Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36992EC/68C283249A8911EE9287B838D25BE465/MQnplyMPK5fGUZojAYDU77BY1Us.mft
File:                     MQnplyMPK5fGUZojAYDU77BY1Us.mft (raw, json)
Hash identifier:          fNR8+hJvVQPBR70tI6W8005tMULzlubAb6hXps7od2o=
Subject key identifier:   B6:E0:79:4D:72:F6:54:8C:0B:58:D7:F9:6E:B4:12:4F:47:83:83:4B
Authority key identifier: 31:09:E9:97:23:0F:2B:97:C6:51:9A:23:01:80:D4:EF:B0:58:D5:4B
Certificate issuer:       /CN=F36992ECAF/serialNumber=3109E997230F2B97C6519A230180D4EFB058D54B
Certificate serial:       0340
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/MQnplyMPK5fGUZojAYDU77BY1Us.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36992EC/68C283249A8911EE9287B838D25BE465/MQnplyMPK5fGUZojAYDU77BY1Us.mft
Manifest number:          033F
Signing time:             Mon 02 Mar 2026 02:43:41 +0000
Manifest this update:     Mon 02 Mar 2026 02:43:41 +0000
Manifest next update:     Wed 04 Mar 2026 02:43:41 +0000
Files and hashes:         1: MQnplyMPK5fGUZojAYDU77BY1Us.crl (hash: ITeUesMdM+5PbDFs3l6MTZlALO4z1xeROiTWatuJnT8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36992EC/68C283249A8911EE9287B838D25BE465/MQnplyMPK5fGUZojAYDU77BY1Us.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36992EC/68C283249A8911EE9287B838D25BE465/MQnplyMPK5fGUZojAYDU77BY1Us.mft
                          rsync://rpki.afrinic.net/repository/afrinic/MQnplyMPK5fGUZojAYDU77BY1Us.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 832 (0x340)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36992ECAF, serialNumber=3109E997230F2B97C6519A230180D4EFB058D54B
        Validity
            Not Before: Mar  2 02:43:41 2026 GMT
            Not After : Mar  4 02:43:41 2026 GMT
        Subject: CN=69a4f95d-3764
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:7f:cb:09:4e:cc:71:b7:cc:d0:5d:6a:73:46:
                    bf:e5:cc:c3:0f:61:ce:55:db:f7:c8:67:47:a1:9f:
                    77:07:97:84:8e:a2:e4:85:c3:f5:35:30:df:2d:9f:
                    fb:66:8a:76:fe:fb:c6:06:7b:72:74:75:7a:24:89:
                    03:98:e4:c6:bd:73:ce:17:0e:ae:84:38:00:58:dd:
                    96:51:0e:77:ca:f0:a9:52:14:ad:7d:01:38:b1:bf:
                    ac:fc:66:ee:00:07:dd:f7:58:74:73:28:7d:71:d7:
                    17:f4:12:5d:54:d2:a1:46:38:66:2a:50:6e:74:21:
                    c1:8c:31:c0:f9:97:81:ad:f1:71:fc:be:a9:39:ee:
                    41:1a:32:ab:a8:cc:77:90:0a:49:12:21:0e:3f:6b:
                    ad:a2:bf:e1:3b:ec:48:89:35:ce:62:25:d3:26:02:
                    6c:0b:61:2d:85:00:8b:f9:d3:87:70:ff:37:b6:07:
                    5a:1b:bd:da:68:39:2f:c0:4c:11:ac:89:ef:a8:0f:
                    8f:a5:ce:83:23:0e:1f:ab:3e:8a:9a:72:c3:97:5d:
                    81:4d:e3:2a:5a:a2:f6:05:e4:0d:fa:34:77:11:d1:
                    e1:56:1c:c0:60:2d:00:61:82:57:46:e5:94:a8:0a:
                    84:6a:0f:e5:07:ae:b1:ac:cf:da:f4:fa:79:10:4c:
                    8b:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:E0:79:4D:72:F6:54:8C:0B:58:D7:F9:6E:B4:12:4F:47:83:83:4B
