Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3691854/5CFF4AE071AD11EEA2EC74334AD9E6FC/5_gJqmoxZrjFrsmPz6j2VQ4P6F0.mft
File:                     5_gJqmoxZrjFrsmPz6j2VQ4P6F0.mft (raw, json)
Hash identifier:          ANGW0eg3oVJ/Gt7wjqpXWh089QNu9h+gjkZ3z5G1ex8=
Subject key identifier:   E0:65:DD:6E:BC:52:B5:06:81:A9:CD:C9:5B:32:8A:B7:48:39:5A:9F
Authority key identifier: E7:F8:09:AA:6A:31:66:B8:C5:AE:C9:8F:CF:A8:F6:55:0E:0F:E8:5D
Certificate issuer:       /CN=F3691854AF/serialNumber=E7F809AA6A3166B8C5AEC98FCFA8F6550E0FE85D
Certificate serial:       0373
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/5_gJqmoxZrjFrsmPz6j2VQ4P6F0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3691854/5CFF4AE071AD11EEA2EC74334AD9E6FC/5_gJqmoxZrjFrsmPz6j2VQ4P6F0.mft
Manifest number:          0373
Signing time:             Sun 01 Mar 2026 02:38:49 +0000
Manifest this update:     Sun 01 Mar 2026 02:38:49 +0000
Manifest next update:     Tue 03 Mar 2026 02:38:49 +0000
Files and hashes:         1: 5_gJqmoxZrjFrsmPz6j2VQ4P6F0.crl (hash: wSPQr1fvYmS3Qb9hGxf8PTeRKX/Xt/7URVDYmYOKKCI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3691854/5CFF4AE071AD11EEA2EC74334AD9E6FC/5_gJqmoxZrjFrsmPz6j2VQ4P6F0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3691854/5CFF4AE071AD11EEA2EC74334AD9E6FC/5_gJqmoxZrjFrsmPz6j2VQ4P6F0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/5_gJqmoxZrjFrsmPz6j2VQ4P6F0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 03 Mar 2026 00:07:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 883 (0x373)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3691854AF, serialNumber=E7F809AA6A3166B8C5AEC98FCFA8F6550E0FE85D
        Validity
            Not Before: Mar  1 02:38:49 2026 GMT
            Not After : Mar  3 02:38:49 2026 GMT
        Subject: CN=69a3a6b9-a44d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:3b:81:2a:c3:de:2c:24:33:10:02:81:2e:9e:
                    d6:aa:e8:5c:db:f2:07:0c:88:c0:37:51:d8:bb:c6:
                    08:06:51:d1:a6:f7:dd:10:b5:43:87:37:19:8f:55:
                    13:6a:2f:32:c3:4d:03:49:20:09:7a:56:6f:6f:eb:
                    7b:19:68:22:79:67:32:0f:d3:55:c6:28:4c:18:ec:
                    fa:f1:71:b4:8d:b5:2f:e1:49:3c:67:9a:fc:d6:13:
                    06:48:f6:b0:8a:59:4a:10:14:5a:84:72:df:60:2c:
                    d6:f3:d2:87:e4:61:2e:c2:2e:28:ef:c5:5c:2f:32:
                    5c:0c:64:48:4b:41:55:4c:3a:aa:9b:cb:87:ec:15:
                    36:29:92:17:d3:df:03:0e:95:f2:4e:db:20:7d:51:
                    66:54:88:5f:1c:92:08:12:71:82:18:55:9c:a7:6f:
                    4a:bf:68:94:3b:b7:27:07:ee:50:65:32:0c:85:ea:
                    74:15:2c:9b:4c:a2:ba:e0:a6:45:8d:a0:8d:c8:6c:
                    ae:49:99:c1:13:19:70:ac:0a:23:bf:44:b3:2a:b5:
                    35:ba:35:57:86:71:e8:3f:a9:b7:fa:d2:d8:c6:65:
                    7d:50:68:f0:bd:09:9c:ea:96:c8:0f:3e:08:28:41:
                    0b:e3:1b:1d:73:64:1b:e7:01:61:41:3c:44:7d:86:
                    5f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:65:DD:6E:BC:52:B5:06:81:A9:CD:C9:5B:32:8A:B7:48:39:5A:9F
            X509v3 Authority Key Identifier:
                keyid:E7:F8:09:AA:6A:31:66:B8:C5:AE:C9:8F:CF:A8:F6:55:0E:0F:E8:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3691854/5CFF4AE071AD11EEA2EC74334AD9E6FC/5_gJqmoxZrjFrsmPz6j2VQ4P6F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/5_gJqmoxZrjFrsmPz6j2VQ4P6F0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3691854/5CFF4AE071AD11EEA2EC74334AD9E6FC/5_gJqmoxZrjFrsmPz6j2VQ4P6F0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:b6:43:4b:2d:a7:9f:70:2f:f7:4f:4e:0a:b2:7e:88:94:1e:
         eb:2a:ce:dd:fb:fc:5e:76:8f:95:f2:dc:78:b7:ea:c5:50:07:
         63:d1:5d:02:1c:4e:99:c4:fa:e6:e0:8d:79:39:a4:36:dc:e0:
         d5:d4:3c:4c:b8:bc:fc:88:00:86:65:96:21:b4:78:5d:db:85:
         05:66:66:73:47:2e:18:8c:ca:2d:72:80:2f:19:c3:de:59:fc:
         81:23:73:21:b8:4e:a7:a8:0f:cd:70:11:22:53:22:d9:2d:ab:
         f4:26:3f:76:ca:08:78:8c:4c:c6:da:4c:06:55:a2:a0:f1:13:
         a2:94:0a:ff:f6:d6:b8:e5:d6:e0:c0:00:70:19:11:fb:9e:00:
         58:13:a0:67:c3:c1:45:5e:27:1c:23:19:54:46:51:81:2f:d7:
         25:41:11:b3:d4:ba:a4:8e:27:af:07:39:df:b3:93:ce:dc:60:
         a7:6b:aa:28:2f:19:9a:29:cc:1b:34:8d:19:57:c9:f0:c3:07:
         76:9c:bf:35:a2:51:be:ea:fa:82:f0:af:40:7a:c0:25:7f:36:
         74:3b:6b:ca:9f:2a:85:ad:5a:3d:5e:72:6e:9d:34:56:6a:f1:
         b7:c4:e5:62:8a:ad:dd:6b:a5:08:33:e3:3e:bd:10:fd:a2:f6:
         29:65:7a:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:16:08 2026 by rpki-client