Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36828EE/939823AA53F311EF8EE58446762E951A/8hDREntBqAZ-iuVwf0PSLggdxmU.mft
File:                     8hDREntBqAZ-iuVwf0PSLggdxmU.mft (raw, json)
Hash identifier:          kZy5SCzRHvTcRuBRsrqH9iVRppvldOzn5EFx+zX+MG0=
Subject key identifier:   E1:34:CE:67:1A:E8:12:41:A3:AF:B1:56:A1:7C:56:98:CE:FE:6C:2C
Authority key identifier: F2:10:D1:12:7B:41:A8:06:7E:8A:E5:70:7F:43:D2:2E:08:1D:C6:65
Certificate issuer:       /CN=F36828EEAF/serialNumber=F210D1127B41A8067E8AE5707F43D22E081DC665
Certificate serial:       024F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/8hDREntBqAZ-iuVwf0PSLggdxmU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36828EE/939823AA53F311EF8EE58446762E951A/8hDREntBqAZ-iuVwf0PSLggdxmU.mft
Manifest number:          024E
Signing time:             Mon 02 Mar 2026 03:01:22 +0000
Manifest this update:     Mon 02 Mar 2026 03:01:22 +0000
Manifest next update:     Wed 04 Mar 2026 03:01:22 +0000
Files and hashes:         1: 8hDREntBqAZ-iuVwf0PSLggdxmU.crl (hash: danHgm0gy+bGc73z+mQuiPHI9qneXEsCYDkO2dzZK1I=)
                          2: 43556232564A11EF9942095B762E951A.roa (hash: k0gU6QmfsEjV/HHlrAtYyJc8G8bTw7CikYjZpypK4Wk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36828EE/939823AA53F311EF8EE58446762E951A/8hDREntBqAZ-iuVwf0PSLggdxmU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36828EE/939823AA53F311EF8EE58446762E951A/8hDREntBqAZ-iuVwf0PSLggdxmU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/8hDREntBqAZ-iuVwf0PSLggdxmU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 591 (0x24f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36828EEAF, serialNumber=F210D1127B41A8067E8AE5707F43D22E081DC665
        Validity
            Not Before: Mar  2 03:01:22 2026 GMT
            Not After : Mar  4 03:01:22 2026 GMT
        Subject: CN=69a4fd82-fff4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:23:73:ef:ee:bc:01:30:09:5c:8a:96:56:50:
                    ca:2b:85:07:82:81:c9:40:0f:e0:df:83:cd:c4:51:
                    3f:60:8d:f7:e5:10:70:f8:77:a2:dc:18:b3:6b:66:
                    2d:61:88:30:4a:bb:91:a9:57:23:f9:a3:ef:d0:1e:
                    49:ed:51:fb:87:e5:e7:9b:8b:35:7b:72:e6:2e:32:
                    a7:7b:e9:3f:66:27:09:ae:b5:67:12:c9:b4:ee:0d:
                    92:50:12:89:f5:22:1f:be:e1:db:fe:22:d3:6d:1a:
                    2f:99:a7:59:1a:ac:7a:26:63:dc:ae:97:13:ea:68:
                    31:78:85:bc:c0:76:f9:bf:4b:ba:eb:19:4b:02:90:
                    b4:7a:0c:e9:49:ab:84:f5:f9:d4:81:32:e7:63:91:
                    fb:1b:bd:fa:17:22:75:3b:b8:ec:4b:33:78:3d:b0:
                    05:97:1a:fa:61:f3:14:c4:39:31:9b:29:21:4a:1a:
                    7b:c4:8e:8d:48:2f:9f:57:65:0a:62:3a:4f:c3:89:
                    01:9a:4c:5a:dc:d9:aa:24:85:bc:4a:17:dd:be:82:
                    72:ec:cd:06:66:49:3c:a8:35:4f:c2:3f:86:ba:1e:
                    bc:d1:d6:4b:88:f3:3f:11:05:b1:19:7b:c9:f3:97:
                    4d:a3:70:0b:a4:92:ce:c6:4c:fd:59:91:53:30:78:
                    ae:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:34:CE:67:1A:E8:12:41:A3:AF:B1:56:A1:7C:56:98:CE:FE:6C:2C
