Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36825D0/E93D27AAC7C411EC906F94DBF1222468/IhRVkFuxmsTjjt3avWyqg1KbNE8.mft
File:                     IhRVkFuxmsTjjt3avWyqg1KbNE8.mft (raw, json)
Hash identifier:          5PyWzqlgTHQXTu5RXztXo/18Xq0gNORi3Xwc91FVa58=
Subject key identifier:   13:E7:09:CE:13:41:26:4F:8F:27:14:74:1F:1E:9F:2E:90:FC:F3:64
Authority key identifier: 22:14:55:90:5B:B1:9A:C4:E3:8E:DD:DA:BD:6C:AA:83:52:9B:34:4F
Certificate issuer:       /CN=F36825D0AF/serialNumber=221455905BB19AC4E38EDDDABD6CAA83529B344F
Certificate serial:       05AB
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/IhRVkFuxmsTjjt3avWyqg1KbNE8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36825D0/E93D27AAC7C411EC906F94DBF1222468/IhRVkFuxmsTjjt3avWyqg1KbNE8.mft
Manifest number:          05A9
Signing time:             Mon 02 Mar 2026 01:59:44 +0000
Manifest this update:     Mon 02 Mar 2026 01:59:43 +0000
Manifest next update:     Wed 04 Mar 2026 01:59:43 +0000
Files and hashes:         1: IhRVkFuxmsTjjt3avWyqg1KbNE8.crl (hash: DssH8ePk7++sbgz2gBbQpLlLb9R9Z7B37MExGS5rOKI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36825D0/E93D27AAC7C411EC906F94DBF1222468/IhRVkFuxmsTjjt3avWyqg1KbNE8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36825D0/E93D27AAC7C411EC906F94DBF1222468/IhRVkFuxmsTjjt3avWyqg1KbNE8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/IhRVkFuxmsTjjt3avWyqg1KbNE8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1451 (0x5ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36825D0AF, serialNumber=221455905BB19AC4E38EDDDABD6CAA83529B344F
        Validity
            Not Before: Mar  2 01:59:43 2026 GMT
            Not After : Mar  4 01:59:43 2026 GMT
        Subject: CN=69a4ef0f-9a17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:bb:aa:c8:20:36:98:e9:41:a0:f9:5f:01:ab:
                    03:ec:51:7d:98:af:ea:bb:9f:17:b5:fe:8e:a8:20:
                    c8:37:4c:49:07:b3:86:b7:af:6d:5e:87:77:94:71:
                    1b:55:2d:3a:3c:79:0e:41:dc:10:8c:1d:b3:53:33:
                    17:2f:77:a7:0c:64:0c:64:41:79:17:93:83:94:94:
                    12:98:94:cd:30:f0:16:d0:7a:e4:83:e9:14:d6:74:
                    44:15:91:e8:b3:9f:61:db:63:5b:4b:26:9a:b2:53:
                    67:33:08:6d:a9:d7:51:54:3b:b5:e3:98:e8:ae:e9:
                    50:62:4d:0f:f0:0a:50:42:3f:4c:4a:b4:ac:3d:cb:
                    cc:ec:34:6a:36:3e:0f:ab:27:52:ac:83:62:f3:dc:
                    b1:41:19:c1:6c:59:e0:18:a1:38:ca:b5:53:1c:f0:
                    93:ce:f0:d3:9c:eb:52:c1:f1:35:04:0e:d5:bf:8f:
                    1a:ef:fc:6a:80:8e:58:da:a8:3b:7e:51:99:a6:89:
                    15:12:f7:b8:61:cd:62:5f:29:46:e3:81:1c:66:4b:
                    79:2b:ce:03:ee:03:d0:6a:80:fd:66:82:72:44:bd:
                    0f:17:e2:11:ff:c3:5f:7a:44:bf:35:e9:a5:fb:fa:
                    9c:3d:ac:b1:30:43:7f:3a:36:6c:6b:9d:8e:d4:c3:
                    46:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:E7:09:CE:13:41:26:4F:8F:27:14:74:1F:1E:9F:2E:90:FC:F3:64
            X509v3 Authority Key Identifier:
                keyid:22:14:55:90:5B:B1:9A:C4:E3:8E:DD:DA:BD:6C:AA:83:52:9B:34:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36825D0/E93D27AAC7C411EC906F94DBF1222468/IhRVkFuxmsTjjt3avWyqg1KbNE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/IhRVkFuxmsTjjt3avWyqg1KbNE8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36825D0/E93D27AAC7C411EC906F94DBF1222468/IhRVkFuxmsTjjt3avWyqg1KbNE8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:eb:b1:69:03:81:c4:09:fb:aa:0d:02:f4:08:b3:2b:15:03:
         65:a9:11:f8:53:e7:0c:aa:7c:60:c3:70:71:19:df:49:73:86:
         82:45:14:60:c2:4a:d8:11:fd:38:11:1f:6f:3a:14:a2:3d:af:
         b3:2d:24:84:58:ac:6c:ce:06:46:f3:34:3b:87:6f:25:f3:33:
         75:0a:6d:4c:72:59:7b:79:1a:6e:01:d0:ca:c2:ae:5f:b6:4e:
         91:46:f8:4d:c8:10:70:51:ed:59:ed:d5:8c:7b:fa:e1:59:5d:
         4b:71:0d:b9:57:98:78:89:02:5d:75:d3:ca:9e:4f:c0:cd:90:
         0f:69:57:4c:d9:52:29:93:de:9b:a4:26:d0:0b:ca:1e:df:9d:
         92:61:ee:fe:1e:8d:b1:e8:1c:44:cb:3f:eb:9f:0f:ad:7b:38:
         7f:ef:95:bb:47:32:57:5e:55:cc:d2:ea:b0:e1:c1:a9:41:50:
         37:ef:21:7a:f5:63:bf:c8:8c:dc:e4:2a:8e:b2:d2:40:47:a2:
         7f:ca:91:10:e6:02:04:0c:4e:c1:65:3d:cc:31:a1:eb:df:b9:
         3f:56:80:61:b7:cc:f9:8a:6e:d8:ec:e7:5c:bf:20:3d:83:a8:
         09:7f:59:af:d3:58:50:7f:55:3c:17:b3:68:f0:18:3f:f8:63:
         0e:8b:0d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:16:30 2026 by rpki-client