Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3680E82/40AC46C4B72211EB9FEA891EF8AEA228/kC4Bh228XGk7_mL7v2fubbanGDE.mft
File:                     kC4Bh228XGk7_mL7v2fubbanGDE.mft (raw, json)
Hash identifier:          JXWx/ca7eFW5LSWkJY0xeZQS66+xfqjlu9ktE9iTy8w=
Subject key identifier:   10:1C:35:2E:A2:A7:ED:AF:D5:BC:87:D7:DA:32:22:3A:13:A9:51:18
Authority key identifier: 90:2E:01:87:6D:BC:5C:69:3B:FE:62:FB:BF:67:EE:6D:B6:A7:18:31
Certificate issuer:       /CN=F3680E82AF/serialNumber=902E01876DBC5C693BFE62FBBF67EE6DB6A71831
Certificate serial:       070B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/kC4Bh228XGk7_mL7v2fubbanGDE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3680E82/40AC46C4B72211EB9FEA891EF8AEA228/kC4Bh228XGk7_mL7v2fubbanGDE.mft
Manifest number:          0709
Signing time:             Mon 02 Mar 2026 01:39:13 +0000
Manifest this update:     Mon 02 Mar 2026 01:39:12 +0000
Manifest next update:     Wed 04 Mar 2026 01:39:12 +0000
Files and hashes:         1: kC4Bh228XGk7_mL7v2fubbanGDE.crl (hash: 785K1Z4Xr8o3NFARKj3jWm9N7yv5R0VE62WqdYhE1d4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3680E82/40AC46C4B72211EB9FEA891EF8AEA228/kC4Bh228XGk7_mL7v2fubbanGDE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3680E82/40AC46C4B72211EB9FEA891EF8AEA228/kC4Bh228XGk7_mL7v2fubbanGDE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/kC4Bh228XGk7_mL7v2fubbanGDE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1803 (0x70b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3680E82AF, serialNumber=902E01876DBC5C693BFE62FBBF67EE6DB6A71831
        Validity
            Not Before: Mar  2 01:39:12 2026 GMT
            Not After : Mar  4 01:39:12 2026 GMT
        Subject: CN=69a4ea41-1f58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:bf:87:d0:91:3d:d4:bd:79:1c:22:21:21:3e:
                    d8:79:e0:98:bc:4d:90:1a:17:c4:30:c6:4f:8b:e5:
                    3e:6d:99:9c:ad:5f:bf:bb:c8:a9:3c:69:bf:ca:ef:
                    9f:13:87:55:a7:5c:d3:86:03:72:b6:74:f0:dc:4e:
                    28:3d:09:07:49:70:46:c0:c6:6a:d5:d0:ce:79:b7:
                    76:b9:34:dd:12:15:76:80:28:bb:52:27:07:09:20:
                    62:99:78:9f:c1:67:ba:04:22:1a:80:34:45:2f:1a:
                    82:bd:5a:61:32:3d:58:a6:04:09:79:c3:c0:b5:e4:
                    ed:fa:32:39:66:1d:0f:38:96:a0:8a:52:a1:f4:5d:
                    13:94:31:db:e3:a2:76:50:57:52:77:f0:75:1c:50:
                    03:50:c5:bd:94:df:06:67:95:47:7c:52:69:b3:81:
                    99:f6:33:04:48:47:bd:91:ae:99:91:2e:c9:40:f0:
                    77:59:f4:d5:40:64:d9:91:96:38:50:03:48:0b:3c:
                    8f:bc:de:df:e7:a1:37:d4:fa:3c:f7:d6:ab:5e:cf:
                    a6:19:ec:27:df:9b:48:62:d8:72:34:61:53:be:b5:
                    ba:0f:d1:83:3e:7a:d0:2f:02:a7:fe:b3:fa:0d:88:
                    10:00:bd:80:a1:81:71:65:63:f7:37:e0:a7:67:8e:
                    f0:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:1C:35:2E:A2:A7:ED:AF:D5:BC:87:D7:DA:32:22:3A:13:A9:51:18
            X509v3 Authority Key Identifier:
                keyid:90:2E:01:87:6D:BC:5C:69:3B:FE:62:FB:BF:67:EE:6D:B6:A7:18:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3680E82/40AC46C4B72211EB9FEA891EF8AEA228/kC4Bh228XGk7_mL7v2fubbanGDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kC4Bh228XGk7_mL7v2fubbanGDE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3680E82/40AC46C4B72211EB9FEA891EF8AEA228/kC4Bh228XGk7_mL7v2fubbanGDE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:29:26:64:6b:96:cc:92:72:a7:5e:df:23:9c:53:5e:ca:bf:
         b8:7c:d1:36:7e:e9:79:4e:b1:db:5f:a4:64:96:78:9b:8a:d4:
         a8:e5:2d:98:0e:70:a1:59:9b:61:a3:4f:2b:cf:3e:a4:26:0a:
         9c:ea:3a:68:ff:b2:cb:74:68:af:c1:98:36:f2:44:99:50:73:
         94:e8:93:9e:9d:be:e5:ed:75:29:68:e0:4f:f8:cf:22:d1:c3:
         b8:91:b2:58:5c:49:cc:53:3a:de:5c:9f:2a:34:34:e2:07:64:
         26:ea:22:7a:9d:80:f3:e7:2b:4d:c5:af:5b:4f:01:78:ee:30:
         9b:df:98:ff:c6:ad:33:64:fa:e1:a6:fe:ce:44:ad:c5:db:29:
         d5:2f:da:3f:bc:fa:74:c8:69:6b:cf:28:ba:44:f4:19:b3:66:
         c3:d5:c8:65:59:e4:0b:fb:85:2a:25:be:d6:c2:77:1e:98:bc:
         94:b8:76:0b:c8:01:5a:fd:43:89:a2:bd:1c:bd:2f:db:85:95:
         04:c1:1c:d0:52:cb:6f:b4:14:bd:13:c7:6f:38:3b:94:49:e7:
         3f:0a:48:22:21:5e:54:c6:4e:17:ba:a6:91:3f:12:95:9c:ce:
         32:3f:3b:4e:df:17:81:23:46:b0:8c:22:29:02:c9:94:65:27:
         6d:5e:ea:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:18:05 2026 by rpki-client