Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3690D01/1C287B8C637E11EEB7B0817C4AD9E6FC/g9HRV2Bl4FAfLXR0TVFF001qcqo.mft
File:                     g9HRV2Bl4FAfLXR0TVFF001qcqo.mft (raw, json)
Hash identifier:          k2gMDXqdFzhWmQeqVgY5fZ4JSlRftjFa41j6uGcHXPQ=
Subject key identifier:   52:06:54:95:23:03:32:27:47:99:50:7E:77:4E:19:BC:BC:52:B3:58
Authority key identifier: 83:D1:D1:57:60:65:E0:50:1F:2D:74:74:4D:51:45:D3:4D:6A:72:AA
Certificate issuer:       /CN=F3690D01AF/serialNumber=83D1D1576065E0501F2D74744D5145D34D6A72AA
Certificate serial:       038A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/g9HRV2Bl4FAfLXR0TVFF001qcqo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3690D01/1C287B8C637E11EEB7B0817C4AD9E6FC/g9HRV2Bl4FAfLXR0TVFF001qcqo.mft
Manifest number:          0389
Signing time:             Mon 02 Mar 2026 02:37:40 +0000
Manifest this update:     Mon 02 Mar 2026 02:37:39 +0000
Manifest next update:     Wed 04 Mar 2026 02:37:39 +0000
Files and hashes:         1: g9HRV2Bl4FAfLXR0TVFF001qcqo.crl (hash: 5mfh4nkC7BakX7JjPcRihnPxZ2owpjzrkiDxRFtO2l4=)
                          2: B5BAB51C637E11EEBB2D437E4AD9E6FC.roa (hash: lTgo88jgYIBRxqWVkQ/cnQHAMBRJfU2wE+z/YeI8Onc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3690D01/1C287B8C637E11EEB7B0817C4AD9E6FC/g9HRV2Bl4FAfLXR0TVFF001qcqo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3690D01/1C287B8C637E11EEB7B0817C4AD9E6FC/g9HRV2Bl4FAfLXR0TVFF001qcqo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/g9HRV2Bl4FAfLXR0TVFF001qcqo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 906 (0x38a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3690D01AF, serialNumber=83D1D1576065E0501F2D74744D5145D34D6A72AA
        Validity
            Not Before: Mar  2 02:37:39 2026 GMT
            Not After : Mar  4 02:37:39 2026 GMT
        Subject: CN=69a4f7f4-bf43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:6d:c2:fe:55:9a:31:c9:7f:a4:37:fa:0e:f8:
                    04:33:0a:46:6d:31:35:56:be:dc:79:79:73:3f:e2:
                    21:2e:d6:44:73:11:95:cc:71:8c:e7:ce:7f:10:59:
                    ea:9d:ab:c8:9b:a9:78:d7:1b:bd:13:8d:d4:51:ef:
                    64:f1:e6:9f:1c:ff:2a:ff:92:ed:66:86:90:cc:9a:
                    9d:57:94:dc:ba:70:83:20:01:f8:32:aa:1e:f1:9f:
                    8a:14:e0:04:6a:af:a1:0a:12:52:9e:24:bb:82:73:
                    ea:c9:8b:d5:70:ae:c8:a6:e5:c3:70:0e:b2:46:99:
                    2e:9d:4b:13:5a:d4:2d:61:c9:dd:2b:85:a7:a1:50:
                    51:ac:44:7e:b6:33:1e:aa:80:a3:3f:1d:72:a0:e6:
                    cd:d1:10:2d:19:3b:c4:99:71:5c:15:cf:17:d8:2e:
                    8c:f5:2a:54:a7:1f:0f:d2:ed:ff:06:bd:8f:12:62:
                    2e:eb:ed:e2:21:bc:e9:70:c6:68:ed:61:18:68:57:
                    66:67:b2:ea:7f:b8:e2:f1:aa:3d:fd:9b:c0:ba:62:
                    25:96:b8:1b:e4:67:79:71:40:47:f9:d8:07:0a:84:
                    54:31:57:f4:8f:65:ab:3b:ec:1e:67:0b:d5:1d:d3:
                    74:34:68:32:3f:70:29:13:c8:4f:d0:80:b5:72:f7:
                    ef:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:06:54:95:23:03:32:27:47:99:50:7E:77:4E:19:BC:BC:52:B3:58
            X509v3 Authority Key Identifier:
                keyid:83:D1:D1:57:60:65:E0:50:1F:2D:74:74:4D:51:45:D3:4D:6A:72:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3690D01/1C287B8C637E11EEB7B0817C4AD9E6FC/g9HRV2Bl4FAfLXR0TVFF001qcqo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/g9HRV2Bl4FAfLXR0TVFF001qcqo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3690D01/1C287B8C637E11EEB7B0817C4AD9E6FC/g9HRV2Bl4FAfLXR0TVFF001qcqo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:aa:52:45:26:19:0e:89:99:d5:75:c2:b6:60:44:68:9d:34:
         1a:50:79:0c:d9:d2:e9:f2:0f:eb:a7:6a:19:bb:91:e7:ae:59:
         7f:78:0c:5c:b3:b5:5b:be:4c:0b:a3:d1:58:cd:3a:c1:f9:13:
         0e:80:55:eb:ee:24:98:0a:58:c9:c3:8c:60:16:77:da:70:44:
         38:f5:43:d3:d8:44:fd:98:24:37:90:50:13:24:07:47:d2:ed:
         eb:e3:2e:be:38:86:42:83:a6:e2:9a:45:f9:6e:5a:45:6f:95:
         46:6b:bb:22:b0:09:d5:63:02:ff:bc:81:1c:3a:ad:74:05:63:
         14:09:f1:20:c8:ab:47:29:fe:23:b3:14:1d:2b:1d:e9:ed:63:
         a2:b1:27:72:3b:b6:5d:c9:e8:4b:4a:c6:43:bc:4d:22:0b:2f:
         b7:6e:75:50:53:2c:66:94:a8:d4:cb:36:2f:66:2c:e3:e0:c5:
         21:9a:da:97:f6:fd:a9:e8:03:0c:73:68:55:21:87:51:88:ad:
         8e:1a:51:ae:d9:ff:a0:94:83:61:57:d7:c2:7f:af:c3:1c:5b:
         5e:49:49:b6:2f:8a:6c:2a:22:bb:75:0f:1c:57:c7:fd:98:31:
         82:08:01:9e:e6:06:1c:bf:39:7b:74:20:22:b8:4a:9a:ef:74:
         a9:0f:7d:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:12:37 2026 by rpki-client