Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3663954/B2FDE4A22A2611EE864DCA484AD9E6FC/3eQFo7njLL0ZkIdZfW8pC2w0G80.mft
File:                     3eQFo7njLL0ZkIdZfW8pC2w0G80.mft (raw, json)
Hash identifier:          ZPptD92HmhLnY6lrcUNE2LfyVaZhcQcXRVJZ/kvmBEU=
Subject key identifier:   94:8F:B5:B7:6F:58:D9:D6:4A:43:1E:55:24:8A:E3:71:CB:0B:45:CC
Authority key identifier: DD:E4:05:A3:B9:E3:2C:BD:19:90:87:59:7D:6F:29:0B:6C:34:1B:CD
Certificate issuer:       /CN=F3663954AF/serialNumber=DDE405A3B9E32CBD199087597D6F290B6C341BCD
Certificate serial:       03D8
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/3eQFo7njLL0ZkIdZfW8pC2w0G80.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3663954/B2FDE4A22A2611EE864DCA484AD9E6FC/3eQFo7njLL0ZkIdZfW8pC2w0G80.mft
Manifest number:          03D5
Signing time:             Mon 02 Mar 2026 02:32:04 +0000
Manifest this update:     Mon 02 Mar 2026 02:32:04 +0000
Manifest next update:     Wed 04 Mar 2026 02:32:04 +0000
Files and hashes:         1: 3eQFo7njLL0ZkIdZfW8pC2w0G80.crl (hash: v0i1VPmJ5egOqd50UmSwRCNcRmIWts2eI/rtNVNE6vU=)
                          2: 3B3C94A8355611F0A72D5BD3DAE4EC9C.roa (hash: dNkXrkMo29JWmN/2Fiah29iTZ9KKxjxmwXwttQ5e+fY=)
                          3: 92455510355511F09A3F8ED0DAE4EC9C.roa (hash: EzKU6CQxGZwi822liJZKhnE2Wswv1oKziheTE/2ZwuU=)
                          4: AA85EAE4360F11F08E7B1CAFDAE4EC9C.roa (hash: KqakcfmbrA2BIbq/4uC8DnJ5j63ssavBmkP7waw6iDc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3663954/B2FDE4A22A2611EE864DCA484AD9E6FC/3eQFo7njLL0ZkIdZfW8pC2w0G80.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3663954/B2FDE4A22A2611EE864DCA484AD9E6FC/3eQFo7njLL0ZkIdZfW8pC2w0G80.mft
                          rsync://rpki.afrinic.net/repository/afrinic/3eQFo7njLL0ZkIdZfW8pC2w0G80.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 984 (0x3d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3663954AF, serialNumber=DDE405A3B9E32CBD199087597D6F290B6C341BCD
        Validity
            Not Before: Mar  2 02:32:04 2026 GMT
            Not After : Mar  4 02:32:04 2026 GMT
        Subject: CN=69a4f6a4-e52d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5b:ee:8e:1c:79:9e:1b:5c:e0:42:73:4c:49:
                    e4:e7:e8:ac:51:07:62:51:7d:8a:45:b2:49:a2:df:
                    c4:31:e5:b6:a1:c2:47:02:89:89:71:2e:11:3a:20:
                    07:46:e2:53:ba:bc:9c:91:2b:e2:e8:63:94:76:af:
                    ef:aa:e3:29:98:d9:03:a1:a6:e7:38:80:bb:ec:2b:
                    db:3f:96:70:ab:87:b6:5b:44:8e:0d:ab:09:5a:43:
                    cf:a8:77:97:df:ca:6e:e7:02:ff:fb:25:e9:f8:22:
                    c0:1e:e1:c3:24:23:b0:cf:0b:dd:9c:5d:d4:00:4e:
                    c0:f3:3e:1c:30:17:a3:32:9e:08:fc:8e:65:59:8e:
                    77:bd:82:fe:2c:49:48:c9:68:8b:2d:02:bb:1e:8a:
                    03:4d:e1:94:fe:e8:20:6e:92:f4:aa:12:a7:75:7d:
                    a0:ac:54:b7:2a:f7:95:95:2c:52:42:20:0f:2c:8d:
                    4f:a6:81:b3:23:13:50:af:03:9e:ed:1d:bf:61:0e:
                    0a:f1:1c:bb:49:bc:21:d8:b9:40:5a:4b:e2:f0:b6:
                    a9:74:13:9f:07:23:ce:25:d8:7e:c0:6c:c0:c7:cb:
                    a0:c1:36:12:58:88:db:fa:3b:31:97:5b:72:f9:cc:
                    1b:0f:27:6f:20:49:de:c7:8b:50:12:d6:c9:78:96:
                    a0:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:8F:B5:B7:6F:58:D9:D6:4A:43:1E:55:24:8A:E3:71:CB:0B:45:CC
            X509v3 Authority Key Identifier:
                keyid:DD:E4:05:A3:B9:E3:2C:BD:19:90:87:59:7D:6F:29:0B:6C:34:1B:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3663954/B2FDE4A22A2611EE864DCA484AD9E6FC/3eQFo7njLL0ZkIdZfW8pC2w0G80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3eQFo7njLL0ZkIdZfW8pC2w0G80.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3663954/B2FDE4A22A2611EE864DCA484AD9E6FC/3eQFo7njLL0ZkIdZfW8pC2w0G80.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:cd:99:9d:d6:3e:fa:57:33:41:3b:e0:cf:2c:ff:bc:4b:7f:
         61:0d:cd:04:b6:92:42:cb:58:28:a4:d3:82:b5:17:d6:4b:fe:
         de:5b:f7:7f:f4:03:8f:a6:e9:67:61:2f:cd:11:25:60:a7:01:
         e3:62:0c:c9:7a:af:95:70:ec:18:1d:02:58:4e:1e:a5:83:ac:
         05:d0:7f:5e:7e:24:7d:00:9a:5c:a9:13:4c:91:cb:37:a4:a7:
         fd:90:d9:5f:dc:c4:e9:5b:82:d6:d4:37:a8:71:23:53:b9:20:
         49:84:7d:9b:0d:3c:e8:61:3f:54:b9:2e:0e:1b:dc:45:bb:38:
         2b:02:38:4c:d4:76:a3:df:2a:36:e9:f4:85:62:01:95:8b:e2:
         13:5d:b2:c3:f6:41:7e:30:d4:d5:6f:22:b6:c6:3b:b7:6c:23:
         2b:97:60:f4:bf:93:ea:f5:b0:38:a6:72:27:15:f3:45:7f:cf:
         f0:7b:b3:45:f9:99:af:5f:f4:6a:20:b0:8a:df:f9:b1:99:d4:
         4f:1a:59:ce:d6:db:75:10:64:ff:0b:d7:26:07:92:53:d9:7c:
         bb:41:97:5d:3c:5d:f5:fc:f6:96:14:48:83:4d:8c:26:c8:e5:
         ba:c6:50:ff:31:9b:2a:50:e6:fc:a7:da:08:1f:4b:24:e2:e8:
         59:28:3d:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:17:26 2026 by rpki-client