Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3672189/38C85C46912A11EF98AA067A762E951A/pmHmEV84xQtNTFvj-kiO2AWMwvE.mft
File:                     pmHmEV84xQtNTFvj-kiO2AWMwvE.mft (raw, json)
Hash identifier:          q8a91wdur38a4CwE0Wue9iDAzK9wJJV+O/nk9QBBmBw=
Subject key identifier:   7E:D4:C7:FE:EB:F0:38:DD:AA:D4:54:CE:36:D3:E0:6B:5A:9B:BB:93
Authority key identifier: A6:61:E6:11:5F:38:C5:0B:4D:4C:5B:E3:FA:48:8E:D8:05:8C:C2:F1
Certificate issuer:       /CN=F3672189AF/serialNumber=A661E6115F38C50B4D4C5BE3FA488ED8058CC2F1
Certificate serial:       0200
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/pmHmEV84xQtNTFvj-kiO2AWMwvE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3672189/38C85C46912A11EF98AA067A762E951A/pmHmEV84xQtNTFvj-kiO2AWMwvE.mft
Manifest number:          01FF
Signing time:             Mon 02 Mar 2026 03:09:38 +0000
Manifest this update:     Mon 02 Mar 2026 03:09:37 +0000
Manifest next update:     Wed 04 Mar 2026 03:09:37 +0000
Files and hashes:         1: pmHmEV84xQtNTFvj-kiO2AWMwvE.crl (hash: a9iAEsAnhXhgVCe0/abgFqroZou1K5QEQMPhZdLg+go=)
                          2: 84121498949611EFBE8BA57F762E951A.roa (hash: XaqvhZS4unq9+u8DbG/XQq/y/o0dswE+yS72E0NeXdI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3672189/38C85C46912A11EF98AA067A762E951A/pmHmEV84xQtNTFvj-kiO2AWMwvE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3672189/38C85C46912A11EF98AA067A762E951A/pmHmEV84xQtNTFvj-kiO2AWMwvE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/pmHmEV84xQtNTFvj-kiO2AWMwvE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 512 (0x200)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3672189AF, serialNumber=A661E6115F38C50B4D4C5BE3FA488ED8058CC2F1
        Validity
            Not Before: Mar  2 03:09:37 2026 GMT
            Not After : Mar  4 03:09:37 2026 GMT
        Subject: CN=69a4ff72-8977
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:28:52:1b:4e:49:04:be:c8:28:54:da:8e:8c:
                    8e:8a:2c:1f:f2:a6:64:ba:06:9d:16:96:cb:8f:fd:
                    2b:39:96:d5:ad:da:6c:45:d0:63:98:2e:ce:c1:bc:
                    e6:f8:3f:7e:3b:65:fb:4a:a8:2a:02:c9:9d:56:ba:
                    bb:b2:fa:92:a8:72:e7:00:cd:12:55:47:fd:07:0f:
                    7e:19:3d:2b:67:17:b9:44:66:71:69:c2:ff:d4:43:
                    e4:c0:6d:16:48:1d:08:48:61:58:8d:f5:d8:ee:ef:
                    fe:94:ae:2f:d7:fd:ef:da:c4:35:bf:a5:74:de:01:
                    23:97:f0:9b:b2:0a:5e:ff:59:0a:09:97:97:63:ce:
                    66:2c:00:53:ce:bc:55:80:48:4a:66:53:32:05:77:
                    d8:f0:01:96:21:01:05:5a:c6:90:c5:cb:31:08:0d:
                    56:c7:86:00:62:41:1c:68:5f:41:a8:ca:b0:69:c6:
                    94:e8:80:9f:ae:d2:77:a3:ee:44:c8:24:ac:db:f0:
                    c7:14:1f:d0:15:d3:c9:d6:51:2d:6e:d8:e1:2f:4b:
                    76:9c:cb:1a:74:d4:08:96:34:25:7d:bd:d3:26:f8:
                    27:1e:d8:9d:cc:e8:1e:c6:ad:c3:44:e2:74:04:a1:
                    74:f6:58:70:fb:54:5b:a1:ca:a3:be:7c:c9:7f:b0:
                    62:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:D4:C7:FE:EB:F0:38:DD:AA:D4:54:CE:36:D3:E0:6B:5A:9B:BB:93
            X509v3 Authority Key Identifier:
                keyid:A6:61:E6:11:5F:38:C5:0B:4D:4C:5B:E3:FA:48:8E:D8:05:8C:C2:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3672189/38C85C46912A11EF98AA067A762E951A/pmHmEV84xQtNTFvj-kiO2AWMwvE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/pmHmEV84xQtNTFvj-kiO2AWMwvE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3672189/38C85C46912A11EF98AA067A762E951A/pmHmEV84xQtNTFvj-kiO2AWMwvE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:99:90:74:3d:13:ae:08:17:ee:97:00:ae:5c:7b:32:e7:45:
         a0:55:e4:86:46:46:1c:e2:03:b2:65:8c:1e:63:b3:ab:0c:4a:
         be:85:ae:7e:73:c7:7f:c9:32:71:28:f1:c0:b7:66:0c:f6:59:
         c5:05:77:f2:47:80:f1:13:6d:08:af:42:6d:a2:32:66:f9:11:
         25:cd:d5:0f:04:94:dd:2b:06:cb:ae:87:de:b2:0f:46:a5:b3:
         33:48:8c:74:8e:ee:4b:65:40:02:af:32:1f:74:9f:80:ec:b3:
         58:64:60:39:af:1e:59:e4:29:df:b1:8d:c9:64:80:86:74:20:
         a5:13:81:66:f0:4f:01:d4:19:74:91:b8:3a:db:71:e1:5d:2d:
         da:65:d1:a5:f8:98:8e:d6:69:98:9e:bf:a3:9a:39:9e:a7:73:
         b9:75:e9:07:7f:0d:e8:e9:2f:be:37:a1:57:df:31:e2:7f:ab:
         dd:95:5b:b6:87:7e:22:d6:d1:d9:ac:b0:85:a9:9b:37:5d:b3:
         1d:f3:70:d8:c6:00:88:e4:39:04:a8:32:dc:6c:9e:b6:d6:cc:
         56:25:5d:e0:33:6d:c8:72:2f:47:51:f2:51:77:d4:49:8c:38:
         c3:5c:39:38:a1:a9:4c:ca:f3:f1:a1:0f:13:28:b7:dc:69:fa:
         ea:76:24:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:18:53 2026 by rpki-client