Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36836B1/450D8348404211EF9B82A592762E951A/dR0QfwWZOGZDhKNweOOFl5C6KNQ.mft
File:                     dR0QfwWZOGZDhKNweOOFl5C6KNQ.mft (raw, json)
Hash identifier:          IkDNBuEPRW0apeN8bCccrkChMOqQKh/ohz3g0mVSxwE=
Subject key identifier:   64:7C:D2:A6:17:15:79:91:64:77:98:57:58:DC:15:03:FB:AF:70:91
Authority key identifier: 75:1D:10:7F:05:99:38:66:43:84:A3:70:78:E3:85:97:90:BA:28:D4
Certificate issuer:       /CN=F36836B1AF/serialNumber=751D107F059938664384A37078E3859790BA28D4
Certificate serial:       0266
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/dR0QfwWZOGZDhKNweOOFl5C6KNQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36836B1/450D8348404211EF9B82A592762E951A/dR0QfwWZOGZDhKNweOOFl5C6KNQ.mft
Manifest number:          0265
Signing time:             Mon 02 Mar 2026 02:59:00 +0000
Manifest this update:     Mon 02 Mar 2026 02:59:00 +0000
Manifest next update:     Wed 04 Mar 2026 02:59:00 +0000
Files and hashes:         1: dR0QfwWZOGZDhKNweOOFl5C6KNQ.crl (hash: +UHvHCyICz4QmRsz/+pn03psi+59XliutwMdedlO8rI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36836B1/450D8348404211EF9B82A592762E951A/dR0QfwWZOGZDhKNweOOFl5C6KNQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36836B1/450D8348404211EF9B82A592762E951A/dR0QfwWZOGZDhKNweOOFl5C6KNQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/dR0QfwWZOGZDhKNweOOFl5C6KNQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 614 (0x266)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36836B1AF, serialNumber=751D107F059938664384A37078E3859790BA28D4
        Validity
            Not Before: Mar  2 02:59:00 2026 GMT
            Not After : Mar  4 02:59:00 2026 GMT
        Subject: CN=69a4fcf4-42f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:28:6c:d8:30:a1:9b:bf:4d:f2:4e:53:12:fa:
                    37:a3:c9:dd:fa:1b:de:29:24:5a:4a:bb:03:fa:6e:
                    9f:ab:c6:8d:a6:e6:58:51:f7:dc:74:e5:b3:35:e6:
                    cf:cf:e6:60:52:68:64:e5:1a:24:cd:5f:d1:8a:ee:
                    9f:9e:f4:51:1c:18:96:d1:18:15:bc:0c:00:1c:0d:
                    82:61:8b:23:6c:9a:34:d5:f9:ca:aa:fd:7b:c2:29:
                    9a:56:93:b0:c2:5f:46:10:e3:05:f8:92:1a:df:ca:
                    3d:b8:30:04:e1:52:a4:00:37:4a:75:2b:a8:93:ff:
                    0d:88:b5:48:a7:32:6a:7f:3a:14:d1:91:46:b3:97:
                    cb:48:e0:30:b1:36:f5:31:b9:7f:4f:22:6b:96:86:
                    94:83:50:42:7e:41:d5:c6:92:bc:43:d4:a2:26:06:
                    fa:25:34:ce:6e:e4:98:1c:40:bb:e6:10:26:db:c9:
                    c2:b8:0e:72:d6:f2:1f:9b:0c:12:fd:df:23:93:4c:
                    b2:4f:55:3e:70:f4:ab:c7:87:d0:ca:96:c4:74:c2:
                    70:f1:64:c9:67:78:b5:0d:ee:dc:c1:60:2e:58:63:
                    dd:56:a1:dc:90:d1:73:e9:99:58:39:d0:e9:00:58:
                    58:38:f0:40:f8:fb:fe:50:f0:d0:3c:a4:70:a3:25:
                    0d:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:7C:D2:A6:17:15:79:91:64:77:98:57:58:DC:15:03:FB:AF:70:91
            X509v3 Authority Key Identifier:
                keyid:75:1D:10:7F:05:99:38:66:43:84:A3:70:78:E3:85:97:90:BA:28:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36836B1/450D8348404211EF9B82A592762E951A/dR0QfwWZOGZDhKNweOOFl5C6KNQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/dR0QfwWZOGZDhKNweOOFl5C6KNQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36836B1/450D8348404211EF9B82A592762E951A/dR0QfwWZOGZDhKNweOOFl5C6KNQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:ee:d4:56:7d:59:71:87:4d:7b:c4:ac:36:c5:31:a1:7a:6d:
         f8:7c:be:f5:b7:40:91:5d:ec:94:d8:dd:b9:b2:64:56:a8:ed:
         7a:0f:d9:06:ee:69:56:f9:2e:9b:30:65:6e:60:b5:53:89:e3:
         b2:34:86:6e:43:e5:93:e5:03:79:97:e8:17:b4:12:78:6d:ce:
         97:4b:08:f9:67:d0:f5:68:50:d5:8f:a0:78:83:63:d5:92:bc:
         6f:14:bb:0e:10:6f:80:1f:7b:6a:be:f2:7b:0e:ad:d1:24:6a:
         b9:29:a0:88:89:74:97:47:a6:e4:a1:eb:0f:5a:1d:2f:f0:81:
         08:f0:33:3a:55:e8:bb:6d:76:75:28:9f:94:98:ca:46:64:28:
         56:59:9a:ff:a6:36:4a:18:01:de:4b:dd:50:3f:ba:b8:a4:6b:
         7e:f0:04:8d:ee:ee:dc:6c:a9:b1:fd:15:f2:9b:5d:ac:e3:32:
         4d:aa:bd:84:c2:d6:33:75:1c:05:7a:7c:31:86:e3:41:ea:7a:
         b4:65:98:87:6e:e5:56:89:b4:fd:48:eb:ed:ca:c5:1a:d1:e9:
         03:03:a5:ea:d6:b5:99:f6:38:cc:18:28:57:0b:a0:5b:ea:74:
         dd:7b:cc:dd:60:cf:4f:1c:19:10:f9:00:99:25:6c:fd:14:39:
         b6:d9:4a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:35:57 2026 by rpki-client