Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3695CC5/08A9704E211C11ECAE74FE2BD8A014CE/peeb8ti13JAu4K9nlB3mgyjCJdY.mft
File:                     peeb8ti13JAu4K9nlB3mgyjCJdY.mft (raw, json)
Hash identifier:          dOYcyLzm57o5BRD8VU80hg0dGe78qqwjQJGDupmBDRA=
Subject key identifier:   45:F3:CB:93:CB:FC:77:EB:DA:7C:61:FC:32:4E:6A:53:B1:4C:06:73
Authority key identifier: A5:E7:9B:F2:D8:B5:DC:90:2E:E0:AF:67:94:1D:E6:83:28:C2:25:D6
Certificate issuer:       /CN=F3695CC5AF/serialNumber=A5E79BF2D8B5DC902EE0AF67941DE68328C225D6
Certificate serial:       067D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/peeb8ti13JAu4K9nlB3mgyjCJdY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3695CC5/08A9704E211C11ECAE74FE2BD8A014CE/peeb8ti13JAu4K9nlB3mgyjCJdY.mft
Manifest number:          067B
Signing time:             Mon 02 Mar 2026 01:50:20 +0000
Manifest this update:     Mon 02 Mar 2026 01:50:20 +0000
Manifest next update:     Wed 04 Mar 2026 01:50:20 +0000
Files and hashes:         1: peeb8ti13JAu4K9nlB3mgyjCJdY.crl (hash: jqTwyNgX5KGCloWpT5y4fN7SC5sDWzYbWj8KMdXKrCA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3695CC5/08A9704E211C11ECAE74FE2BD8A014CE/peeb8ti13JAu4K9nlB3mgyjCJdY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3695CC5/08A9704E211C11ECAE74FE2BD8A014CE/peeb8ti13JAu4K9nlB3mgyjCJdY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/peeb8ti13JAu4K9nlB3mgyjCJdY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1661 (0x67d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3695CC5AF, serialNumber=A5E79BF2D8B5DC902EE0AF67941DE68328C225D6
        Validity
            Not Before: Mar  2 01:50:20 2026 GMT
            Not After : Mar  4 01:50:20 2026 GMT
        Subject: CN=69a4ecdc-80b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f6:df:58:2a:04:9e:a0:5b:e5:f6:99:de:ce:
                    cd:db:86:cf:7c:82:12:ea:95:1b:a8:ac:61:b3:1f:
                    a3:a5:61:08:37:71:74:fc:ac:29:22:0f:90:e3:dc:
                    c1:01:e5:12:f0:68:85:f9:21:47:87:8d:d7:d6:62:
                    81:81:4f:54:bb:09:4d:c3:c0:c5:7a:7d:12:5e:ec:
                    fc:18:38:fa:63:dd:30:94:ab:3a:6a:e7:3a:82:c8:
                    36:a8:13:6c:81:7a:93:dc:f1:99:f7:ec:68:cb:31:
                    57:1c:08:74:81:09:54:4b:5d:82:3d:08:1b:dd:23:
                    d3:71:33:4f:9e:83:b0:57:40:79:f0:e8:ce:5a:ba:
                    83:c3:b4:da:f2:1c:9c:70:54:a9:c2:c7:93:ab:fd:
                    da:e9:a4:1a:6b:3c:95:bb:22:01:4d:6f:0c:a6:e0:
                    e5:8b:2f:3d:9c:66:22:1b:71:54:a3:b0:1f:63:d4:
                    ab:43:8f:5d:2a:d5:be:d5:3b:cf:b7:0f:2e:f9:ca:
                    8b:17:5d:f5:c6:bb:78:9f:39:bc:2d:66:c7:fc:21:
                    38:03:21:a9:5b:78:0e:1c:67:c5:52:b9:b3:4a:f1:
                    f7:74:44:d1:de:9e:12:dd:cb:3b:66:40:42:63:62:
                    ca:15:18:b8:d6:fb:72:82:f3:67:d3:8e:19:b4:ac:
                    be:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:F3:CB:93:CB:FC:77:EB:DA:7C:61:FC:32:4E:6A:53:B1:4C:06:73
            X509v3 Authority Key Identifier:
                keyid:A5:E7:9B:F2:D8:B5:DC:90:2E:E0:AF:67:94:1D:E6:83:28:C2:25:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3695CC5/08A9704E211C11ECAE74FE2BD8A014CE/peeb8ti13JAu4K9nlB3mgyjCJdY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/peeb8ti13JAu4K9nlB3mgyjCJdY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3695CC5/08A9704E211C11ECAE74FE2BD8A014CE/peeb8ti13JAu4K9nlB3mgyjCJdY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:68:e6:c5:88:62:5b:97:51:9f:25:32:4c:4e:95:f6:91:3a:
         43:3e:56:9d:a0:6e:03:fb:c3:5b:8e:ad:ea:1b:da:52:eb:a0:
         25:78:50:ef:cd:35:36:c6:04:83:de:57:d5:2b:66:30:52:52:
         01:ed:c4:22:2d:cf:e0:0b:ef:0f:05:74:33:09:ee:3b:42:29:
         6f:6a:4a:31:52:95:3f:91:f6:29:30:f3:62:98:61:14:17:56:
         6f:5d:f2:51:ed:f2:70:9a:14:48:ba:91:66:61:3d:55:ae:ec:
         62:74:6c:81:a6:5f:bd:aa:4c:d4:7d:5b:f3:22:c6:3a:27:74:
         14:ad:cb:37:9d:62:92:a4:35:6e:61:2d:1b:36:35:41:b2:a8:
         63:1c:02:00:d9:ff:8d:ee:79:16:64:a0:85:86:1e:06:13:44:
         ce:f4:fe:3c:1c:eb:36:f7:3b:90:a1:46:74:85:95:77:bf:de:
         20:65:14:2d:65:8b:b8:55:83:34:b2:fc:46:62:18:60:74:15:
         aa:2e:7f:c3:48:87:16:9a:27:cb:c5:04:d5:98:c5:38:02:66:
         50:b2:c4:71:d5:67:23:91:ca:78:31:ed:e6:57:08:a5:65:4f:
         e0:13:c5:40:b4:bd:fc:74:04:4d:a9:3f:41:d1:85:bb:f3:e6:
         44:74:f3:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:24:09 2026 by rpki-client