Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36763E5/1D91ED9AF59C11E98BF85D43F8AEA228/PTg51e4dl7STFVYoMdygQJMxSB8.mft
File:                     PTg51e4dl7STFVYoMdygQJMxSB8.mft (raw, json)
Hash identifier:          FG7Y+IDhJNPJdYgSyycPBRglIpvJxLU+tpub2b5hbQ4=
Subject key identifier:   CE:39:9D:89:6F:F8:2E:73:26:25:C3:79:D8:64:34:AB:55:F1:63:38
Authority key identifier: 3D:38:39:D5:EE:1D:97:B4:93:15:56:28:31:DC:A0:40:93:31:48:1F
Certificate issuer:       /CN=F36763E5AF/serialNumber=3D3839D5EE1D97B49315562831DCA0409331481F
Certificate serial:       0970
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PTg51e4dl7STFVYoMdygQJMxSB8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36763E5/1D91ED9AF59C11E98BF85D43F8AEA228/PTg51e4dl7STFVYoMdygQJMxSB8.mft
Manifest number:          0960
Signing time:             Mon 02 Mar 2026 01:19:10 +0000
Manifest this update:     Mon 02 Mar 2026 01:19:10 +0000
Manifest next update:     Wed 04 Mar 2026 01:19:10 +0000
Files and hashes:         1: PTg51e4dl7STFVYoMdygQJMxSB8.crl (hash: 14LPbsx8LDcZs2grv4MqTXNmKXRnw87lpialtXWkaug=)
                          2: EBE9D8E4002911F1B948E098DAE4EC9C.roa (hash: A27M1xspmH5ryATJrqn4YiVO/fe+mYlUQpMbMsLJvnw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36763E5/1D91ED9AF59C11E98BF85D43F8AEA228/PTg51e4dl7STFVYoMdygQJMxSB8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36763E5/1D91ED9AF59C11E98BF85D43F8AEA228/PTg51e4dl7STFVYoMdygQJMxSB8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PTg51e4dl7STFVYoMdygQJMxSB8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2416 (0x970)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36763E5AF, serialNumber=3D3839D5EE1D97B49315562831DCA0409331481F
        Validity
            Not Before: Mar  2 01:19:10 2026 GMT
            Not After : Mar  4 01:19:10 2026 GMT
        Subject: CN=69a4e58e-2f41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:bc:14:13:45:df:66:51:de:6f:92:5e:cd:69:
                    bc:e1:02:fe:54:7f:81:fb:fd:dc:13:05:d2:d2:81:
                    b2:15:2a:39:92:13:5a:42:0a:6a:0f:f8:8d:42:3d:
                    81:00:26:06:6c:b3:8d:ed:eb:d4:64:bc:96:53:71:
                    c7:30:ec:dd:1d:2b:e9:ab:c9:c6:f2:72:44:2e:92:
                    26:d6:6c:5b:8f:6b:89:d5:c4:af:4e:99:ef:a0:dc:
                    dd:8d:f9:6a:b3:73:00:0d:16:1b:92:ba:d8:45:0f:
                    e7:03:53:0c:30:0a:a6:c2:f7:1a:eb:f9:aa:12:f1:
                    67:28:40:a9:c9:f3:b9:20:e0:dc:c1:e5:ad:ab:fd:
                    e5:42:c4:a1:70:4a:d0:a3:6c:03:6b:4f:a1:49:31:
                    55:99:96:53:05:b3:91:07:e0:6a:7f:8b:c0:21:d0:
                    b6:fe:c4:45:42:1d:98:08:12:7c:66:ae:18:14:1b:
                    79:e9:bf:3a:d3:81:68:11:22:c3:a1:2e:ee:26:ee:
                    d6:50:8d:ff:cb:25:6b:25:62:2d:4a:62:9a:3d:b2:
                    c7:27:eb:61:2f:78:ea:aa:ff:02:7d:bf:03:6e:8a:
                    c0:54:b5:c1:65:65:20:6e:60:e2:90:d9:10:64:43:
                    3e:d8:63:27:2b:eb:dd:91:58:08:78:6b:8e:9d:be:
                    61:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:39:9D:89:6F:F8:2E:73:26:25:C3:79:D8:64:34:AB:55:F1:63:38
