Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3692292/481A5F60912911EF838CED73762E951A/8nuTXzXgS4_qo5EN5fHi0jxeAHs.mft
File:                     8nuTXzXgS4_qo5EN5fHi0jxeAHs.mft (raw, json)
Hash identifier:          ibmBusz8QsCNurH1c2RsLFEraWuWESl4LcfrbngZUNw=
Subject key identifier:   1E:4C:D6:40:7F:41:54:5C:AC:95:8D:A8:43:BF:2A:BB:B0:EA:5F:E4
Authority key identifier: F2:7B:93:5F:35:E0:4B:8F:EA:A3:91:0D:E5:F1:E2:D2:3C:5E:00:7B
Certificate issuer:       /CN=F3692292AF/serialNumber=F27B935F35E04B8FEAA3910DE5F1E2D23C5E007B
Certificate serial:       01FE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/8nuTXzXgS4_qo5EN5fHi0jxeAHs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3692292/481A5F60912911EF838CED73762E951A/8nuTXzXgS4_qo5EN5fHi0jxeAHs.mft
Manifest number:          01FD
Signing time:             Mon 02 Mar 2026 03:09:30 +0000
Manifest this update:     Mon 02 Mar 2026 03:09:30 +0000
Manifest next update:     Wed 04 Mar 2026 03:09:30 +0000
Files and hashes:         1: 8nuTXzXgS4_qo5EN5fHi0jxeAHs.crl (hash: S+VP0vraKISaPLRlfqRagwnH/IIZZh4ROADvsQ7cl7M=)
                          2: F56FFE86912911EFAEEF2B78762E951A.roa (hash: CXZk+/Is0OxggDK9eJOwdsU1YQzXuO6D+yTuqbBLE28=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3692292/481A5F60912911EF838CED73762E951A/8nuTXzXgS4_qo5EN5fHi0jxeAHs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3692292/481A5F60912911EF838CED73762E951A/8nuTXzXgS4_qo5EN5fHi0jxeAHs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/8nuTXzXgS4_qo5EN5fHi0jxeAHs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 510 (0x1fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3692292AF, serialNumber=F27B935F35E04B8FEAA3910DE5F1E2D23C5E007B
        Validity
            Not Before: Mar  2 03:09:30 2026 GMT
            Not After : Mar  4 03:09:30 2026 GMT
        Subject: CN=69a4ff6a-70d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d5:ee:a7:7f:a1:e6:55:ac:59:59:c9:0b:98:
                    7b:59:45:da:05:af:f2:f6:1f:6f:85:f3:15:6c:fd:
                    49:97:63:06:43:40:f4:99:1e:dd:b2:be:2c:47:46:
                    35:35:eb:fb:78:40:9c:7e:0d:5b:e0:fe:33:db:ff:
                    88:ea:a5:7d:c8:23:c3:73:e3:91:5a:ec:de:d9:f6:
                    b4:88:fc:dd:c1:94:41:d0:73:49:78:fa:1b:d2:a7:
                    f7:ad:04:53:80:23:f9:81:57:30:0a:3b:6c:ce:32:
                    72:7b:a0:e8:f9:d8:28:40:cb:26:c5:1e:9e:27:ce:
                    f5:df:85:0b:0a:80:81:3e:80:12:74:ce:bb:8a:44:
                    f5:2b:28:23:30:5a:60:c3:9f:2a:1b:59:98:a5:d8:
                    1b:2b:87:db:de:8a:18:89:1c:df:4e:90:95:b4:b8:
                    28:5e:c2:32:37:3f:ef:c2:24:ff:c2:7e:f6:b1:ea:
                    04:c9:65:8f:b2:be:21:7c:73:6e:96:21:f0:d6:6a:
                    d4:f1:df:12:63:22:d6:fc:a1:1c:ee:b6:4f:54:c0:
                    ac:f1:6a:be:21:7a:e7:ab:9a:d3:5d:05:86:41:07:
                    fd:44:6c:de:26:6a:d2:81:69:78:37:52:b4:26:82:
                    56:44:5e:4f:7e:68:3e:de:20:0b:53:85:b6:93:83:
                    3e:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:4C:D6:40:7F:41:54:5C:AC:95:8D:A8:43:BF:2A:BB:B0:EA:5F:E4
            X509v3 Authority Key Identifier:
                keyid:F2:7B:93:5F:35:E0:4B:8F:EA:A3:91:0D:E5:F1:E2:D2:3C:5E:00:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3692292/481A5F60912911EF838CED73762E951A/8nuTXzXgS4_qo5EN5fHi0jxeAHs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/8nuTXzXgS4_qo5EN5fHi0jxeAHs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3692292/481A5F60912911EF838CED73762E951A/8nuTXzXgS4_qo5EN5fHi0jxeAHs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:4f:41:37:df:81:fc:a8:fe:ae:8e:a2:f4:14:a1:38:74:24:
         c9:6f:4f:b9:65:42:73:14:5d:a5:a4:85:c0:88:d0:72:41:1c:
         7c:98:12:be:66:d0:0c:55:f8:f1:69:21:2b:9a:50:28:52:6b:
         23:7e:11:77:04:5a:d1:10:d3:71:3c:d8:e5:a2:90:5c:34:eb:
         68:00:ba:dd:01:41:81:0b:de:87:ee:d4:b9:2c:9f:7e:23:a5:
         b2:eb:f2:8c:ad:27:93:06:c5:8c:46:8f:c1:08:1f:4a:d3:6d:
         fc:7a:e1:f7:50:24:7f:be:35:21:26:ec:17:0b:0c:8b:63:f8:
         f5:a2:ae:1b:04:c7:3f:48:4f:f9:56:9f:47:52:40:a4:fc:fb:
         cb:b5:81:4f:7c:2b:5c:3a:4b:b2:e6:11:84:9f:40:01:fc:b9:
         67:ae:0f:2b:78:ad:bf:91:b8:e7:f7:32:be:8c:5c:ae:b1:6a:
         77:d7:bf:60:ba:f9:10:ec:ec:2f:03:bd:c9:84:af:dd:85:35:
         75:5b:d1:eb:8f:0e:9f:a7:29:95:a2:39:6b:2d:4a:fb:b8:fc:
         8b:fe:0c:08:65:af:48:6c:91:1b:fc:17:43:b8:14:34:2c:35:
         af:07:da:c9:48:1a:41:4c:5f:81:46:37:89:ab:69:11:38:61:
         55:c6:cd:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:42:34 2026 by rpki-client