Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36795C4/D603990491ED11E9841D5A7DF8AEA228/lUq4iuSUipt1F33uZX-rTm4MV4o.mft
File:                     lUq4iuSUipt1F33uZX-rTm4MV4o.mft (raw, json)
Hash identifier:          0F+h43BR3tpQKPwXYcCrwpMwAZ33RtDlVg6Z6Q6gglM=
Subject key identifier:   76:ED:C8:40:D5:D9:5F:C6:59:9E:43:66:49:DF:02:17:AE:A1:7C:07
Authority key identifier: 95:4A:B8:8A:E4:94:8A:9B:75:17:7D:EE:65:7F:AB:4E:6E:0C:57:8A
Certificate issuer:       /CN=F36795C4AF/serialNumber=954AB88AE4948A9B75177DEE657FAB4E6E0C578A
Certificate serial:       09D7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/lUq4iuSUipt1F33uZX-rTm4MV4o.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36795C4/D603990491ED11E9841D5A7DF8AEA228/lUq4iuSUipt1F33uZX-rTm4MV4o.mft
Manifest number:          09D3
Signing time:             Mon 02 Mar 2026 01:14:57 +0000
Manifest this update:     Mon 02 Mar 2026 01:14:56 +0000
Manifest next update:     Wed 04 Mar 2026 01:14:56 +0000
Files and hashes:         1: lUq4iuSUipt1F33uZX-rTm4MV4o.crl (hash: Dr+ZjzGbwEJRY9GC4/Usori0sPOESyGPryURFdWsHNc=)
                          2: F9B4B74223E211EBB3370E5EF8AEA228.roa (hash: iAjclVjr18rb8UzFlzEG7HCKjOKSh2vSHYxUqjnpsFA=)
                          3: BABCAEFE91EF11E9B165E57EF8AEA228.roa (hash: hVKNt8SGYWt1U+/taZzhJep5equgMI82UyG7GvrNAnA=)
                          4: 9D413B06934311E9A21F097CF8AEA228.roa (hash: 6TisgPXDxDhUciEz6ugq9eMaF0xfY5KK7JgLSnZtkTk=)
                          5: 3A036A0023E311EBA7E4515EF8AEA228.roa (hash: 8IUYdHouL/KgAyYJ5ZHIEJY8Ka7R1x0U8rxHyMR+85A=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36795C4/D603990491ED11E9841D5A7DF8AEA228/lUq4iuSUipt1F33uZX-rTm4MV4o.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36795C4/D603990491ED11E9841D5A7DF8AEA228/lUq4iuSUipt1F33uZX-rTm4MV4o.mft
                          rsync://rpki.afrinic.net/repository/afrinic/lUq4iuSUipt1F33uZX-rTm4MV4o.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2519 (0x9d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36795C4AF, serialNumber=954AB88AE4948A9B75177DEE657FAB4E6E0C578A
        Validity
            Not Before: Mar  2 01:14:56 2026 GMT
            Not After : Mar  4 01:14:56 2026 GMT
        Subject: CN=69a4e491-ddbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:36:d3:33:9a:c0:c7:36:7f:95:a9:19:e8:19:
                    bf:31:f9:8f:aa:d4:b3:15:e6:96:6c:10:12:11:34:
                    84:46:ed:60:67:97:cf:b6:c0:e7:68:31:e7:8c:8b:
                    f1:20:cd:29:0d:65:c6:ad:2f:0c:89:cc:d8:c1:fe:
                    1b:9a:7c:c2:cf:a1:3a:a4:95:3b:bc:b6:ea:24:a3:
                    e0:1c:f2:87:ba:69:3c:38:31:46:41:a0:68:23:99:
                    dc:86:9a:76:3f:37:eb:7e:1f:fc:1f:22:29:70:81:
                    22:3e:c9:76:ea:f5:c8:5b:18:6a:78:c4:2a:4f:20:
                    65:d4:cf:b4:27:b4:e6:dd:42:b2:6b:0a:c7:99:bb:
                    9e:48:a6:7b:43:36:44:5d:da:22:57:47:e0:06:f3:
                    b4:c9:c6:19:a1:7b:a5:1e:7a:f1:0e:f4:4c:98:89:
                    dc:0b:c8:63:8a:31:50:f1:2e:59:6a:b6:7f:86:09:
                    68:0d:70:c6:51:cd:1f:40:36:4e:3e:e4:50:6b:68:
                    ea:3a:8f:c6:1e:0d:61:86:34:7e:98:68:b2:d5:43:
                    df:8b:63:0f:fe:9e:3a:1b:3e:36:eb:b7:14:36:63:
                    32:ad:82:eb:64:72:1d:16:5d:4b:14:46:e4:4d:02:
                    86:16:ab:2a:d8:91:7d:7e:c8:5c:ff:89:6d:1c:a1:
                    f6:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:ED:C8:40:D5:D9:5F:C6:59:9E:43:66:49:DF:02:17:AE:A1:7C:07
            X509v3 Authority Key Identifier:
                keyid:95:4A:B8:8A:E4:94:8A:9B:75:17:7D:EE:65:7F:AB:4E:6E:0C:57:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36795C4/D603990491ED11E9841D5A7DF8AEA228/lUq4iuSUipt1F33uZX-rTm4MV4o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lUq4iuSUipt1F33uZX-rTm4MV4o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36795C4/D603990491ED11E9841D5A7DF8AEA228/lUq4iuSUipt1F33uZX-rTm4MV4o.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         dd:f5:40:c5:6b:a4:26:5d:bf:3c:ee:8e:26:23:ee:45:4b:c8:
         3e:21:5d:3e:03:15:5b:46:4b:e1:b6:e2:e6:a4:28:b2:d2:65:
         82:64:03:42:32:cd:d3:8f:36:92:bb:f9:10:4c:c4:c2:ee:fc:
         d5:28:18:96:81:ae:3e:d7:8e:9f:39:f6:d7:12:01:a5:96:36:
         89:e0:b3:82:43:15:51:7c:f2:cf:e2:65:ff:c8:c7:dc:1f:12:
         66:93:a8:e7:8a:a1:6e:0e:bb:1c:1d:31:0d:19:18:6d:98:46:
         eb:07:a0:82:f7:a7:7b:b9:3f:4c:06:9a:80:ad:75:21:6e:7d:
         12:1d:94:05:15:cb:4c:2f:4c:76:e0:24:71:ad:d0:12:db:a5:
         ef:43:70:7c:54:3b:a5:9c:ed:1c:6a:d8:b3:3d:7c:6b:7c:41:
         8e:f7:73:e0:34:d1:67:4c:ab:7e:ca:05:af:e6:55:47:a9:09:
         8b:84:40:ed:5b:5e:01:8b:27:0f:c4:96:d7:a3:e3:ba:ab:36:
         0b:04:3d:03:3c:51:15:83:93:2f:09:dd:05:e1:0b:c4:3c:9c:
         c0:27:95:c2:a2:56:cc:b6:89:7d:d0:00:f1:eb:11:d4:5a:b9:
         a3:58:b0:14:13:1a:7d:a4:94:68:7c:ff:56:bf:eb:c5:e6:c1:
         66:dd:0e:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:41:37 2026 by rpki-client