Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/SoPzGxsGBMptC3KkU9qj61h7TII.mft
File:                     SoPzGxsGBMptC3KkU9qj61h7TII.mft (raw, json)
Hash identifier:          j/HCHxRdwHnliWwi02JAC1DTaHLSuULOHETI1hxj4h8=
Subject key identifier:   21:8D:33:46:91:58:0B:4C:01:E6:FF:5D:50:D0:A9:AA:05:BE:4A:F5
Authority key identifier: 4A:83:F3:1B:1B:06:04:CA:6D:0B:72:A4:53:DA:A3:EB:58:7B:4C:82
Certificate issuer:       /CN=F3681ED0AF/serialNumber=4A83F31B1B0604CA6D0B72A453DAA3EB587B4C82
Certificate serial:       046D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SoPzGxsGBMptC3KkU9qj61h7TII.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/SoPzGxsGBMptC3KkU9qj61h7TII.mft
Manifest number:          045E
Signing time:             Mon 02 Mar 2026 02:23:41 +0000
Manifest this update:     Mon 02 Mar 2026 02:23:41 +0000
Manifest next update:     Wed 04 Mar 2026 02:23:41 +0000
Files and hashes:         1: SoPzGxsGBMptC3KkU9qj61h7TII.crl (hash: ZGWnJVMn4zdjdTRzDWw3BC7aDrT/ETwzUHj6Y9bwQKM=)
                          2: C644833AEE7111EE86F7F361775412E6.roa (hash: YgdlYAvq9L3YlpIV33voCNPfR5sCeCWFkjxpZfRsE/k=)
                          3: 7B89F0F65C1011F097764BA7DAE4EC9C.roa (hash: eGy/v5dJ9Sg7LBFixJArYusJNOZkmFriL3Cy5EJmVsc=)
                          4: BFD118C27C3E11F0A02173AEDAE4EC9C.roa (hash: E8rOx5Kz5JNVd/9IEaiBcjxCcyJDlnKMUqqptEDdwRw=)
                          5: 42CC1EC00B7611EEA5D28A444AD9E6FC.roa (hash: hsH3WbP2I/ts2EY2aQeTrcaXJgp89zEB64yilwHc5pg=)
                          6: 1E00E01A052911EE84BBD2454AD9E6FC.roa (hash: sJsPXhS2u3JarGDtOh1UZa0tPJmz8vwB7/YeLKri/dk=)
                          7: F8481206047B11EE91F2EF354AD9E6FC.roa (hash: jtUAjy0+9QV2iQ02jzkoPCkRiaIb/F60j3I68U9pgH4=)
                          8: F65930865B2911F0A6F411CCDAE4EC9C.roa (hash: zlBIS1j6PkXW4nIJqeYYZE1QxvGn2R6vJr3qJUI1Apc=)
                          9: C210ED2E064611F094E66494762E951A.roa (hash: Gw9d4UydYI1TKn6YtgmxyrXffZXD7vcLeB5cryG7IG4=)
                          10: F4E7AB82052811EE94115E454AD9E6FC.roa (hash: 0f6Udr5nVgdqIgPgxaXYb0TifWritIk3wQmsNXYsjss=)
                          11: 1587E6CCEE7111EEAAFBB25C775412E6.roa (hash: zasoVhr4ZDA3BPJ+ug5ooyH3/rY2lwS6n6p8BUEgx2w=)
                          12: 4F0B564AF51511EEB208C151775412E6.roa (hash: XNyDHYdBwPvc7NbnPS7pTjwqkoohEdJw312l57VSDB8=)
                          13: 4A7830A0D18B11EFAB9E6B88762E951A.roa (hash: xV745XWxYsFhNII926E/fN4gSuSPSdyN3viLNfdZy9M=)
                          14: 31CFB30C052C11EEAC0EDC4E4AD9E6FC.roa (hash: 707c2EgzG32Mlw18CbzTHauUb9G8+7v2J+8ka2UNIbA=)
                          15: 506B37B0FD0A11EEA3B5DB34017001B1.roa (hash: 12EkqcvUqaX3EcpZliJ64g6Wrfs7WAZ3LR6j5D262RI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/SoPzGxsGBMptC3KkU9qj61h7TII.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/SoPzGxsGBMptC3KkU9qj61h7TII.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SoPzGxsGBMptC3KkU9qj61h7TII.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1133 (0x46d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3681ED0AF, serialNumber=4A83F31B1B0604CA6D0B72A453DAA3EB587B4C82
