Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3678967/4AA442F478D911EA9A80955CF8AEA228/XKqYLAMXkyYzLWt3CljoeVy4RZ8.mft
File:                     XKqYLAMXkyYzLWt3CljoeVy4RZ8.mft (raw, json)
Hash identifier:          OBewa6Dc9arR+CuupAEfv8l8ZzrvWfzf+0UhEAEJd0Y=
Subject key identifier:   AD:FC:56:F5:F9:35:1F:9E:55:41:8F:89:10:72:64:45:3E:D4:FA:88
Authority key identifier: 5C:AA:98:2C:03:17:93:26:33:2D:6B:77:0A:58:E8:79:5C:B8:45:9F
Certificate issuer:       /CN=F3678967AF/serialNumber=5CAA982C03179326332D6B770A58E8795CB8459F
Certificate serial:       08AF
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/XKqYLAMXkyYzLWt3CljoeVy4RZ8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3678967/4AA442F478D911EA9A80955CF8AEA228/XKqYLAMXkyYzLWt3CljoeVy4RZ8.mft
Manifest number:          08AA
Signing time:             Mon 02 Mar 2026 01:23:50 +0000
Manifest this update:     Mon 02 Mar 2026 01:23:49 +0000
Manifest next update:     Wed 04 Mar 2026 01:23:49 +0000
Files and hashes:         1: XKqYLAMXkyYzLWt3CljoeVy4RZ8.crl (hash: mKnn9dXh4P7bC+O4WXkwc7Blb1I9VL2BnSDcvMLqYL4=)
                          2: 420B22A27D0111F0BA56A0A5DAE4EC9C.roa (hash: FgbgmTnolN1lRJKNhlZr9zZr69rYAV0zr0aJY9PwsCo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3678967/4AA442F478D911EA9A80955CF8AEA228/XKqYLAMXkyYzLWt3CljoeVy4RZ8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3678967/4AA442F478D911EA9A80955CF8AEA228/XKqYLAMXkyYzLWt3CljoeVy4RZ8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/XKqYLAMXkyYzLWt3CljoeVy4RZ8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2223 (0x8af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3678967AF, serialNumber=5CAA982C03179326332D6B770A58E8795CB8459F
        Validity
            Not Before: Mar  2 01:23:49 2026 GMT
            Not After : Mar  4 01:23:49 2026 GMT
        Subject: CN=69a4e6a6-c9a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f0:7a:21:68:62:c2:ad:c2:8e:db:5a:39:6a:
                    d3:6e:a1:a9:c6:fe:1f:3d:74:cd:95:ff:4e:7a:f1:
                    17:fe:8c:c7:de:c9:78:1c:a4:6f:63:36:1c:82:e7:
                    3b:2e:d0:8b:a2:95:65:af:8d:74:95:87:fa:e5:90:
                    e2:dd:03:b5:6b:12:b0:be:af:92:ee:df:5b:9c:05:
                    e2:c6:bd:b6:a3:a8:c4:b6:16:ee:b2:96:54:28:be:
                    c8:1a:53:06:8b:99:e4:2d:6c:f8:c3:cd:5d:e0:67:
                    a9:5c:d1:b0:85:2d:59:f3:11:3c:78:80:13:aa:e4:
                    a9:f6:31:9a:e9:ea:c3:58:fa:67:5a:ac:bf:42:fc:
                    cc:a3:dd:45:0f:3d:50:2f:0f:1c:03:14:2f:00:72:
                    c0:6b:57:50:e7:0f:9a:67:1d:fd:6b:ec:ca:f4:e6:
                    fe:af:4d:5d:54:f1:ce:d6:f5:95:9c:54:1d:a6:6c:
                    bb:35:26:28:25:11:58:fb:22:94:6f:06:c8:b3:a5:
                    98:90:76:d3:29:b7:22:af:85:38:66:43:41:93:64:
                    9a:31:5b:2b:10:44:01:1f:9b:f3:19:c6:be:55:74:
                    db:c6:cc:6f:61:a3:a3:8a:a8:fa:03:af:d5:7a:26:
                    95:3e:74:3b:6c:07:8b:22:60:d9:e7:74:04:03:a7:
                    ad:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:FC:56:F5:F9:35:1F:9E:55:41:8F:89:10:72:64:45:3E:D4:FA:88
            X509v3 Authority Key Identifier:
                keyid:5C:AA:98:2C:03:17:93:26:33:2D:6B:77:0A:58:E8:79:5C:B8:45:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3678967/4AA442F478D911EA9A80955CF8AEA228/XKqYLAMXkyYzLWt3CljoeVy4RZ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XKqYLAMXkyYzLWt3CljoeVy4RZ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3678967/4AA442F478D911EA9A80955CF8AEA228/XKqYLAMXkyYzLWt3CljoeVy4RZ8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:e4:91:24:45:c2:a7:cb:82:e6:81:85:c6:6c:08:d6:ee:70:
         be:76:a8:53:0c:ca:d1:f9:a8:24:69:7a:70:8c:8f:d5:1f:b4:
         3f:a3:d0:1f:20:e3:14:40:f5:d5:4c:85:fe:2b:c4:c7:25:35:
         da:4a:3e:ec:ce:b9:5a:1c:f4:e6:2c:37:bb:e4:ca:57:e9:b5:
         04:7a:21:dd:84:33:07:c9:08:3a:41:c3:13:1c:fc:17:12:b8:
         18:aa:39:a9:1d:d4:c8:d0:1c:76:12:80:bc:d5:60:d4:ae:7f:
         35:3e:88:1c:0f:6b:37:84:a6:21:0c:f4:3d:88:56:92:b6:36:
         a7:bf:52:bb:4f:06:3e:02:32:76:4f:44:9b:b0:2f:17:3f:18:
         79:87:49:39:68:69:fa:72:78:2b:e2:df:90:03:57:c5:f8:e2:
         b2:03:71:df:b1:69:66:b3:ac:d9:3f:95:04:25:c3:7a:72:a6:
         e6:2c:0d:44:01:46:56:0b:17:d6:84:17:ac:78:7e:62:96:5d:
         e9:b3:c7:45:0d:ea:15:01:86:be:d3:30:a8:e6:09:6b:57:bc:
         78:df:28:67:33:7f:54:c0:c6:14:df:a4:46:ab:e7:7c:03:ae:
         8c:bf:84:7f:b2:53:67:34:0c:02:61:08:a3:4c:f8:28:2e:f0:
         aa:55:ea:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:42:47 2026 by rpki-client