Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3668037/2AB390E26DC711E68265362DF8AEA228/MU_85UKRThk8fBoqA8c1dGLqGBY.mft
File:                     MU_85UKRThk8fBoqA8c1dGLqGBY.mft (raw, json)
Hash identifier:          t9en3RS651zANJMTGovwhANxU58tluO6cRKUUbceieQ=
Subject key identifier:   28:01:A2:A8:A6:EE:CA:D7:74:AF:3A:06:6F:43:07:A9:B7:3B:F1:F9
Authority key identifier: 31:4F:FC:E5:42:91:4E:19:3C:7C:1A:2A:03:C7:35:74:62:EA:18:16
Certificate issuer:       /CN=F3668037AF/serialNumber=314FFCE542914E193C7C1A2A03C7357462EA1816
Certificate serial:       0E32
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/MU_85UKRThk8fBoqA8c1dGLqGBY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3668037/2AB390E26DC711E68265362DF8AEA228/MU_85UKRThk8fBoqA8c1dGLqGBY.mft
Manifest number:          0E12
Signing time:             Sun 01 Mar 2026 00:57:57 +0000
Manifest this update:     Sun 01 Mar 2026 00:57:57 +0000
Manifest next update:     Tue 03 Mar 2026 00:57:57 +0000
Files and hashes:         1: MU_85UKRThk8fBoqA8c1dGLqGBY.crl (hash: 1Q0wfpGozNStCA8mrwQC1ii8tAU/SdKNVWNGFOA9FQw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3668037/2AB390E26DC711E68265362DF8AEA228/MU_85UKRThk8fBoqA8c1dGLqGBY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3668037/2AB390E26DC711E68265362DF8AEA228/MU_85UKRThk8fBoqA8c1dGLqGBY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/MU_85UKRThk8fBoqA8c1dGLqGBY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 03 Mar 2026 00:07:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3634 (0xe32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3668037AF, serialNumber=314FFCE542914E193C7C1A2A03C7357462EA1816
        Validity
            Not Before: Mar  1 00:57:57 2026 GMT
            Not After : Mar  3 00:57:57 2026 GMT
        Subject: CN=69a38f15-3726
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a0:ef:d7:da:2c:74:6e:7b:f5:90:6a:05:dd:
                    22:73:a5:94:08:22:b9:84:7f:d3:e8:34:93:c2:c5:
                    e7:be:a5:f3:c6:9c:32:84:51:a0:d0:26:0a:81:dc:
                    b8:62:0f:8d:a9:73:59:73:4b:5f:81:6d:b4:4f:06:
                    f3:0e:00:a4:2c:5d:94:fb:ab:c7:ab:db:1a:e1:2c:
                    e0:d9:a4:e3:0c:7c:c5:31:32:59:33:ba:22:a7:e0:
                    25:26:15:f8:5e:47:9c:4b:b7:99:46:2b:0a:39:83:
                    84:ce:f7:f3:7c:78:f4:2e:14:df:e0:30:3c:1d:6c:
                    3c:90:21:1b:49:25:d4:c7:14:63:89:40:59:2b:43:
                    14:5f:8e:fb:e1:04:60:bc:c1:ed:9c:11:c8:23:20:
                    86:d6:59:a5:d7:60:bc:ec:11:c0:bd:70:5e:13:ad:
                    9e:69:25:5e:dd:c0:22:05:88:8c:37:ef:70:88:3c:
                    2b:d4:22:4f:81:b9:87:0f:24:bb:c1:ff:dd:25:08:
                    5f:22:80:60:91:3c:33:48:84:4f:70:c3:5c:01:7e:
                    f7:2f:81:d2:5c:bd:5c:56:29:02:07:3c:72:cb:50:
                    6d:71:9e:01:c6:25:17:92:d2:4b:df:bf:57:27:17:
                    5e:a0:20:35:67:4e:f4:7f:27:7d:97:54:f0:8e:fd:
                    81:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:01:A2:A8:A6:EE:CA:D7:74:AF:3A:06:6F:43:07:A9:B7:3B:F1:F9
            X509v3 Authority Key Identifier:
                keyid:31:4F:FC:E5:42:91:4E:19:3C:7C:1A:2A:03:C7:35:74:62:EA:18:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3668037/2AB390E26DC711E68265362DF8AEA228/MU_85UKRThk8fBoqA8c1dGLqGBY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/MU_85UKRThk8fBoqA8c1dGLqGBY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668037/2AB390E26DC711E68265362DF8AEA228/MU_85UKRThk8fBoqA8c1dGLqGBY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:42:47:50:85:79:00:ca:d8:4b:a9:5d:f0:f5:71:3c:29:67:
         23:45:d2:1c:eb:14:4c:68:5c:38:c4:81:52:ed:23:f9:b3:5e:
         13:05:8d:3c:ef:80:d2:8a:d4:22:af:7f:21:5e:47:11:29:f9:
         f3:c5:14:68:d8:f1:0b:bd:bf:68:c8:d4:ac:8f:7f:28:e5:60:
         86:db:07:b3:59:12:1b:3e:95:1e:d7:9e:59:c2:2d:b6:ef:6f:
         cb:56:8c:37:69:f1:82:38:05:f8:35:b3:1c:a5:b3:95:78:5c:
         ba:09:18:19:e3:96:7e:1e:c3:a9:3c:2b:fd:61:22:b8:b7:e1:
         b5:48:d0:1e:1a:5d:65:93:58:a2:c7:f0:de:6e:21:1f:df:14:
         60:ce:d3:8c:da:46:e6:f5:0b:3d:ca:2b:c4:8f:b1:e4:64:9b:
         7b:16:8e:e0:ff:2b:40:e3:97:58:0f:3e:27:97:8a:85:a6:0c:
         0a:c6:09:61:d2:e9:2f:ea:2c:35:74:ca:71:d4:d6:28:89:3c:
         ca:92:7e:78:9c:f7:8f:13:fb:bd:7c:43:14:28:49:09:e3:04:
         17:4c:3b:17:1f:25:a0:d9:23:29:2f:91:e6:04:77:ab:3d:91:
         7e:1e:06:55:dc:7b:66:1e:a1:45:30:c7:17:ee:60:ff:5e:c1:
         55:00:32:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:11:55 2026 by rpki-client