        Validity
            Not Before: Mar  2 02:23:41 2026 GMT
            Not After : Mar  4 02:23:41 2026 GMT
        Subject: CN=69a4f4ad-790d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:2d:22:20:aa:5d:34:ad:a3:3e:70:37:cc:82:
                    3f:0d:d1:03:44:6c:c1:c2:3f:a2:f2:da:36:94:05:
                    4e:f6:8b:7a:aa:4d:b2:39:f1:96:ec:ff:8c:14:11:
                    80:99:cb:cf:d3:08:35:17:e8:5a:8c:45:93:5a:be:
                    f4:3e:d4:35:d6:69:83:eb:5d:71:4a:67:e4:77:8d:
                    b4:8e:2e:21:09:fd:26:3d:77:19:81:35:90:62:3c:
                    a7:64:94:5f:6d:75:10:6d:d2:9e:8c:fc:f6:f5:9e:
                    9d:7c:9d:3c:c2:ef:7e:2d:91:8f:ea:2b:3f:a7:86:
                    1a:30:b3:be:63:db:a8:d3:5c:c8:b0:c4:db:fb:06:
                    0f:b2:37:87:99:2d:14:82:38:f8:92:36:43:b0:ff:
                    e5:56:7a:6f:d4:87:42:b2:40:13:2e:79:5d:2e:c8:
                    65:6b:ed:73:e6:bf:34:af:1f:99:ff:b4:69:41:b1:
                    31:99:6e:d9:06:ca:64:aa:d6:72:1f:84:4d:4a:8f:
                    ff:74:4d:be:9c:1e:3a:1d:46:6a:b7:07:1a:ff:18:
                    0f:03:95:2e:24:c4:f2:4e:84:d0:02:b5:d6:4c:75:
                    3b:6c:42:e3:3d:3a:15:2b:3a:40:4c:8c:39:5c:de:
                    a7:09:a7:61:c0:67:aa:8a:47:eb:52:64:70:ef:9f:
                    33:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:8D:33:46:91:58:0B:4C:01:E6:FF:5D:50:D0:A9:AA:05:BE:4A:F5
            X509v3 Authority Key Identifier:
                keyid:4A:83:F3:1B:1B:06:04:CA:6D:0B:72:A4:53:DA:A3:EB:58:7B:4C:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/SoPzGxsGBMptC3KkU9qj61h7TII.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SoPzGxsGBMptC3KkU9qj61h7TII.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/SoPzGxsGBMptC3KkU9qj61h7TII.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:f6:04:81:19:ef:eb:fd:e3:6e:35:83:36:04:9b:c3:e2:ef:
         e7:68:b6:ab:70:2c:17:34:cb:a8:57:0b:0b:4b:e0:81:2a:85:
         15:c6:05:b8:70:98:ae:b8:e6:b3:66:b6:8c:ad:9f:f7:0e:54:
         20:d1:4c:30:32:49:43:36:11:9f:91:0f:a9:45:1c:a2:84:dc:
         01:1a:10:06:62:19:81:7c:28:2c:8f:38:f1:f9:15:fd:dc:3f:
         24:d9:eb:b6:ca:c0:49:3e:28:5b:2d:8c:4f:ad:29:31:f5:52:
         1d:6b:fa:28:40:64:fd:d5:c2:2e:ae:48:6e:4b:ee:75:6f:c3:
         a7:4e:e7:ae:e0:ff:76:b3:7d:52:b1:26:1a:65:f0:67:80:09:
         17:9c:9f:73:37:15:9d:da:d2:61:a0:74:1b:1b:f5:8f:d8:95:
         74:99:c4:6d:2f:8c:b2:af:e0:11:74:61:1c:6a:40:fe:16:33:
         19:29:da:94:24:c9:84:f4:69:91:54:e8:c1:b6:48:bb:14:48:
         f2:a1:54:c1:12:b5:b0:18:f3:94:37:33:2c:16:0b:7e:52:8e:
         f8:59:d7:c1:5b:7d:14:fc:c6:2b:56:40:40:e9:77:b2:f3:fa:
         a0:50:a5:cd:78:8a:6d:8b:0c:f6:89:ce:89:c6:08:b4:05:f4:
         a3:bb:6e:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:35:03 2026 by rpki-client