:21:AB:35:E3:17:A1:C6:01:B2:44:FE:C9:76:E5:8B:DA:0B:B3:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365F2BD/552C6D641A6B11EEA55ACF204AD9E6FC/EyGrNeMXocYBskT-yXbli9oLszM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/EyGrNeMXocYBskT-yXbli9oLszM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365F2BD/552C6D641A6B11EEA55ACF204AD9E6FC/EyGrNeMXocYBskT-yXbli9oLszM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:f8:93:32:e8:f0:d5:13:cb:0e:c9:22:74:37:da:0b:85:52:
         f5:ea:c9:c2:1b:6c:28:44:96:98:60:04:00:be:c1:51:1e:08:
         7f:6d:d7:24:ef:44:97:f3:86:3b:25:ee:a5:ca:2a:60:80:59:
         f4:b4:9c:74:39:e7:a9:b1:93:c9:e0:98:08:6d:2c:c5:50:d1:
         34:60:3c:27:b4:8d:77:4b:9f:01:74:39:57:17:c9:80:3e:54:
         95:85:9d:95:80:ae:63:5d:5a:cd:de:4e:4b:51:4a:4c:f6:59:
         da:95:56:72:81:74:55:83:f7:2e:93:52:23:7a:f7:19:bd:ac:
         31:48:ac:85:1d:e2:20:71:d1:f4:05:b2:2a:f6:71:e7:23:ce:
         3c:ef:9d:61:d0:0b:a2:31:56:51:2b:cd:9c:7e:3a:c5:19:b7:
         d0:29:cb:43:3b:86:53:7c:68:34:5a:1d:88:7f:77:72:13:73:
         5a:ec:a0:47:19:75:ba:ef:f5:91:53:db:d2:9a:49:4e:f3:89:
         12:24:42:38:f8:c1:04:29:04:7e:37:20:53:44:86:d0:76:47:
         7f:6f:69:24:d1:b6:7c:b2:1f:31:ff:7f:1d:94:3d:63:dd:98:
         b0:a7:8e:68:91:7f:a1:c9:cb:f6:a7:eb:68:5a:36:89:5d:ff:
         be:07:44:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:25:44 2026 by rpki-client