Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369E115/FBFEB76403C211EF9713C10C017001B1/S9EnC3AP8p0YQj8YO5-Ss2iH1t0.mft
File:                     S9EnC3AP8p0YQj8YO5-Ss2iH1t0.mft (raw, json)
Hash identifier:          tQJjqLMT09upVVdX/0Rec+OjHCcptl72pv/t3ddouZA=
Subject key identifier:   86:8A:F6:3C:2E:00:32:B6:05:5A:37:75:91:A4:B2:01:09:CF:4F:2F
Authority key identifier: 4B:D1:27:0B:70:0F:F2:9D:18:42:3F:18:3B:9F:92:B3:68:87:D6:DD
Certificate issuer:       /CN=F369E115AF/serialNumber=4BD1270B700FF29D18423F183B9F92B36887D6DD
Certificate serial:       02BA
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/S9EnC3AP8p0YQj8YO5-Ss2iH1t0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369E115/FBFEB76403C211EF9713C10C017001B1/S9EnC3AP8p0YQj8YO5-Ss2iH1t0.mft
Manifest number:          02B8
Signing time:             Mon 02 Mar 2026 02:53:34 +0000
Manifest this update:     Mon 02 Mar 2026 02:53:33 +0000
Manifest next update:     Wed 04 Mar 2026 02:53:33 +0000
Files and hashes:         1: S9EnC3AP8p0YQj8YO5-Ss2iH1t0.crl (hash: 2iWsZ//OTItHBYLC9rxVg+7ZlNDj+gZRIjWdfaDtzp0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369E115/FBFEB76403C211EF9713C10C017001B1/S9EnC3AP8p0YQj8YO5-Ss2iH1t0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369E115/FBFEB76403C211EF9713C10C017001B1/S9EnC3AP8p0YQj8YO5-Ss2iH1t0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/S9EnC3AP8p0YQj8YO5-Ss2iH1t0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 698 (0x2ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369E115AF, serialNumber=4BD1270B700FF29D18423F183B9F92B36887D6DD
        Validity
            Not Before: Mar  2 02:53:33 2026 GMT
            Not After : Mar  4 02:53:33 2026 GMT
        Subject: CN=69a4fbae-f920
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f9:fe:e9:1f:34:9f:8e:d5:e3:35:54:f4:57:
                    ef:d6:6a:7b:e6:3c:ce:2c:b9:f6:46:ae:19:32:ac:
                    a2:28:f5:53:4e:f0:e0:a0:a3:cf:ec:a6:55:0a:72:
                    b1:ac:e5:a3:13:f4:f8:76:3e:ed:38:b2:eb:d1:5b:
                    76:ca:c6:15:84:62:8e:53:6d:60:f1:1c:76:8a:25:
                    4b:b0:9e:fd:1e:fd:30:4f:fc:82:bf:ee:3f:c3:87:
                    11:9f:14:18:a3:cb:bf:3a:89:fb:ae:db:b1:01:85:
                    2f:12:b6:44:16:9a:17:19:e6:c1:e3:8e:f7:7d:fd:
                    e6:6c:ae:0c:4d:57:08:62:64:74:6b:8d:e2:6c:b2:
                    2e:87:5f:3f:37:6b:a0:e5:cc:aa:e7:2d:6a:c8:0b:
                    a8:3b:ad:98:54:40:3c:d7:45:74:16:21:b4:4e:65:
                    60:dd:b9:bf:af:e4:68:dc:61:3b:d4:34:b5:24:05:
                    2e:6b:3b:0c:33:b1:65:c4:01:86:bc:1a:de:51:7d:
                    d3:69:c3:e1:00:36:5d:e4:8a:33:0e:7d:f4:f0:5a:
                    6e:5f:ce:f1:e1:2c:d2:f4:5b:c8:ee:7d:d1:6f:79:
                    2f:a2:f5:70:58:4a:58:1f:b1:c3:9d:01:8c:62:38:
                    e2:2b:10:58:d5:cf:f6:4b:d4:07:8f:f1:4f:da:7a:
                    f4:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:8A:F6:3C:2E:00:32:B6:05:5A:37:75:91:A4:B2:01:09:CF:4F:2F
            X509v3 Authority Key Identifier:
                keyid:4B:D1:27:0B:70:0F:F2:9D:18:42:3F:18:3B:9F:92:B3:68:87:D6:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369E115/FBFEB76403C211EF9713C10C017001B1/S9EnC3AP8p0YQj8YO5-Ss2iH1t0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/S9EnC3AP8p0YQj8YO5-Ss2iH1t0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369E115/FBFEB76403C211EF9713C10C017001B1/S9EnC3AP8p0YQj8YO5-Ss2iH1t0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:ff:6f:78:0b:ec:51:b7:b9:54:8c:1c:56:cc:26:18:f6:a0:
         1e:7a:c1:cd:90:2f:ef:ab:8c:32:32:a8:ec:be:d2:ba:4f:e5:
         b7:e6:52:e1:55:bd:72:61:80:0a:a3:3d:dc:a7:8c:da:5c:68:
         ab:fa:23:d2:4b:8e:3a:28:98:bf:83:ff:d9:0d:ba:b8:f0:78:
         39:60:db:73:56:f5:93:3a:7c:a3:d8:19:96:77:10:8b:07:d9:
         cb:2b:d2:c3:43:4b:94:39:73:30:f2:8d:e6:dd:d8:e5:6c:e3:
         24:91:3a:4d:71:4d:9e:f8:39:d0:c7:1b:24:2c:48:48:74:34:
         f8:ad:57:0e:eb:c2:ba:bb:3a:7b:66:e6:d4:0d:b9:2f:a1:ce:
         8d:dc:80:92:f8:66:ce:f1:36:00:9e:ea:fd:eb:b1:b1:54:2a:
         6f:e5:2b:c4:b4:84:b6:88:99:00:57:39:f8:51:d8:49:d5:bd:
         53:32:f1:be:7a:c2:a4:2d:c7:42:30:34:7d:66:76:5c:1a:cb:
         d5:83:0b:4e:42:be:23:0b:a7:1d:b9:68:d1:58:dd:1e:34:78:
         c2:5d:56:30:2d:0a:97:b2:e9:e4:64:cd:01:dc:95:e9:5f:32:
         51:db:8e:3f:83:1c:a2:20:23:37:05:90:23:e6:a9:2f:ce:18:
         79:6c:a3:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:11:48 2026 by rpki-client