Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3668A5F/B89B73A41D2E11ECB9DF207ED8A014CE/FrjfWzvnTBrmjjHBcBFapze9XnA.mft
File:                     FrjfWzvnTBrmjjHBcBFapze9XnA.mft (raw, json)
Hash identifier:          P4n0yp7i+P+VdKcO/CZP8N5TypgsPyPW3FmCB0ZPhy4=
Subject key identifier:   50:8E:CB:26:46:00:03:F7:1D:17:CA:0E:93:83:B0:CD:F5:DD:59:BA
Authority key identifier: 16:B8:DF:5B:3B:E7:4C:1A:E6:8E:31:C1:70:11:5A:A7:37:BD:5E:70
Certificate issuer:       /CN=F3668A5FAF/serialNumber=16B8DF5B3BE74C1AE68E31C170115AA737BD5E70
Certificate serial:       067F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/FrjfWzvnTBrmjjHBcBFapze9XnA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3668A5F/B89B73A41D2E11ECB9DF207ED8A014CE/FrjfWzvnTBrmjjHBcBFapze9XnA.mft
Manifest number:          067E
Signing time:             Sun 01 Mar 2026 01:49:15 +0000
Manifest this update:     Sun 01 Mar 2026 01:49:15 +0000
Manifest next update:     Tue 03 Mar 2026 01:49:15 +0000
Files and hashes:         1: FrjfWzvnTBrmjjHBcBFapze9XnA.crl (hash: l3btMBR727NQ856QK7rANURpe0c0kfrYZMLT+M34BzU=)
                          2: DF0B42061D3011ECBD63FB02D8A014CE.roa (hash: /YQXCdcgCrNhLL360EhRhY7BDY5J8NgmUeOOyfGlQ8Y=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3668A5F/B89B73A41D2E11ECB9DF207ED8A014CE/FrjfWzvnTBrmjjHBcBFapze9XnA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3668A5F/B89B73A41D2E11ECB9DF207ED8A014CE/FrjfWzvnTBrmjjHBcBFapze9XnA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/FrjfWzvnTBrmjjHBcBFapze9XnA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 03 Mar 2026 00:07:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1663 (0x67f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3668A5FAF, serialNumber=16B8DF5B3BE74C1AE68E31C170115AA737BD5E70
        Validity
            Not Before: Mar  1 01:49:15 2026 GMT
            Not After : Mar  3 01:49:15 2026 GMT
        Subject: CN=69a39b1b-71b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:09:b4:d6:3b:6a:f8:ca:0f:bc:18:d2:08:d6:
                    fe:2f:c3:69:18:9d:7e:08:ed:55:8a:38:fc:95:56:
                    78:39:ac:73:f9:98:ed:93:42:02:5e:b9:69:f8:01:
                    0f:41:ad:ab:17:ab:9a:ab:7a:c6:cc:eb:96:9f:f5:
                    3d:9c:fe:4c:f2:e3:87:3d:9b:fe:51:c2:da:da:1e:
                    ee:00:28:ed:d7:a5:f4:7f:eb:e1:0d:1c:3e:47:b9:
                    62:a3:c8:38:49:4a:77:4f:51:50:05:fc:20:78:49:
                    80:b5:c3:85:80:1c:d5:b7:be:8e:7c:eb:24:ca:3b:
                    69:e1:05:2b:94:48:cf:7a:1c:37:bd:86:53:b4:3c:
                    dd:ab:dc:32:30:7e:82:f9:75:34:53:f9:eb:87:4c:
                    ad:e9:a2:d8:f7:ec:a5:b0:64:d5:9d:6a:d3:da:2c:
                    a7:c6:eb:73:46:73:8f:83:d9:23:a2:cb:b1:b9:2d:
                    12:70:5a:8b:4b:f5:6c:b0:35:63:a2:90:85:cc:d6:
                    e6:5f:d4:bc:89:ba:02:f1:81:c6:2b:99:fc:42:68:
                    9f:3e:7b:02:29:4b:93:91:74:83:fd:88:39:db:2f:
                    82:42:fc:7a:6b:0b:28:47:03:03:18:4c:f2:c6:44:
                    d1:9d:55:49:15:32:e2:b6:51:39:af:72:1f:ba:02:
                    5a:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:8E:CB:26:46:00:03:F7:1D:17:CA:0E:93:83:B0:CD:F5:DD:59:BA
            X509v3 Authority Key Identifier:
                keyid:16:B8:DF:5B:3B:E7:4C:1A:E6:8E:31:C1:70:11:5A:A7:37:BD:5E:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3668A5F/B89B73A41D2E11ECB9DF207ED8A014CE/FrjfWzvnTBrmjjHBcBFapze9XnA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/FrjfWzvnTBrmjjHBcBFapze9XnA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668A5F/B89B73A41D2E11ECB9DF207ED8A014CE/FrjfWzvnTBrmjjHBcBFapze9XnA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:9d:65:28:3c:dc:f6:c2:c8:1c:e5:41:e0:ea:72:37:cc:1e:
         e6:ab:2a:a1:4e:d5:41:a6:59:e5:88:26:de:d3:0c:b1:48:ac:
         b1:eb:9f:18:7d:d9:cb:78:18:27:a2:25:d4:eb:81:c8:4e:dc:
         33:48:8d:29:f9:48:f6:d1:93:8a:2c:4b:ab:c7:89:be:5a:00:
         cf:5e:0c:8c:9c:56:87:64:a0:d7:73:c3:f2:93:37:10:84:ce:
         6d:5f:f8:8f:85:37:56:83:a5:f1:ba:68:8b:1e:a2:c6:3b:70:
         63:31:ea:ee:7b:c3:57:de:4e:d7:0b:93:df:30:06:6b:b7:f3:
         22:b5:71:f0:45:6d:81:f7:d9:2c:1e:27:73:47:5d:76:f2:08:
         4a:92:4e:a6:d8:97:1f:7d:ff:42:06:9a:02:c1:7f:3b:64:76:
         7c:fb:3b:4b:14:1b:d4:fe:a2:b7:be:fc:2d:3d:d5:f2:7d:58:
         06:6a:48:fa:bf:48:b0:2f:ef:d0:6e:e6:78:24:39:90:83:45:
         35:d6:30:cf:f2:9d:7d:bf:34:54:7d:7b:c7:d7:bb:fc:1c:f3:
         50:b3:3a:ec:4f:93:21:db:de:82:44:d0:15:a9:08:1a:4f:77:
         2c:c4:21:b7:5a:0c:22:93:36:af:96:cd:db:fc:1f:c9:9d:4d:
         73:15:fd:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:38:47 2026 by rpki-client