Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369BFA8/FBBFE27EB22111EF8BDA705C762E951A/zXRmXLHPyFlppqWrpHLD6irSVc4.mft
File:                     zXRmXLHPyFlppqWrpHLD6irSVc4.mft (raw, json)
Hash identifier:          2Ja2fFFTaW/dn0dYEjSVDHZRpcTxmupiwT90ZFo8c0w=
Subject key identifier:   E4:73:EF:F6:6A:D9:A5:87:87:52:43:42:B8:6D:38:E3:57:41:21:EF
Authority key identifier: CD:74:66:5C:B1:CF:C8:59:69:A6:A5:AB:A4:72:C3:EA:2A:D2:55:CE
Certificate issuer:       /CN=F369BFA8AF/serialNumber=CD74665CB1CFC85969A6A5ABA472C3EA2AD255CE
Certificate serial:       01D1
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/zXRmXLHPyFlppqWrpHLD6irSVc4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369BFA8/FBBFE27EB22111EF8BDA705C762E951A/zXRmXLHPyFlppqWrpHLD6irSVc4.mft
Manifest number:          01D0
Signing time:             Mon 02 Mar 2026 03:12:32 +0000
Manifest this update:     Mon 02 Mar 2026 03:12:32 +0000
Manifest next update:     Wed 04 Mar 2026 03:12:32 +0000
Files and hashes:         1: zXRmXLHPyFlppqWrpHLD6irSVc4.crl (hash: Mos8D0q3yw8PB5n1nIHFfPjrRuvJP4SxjeQmuYnLMh4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369BFA8/FBBFE27EB22111EF8BDA705C762E951A/zXRmXLHPyFlppqWrpHLD6irSVc4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369BFA8/FBBFE27EB22111EF8BDA705C762E951A/zXRmXLHPyFlppqWrpHLD6irSVc4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/zXRmXLHPyFlppqWrpHLD6irSVc4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 465 (0x1d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369BFA8AF, serialNumber=CD74665CB1CFC85969A6A5ABA472C3EA2AD255CE
        Validity
            Not Before: Mar  2 03:12:32 2026 GMT
            Not After : Mar  4 03:12:32 2026 GMT
        Subject: CN=69a50020-3582
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:92:36:30:2e:3d:ce:22:e9:09:b0:26:dc:3a:
                    ea:45:9d:7c:78:7b:a9:8b:cc:39:7f:f2:94:cc:3f:
                    4a:96:e5:c3:5f:3e:51:d0:92:5c:35:e3:5c:ae:34:
                    bf:5f:a7:32:e6:d3:1d:c8:15:91:43:62:48:a0:2f:
                    e9:4e:03:33:0f:2a:8a:24:a5:44:4d:39:45:84:8b:
                    17:32:78:b3:f5:1e:54:54:e0:a7:27:b1:53:ae:b0:
                    2f:37:7b:dd:02:10:79:9f:30:b5:2b:0d:99:f1:7f:
                    ea:85:2f:6d:c2:bd:53:56:f5:3f:b2:84:c4:0f:5e:
                    a1:da:35:f3:5d:0c:aa:e7:76:eb:5a:f7:60:8a:69:
                    c5:fa:51:2e:40:8d:1b:93:41:c4:d0:b5:83:4b:a5:
                    46:48:14:14:1f:06:f2:c5:6b:9d:32:3a:b3:d6:de:
                    02:a1:aa:f4:f4:75:54:b5:c1:0c:5c:f2:d5:44:55:
                    6b:06:bc:dd:da:d4:94:e5:ec:b0:6c:30:7c:2f:d6:
                    b5:97:a3:07:8b:f2:b8:c0:57:f2:58:9b:cd:93:2d:
                    0a:80:1c:ab:6e:aa:45:47:0c:3d:9c:5b:cf:75:7a:
                    08:83:66:1d:fe:59:ec:a5:b9:a6:68:57:fe:a5:12:
                    99:ec:bb:da:bd:4f:49:9b:56:4a:ed:05:5a:e1:5d:
                    b9:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:73:EF:F6:6A:D9:A5:87:87:52:43:42:B8:6D:38:E3:57:41:21:EF
            X509v3 Authority Key Identifier:
                keyid:CD:74:66:5C:B1:CF:C8:59:69:A6:A5:AB:A4:72:C3:EA:2A:D2:55:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369BFA8/FBBFE27EB22111EF8BDA705C762E951A/zXRmXLHPyFlppqWrpHLD6irSVc4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zXRmXLHPyFlppqWrpHLD6irSVc4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369BFA8/FBBFE27EB22111EF8BDA705C762E951A/zXRmXLHPyFlppqWrpHLD6irSVc4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:be:e6:35:a1:ca:34:0d:9c:17:6f:5a:55:11:d5:34:53:85:
         4b:12:1b:d7:81:a6:77:8f:23:18:e9:ec:1b:73:56:63:b3:57:
         8c:67:49:71:46:57:62:3d:67:9e:3f:33:30:87:47:39:64:93:
         41:0a:24:2e:f6:b0:d1:e6:e4:25:69:b3:07:81:c8:ad:3a:24:
         af:d1:c5:74:08:95:e6:04:0e:9d:f8:be:87:f6:1d:05:df:83:
         0a:4c:6f:9b:4e:ad:6d:4d:41:c5:0b:9f:cd:62:99:14:dc:6f:
         37:41:67:01:c8:65:46:36:d7:b4:46:3c:13:55:92:eb:83:79:
         7e:d3:55:2b:4f:b9:dd:10:11:7c:03:e3:6b:66:de:6f:e9:fa:
         ec:cc:38:89:5f:a6:41:14:8c:ef:7b:b5:2c:26:f6:f7:bd:44:
         22:d5:ef:f9:1e:2a:63:91:af:e4:b4:54:a5:29:55:12:66:7f:
         3d:87:70:3d:98:b5:ce:ee:39:12:8e:d0:b1:69:89:1b:7c:df:
         66:18:32:5c:ea:9c:90:96:b2:83:01:c8:90:e8:48:df:eb:24:
         e0:1d:09:15:20:f9:a2:fa:d2:62:6b:68:3c:24:b4:3d:32:6e:
         d7:7f:0f:1d:22:7c:ed:a1:02:81:92:9e:68:0b:a3:9a:ab:31:
         1a:ee:f2:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:25:23 2026 by rpki-client