Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3675C2B/C61954AAB83811EDB1717BB1F1222468/LZHJ8lXAmDR0pNTGDo_g7DHut-o.mft
File:                     LZHJ8lXAmDR0pNTGDo_g7DHut-o.mft (raw, json)
Hash identifier:          639whaXAPq96sOX3qHhgu+kt5IjK8L3he92bWGnWCBk=
Subject key identifier:   CA:34:18:65:D9:B9:C7:BE:6F:93:E9:E4:00:3F:E2:C8:15:98:7B:94
Authority key identifier: 2D:91:C9:F2:55:C0:98:34:74:A4:D4:C6:0E:8F:E0:EC:31:EE:B7:EA
Certificate issuer:       /CN=F3675C2BAF/serialNumber=2D91C9F255C0983474A4D4C60E8FE0EC31EEB7EA
Certificate serial:       0472
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/LZHJ8lXAmDR0pNTGDo_g7DHut-o.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3675C2B/C61954AAB83811EDB1717BB1F1222468/LZHJ8lXAmDR0pNTGDo_g7DHut-o.mft
Manifest number:          046F
Signing time:             Mon 02 Mar 2026 02:20:40 +0000
Manifest this update:     Mon 02 Mar 2026 02:20:39 +0000
Manifest next update:     Wed 04 Mar 2026 02:20:39 +0000
Files and hashes:         1: LZHJ8lXAmDR0pNTGDo_g7DHut-o.crl (hash: prLnUm41PlZJwv88Ehdf8hRk82BhwxWLhFOvoT9ntzU=)
                          2: 31E6ED6E5E4A11F0B9EEF8F1DAE4EC9C.roa (hash: wY2O3owjl7AYpJtBNGgcE5jUl65qutwOOti84IXPCgg=)
                          3: 1DE97BC05EEE11F091903BA7DAE4EC9C.roa (hash: jkztufab7AFgPTPNzKYL389qVdTa1kB8Ivx4uvpPTk8=)
                          4: 9AA2C8F4A72111EFAFB5507D762E951A.roa (hash: BkVr0GywD5ne77AbuN3SlJGoFofC7j3OIJUx5FhoLhs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3675C2B/C61954AAB83811EDB1717BB1F1222468/LZHJ8lXAmDR0pNTGDo_g7DHut-o.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3675C2B/C61954AAB83811EDB1717BB1F1222468/LZHJ8lXAmDR0pNTGDo_g7DHut-o.mft
                          rsync://rpki.afrinic.net/repository/afrinic/LZHJ8lXAmDR0pNTGDo_g7DHut-o.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1138 (0x472)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3675C2BAF, serialNumber=2D91C9F255C0983474A4D4C60E8FE0EC31EEB7EA
        Validity
            Not Before: Mar  2 02:20:39 2026 GMT
            Not After : Mar  4 02:20:39 2026 GMT
        Subject: CN=69a4f3f8-8559
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:6b:0e:80:f1:51:4e:d5:de:ea:a1:d7:d9:4e:
                    f1:7a:27:60:25:f9:c3:be:34:12:c5:b7:7b:95:31:
                    04:8e:7f:c7:45:f5:ae:ef:16:f2:05:d2:36:ba:9f:
                    94:8b:f5:8c:15:53:81:63:14:3f:f8:b3:8f:3e:92:
                    6f:5d:12:b3:2d:65:a0:6d:da:3c:8d:d5:23:ef:3f:
                    e3:cb:94:93:0a:40:fb:bb:57:d9:f2:38:3b:3c:18:
                    14:94:12:71:06:a4:88:46:68:6e:0b:7b:ac:fa:88:
                    38:30:50:2e:ca:01:21:56:db:ab:cf:f8:c2:10:d6:
                    7c:e7:13:66:be:7f:70:45:63:2f:82:88:ef:ac:ea:
                    01:76:fd:1a:7e:de:26:1c:d7:71:69:94:99:5b:fe:
                    26:f7:f0:ef:71:ac:6b:28:23:1f:33:e6:c6:cd:0d:
                    1f:ec:ce:57:ba:07:ee:b5:46:79:66:1b:8f:d3:97:
                    5e:1b:ea:f0:2f:99:72:57:be:b5:6b:d5:15:ab:b8:
                    b0:44:54:d4:40:0c:57:80:95:51:9e:c1:90:31:29:
                    da:bc:82:6b:85:4d:fb:76:93:46:4f:87:30:e7:9b:
                    85:a9:e9:7e:09:61:72:f7:43:26:0d:6e:90:d8:81:
                    3c:d3:8b:86:ed:d4:ab:f2:73:2d:56:5e:6d:02:14:
                    48:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:34:18:65:D9:B9:C7:BE:6F:93:E9:E4:00:3F:E2:C8:15:98:7B:94
            X509v3 Authority Key Identifier:
                keyid:2D:91:C9:F2:55:C0:98:34:74:A4:D4:C6:0E:8F:E0:EC:31:EE:B7:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3675C2B/C61954AAB83811EDB1717BB1F1222468/LZHJ8lXAmDR0pNTGDo_g7DHut-o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LZHJ8lXAmDR0pNTGDo_g7DHut-o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3675C2B/C61954AAB83811EDB1717BB1F1222468/LZHJ8lXAmDR0pNTGDo_g7DHut-o.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:7f:92:f4:72:03:06:9b:5c:06:ec:35:81:fd:95:77:c3:dd:
         06:b1:09:6d:62:a3:4c:92:89:f1:93:84:3e:d9:1c:72:c0:98:
         4c:4f:17:30:4c:c7:38:07:8c:6a:4a:3c:b3:23:e2:95:fd:ec:
         5d:70:df:64:d0:85:48:1f:53:2e:8a:34:4f:8d:62:f4:cf:3d:
         e7:45:4a:09:de:4c:e1:32:40:a1:df:f0:8b:cb:49:5a:65:d9:
         2a:4f:25:fe:74:c3:20:de:a0:9e:0a:4e:32:b6:ef:81:59:6b:
         98:ef:3d:94:6b:e4:99:81:df:6b:ed:d4:3b:41:ac:b3:69:64:
         e9:93:20:88:2b:bc:fa:8a:81:64:f1:bd:b3:17:97:01:f6:03:
         56:69:01:a9:ff:8a:5f:6b:43:19:74:42:10:95:c2:ac:e1:90:
         6e:b9:8a:8e:c1:f4:8f:a6:c8:9e:b1:4b:4d:48:8a:eb:ed:0e:
         fb:08:cf:0e:9c:2d:af:e2:d3:a4:72:cc:10:37:46:61:c3:ed:
         60:cf:11:e0:f0:bb:f7:9f:02:81:b6:9f:69:77:cf:86:5e:53:
         14:4b:bf:02:ef:f8:22:17:5a:f8:e1:01:41:1a:72:07:c5:cd:
         25:7a:d6:45:d4:ec:db:42:f0:de:47:df:82:3c:ab:59:68:98:
         5a:d4:0c:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:41:59 2026 by rpki-client