Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366AE59/E029D1E6F57511EEA87EEF4F775412E6/OV0yW2nyp6M_rgog4SIm0pgbsF4.mft
File:                     OV0yW2nyp6M_rgog4SIm0pgbsF4.mft (raw, json)
Hash identifier:          1D6iA2Pr9K/6ZKE70ql3UY9095rqpywImx2MwA1U6WI=
Subject key identifier:   97:39:C1:DB:04:08:B1:91:C3:51:8C:84:4A:0A:5F:9C:92:EF:0D:AE
Authority key identifier: 39:5D:32:5B:69:F2:A7:A3:3F:AE:0A:20:E1:22:26:D2:98:1B:B0:5E
Certificate issuer:       /CN=F366AE59AF/serialNumber=395D325B69F2A7A33FAE0A20E12226D2981BB05E
Certificate serial:       02C5
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/OV0yW2nyp6M_rgog4SIm0pgbsF4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366AE59/E029D1E6F57511EEA87EEF4F775412E6/OV0yW2nyp6M_rgog4SIm0pgbsF4.mft
Manifest number:          02C5
Signing time:             Sun 01 Mar 2026 02:52:22 +0000
Manifest this update:     Sun 01 Mar 2026 02:52:21 +0000
Manifest next update:     Tue 03 Mar 2026 02:52:21 +0000
Files and hashes:         1: OV0yW2nyp6M_rgog4SIm0pgbsF4.crl (hash: qqohDqqtLGDGuy4nKd5K7B+gCG4Pg07FbmBDiVSJWE4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366AE59/E029D1E6F57511EEA87EEF4F775412E6/OV0yW2nyp6M_rgog4SIm0pgbsF4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366AE59/E029D1E6F57511EEA87EEF4F775412E6/OV0yW2nyp6M_rgog4SIm0pgbsF4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/OV0yW2nyp6M_rgog4SIm0pgbsF4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 03 Mar 2026 00:07:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 709 (0x2c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366AE59AF, serialNumber=395D325B69F2A7A33FAE0A20E12226D2981BB05E
        Validity
            Not Before: Mar  1 02:52:21 2026 GMT
            Not After : Mar  3 02:52:21 2026 GMT
        Subject: CN=69a3a9e6-9156
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:24:20:98:c6:72:11:5d:7e:8c:d8:d1:00:bb:
                    28:4d:40:d6:79:a7:4c:8c:3e:1c:1a:0e:54:89:a9:
                    3f:f8:c1:23:1f:b9:56:32:04:ab:65:b8:c2:2e:c6:
                    16:d1:99:39:59:27:e6:e0:d4:7e:dd:66:d3:d9:81:
                    7e:0b:aa:c1:47:70:5d:26:93:1d:32:da:5f:0e:f4:
                    ba:02:73:fd:c0:e5:41:c1:37:27:66:9c:9f:05:cd:
                    e9:b7:79:fe:0d:29:1d:6f:4e:ca:bd:09:14:d2:07:
                    c4:8d:68:69:e7:ad:08:95:a1:26:ca:f9:5a:96:69:
                    74:5c:5b:57:f9:11:d9:27:05:7b:53:87:66:a5:69:
                    5e:76:41:be:90:fa:5f:da:65:8a:b0:00:af:cf:95:
                    ae:a7:ca:48:3e:48:4d:36:25:5d:bb:a9:07:70:93:
                    09:1f:39:65:4d:c7:dc:e4:c0:30:f1:4f:27:7e:5f:
                    f7:fb:25:fe:df:8c:1c:82:5d:f8:88:51:2b:7b:eb:
                    79:e1:b7:57:56:31:8b:1d:34:a6:c1:29:f2:72:f6:
                    c3:f7:d3:75:0c:5b:3a:99:ad:b9:08:eb:a5:19:cf:
                    c2:61:a2:35:b7:33:27:df:89:44:ea:80:74:98:a5:
                    97:bc:44:73:af:47:47:fb:fb:f6:c7:c9:34:62:bc:
                    f4:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:39:C1:DB:04:08:B1:91:C3:51:8C:84:4A:0A:5F:9C:92:EF:0D:AE
            X509v3 Authority Key Identifier:
                keyid:39:5D:32:5B:69:F2:A7:A3:3F:AE:0A:20:E1:22:26:D2:98:1B:B0:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366AE59/E029D1E6F57511EEA87EEF4F775412E6/OV0yW2nyp6M_rgog4SIm0pgbsF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OV0yW2nyp6M_rgog4SIm0pgbsF4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366AE59/E029D1E6F57511EEA87EEF4F775412E6/OV0yW2nyp6M_rgog4SIm0pgbsF4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d6:c6:ae:6d:b5:01:77:79:fa:0b:a3:38:d9:52:c4:f3:e8:85:
         4f:ea:14:65:6a:36:5c:d4:f4:80:53:aa:81:bf:f3:2c:f4:5c:
         08:50:55:5a:f6:4a:1f:4a:bc:d9:51:41:fa:93:81:34:11:10:
         fc:3d:2c:85:b3:98:39:ac:30:9e:e1:d7:bb:ec:da:2f:f6:9c:
         c7:81:4a:77:2e:20:6c:2c:d9:73:b8:74:de:08:c4:0c:f9:24:
         f4:0c:68:38:e8:d9:67:26:4f:9d:8b:6c:a7:7f:d5:f9:00:d5:
         c8:0c:3f:26:7a:9a:8c:d7:37:c4:d1:e4:5c:f8:56:d2:35:44:
         85:f3:ef:59:75:1f:62:a4:89:96:a6:bb:12:24:d4:aa:73:0c:
         e7:b2:20:49:57:30:9c:5c:a5:35:90:50:d1:5f:0a:2e:84:ab:
         6f:a5:86:67:33:8c:d3:da:ba:ff:1a:fc:e0:86:60:09:f5:18:
         24:eb:94:4a:c9:64:61:04:1d:3a:df:1e:17:42:22:5b:3c:66:
         29:81:d6:ed:e5:28:7f:2a:e6:f8:6b:4d:ff:0a:9a:e9:e4:f2:
         57:bb:dd:a6:15:51:c8:b2:a2:6f:32:dd:ab:ea:6f:c6:d7:3f:
         a8:e9:70:94:07:df:85:04:80:d2:de:e5:f8:aa:a6:8a:af:f7:
         51:d5:0e:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:56 2026 by rpki-client