Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DA9B/89B3558A964911ED8DA75EF4F1222468/SFHRgvoW_XO9dxRU8g2Z_JWGIF8.mft
File:                     SFHRgvoW_XO9dxRU8g2Z_JWGIF8.mft (raw, json)
Hash identifier:          apVBc6wrJuz9n2mMVj1JfjHQ6bHfScNDHs9UIxvjv8M=
Subject key identifier:   2B:02:3C:20:4F:36:6D:C4:FE:F8:F6:54:22:92:3B:5B:08:B1:C2:22
Authority key identifier: 48:51:D1:82:FA:16:FD:73:BD:77:14:54:F2:0D:99:FC:95:86:20:5F
Certificate issuer:       /CN=F367DA9BAF/serialNumber=4851D182FA16FD73BD771454F20D99FC9586205F
Certificate serial:       049C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SFHRgvoW_XO9dxRU8g2Z_JWGIF8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367DA9B/89B3558A964911ED8DA75EF4F1222468/SFHRgvoW_XO9dxRU8g2Z_JWGIF8.mft
Manifest number:          049B
Signing time:             Mon 02 Mar 2026 02:16:40 +0000
Manifest this update:     Mon 02 Mar 2026 02:16:39 +0000
Manifest next update:     Wed 04 Mar 2026 02:16:39 +0000
Files and hashes:         1: SFHRgvoW_XO9dxRU8g2Z_JWGIF8.crl (hash: hL80ER6j3PSfU5Iogdcw7uCf7PWXpaZqzqJZgfQNpSU=)
                          2: 46F0B40CABC211ED9ACEA683F1222468.roa (hash: gMJyXLKD9QP+OLiQjsuXWN3MuSsqyBtsebI9uk9Cd8I=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367DA9B/89B3558A964911ED8DA75EF4F1222468/SFHRgvoW_XO9dxRU8g2Z_JWGIF8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367DA9B/89B3558A964911ED8DA75EF4F1222468/SFHRgvoW_XO9dxRU8g2Z_JWGIF8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SFHRgvoW_XO9dxRU8g2Z_JWGIF8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1180 (0x49c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367DA9BAF, serialNumber=4851D182FA16FD73BD771454F20D99FC9586205F
        Validity
            Not Before: Mar  2 02:16:39 2026 GMT
            Not After : Mar  4 02:16:39 2026 GMT
        Subject: CN=69a4f308-12a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:cc:f1:92:9d:b2:14:a5:2f:da:e5:61:8f:0f:
                    cd:db:75:d2:03:7c:23:45:4c:76:c4:b8:78:62:03:
                    f3:77:da:58:db:75:c2:c6:fc:d4:63:bc:a5:1a:70:
                    1b:63:ac:6c:53:ee:a6:b2:72:57:c8:81:b1:84:e2:
                    1f:20:46:aa:5c:3a:49:08:30:1d:bb:f7:55:8e:22:
                    b9:5f:37:33:a6:1b:0f:7f:a7:b0:03:f8:d6:73:ab:
                    19:01:74:7c:0e:6c:08:fa:d2:19:25:da:08:7c:7a:
                    ae:52:78:0a:12:22:21:bc:e0:63:bd:2f:59:1a:83:
                    21:a0:f1:6f:0e:15:5d:3b:79:35:6e:9b:1f:57:3d:
                    dd:a1:92:7b:e8:43:39:07:51:fd:00:c0:a7:2e:a2:
                    a2:42:b1:01:49:85:d9:8b:ab:6d:eb:07:2e:98:7b:
                    85:7b:a6:88:1c:65:b9:fa:d6:64:2d:1b:43:00:5e:
                    57:45:8a:03:9d:fc:df:9c:ef:1e:91:22:d3:1e:0f:
                    e8:62:47:d2:f5:ec:00:9f:21:b8:93:3d:e7:95:3f:
                    bb:16:bd:23:58:df:b2:54:3e:ea:06:91:c4:78:8b:
                    ba:ab:af:6a:c3:7a:f5:06:39:fa:5d:42:6c:9a:2c:
                    3b:6d:3e:ad:45:1d:96:6a:8d:9f:7f:73:b8:1d:e8:
                    4e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:02:3C:20:4F:36:6D:C4:FE:F8:F6:54:22:92:3B:5B:08:B1:C2:22
            X509v3 Authority Key Identifier:
                keyid:48:51:D1:82:FA:16:FD:73:BD:77:14:54:F2:0D:99:FC:95:86:20:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367DA9B/89B3558A964911ED8DA75EF4F1222468/SFHRgvoW_XO9dxRU8g2Z_JWGIF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SFHRgvoW_XO9dxRU8g2Z_JWGIF8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DA9B/89B3558A964911ED8DA75EF4F1222468/SFHRgvoW_XO9dxRU8g2Z_JWGIF8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:24:08:e3:19:4c:a9:39:45:ea:ad:73:68:87:de:c4:88:a5:
         16:8e:b0:f1:f5:93:36:27:66:8d:dc:ca:95:66:af:bb:0f:8b:
         4b:d0:68:d7:8e:90:7b:7a:21:dc:39:42:c1:b9:b9:b1:26:2b:
         2c:55:99:6a:51:84:44:40:85:bd:56:7b:8a:d1:71:56:f4:7e:
         5e:0c:b6:a9:ae:0b:ac:32:36:28:aa:96:81:bf:ea:46:23:1d:
         13:95:e6:8d:57:aa:7d:f1:99:fc:c3:59:c4:c1:4d:ba:c1:0e:
         90:62:c9:c4:8b:98:97:93:d4:f4:5d:bd:4c:d6:ca:24:b7:7c:
         26:f7:10:7e:10:52:eb:2a:89:40:68:58:4a:0f:cb:e6:e3:ce:
         7c:b3:e0:76:58:d8:b7:5f:07:d5:9a:76:ea:63:ce:1c:7a:6c:
         46:3e:97:d6:c9:dc:5c:53:f2:cd:ca:a3:25:c1:0b:bb:f9:51:
         38:a8:57:f3:2d:16:f9:1b:c6:e8:3e:41:af:8c:6b:3a:da:64:
         89:ce:9b:46:5f:df:26:65:0d:4e:ca:bb:8e:51:b7:11:9b:a2:
         85:30:69:6c:07:a6:b2:f3:39:a2:1a:b1:2a:a9:cb:89:19:b1:
         ac:ed:63:39:88:c6:e8:fe:40:69:4f:7c:1f:18:98:ec:c6:bb:
         b3:fe:fd:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:41:03 2026 by rpki-client