            X509v3 Authority Key Identifier:
                keyid:31:09:E9:97:23:0F:2B:97:C6:51:9A:23:01:80:D4:EF:B0:58:D5:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36992EC/68C283249A8911EE9287B838D25BE465/MQnplyMPK5fGUZojAYDU77BY1Us.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/MQnplyMPK5fGUZojAYDU77BY1Us.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36992EC/68C283249A8911EE9287B838D25BE465/MQnplyMPK5fGUZojAYDU77BY1Us.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:30:a2:4d:43:63:b4:93:68:0b:f3:f1:ab:12:30:43:db:90:
         eb:f1:19:db:80:42:a5:3f:9f:46:70:68:05:59:e7:b1:a2:d8:
         d3:40:fa:88:f2:e5:8a:45:11:d6:a8:18:3d:25:99:a5:78:e8:
         7b:b1:81:21:36:4d:6c:56:3d:cb:f1:a5:26:9c:f4:3c:b8:42:
         7d:4c:99:dd:66:13:ad:3a:f0:48:85:79:ae:f8:ee:4c:27:44:
         bf:bb:f8:7b:f2:51:cc:11:a6:a0:f0:30:b3:63:b1:05:ed:52:
         00:35:b7:04:e6:09:5a:d0:7b:1e:66:02:14:5b:66:86:e3:f2:
         d3:17:10:a2:d6:79:9b:86:00:96:9b:76:17:7e:02:98:be:ac:
         11:e0:97:d3:cd:1f:cd:0a:36:93:1a:17:d9:e0:22:a6:e2:9c:
         0f:78:dc:03:22:47:dd:50:07:ae:d7:bc:cd:05:ba:79:1a:2a:
         1e:53:f9:02:cc:eb:e8:1a:90:72:8d:f1:3f:37:17:48:52:d4:
         ca:57:7b:a7:83:ff:93:ad:ee:35:1c:04:9c:ae:34:c0:4e:3b:
         d5:b5:0f:d2:81:79:28:89:02:d3:7b:21:84:1a:95:61:55:3f:
         58:92:4c:77:c8:58:4e:92:4c:a8:eb:08:4d:ed:2e:39:82:94:
         a0:af:b0:15
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICA0AwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OTkyRUNBRjExMC8GA1UEBRMoMzEwOUU5OTcyMzBGMkI5N0M2NTE5QTIzMDE4MEQ0
RUZCMDU4RDU0QjAeFw0yNjAzMDIwMjQzNDFaFw0yNjAzMDQwMjQzNDFaMBgxFjAU
BgNVBAMTDTY5YTRmOTVkLTM3NjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDFf8sJTsxxt8zQXWpzRr/lzMMPYc5V2/fIZ0ehn3cHl4SOouSFw/U1MN8t
n/tminb++8YGe3J0dXokiQOY5Ma9c84XDq6EOABY3ZZRDnfK8KlSFK19ATixv6z8
Zu4AB933WHRzKH1x1xf0El1U0qFGOGYqUG50IcGMMcD5l4Gt8XH8vqk57kEaMquo
zHeQCkkSIQ4/a62iv+E77EiJNc5iJdMmAmwLYS2FAIv504dw/ze2B1obvdpoOS/A
TBGsie+oD4+lzoMjDh+rPoqacsOXXYFN4ypaovYF5A36NHcR0eFWHMBgLQBhgldG
5ZSoCoRqD+UHrrGsz9r0+nkQTIvPAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUtuB5
TXL2VIwLWNf5brQST0eDg0swHwYDVR0jBBgwFoAUMQnplyMPK5fGUZojAYDU77BY
1UswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjk5MkVDLzY4QzI4MzI0OUE4OTExRUU5Mjg3QjgzOEQyNUJFNDY1L01RbnBs
eU1QSzVmR1Vab2pBWURVNzdCWTFVcy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL01RbnBseU1QSzVmR1Vab2pBWURVNzdCWTFVcy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OTkyRUMvNjhDMjgzMjQ5QTg5MTFFRTkyODdCODM4RDI1
QkU0NjUvTVFucGx5TVBLNWZHVVpvakFZRFU3N0JZMVVzLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBFMKJNQ2O0k2gL8/GrEjBD25Dr8Rnb
gEKlP59GcGgFWeexotjTQPqI8uWKRRHWqBg9JZmleOh7sYEhNk1sVj3L8aUmnPQ8
uEJ9TJndZhOtOvBIhXmu+O5MJ0S/u/h78lHMEaag8DCzY7EF7VIANbcE5gla0Hse
ZgIUW2aG4/LTFxCi1nmbhgCWm3YXfgKYvqwR4JfTzR/NCjaTGhfZ4CKm4pwPeNwD
IkfdUAeu17zNBbp5GioeU/kCzOvoGpByjfE/NxdIUtTKV3ung/+Tre41HAScrjTA
TjvVtQ/SgXkoiQLTeyGEGpVhVT9Ykkx3yFhOkkyo6whN7S45gpSgr7AV
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:45:25 2026 by rpki-client