Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366828B/4A0C87A2D30111EAB14F613CF8AEA228/M9OMRBGkiFgWl_Ydv1-0_TWNgh8.mft
File:                     M9OMRBGkiFgWl_Ydv1-0_TWNgh8.mft (raw, json)
Hash identifier:          zw3cCJ9yc2LO0r/J8ccranPa/wVRJhNW7poB6EsPFeQ=
Subject key identifier:   20:20:2C:78:93:69:41:F4:01:F7:E4:78:7F:E6:C1:85:F4:DD:D6:C1
Authority key identifier: 33:D3:8C:44:11:A4:88:58:16:97:F6:1D:BF:5F:B4:FD:35:8D:82:1F
Certificate issuer:       /CN=F366828BAF/serialNumber=33D38C4411A488581697F61DBF5FB4FD358D821F
Certificate serial:       0828
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/M9OMRBGkiFgWl_Ydv1-0_TWNgh8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366828B/4A0C87A2D30111EAB14F613CF8AEA228/M9OMRBGkiFgWl_Ydv1-0_TWNgh8.mft
Manifest number:          0828
Signing time:             Sun 01 Mar 2026 01:29:56 +0000
Manifest this update:     Sun 01 Mar 2026 01:29:56 +0000
Manifest next update:     Tue 03 Mar 2026 01:29:56 +0000
Files and hashes:         1: M9OMRBGkiFgWl_Ydv1-0_TWNgh8.crl (hash: NUm6WGwpaaD6/HjGYfrx3jdKNdzkwmg6Gqn5Pv66gLA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366828B/4A0C87A2D30111EAB14F613CF8AEA228/M9OMRBGkiFgWl_Ydv1-0_TWNgh8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366828B/4A0C87A2D30111EAB14F613CF8AEA228/M9OMRBGkiFgWl_Ydv1-0_TWNgh8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/M9OMRBGkiFgWl_Ydv1-0_TWNgh8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 03 Mar 2026 00:07:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2088 (0x828)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366828BAF, serialNumber=33D38C4411A488581697F61DBF5FB4FD358D821F
        Validity
            Not Before: Mar  1 01:29:56 2026 GMT
            Not After : Mar  3 01:29:56 2026 GMT
        Subject: CN=69a39694-327d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a6:c5:54:f7:6c:29:be:fb:7b:59:80:ab:0d:
                    fa:e2:0c:78:8d:4b:29:2d:a9:05:45:66:80:d8:56:
                    20:a8:0e:42:1c:c3:2d:60:26:0a:02:a2:97:d7:32:
                    46:69:da:79:fd:3b:1c:3d:08:dd:2a:03:42:59:de:
                    d9:9e:c2:0d:c0:d3:d3:8a:01:4a:10:93:a0:22:37:
                    c4:b0:40:96:c2:dc:d9:07:88:77:d6:57:a3:50:f9:
                    bf:23:36:fb:76:b8:df:0e:3c:ed:c2:28:bd:23:2a:
                    3d:72:05:b2:f6:9b:03:d9:70:2a:ed:00:e2:68:05:
                    af:93:55:36:fb:30:33:cc:79:7b:8e:02:c4:76:2f:
                    5c:e1:ce:67:03:4f:4e:56:92:a7:0a:ef:55:8f:96:
                    ff:9c:4c:06:fb:2b:7e:b6:42:42:35:e6:4b:b4:84:
                    b0:2c:e7:52:fd:63:0a:82:29:4f:61:62:ec:68:7f:
                    08:de:e0:6a:49:de:9c:f6:76:a5:fb:cc:d4:9c:7c:
                    33:4e:0a:37:63:06:49:4f:2c:fd:96:92:37:3e:7b:
                    80:cf:5d:67:f6:0f:b9:ee:fc:5d:49:1f:78:e9:ce:
                    63:df:90:ee:37:e9:1b:f2:02:d0:2a:65:c8:f9:f0:
                    39:83:84:5e:5b:df:cd:ee:81:c3:9b:2a:c2:5e:89:
                    2a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:20:2C:78:93:69:41:F4:01:F7:E4:78:7F:E6:C1:85:F4:DD:D6:C1
            X509v3 Authority Key Identifier:
                keyid:33:D3:8C:44:11:A4:88:58:16:97:F6:1D:BF:5F:B4:FD:35:8D:82:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366828B/4A0C87A2D30111EAB14F613CF8AEA228/M9OMRBGkiFgWl_Ydv1-0_TWNgh8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/M9OMRBGkiFgWl_Ydv1-0_TWNgh8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366828B/4A0C87A2D30111EAB14F613CF8AEA228/M9OMRBGkiFgWl_Ydv1-0_TWNgh8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:ea:46:cf:45:83:6b:28:45:97:78:60:cb:33:2e:3e:7d:fe:
         71:90:6d:39:5b:7f:cc:9b:72:7f:f8:97:98:a3:d8:71:e1:40:
         42:78:2d:30:08:f7:c0:4e:4e:a4:15:3c:39:f0:24:59:52:4c:
         66:1b:ea:82:76:ed:b0:17:1a:32:94:0b:18:8e:42:81:7f:84:
         ac:fb:2e:e3:c9:4c:c0:c4:55:27:51:46:e0:cd:e1:0d:52:c8:
         46:74:e8:53:9c:ef:83:95:8b:d2:88:63:2e:6e:ae:d6:02:4d:
         0a:72:6f:97:e1:cc:db:63:f8:57:45:99:69:45:0d:ab:b4:37:
         e1:75:bc:72:8a:b9:d5:37:b1:4f:f1:19:71:96:6e:79:65:b6:
         f2:1e:b4:a6:47:1b:63:55:c8:ab:a8:7f:bb:e1:a7:ff:62:44:
         ce:79:d4:63:c2:bf:34:19:d6:71:ec:74:62:53:cf:cc:d8:ce:
         db:4a:7a:99:c1:c5:e2:d7:ae:77:55:8f:d1:40:d7:4d:9d:cb:
         2d:67:87:f8:6d:e8:2a:ed:14:26:03:18:df:7f:d9:98:bd:26:
         58:b0:b8:0c:b6:b3:6c:91:6b:44:a5:0f:0e:d3:63:ca:f5:f5:
         7d:70:6a:f2:0f:57:99:ac:0d:97:c5:e8:6b:f9:59:d5:dc:30:
         99:86:c8:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:19:17 2026 by rpki-client