Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369A625/8A38274078B811E98298434FF8AEA228/cDnVox_x8yuxXUeMEJeGl7YiJlc.mft
File:                     cDnVox_x8yuxXUeMEJeGl7YiJlc.mft (raw, json)
Hash identifier:          cYHVzi0jo5G+kLQeQexOqnPYMYnyC1hPngJYs2yxC/A=
Subject key identifier:   A8:E1:47:A6:EA:E8:AE:92:2D:17:A0:40:4C:E3:0B:E5:6D:00:81:80
Authority key identifier: 70:39:D5:A3:1F:F1:F3:2B:B1:5D:47:8C:10:97:86:97:B6:22:26:57
Certificate issuer:       /CN=F369A625AF/serialNumber=7039D5A31FF1F32BB15D478C10978697B6222657
Certificate serial:       09F2
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/cDnVox_x8yuxXUeMEJeGl7YiJlc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369A625/8A38274078B811E98298434FF8AEA228/cDnVox_x8yuxXUeMEJeGl7YiJlc.mft
Manifest number:          09F0
Signing time:             Mon 02 Mar 2026 01:09:14 +0000
Manifest this update:     Mon 02 Mar 2026 01:09:14 +0000
Manifest next update:     Wed 04 Mar 2026 01:09:14 +0000
Files and hashes:         1: cDnVox_x8yuxXUeMEJeGl7YiJlc.crl (hash: F6YrysgfAp1CtpcxCj+Ezr4+VipgXl6syYTgVX7a/90=)
                          2: CFA5E174833711F0BAF820C0DAE4EC9C.roa (hash: 9LdX+6QJPzq+X9+Y9bU9wVAbIwwdt9RF0GdlBwu/DxU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369A625/8A38274078B811E98298434FF8AEA228/cDnVox_x8yuxXUeMEJeGl7YiJlc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369A625/8A38274078B811E98298434FF8AEA228/cDnVox_x8yuxXUeMEJeGl7YiJlc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/cDnVox_x8yuxXUeMEJeGl7YiJlc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2546 (0x9f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369A625AF, serialNumber=7039D5A31FF1F32BB15D478C10978697B6222657
        Validity
            Not Before: Mar  2 01:09:14 2026 GMT
            Not After : Mar  4 01:09:14 2026 GMT
        Subject: CN=69a4e33a-5bfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:89:a4:f5:9f:dc:98:12:c2:2c:2c:80:01:7b:
                    18:e5:94:d3:2c:fb:d9:dd:ac:18:c0:59:9d:c6:88:
                    56:ca:d0:9b:5f:fe:7d:ee:05:e7:4a:61:bb:4b:3e:
                    17:22:86:54:93:39:33:e9:a9:4d:28:bc:1a:69:d7:
                    11:eb:ea:8e:02:a4:f3:a2:d4:87:78:22:fb:41:b6:
                    f7:4a:57:24:dd:83:b0:e9:25:ee:38:dc:f6:49:42:
                    8c:78:1e:b1:31:57:1c:1b:af:60:4c:ab:b9:45:8a:
                    71:7f:74:5d:1c:22:09:1e:37:d7:10:73:36:21:3d:
                    54:73:94:8e:16:d1:89:cf:07:60:47:3b:4d:2e:c7:
                    bc:72:8d:7d:71:50:57:b9:39:26:2d:d0:18:92:96:
                    c3:3f:35:66:25:0f:c2:a9:8b:a9:17:db:92:20:88:
                    13:54:65:3f:ac:30:89:c0:27:48:79:38:d0:35:a5:
                    d5:bf:9d:05:20:27:53:b5:76:67:7d:f7:2e:29:36:
                    d8:2c:b8:66:e6:4a:b1:0e:dd:ee:9e:68:67:07:a0:
                    da:e8:a5:e2:63:ca:9b:9d:b4:d8:1b:7c:e9:d3:6d:
                    fe:21:7b:40:8d:24:b5:52:05:d7:d8:e7:33:79:32:
                    17:cd:e5:45:e7:c7:ee:b1:04:de:60:30:c5:5a:ae:
                    8e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:E1:47:A6:EA:E8:AE:92:2D:17:A0:40:4C:E3:0B:E5:6D:00:81:80
            X509v3 Authority Key Identifier:
                keyid:70:39:D5:A3:1F:F1:F3:2B:B1:5D:47:8C:10:97:86:97:B6:22:26:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369A625/8A38274078B811E98298434FF8AEA228/cDnVox_x8yuxXUeMEJeGl7YiJlc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/cDnVox_x8yuxXUeMEJeGl7YiJlc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369A625/8A38274078B811E98298434FF8AEA228/cDnVox_x8yuxXUeMEJeGl7YiJlc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:52:f7:79:fd:a8:41:2f:a1:b9:45:7a:e1:91:49:bd:2f:26:
         c0:e4:06:24:a3:46:7d:64:11:9a:4d:d5:73:24:52:04:40:90:
         59:1f:23:5e:da:a7:36:23:02:cd:58:f2:bb:fc:e1:2d:37:0c:
         de:28:13:06:12:a3:0f:6b:55:c4:13:1f:b3:b7:9b:c3:89:98:
         1d:ca:e4:3e:ca:9a:00:fe:43:50:7d:b1:cf:eb:5d:45:86:85:
         c7:63:d9:23:48:fc:93:73:81:ac:83:fa:59:59:9b:56:c3:ab:
         fa:ed:22:e0:72:96:3f:73:57:0d:90:f8:bb:7a:6a:a0:ae:3b:
         e9:8a:ee:88:a6:93:3b:be:ed:3c:61:fd:59:64:0d:a3:ea:ac:
         72:15:56:45:1e:b0:d5:54:2e:69:2b:05:c8:88:d3:41:46:4a:
         69:28:7c:47:3e:bf:e1:de:71:68:94:0f:c1:b0:c8:cf:3b:d8:
         c6:ee:b9:25:7b:5b:bc:62:1d:2a:f7:d8:0e:83:48:25:42:f9:
         91:2e:8f:43:bc:b5:1e:cf:cf:0b:54:19:bc:03:51:38:ec:9a:
         9d:58:a1:d1:e7:dd:13:fa:ab:c1:92:00:58:8e:aa:1c:7a:19:
         6f:09:44:bd:14:bd:ca:cd:4c:fe:f6:73:25:cf:9b:ac:a9:37:
         fe:78:ce:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:00:52 2026 by rpki-client