Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3692D98/AFE95F7498F011EE8A47CA59D25BE465/-YeB5n2eqWryWAashtEAb4IfqjY.mft
File:                     -YeB5n2eqWryWAashtEAb4IfqjY.mft (raw, json)
Hash identifier:          v8SxvWouJWdJTp3pn9LNCyj4k+KBBznTa2Q5UtvXS4o=
Subject key identifier:   AD:3E:50:51:74:B2:3C:F9:A2:91:DD:D0:45:D6:97:EE:42:89:D3:94
Authority key identifier: F9:87:81:E6:7D:9E:A9:6A:F2:58:06:AC:86:D1:00:6F:82:1F:AA:36
Certificate issuer:       /CN=F3692D98AF/serialNumber=F98781E67D9EA96AF25806AC86D1006F821FAA36
Certificate serial:       0357
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/-YeB5n2eqWryWAashtEAb4IfqjY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3692D98/AFE95F7498F011EE8A47CA59D25BE465/-YeB5n2eqWryWAashtEAb4IfqjY.mft
Manifest number:          0352
Signing time:             Mon 02 Mar 2026 02:43:19 +0000
Manifest this update:     Mon 02 Mar 2026 02:43:18 +0000
Manifest next update:     Wed 04 Mar 2026 02:43:18 +0000
Files and hashes:         1: -YeB5n2eqWryWAashtEAb4IfqjY.crl (hash: utDh5A8sMPXOfiIHpjAF3Ecj3hNE6DBEGi1B7qiv8xY=)
                          2: F3D28466A49B11EE881B3A7CD25BE465.roa (hash: 8ql7+vusURAXXO1QjIU3wb4N2LTfHKWe3IzCBlZgxWQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3692D98/AFE95F7498F011EE8A47CA59D25BE465/-YeB5n2eqWryWAashtEAb4IfqjY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3692D98/AFE95F7498F011EE8A47CA59D25BE465/-YeB5n2eqWryWAashtEAb4IfqjY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/-YeB5n2eqWryWAashtEAb4IfqjY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 855 (0x357)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3692D98AF, serialNumber=F98781E67D9EA96AF25806AC86D1006F821FAA36
        Validity
            Not Before: Mar  2 02:43:18 2026 GMT
            Not After : Mar  4 02:43:18 2026 GMT
        Subject: CN=69a4f947-b567
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:31:0d:31:c0:56:28:6d:b3:e2:34:c1:a3:5d:
                    4a:fe:f6:98:54:b1:7a:a3:65:05:76:88:58:26:fe:
                    66:6b:83:7b:51:9b:4b:f7:4a:4d:cd:a0:61:94:9a:
                    40:34:4a:a5:a3:cf:96:93:ef:1c:84:3e:d5:57:27:
                    44:3b:54:de:0e:9a:29:22:a1:8a:65:a0:b7:cf:1f:
                    50:b3:11:40:72:8b:a6:59:0e:71:a2:ce:36:8b:30:
                    73:6b:e0:ed:6a:92:6e:57:d7:41:06:7c:4e:05:3b:
                    2c:d4:91:b0:e8:3b:00:c0:cb:03:1f:03:fb:5c:71:
                    bf:57:b8:40:a8:1d:18:1a:35:9c:ae:34:12:0f:87:
                    3f:de:a4:1d:10:73:c1:63:37:3f:b2:de:35:cf:a2:
                    b0:03:93:66:89:7f:de:b9:52:e9:b0:14:43:4b:c8:
                    b9:32:d6:16:82:af:b7:cc:25:18:c1:82:48:36:6d:
                    f4:c6:50:ac:fc:eb:4f:19:56:28:3a:77:eb:3a:1b:
                    7c:56:2b:91:14:97:04:49:0c:73:4f:d5:35:9f:a5:
                    b2:1d:64:03:06:14:da:3b:83:d7:d8:23:3f:29:d2:
                    3b:36:f6:a6:cd:46:5a:65:ea:67:bc:2e:ef:1e:c9:
                    fd:07:4a:59:e4:96:a7:c1:43:be:41:ff:c8:4d:02:
                    d0:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:3E:50:51:74:B2:3C:F9:A2:91:DD:D0:45:D6:97:EE:42:89:D3:94
            X509v3 Authority Key Identifier:
                keyid:F9:87:81:E6:7D:9E:A9:6A:F2:58:06:AC:86:D1:00:6F:82:1F:AA:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3692D98/AFE95F7498F011EE8A47CA59D25BE465/-YeB5n2eqWryWAashtEAb4IfqjY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-YeB5n2eqWryWAashtEAb4IfqjY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3692D98/AFE95F7498F011EE8A47CA59D25BE465/-YeB5n2eqWryWAashtEAb4IfqjY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:f4:7e:2a:30:8b:9e:67:92:d6:55:c6:c7:49:73:5d:dc:b3:
         38:e3:0e:0e:22:90:3f:ee:91:09:fe:a8:4a:47:f3:03:a8:f6:
         16:f3:3e:14:10:27:91:e9:93:5a:0d:ad:b8:81:01:22:e8:54:
         38:d2:80:be:30:8f:da:a4:4a:61:11:53:f9:10:5a:5e:6d:7c:
         dc:2e:2f:e6:c1:65:ae:ad:be:21:87:2e:9d:97:f0:5c:b7:f9:
         9e:e5:56:03:97:06:f6:25:55:ee:f9:ec:1f:de:69:de:f4:1f:
         5c:a8:40:36:80:86:7f:7f:da:58:08:99:66:40:3e:52:03:73:
         02:e6:97:25:fb:f9:86:e0:91:d4:90:7e:26:a3:31:1e:39:67:
         b3:7b:72:18:e1:0d:29:f4:d2:44:4a:23:0f:49:d5:a3:d0:b9:
         3e:e7:1b:44:ac:b6:06:32:03:6e:1f:0d:c4:11:b9:68:2e:40:
         90:69:c1:b9:a2:71:70:4b:5c:b6:8f:b5:43:fd:21:7a:01:17:
         ce:91:49:0e:ad:c4:be:34:30:ab:be:c6:74:53:e8:d8:17:20:
         6e:cd:30:a2:1e:99:64:20:38:ef:ca:21:d7:eb:4f:46:e4:e3:
         42:9f:7c:db:0e:59:9e:37:50:aa:59:e1:44:d9:28:aa:c0:07:
         8b:85:95:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:07:12 2026 by rpki-client