Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366DA43/24A4D94634EE11ED88ECD0ECF1222468/BiCXPEqhlLafR32b7VWXyU0N0Pg.mft
File:                     BiCXPEqhlLafR32b7VWXyU0N0Pg.mft (raw, json)
Hash identifier:          /wPrVANSn1JbvpFvq479irLNCaqiydDetVRnZM62Me4=
Subject key identifier:   82:89:E2:43:A8:FF:F6:A6:9C:5B:8D:97:20:9F:E5:20:C6:45:A9:15
Authority key identifier: 06:20:97:3C:4A:A1:94:B6:9F:47:7D:9B:ED:55:97:C9:4D:0D:D0:F8
Certificate issuer:       /CN=F366DA43AF/serialNumber=0620973C4AA194B69F477D9BED5597C94D0DD0F8
Certificate serial:       0523
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/BiCXPEqhlLafR32b7VWXyU0N0Pg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366DA43/24A4D94634EE11ED88ECD0ECF1222468/BiCXPEqhlLafR32b7VWXyU0N0Pg.mft
Manifest number:          051D
Signing time:             Sun 01 Mar 2026 02:10:09 +0000
Manifest this update:     Sun 01 Mar 2026 02:10:08 +0000
Manifest next update:     Tue 03 Mar 2026 02:10:08 +0000
Files and hashes:         1: BiCXPEqhlLafR32b7VWXyU0N0Pg.crl (hash: OycPAAT5pDE091/jrh9N7EozNcOovuDjByG+krgfgWY=)
                          2: 7EF51C66B09411EF816A837D762E951A.roa (hash: dK+s/XqGvJ2z+H1yiumGDgbO/rdLvkiEGWr5WQScXNE=)
                          3: 835DF5F834EE11ED901FCEEDF1222468.roa (hash: 7FPE0FhlSAjUMelmubiUwThbu0o5YNAG9Z3oUXP8EmA=)
                          4: 5B430E4AB09411EF9DCD797D762E951A.roa (hash: 4jVWIqFk1exxKlsXmJSXOLUstbW11Mv50NKI1fpU+9w=)
                          5: 18EA1A1EEFEA11EDBAF5D7884AD9E6FC.roa (hash: Suhxb/oULjMaEZsuBizxaGFSrHq0egh0mczTJVoAnnw=)
                          6: 4540A8D0EFEA11EDA6943F894AD9E6FC.roa (hash: YdysxgceL5KQtLTnwMeNCOiB4lPOcf1FskePKjG3oJk=)
                          7: BDCCC46234EE11EDACB45CEEF1222468.roa (hash: bWeTuDjLwjcjXXalbVQak4qGcRcTM2Bs7Q2hhXrJ914=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366DA43/24A4D94634EE11ED88ECD0ECF1222468/BiCXPEqhlLafR32b7VWXyU0N0Pg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366DA43/24A4D94634EE11ED88ECD0ECF1222468/BiCXPEqhlLafR32b7VWXyU0N0Pg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/BiCXPEqhlLafR32b7VWXyU0N0Pg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 03 Mar 2026 00:07:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1315 (0x523)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366DA43AF, serialNumber=0620973C4AA194B69F477D9BED5597C94D0DD0F8
        Validity
            Not Before: Mar  1 02:10:08 2026 GMT
            Not After : Mar  3 02:10:08 2026 GMT
        Subject: CN=69a3a001-faed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:88:fb:66:95:13:b2:00:cf:ce:62:7e:60:62:
                    0c:8e:76:f5:9d:ad:95:24:90:a1:b3:69:6a:8a:f5:
                    d9:88:69:2f:14:b5:69:2a:94:33:28:94:93:c3:87:
                    44:5b:39:29:84:4b:fa:43:0a:7a:3e:16:eb:fd:f9:
                    a8:9d:2f:9d:bb:ab:7c:c7:28:e5:1e:bb:27:e7:3c:
                    5e:6f:1c:f6:fd:86:35:21:b5:b1:7e:8a:57:5c:b9:
                    c8:13:89:d7:ff:8d:c9:bf:69:cb:6e:01:51:80:7c:
                    10:3a:36:50:20:05:ed:52:26:7c:b2:15:c5:0c:d9:
                    f3:67:92:cc:b2:39:84:87:6c:1e:46:5d:14:3a:39:
                    e4:fd:a9:5a:32:06:a7:1e:f9:50:8c:a9:1d:e4:c7:
                    60:47:4e:81:75:87:c6:2d:9c:ff:4e:e8:02:0e:c3:
                    91:ce:9f:bf:ba:b6:2c:9b:7b:99:f0:bf:b3:5a:ad:
                    67:6d:5e:9d:d4:06:39:b3:15:70:e4:55:fa:19:59:
                    ae:64:61:02:77:89:50:96:b1:6f:b1:e8:8d:72:ba:
                    61:3f:ed:61:ef:59:88:0d:8c:21:53:5f:3c:2a:b4:
                    87:bc:b6:9f:de:80:83:08:d6:6d:46:ab:2b:22:16:
                    63:2b:fc:0a:de:7a:e7:65:4a:35:fb:4b:04:8d:d9:
                    da:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:89:E2:43:A8:FF:F6:A6:9C:5B:8D:97:20:9F:E5:20:C6:45:A9:15
            X509v3 Authority Key Identifier:
                keyid:06:20:97:3C:4A:A1:94:B6:9F:47:7D:9B:ED:55:97:C9:4D:0D:D0:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366DA43/24A4D94634EE11ED88ECD0ECF1222468/BiCXPEqhlLafR32b7VWXyU0N0Pg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/BiCXPEqhlLafR32b7VWXyU0N0Pg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366DA43/24A4D94634EE11ED88ECD0ECF1222468/BiCXPEqhlLafR32b7VWXyU0N0Pg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:0e:7c:77:1f:03:98:3d:87:82:fa:ee:68:0e:20:95:b7:4f:
         b9:e5:60:9d:94:e8:4b:30:ec:36:47:12:27:40:70:14:e4:27:
         d6:e1:e7:75:83:95:26:ff:ed:40:fa:33:43:50:6f:39:fc:8c:
         21:6b:67:c7:21:32:f9:13:0b:bc:7e:16:91:7a:91:bb:b2:0d:
         fe:65:dd:76:6c:a0:c1:7d:c5:47:94:23:0a:37:a6:1e:97:e2:
         75:55:b7:65:cf:37:cc:d9:e7:1d:32:b4:06:a5:6e:49:73:d0:
         77:83:87:cd:36:42:2e:25:ac:17:a4:09:3d:e9:dd:f9:b9:3e:
         7a:20:13:af:55:51:bc:a6:66:9d:cd:9a:3c:dd:2c:ef:eb:26:
         62:0f:ab:b0:c9:b2:7c:04:86:63:c3:a2:99:51:8b:d6:89:ed:
         c0:0a:8a:6b:50:35:10:84:7d:b0:70:b1:2d:00:68:70:38:48:
         5f:bd:a4:11:de:fd:e3:2d:39:5b:32:62:8c:ff:c6:23:c3:ca:
         7f:eb:c3:55:0b:2d:c9:85:7e:04:85:87:d0:0f:f8:94:0d:61:
         65:7d:8d:c3:59:12:35:72:f0:fe:96:53:89:ea:b7:66:f2:8b:
         34:ed:3a:fc:b5:51:e8:49:45:a6:13:dd:43:ee:a7:97:35:ed:
         64:36:0a:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:18:21 2026 by rpki-client