Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A141D/F5488EF440C711EEB59A4D534AD9E6FC/_lkJnrBGBmU3CfmlmpxGdQcb7L0.mft
File:                     _lkJnrBGBmU3CfmlmpxGdQcb7L0.mft (raw, json)
Hash identifier:          0eXkFft5RRVvxn6EpVhgiTrZxrv2lbYzbCtXppYE8fw=
Subject key identifier:   2E:01:D0:56:17:D9:69:26:59:EA:DB:7B:1B:32:19:05:DD:1F:0F:98
Authority key identifier: FE:59:09:9E:B0:46:06:65:37:09:F9:A5:9A:9C:46:75:07:1B:EC:BD
Certificate issuer:       /CN=F36A141DAF/serialNumber=FE59099EB04606653709F9A59A9C4675071BECBD
Certificate serial:       03B6
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/_lkJnrBGBmU3CfmlmpxGdQcb7L0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A141D/F5488EF440C711EEB59A4D534AD9E6FC/_lkJnrBGBmU3CfmlmpxGdQcb7L0.mft
Manifest number:          03B5
Signing time:             Mon 02 Mar 2026 02:35:27 +0000
Manifest this update:     Mon 02 Mar 2026 02:35:26 +0000
Manifest next update:     Wed 04 Mar 2026 02:35:26 +0000
Files and hashes:         1: _lkJnrBGBmU3CfmlmpxGdQcb7L0.crl (hash: Z9P7zn+WLtYKrHvtGCs3cmkP1NKCwqSdCVwIfhhqcgw=)
                          2: A6CB045440CD11EEA84BD2644AD9E6FC.roa (hash: k2NQBaUwb1pqhxKitutyFUj84i7cH4npO1gBOUjSKLM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A141D/F5488EF440C711EEB59A4D534AD9E6FC/_lkJnrBGBmU3CfmlmpxGdQcb7L0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A141D/F5488EF440C711EEB59A4D534AD9E6FC/_lkJnrBGBmU3CfmlmpxGdQcb7L0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/_lkJnrBGBmU3CfmlmpxGdQcb7L0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 950 (0x3b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A141DAF, serialNumber=FE59099EB04606653709F9A59A9C4675071BECBD
        Validity
            Not Before: Mar  2 02:35:26 2026 GMT
            Not After : Mar  4 02:35:26 2026 GMT
        Subject: CN=69a4f76e-c742
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:45:0f:d8:7c:ff:bc:2d:cb:0f:39:de:30:83:
                    b7:e0:e7:bd:9d:ee:e7:1a:e5:0b:c1:cf:1e:64:e2:
                    61:fd:05:59:45:4b:0e:fc:7a:f2:b8:61:39:2d:60:
                    b3:96:f1:e9:71:6b:c6:e2:06:9e:f8:0f:d8:b6:f6:
                    22:81:3f:3a:e5:c0:ce:f4:43:1d:d9:00:e2:7e:e6:
                    e1:00:90:ed:d7:49:50:b2:6a:ed:03:e5:0c:3f:57:
                    7d:21:69:5f:13:7f:7c:cf:5c:53:a3:57:d8:dd:0a:
                    f7:20:51:23:4d:37:09:3f:60:09:93:29:66:0c:44:
                    0e:cd:d2:77:bd:bd:fd:1f:88:e5:fe:b1:f2:af:90:
                    ce:85:b6:e5:d0:17:eb:e6:cd:dd:76:80:71:95:36:
                    f8:43:b2:68:ef:5d:4f:71:62:cb:7a:8a:ed:bb:c0:
                    42:c8:f2:11:99:23:0b:7d:1f:71:0f:47:2a:37:71:
                    1d:38:3a:73:2f:a5:03:4e:e2:90:49:ba:79:4f:20:
                    9a:e2:7d:cc:f6:8b:6a:db:75:48:97:a4:39:b7:d4:
                    59:d7:b2:72:0b:3e:5b:65:39:4d:ee:51:67:5c:13:
                    f5:bb:e0:3b:39:d8:ce:03:ff:30:08:fa:d0:c2:c6:
                    55:68:c2:68:6f:7e:da:96:e7:3b:f7:7d:3a:af:0c:
                    9c:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:01:D0:56:17:D9:69:26:59:EA:DB:7B:1B:32:19:05:DD:1F:0F:98
            X509v3 Authority Key Identifier:
                keyid:FE:59:09:9E:B0:46:06:65:37:09:F9:A5:9A:9C:46:75:07:1B:EC:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A141D/F5488EF440C711EEB59A4D534AD9E6FC/_lkJnrBGBmU3CfmlmpxGdQcb7L0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_lkJnrBGBmU3CfmlmpxGdQcb7L0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A141D/F5488EF440C711EEB59A4D534AD9E6FC/_lkJnrBGBmU3CfmlmpxGdQcb7L0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:52:58:c4:80:43:6f:6e:68:24:3b:4e:a0:87:8b:b9:8e:4f:
         24:97:5a:f6:e7:ba:bc:de:02:d9:1b:7f:4e:b4:9b:8b:7c:ab:
         d5:86:21:be:ae:3d:bd:8b:71:57:c2:32:41:a8:70:1c:f3:f1:
         09:5e:6b:82:12:73:27:38:f1:29:a5:fe:52:f0:56:67:db:82:
         32:18:b6:c9:83:86:4e:71:4b:b0:70:29:39:ce:04:ef:c5:f9:
         69:f3:ff:f1:ab:16:21:bf:fb:3a:0f:53:70:e3:d8:2c:41:15:
         d3:e7:9e:b1:16:0c:dd:9a:44:45:89:69:27:e9:98:6b:b6:4d:
         81:8e:98:2f:51:3f:e6:a7:7f:5f:97:e8:82:77:9b:0f:df:b2:
         55:f0:a6:67:7e:ee:ca:6b:4d:ca:f2:e8:e2:57:c1:e9:51:a3:
         bb:e7:a1:45:88:a7:68:2a:fa:5e:81:8a:66:0d:84:23:df:1c:
         22:6b:f6:51:80:0b:b8:fe:53:5a:37:4f:cc:a4:28:0f:d3:e5:
         b0:ad:66:c2:e8:b2:8f:14:15:c8:a4:35:98:26:c7:2e:dc:27:
         75:2d:cc:38:ff:ea:35:53:8a:03:ea:2c:8a:13:0d:37:00:04:
         d1:8f:54:a8:ac:45:c4:ad:bf:6e:0b:86:0e:d2:d2:d2:93:bd:
         38:6d:46:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:14:29 2026 by rpki-client