Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3675681/3A811A06B37111EE992D23C5775412E6/shxmbZvNmMAZWRBxeUg3JoQDINk.mft
File:                     shxmbZvNmMAZWRBxeUg3JoQDINk.mft (raw, json)
Hash identifier:          JqbIy0pyqUrY4aBXOQ27zBoPm5eU975gJYWtT73BHow=
Subject key identifier:   89:AC:A4:CE:07:D8:14:5E:D9:94:17:52:54:D5:C3:A7:F7:68:C8:4C
Authority key identifier: B2:1C:66:6D:9B:CD:98:C0:19:59:10:71:79:48:37:26:84:03:20:D9
Certificate issuer:       /CN=F3675681AF/serialNumber=B21C666D9BCD98C01959107179483726840320D9
Certificate serial:       0324
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/shxmbZvNmMAZWRBxeUg3JoQDINk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3675681/3A811A06B37111EE992D23C5775412E6/shxmbZvNmMAZWRBxeUg3JoQDINk.mft
Manifest number:          0321
Signing time:             Mon 02 Mar 2026 02:45:10 +0000
Manifest this update:     Mon 02 Mar 2026 02:45:09 +0000
Manifest next update:     Wed 04 Mar 2026 02:45:09 +0000
Files and hashes:         1: shxmbZvNmMAZWRBxeUg3JoQDINk.crl (hash: q8sJe9F/MV+2Kjkw9+i8vPTM0BM9oxVZRHnSFPwN7b0=)
                          2: 3C5DC152150F11F0AFA3C00D6EB8BCC6.roa (hash: fH15aNCg4OTSLMaHS4OXxFDniAhEu0g0inrw6icGVBw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3675681/3A811A06B37111EE992D23C5775412E6/shxmbZvNmMAZWRBxeUg3JoQDINk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3675681/3A811A06B37111EE992D23C5775412E6/shxmbZvNmMAZWRBxeUg3JoQDINk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/shxmbZvNmMAZWRBxeUg3JoQDINk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 804 (0x324)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3675681AF, serialNumber=B21C666D9BCD98C01959107179483726840320D9
        Validity
            Not Before: Mar  2 02:45:09 2026 GMT
            Not After : Mar  4 02:45:09 2026 GMT
        Subject: CN=69a4f9b6-c0f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:d6:1d:b8:69:d3:8a:ef:aa:69:70:71:76:c8:
                    45:2e:c8:2c:2d:38:a5:b1:2f:13:ed:a7:99:3f:7f:
                    b0:6c:f6:b4:f1:a3:c8:ff:d9:0d:c8:68:94:03:23:
                    47:9b:4f:2b:af:56:01:ea:07:69:e7:c9:5d:d0:ca:
                    90:ed:ab:5d:42:ef:ee:2c:ff:63:93:4c:35:58:90:
                    7f:5b:cc:ae:cd:cc:98:75:ac:05:24:ef:19:5d:5e:
                    28:bc:22:42:91:5b:73:30:2f:18:6b:76:ad:87:b7:
                    90:0c:5f:04:90:75:f0:81:06:98:ed:45:7d:01:c0:
                    23:36:56:71:99:ca:3f:aa:55:10:ea:bb:ac:09:d1:
                    57:d2:a7:c3:eb:de:dc:07:e8:fe:5d:cf:77:9b:2e:
                    74:f2:af:e1:e1:ef:fa:08:42:c7:c5:8d:9e:a9:02:
                    3e:f5:32:11:3f:21:e7:64:b0:86:40:69:f7:2b:41:
                    26:ad:d1:39:3d:af:a5:7c:11:7a:cf:43:71:0e:2b:
                    65:83:07:0b:e4:83:1e:5f:12:85:14:96:ad:c7:a2:
                    6b:ef:3a:13:aa:c4:4f:df:e5:c3:7b:9f:75:8e:88:
                    5e:82:a2:6c:45:83:d5:bd:7a:91:2c:22:47:ba:9c:
                    0c:79:d4:b0:85:50:de:55:88:4c:16:d2:69:ed:c8:
                    ed:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:AC:A4:CE:07:D8:14:5E:D9:94:17:52:54:D5:C3:A7:F7:68:C8:4C
            X509v3 Authority Key Identifier:
                keyid:B2:1C:66:6D:9B:CD:98:C0:19:59:10:71:79:48:37:26:84:03:20:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3675681/3A811A06B37111EE992D23C5775412E6/shxmbZvNmMAZWRBxeUg3JoQDINk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/shxmbZvNmMAZWRBxeUg3JoQDINk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3675681/3A811A06B37111EE992D23C5775412E6/shxmbZvNmMAZWRBxeUg3JoQDINk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:a0:58:72:eb:d7:39:00:92:02:45:30:41:89:83:86:4d:b2:
         19:31:b1:95:23:2e:5c:77:ca:4a:a5:42:4d:1c:eb:fa:e2:3d:
         a6:ae:6a:af:af:3c:8f:fc:a8:98:26:28:78:bb:d1:65:d0:24:
         74:bc:39:d8:b4:d9:16:e0:e4:47:ff:53:96:9e:96:cf:81:04:
         3c:d9:37:b6:f9:94:05:25:ac:15:21:c0:5d:18:e7:2d:78:8a:
         a9:66:36:ac:c6:d2:32:d0:5d:36:e8:a5:c7:cd:8a:51:9c:5d:
         26:ce:dd:78:4c:74:1c:1b:77:4a:95:be:c5:1a:43:d3:1f:1f:
         70:13:cb:8c:31:5c:25:92:b4:a7:e2:8e:d1:bc:07:b3:83:d1:
         0e:68:81:3d:8b:54:67:e7:39:86:71:4b:1b:58:5d:92:d2:b4:
         94:f9:4d:6d:5f:09:1e:f1:4d:f7:9d:10:a2:f9:46:57:f1:b0:
         75:d7:5a:bd:82:ee:84:d3:51:f1:36:fb:5e:f8:da:19:08:ea:
         07:3d:01:1a:80:13:4a:31:fa:2d:8b:56:16:b1:a3:50:4d:28:
         be:97:d0:01:12:c9:25:95:c5:4f:07:e3:c8:6c:67:14:22:69:
         09:d4:35:f9:e6:60:e9:8f:bf:f5:f7:d4:78:e7:29:a7:1f:20:
         75:aa:28:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:17:30 2026 by rpki-client