            X509v3 Authority Key Identifier:
                keyid:3D:38:39:D5:EE:1D:97:B4:93:15:56:28:31:DC:A0:40:93:31:48:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36763E5/1D91ED9AF59C11E98BF85D43F8AEA228/PTg51e4dl7STFVYoMdygQJMxSB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PTg51e4dl7STFVYoMdygQJMxSB8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36763E5/1D91ED9AF59C11E98BF85D43F8AEA228/PTg51e4dl7STFVYoMdygQJMxSB8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:fb:3e:52:6b:eb:bc:b7:ab:ce:d9:9b:5b:72:c4:90:55:f8:
         eb:9f:da:66:6f:0e:df:12:55:6b:00:48:f7:b1:35:8f:d4:07:
         ab:24:cb:ec:5b:99:bf:af:4e:81:e3:43:f1:3b:42:55:47:18:
         f0:0d:6e:b8:29:91:17:9c:2d:e4:05:44:3a:95:11:9a:67:b8:
         db:d8:66:39:74:71:cf:e5:18:b6:3f:ce:de:90:e0:6f:96:db:
         f2:3c:03:1a:76:e5:bf:ef:12:35:33:2c:20:47:8b:d7:ef:09:
         6c:24:cf:0f:af:fc:15:43:1b:4c:10:92:e2:12:84:73:33:05:
         8a:9d:83:7a:3a:c6:45:17:5b:52:76:b2:9d:c3:9c:66:d2:de:
         2f:64:5c:92:8e:ed:97:bd:a4:a2:b7:28:1c:30:56:4b:eb:fe:
         c3:5c:38:d1:69:32:eb:ce:fb:15:c1:a1:38:58:83:26:1e:4a:
         e1:14:a0:be:b6:f8:ea:ab:c1:09:90:c5:c3:36:49:4a:0a:cb:
         6e:44:ea:34:52:69:ba:f8:08:ae:af:e0:f6:66:c2:59:61:ce:
         98:e5:5d:3c:62:77:46:c6:ac:c7:3d:0c:50:1f:f3:f8:9c:ce:
         9d:e8:67:aa:65:f7:fa:cf:8b:25:bb:56:d4:26:0b:50:c9:c1:
         22:1d:8d:dc
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCXAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NzYzRTVBRjExMC8GA1UEBRMoM0QzODM5RDVFRTFEOTdCNDkzMTU1NjI4MzFEQ0Ew
NDA5MzMxNDgxRjAeFw0yNjAzMDIwMTE5MTBaFw0yNjAzMDQwMTE5MTBaMBgxFjAU
BgNVBAMTDTY5YTRlNThlLTJmNDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQD0vBQTRd9mUd5vkl7NabzhAv5Uf4H7/dwTBdLSgbIVKjmSE1pCCmoP+I1C
PYEAJgZss43t69RkvJZTcccw7N0dK+mrycbyckQukibWbFuPa4nVxK9Ome+g3N2N
+WqzcwANFhuSuthFD+cDUwwwCqbC9xrr+aoS8WcoQKnJ87kg4NzB5a2r/eVCxKFw
StCjbANrT6FJMVWZllMFs5EH4Gp/i8Ah0Lb+xEVCHZgIEnxmrhgUG3npvzrTgWgR
IsOhLu4m7tZQjf/LJWslYi1KYpo9sscn62EveOqq/wJ9vwNuisBUtcFlZSBuYOKQ
2RBkQz7YYycr692RWAh4a46dvmGzAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUzjmd
iW/4LnMmJcN52GQ0q1XxYzgwHwYDVR0jBBgwFoAUPTg51e4dl7STFVYoMdygQJMx
SB8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjc2M0U1LzFEOTFFRDlBRjU5QzExRTk4QkY4NUQ0M0Y4QUVBMjI4L1BUZzUx
ZTRkbDdTVEZWWW9NZHlnUUpNeFNCOC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1BUZzUxZTRkbDdTVEZWWW9NZHlnUUpNeFNCOC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NzYzRTUvMUQ5MUVEOUFGNTlDMTFFOThCRjg1RDQzRjhB
RUEyMjgvUFRnNTFlNGRsN1NURlZZb01keWdRSk14U0I4Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBa+z5Sa+u8t6vO2ZtbcsSQVfjrn9pm
bw7fElVrAEj3sTWP1AerJMvsW5m/r06B40PxO0JVRxjwDW64KZEXnC3kBUQ6lRGa
Z7jb2GY5dHHP5Ri2P87ekOBvltvyPAMaduW/7xI1MywgR4vX7wlsJM8Pr/wVQxtM
EJLiEoRzMwWKnYN6OsZFF1tSdrKdw5xm0t4vZFySju2XvaSitygcMFZL6/7DXDjR
aTLrzvsVwaE4WIMmHkrhFKC+tvjqq8EJkMXDNklKCstuROo0Umm6+Aiur+D2ZsJZ
Yc6Y5V08YndGxqzHPQxQH/P4nM6d6GeqZff6z4slu1bUJgtQycEiHY3c
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:39:33 2026 by rpki-client