Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3698125/9ED7EB1E838411EEAF8131354AD9E6FC/PHnw_LuwwEHItPbe4QOwJRlRbvQ.mft
File:                     PHnw_LuwwEHItPbe4QOwJRlRbvQ.mft (raw, json)
Hash identifier:          M+IXpjlwFRyKbdDzUYTHgR3lMna8ClJbi8r7f6TCdiY=
Subject key identifier:   05:48:28:72:8E:55:AA:E8:D8:AE:33:6C:85:4A:62:FC:26:C6:03:1D
Authority key identifier: 3C:79:F0:FC:BB:B0:C0:41:C8:B4:F6:DE:E1:03:B0:25:19:51:6E:F4
Certificate issuer:       /CN=F3698125AF/serialNumber=3C79F0FCBBB0C041C8B4F6DEE103B02519516EF4
Certificate serial:       035E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PHnw_LuwwEHItPbe4QOwJRlRbvQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3698125/9ED7EB1E838411EEAF8131354AD9E6FC/PHnw_LuwwEHItPbe4QOwJRlRbvQ.mft
Manifest number:          035D
Signing time:             Sun 01 Mar 2026 02:40:49 +0000
Manifest this update:     Sun 01 Mar 2026 02:40:49 +0000
Manifest next update:     Tue 03 Mar 2026 02:40:49 +0000
Files and hashes:         1: PHnw_LuwwEHItPbe4QOwJRlRbvQ.crl (hash: z4QDv/V9StaMrX1UHZ8nvbBeMYqk1Z5k+lFOR0mIqyM=)
                          2: 7505B06024CD11EF9410DD1A7DDC24C2.roa (hash: vn59PtsA74MEKr6H9TKVqZemfFNq5OYAs+pWATJBHgA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3698125/9ED7EB1E838411EEAF8131354AD9E6FC/PHnw_LuwwEHItPbe4QOwJRlRbvQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3698125/9ED7EB1E838411EEAF8131354AD9E6FC/PHnw_LuwwEHItPbe4QOwJRlRbvQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PHnw_LuwwEHItPbe4QOwJRlRbvQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 03 Mar 2026 00:07:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 862 (0x35e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3698125AF, serialNumber=3C79F0FCBBB0C041C8B4F6DEE103B02519516EF4
        Validity
            Not Before: Mar  1 02:40:49 2026 GMT
            Not After : Mar  3 02:40:49 2026 GMT
        Subject: CN=69a3a731-0a66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:f5:5c:df:aa:18:2e:fb:fa:b1:26:2d:1a:29:
                    1b:17:a7:0d:aa:f5:68:c7:8d:02:6c:08:5b:70:e3:
                    82:a4:b0:02:80:e6:f5:b1:37:65:b8:fe:1b:4d:a0:
                    ee:23:a3:05:65:b3:28:bc:35:29:67:03:2a:a2:8e:
                    c2:40:0f:3c:23:74:99:dc:b2:30:cb:c0:82:c0:29:
                    ea:ee:a6:ea:d6:62:ce:8e:1d:da:80:c8:d2:89:30:
                    97:53:1c:eb:41:e1:eb:de:b3:f5:a4:78:37:3a:1f:
                    d1:0c:4b:a1:52:fb:4b:37:ce:d0:94:f8:80:95:cb:
                    2d:13:0f:3f:10:95:e0:f7:18:53:76:37:bd:a7:99:
                    75:df:53:54:f9:88:57:7b:cd:d5:c4:59:e1:7b:b7:
                    f9:0b:8d:b6:52:96:36:95:bd:e2:ca:92:99:8a:00:
                    60:2f:87:b8:55:60:d8:6a:34:f8:e2:ee:83:e4:c7:
                    1d:0a:72:a9:5d:cd:05:78:56:51:18:3b:a6:06:a9:
                    bf:8f:e8:96:d4:62:4d:a1:72:d9:1b:2b:56:5e:be:
                    43:83:d7:0e:8a:ab:cd:b4:ef:40:df:07:86:73:38:
                    05:04:a6:32:d7:10:e3:1c:54:56:a1:a8:a3:86:4e:
                    8f:75:a5:24:12:af:01:03:ad:e6:2d:5a:f0:bc:db:
                    91:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:48:28:72:8E:55:AA:E8:D8:AE:33:6C:85:4A:62:FC:26:C6:03:1D
            X509v3 Authority Key Identifier:
                keyid:3C:79:F0:FC:BB:B0:C0:41:C8:B4:F6:DE:E1:03:B0:25:19:51:6E:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3698125/9ED7EB1E838411EEAF8131354AD9E6FC/PHnw_LuwwEHItPbe4QOwJRlRbvQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PHnw_LuwwEHItPbe4QOwJRlRbvQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3698125/9ED7EB1E838411EEAF8131354AD9E6FC/PHnw_LuwwEHItPbe4QOwJRlRbvQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:2d:51:5d:bb:09:2d:7c:9e:af:1d:0e:ad:90:e2:64:03:0c:
         92:37:0e:2c:e5:4d:ef:8f:8a:75:b0:0e:ed:88:f3:4e:4e:57:
         8c:14:38:03:e0:15:ea:e7:b9:7b:15:16:e0:93:88:00:96:62:
         8f:74:73:fb:ff:c2:fb:62:b6:8a:65:13:ff:9c:93:4c:93:8a:
         60:a0:6a:5e:88:45:60:17:b1:cb:35:15:9d:34:aa:2d:42:14:
         92:9b:59:41:e9:d1:12:6a:13:60:b6:03:68:f6:9e:c0:29:70:
         d2:57:10:2d:f2:76:3a:10:32:ab:4e:65:6d:50:68:c6:ff:fe:
         a0:2b:bf:14:4b:45:8b:c3:0e:46:64:8c:18:e1:78:b3:15:7a:
         ec:00:1c:95:9d:aa:4f:aa:7e:a1:57:65:c8:03:cf:91:cf:c4:
         30:5c:f9:de:95:e5:a5:20:b2:6b:5b:2c:c3:4a:bb:e2:70:31:
         9a:6a:86:a5:16:2c:6a:a9:77:5f:20:03:62:83:91:f5:5b:af:
         9a:df:af:5a:3d:24:d8:4d:f6:56:4a:4d:6e:75:bd:cf:e6:e1:
         8b:c6:8f:9e:72:2c:8a:54:af:30:ff:73:ad:a5:2f:1c:b5:2c:
         e8:c0:97:2d:49:79:4e:c7:63:98:93:26:41:95:24:14:de:59:
         cb:fd:6b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:36 2026 by rpki-client