            X509v3 Authority Key Identifier:
                keyid:F2:10:D1:12:7B:41:A8:06:7E:8A:E5:70:7F:43:D2:2E:08:1D:C6:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36828EE/939823AA53F311EF8EE58446762E951A/8hDREntBqAZ-iuVwf0PSLggdxmU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/8hDREntBqAZ-iuVwf0PSLggdxmU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36828EE/939823AA53F311EF8EE58446762E951A/8hDREntBqAZ-iuVwf0PSLggdxmU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:61:98:71:56:89:e5:19:9c:68:d1:ae:69:32:bc:73:a0:df:
         b7:c3:3d:e8:3e:b7:1e:d5:79:db:b7:06:3f:dd:0b:37:c6:cc:
         5c:d1:6d:61:6b:97:a6:1b:13:c0:72:d8:15:3b:17:bb:cd:1c:
         0b:90:61:fd:f9:d3:4d:3c:c0:27:5a:6b:41:21:e5:23:50:08:
         4c:68:6b:0e:5c:bc:1c:6d:b0:af:16:e0:ea:1f:f1:a3:16:55:
         f2:a3:2e:2d:56:0f:95:47:2d:f7:2f:b6:3d:c5:0a:3e:97:c1:
         ad:db:0e:5e:1f:59:b0:11:92:72:ce:5e:f3:9e:ba:af:2c:70:
         ae:4a:bb:6a:b7:51:bf:1e:08:e9:e4:4b:c6:29:36:89:54:96:
         cf:9f:f6:e8:d3:63:b3:6c:9b:84:a7:4f:b1:cf:d4:75:1c:c9:
         05:73:2c:7d:94:a0:fa:44:0d:26:d5:bd:42:fd:f4:dc:31:74:
         bc:96:6e:5e:bf:0e:ab:9f:b2:72:1a:9d:ad:d1:75:40:00:3d:
         8f:60:db:fe:b9:bb:8b:0f:27:59:44:3c:01:0b:6f:9e:eb:c2:
         75:3e:8d:56:f4:dd:df:ff:b5:83:0c:41:7a:d6:7c:42:99:fc:
         3c:e7:54:f1:54:7b:27:06:ea:0b:fb:40:f6:ad:9e:4d:41:e5:
         51:aa:e1:ea
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAk8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODI4RUVBRjExMC8GA1UEBRMoRjIxMEQxMTI3QjQxQTgwNjdFOEFFNTcwN0Y0M0Qy
MkUwODFEQzY2NTAeFw0yNjAzMDIwMzAxMjJaFw0yNjAzMDQwMzAxMjJaMBgxFjAU
BgNVBAMTDTY5YTRmZDgyLWZmZjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDVI3Pv7rwBMAlcipZWUMorhQeCgclAD+Dfg83EUT9gjfflEHD4d6LcGLNr
Zi1hiDBKu5GpVyP5o+/QHkntUfuH5eebizV7cuYuMqd76T9mJwmutWcSybTuDZJQ
Eon1Ih++4dv+ItNtGi+Zp1karHomY9yulxPqaDF4hbzAdvm/S7rrGUsCkLR6DOlJ
q4T1+dSBMudjkfsbvfoXInU7uOxLM3g9sAWXGvph8xTEOTGbKSFKGnvEjo1IL59X
ZQpiOk/DiQGaTFrc2aokhbxKF92+gnLszQZmSTyoNU/CP4a6HrzR1kuI8z8RBbEZ
e8nzl02jcAukks7GTP1ZkVMweK6TAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU4TTO
ZxroEkGjr7FWoXxWmM7+bCwwHwYDVR0jBBgwFoAU8hDREntBqAZ+iuVwf0PSLggd
xmUwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyOEVFLzkzOTgyM0FBNTNGMzExRUY4RUU1ODQ0Njc2MkU5NTFBLzhoRFJF
bnRCcUFaLWl1VndmMFBTTGdnZHhtVS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzhoRFJFbnRCcUFaLWl1VndmMFBTTGdnZHhtVS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2ODI4RUUvOTM5ODIzQUE1M0YzMTFFRjhFRTU4NDQ2NzYy
RTk1MUEvOGhEUkVudEJxQVotaXVWd2YwUFNMZ2dkeG1VLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCMYZhxVonlGZxo0a5pMrxzoN+3wz3o
Prce1XnbtwY/3Qs3xsxc0W1ha5emGxPActgVOxe7zRwLkGH9+dNNPMAnWmtBIeUj
UAhMaGsOXLwcbbCvFuDqH/GjFlXyoy4tVg+VRy33L7Y9xQo+l8Gt2w5eH1mwEZJy
zl7znrqvLHCuSrtqt1G/Hgjp5EvGKTaJVJbPn/bo02OzbJuEp0+xz9R1HMkFcyx9
lKD6RA0m1b1C/fTcMXS8lm5evw6rn7JyGp2t0XVAAD2PYNv+ubuLDydZRDwBC2+e
68J1Po1W9N3f/7WDDEF61nxCmfw851TxVHsnBuoL+0D2rZ5NQeVRquHq
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:16:24 2026 by rpki-client