Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366C124/21E2D0D4CAF011E98C204478F8AEA228/dUDQUtEpERNWC6gtIyBCuZqopko.mft
File:                     dUDQUtEpERNWC6gtIyBCuZqopko.mft (raw, json)
Hash identifier:          2loND+n5gM0RCA2qc9fz2fNJXwxXMF273H7B9Qnowho=
Subject key identifier:   4C:C8:E6:3A:3A:51:3B:EB:CA:55:BF:C0:01:EB:5B:59:85:97:C4:D2
Authority key identifier: 75:40:D0:52:D1:29:11:13:56:0B:A8:2D:23:20:42:B9:9A:A8:A6:4A
Certificate issuer:       /CN=F366C124AF/serialNumber=7540D052D1291113560BA82D232042B99AA8A64A
Certificate serial:       0988
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/dUDQUtEpERNWC6gtIyBCuZqopko.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366C124/21E2D0D4CAF011E98C204478F8AEA228/dUDQUtEpERNWC6gtIyBCuZqopko.mft
Manifest number:          0985
Signing time:             Sun 01 Mar 2026 01:17:51 +0000
Manifest this update:     Sun 01 Mar 2026 01:17:50 +0000
Manifest next update:     Tue 03 Mar 2026 01:17:50 +0000
Files and hashes:         1: dUDQUtEpERNWC6gtIyBCuZqopko.crl (hash: qtW1VU9vM7v/h0hC5g0Voz/Gz8yEcWGbPEYS6p1QHkg=)
                          2: F2B47ECE67CF11F0A078F98BDAE4EC9C.roa (hash: P3LDJsnxMQwbvrXOtqRElx5hirBS3sM/lIPVBob33/w=)
                          3: C82D839403C511EBB1822323F8AEA228.roa (hash: BRU/+9vSJaKFXnQ7Cb8Og2eSBhtx9/MwNvCd1XqLbx0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366C124/21E2D0D4CAF011E98C204478F8AEA228/dUDQUtEpERNWC6gtIyBCuZqopko.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366C124/21E2D0D4CAF011E98C204478F8AEA228/dUDQUtEpERNWC6gtIyBCuZqopko.mft
                          rsync://rpki.afrinic.net/repository/afrinic/dUDQUtEpERNWC6gtIyBCuZqopko.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 03 Mar 2026 00:07:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2440 (0x988)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366C124AF, serialNumber=7540D052D1291113560BA82D232042B99AA8A64A
        Validity
            Not Before: Mar  1 01:17:50 2026 GMT
            Not After : Mar  3 01:17:50 2026 GMT
        Subject: CN=69a393be-2a52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:91:c9:33:04:e7:fc:4a:1c:c0:0c:60:1d:5c:
                    45:21:22:c6:3f:b8:d6:9a:da:d9:28:a7:72:7f:6a:
                    95:7e:da:76:43:5f:4c:d5:46:fe:23:0c:de:9a:4d:
                    26:06:87:e5:59:92:be:a0:05:2a:93:55:4e:60:e2:
                    e1:60:e6:b4:d2:28:39:ec:79:5a:a6:4c:36:80:96:
                    58:6c:68:52:bd:58:8b:19:33:1d:5d:57:5d:d0:0f:
                    62:0d:5e:a9:3f:72:43:65:2c:c0:7a:fb:92:14:ce:
                    e9:0e:e2:e1:3f:73:15:3e:d8:12:40:b9:b1:88:7a:
                    60:17:bd:ad:74:da:b9:b8:4a:6a:71:80:9f:a6:7b:
                    31:90:da:3f:ab:3f:b6:d9:1f:0d:ce:c9:f2:ab:f3:
                    6e:f5:b1:33:6a:11:1c:64:f4:78:6d:bc:2e:84:ec:
                    88:97:ce:82:4c:74:a3:5f:3c:ac:a8:dc:1a:c9:d6:
                    e6:78:02:d7:83:d4:39:34:7f:ce:49:04:66:f3:fa:
                    17:ce:2d:af:b8:e0:60:4e:3f:27:b4:bc:dd:28:35:
                    ee:76:b8:f8:10:f6:ba:9f:4b:73:83:64:ba:a9:fe:
                    51:79:98:4d:af:f3:fe:2c:be:89:97:a1:b6:a2:d1:
                    53:59:0c:0e:26:44:41:5a:68:b9:9c:bb:05:83:f0:
                    c1:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:C8:E6:3A:3A:51:3B:EB:CA:55:BF:C0:01:EB:5B:59:85:97:C4:D2
            X509v3 Authority Key Identifier:
                keyid:75:40:D0:52:D1:29:11:13:56:0B:A8:2D:23:20:42:B9:9A:A8:A6:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366C124/21E2D0D4CAF011E98C204478F8AEA228/dUDQUtEpERNWC6gtIyBCuZqopko.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/dUDQUtEpERNWC6gtIyBCuZqopko.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366C124/21E2D0D4CAF011E98C204478F8AEA228/dUDQUtEpERNWC6gtIyBCuZqopko.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:9a:17:38:00:48:57:83:2d:b5:31:95:ee:95:a0:99:a4:a2:
         dd:78:c0:31:fb:6f:c8:22:3a:69:2f:d6:36:c2:f7:e7:b6:52:
         93:49:db:b4:9d:e8:24:16:b2:6a:74:8c:07:77:fc:09:5b:5f:
         b6:9a:10:bb:0d:05:51:e2:12:49:54:80:7b:d4:a8:1b:76:f1:
         00:c3:6c:74:24:b8:c8:28:08:fc:64:94:c7:7a:a0:16:c0:ca:
         e3:56:67:68:7d:a1:39:61:16:16:8e:e0:d0:02:aa:83:f0:05:
         91:8b:8a:2a:65:62:54:82:ef:33:76:17:a4:14:21:df:53:b4:
         ef:dc:e0:7e:21:5f:e7:59:9d:83:09:a8:60:14:c7:71:94:f5:
         eb:a5:f4:68:21:3a:a1:0e:98:cd:38:fe:35:e2:4f:1e:43:5b:
         f3:6f:c8:48:b0:9c:21:43:c6:a2:62:bd:4a:78:19:0b:41:59:
         90:75:f7:5c:83:d2:db:3c:d4:82:13:26:a5:1d:bb:80:64:b9:
         4f:1f:d3:6c:56:4a:b1:d7:dc:d6:37:92:47:d4:e7:0f:15:01:
         bb:bc:49:f6:04:15:65:58:de:56:94:c0:11:db:e3:68:f3:f3:
         e5:fe:86:da:89:a9:58:5f:6f:b1:61:27:c6:f3:22:4d:c7:0e:
         26:59:b1:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:59:26 2026 by rpki-client