Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A39CE/792DDDBE0B5311EEA6555E5D4AD9E6FC/3YlMw4XaLW71JrsLssqqX8pm8MM.mft
File:                     3YlMw4XaLW71JrsLssqqX8pm8MM.mft (raw, json)
Hash identifier:          YzrDYkU6tBcOYRVnaHQXpVWZAYAKFzxmWg2y+9YZcnQ=
Subject key identifier:   86:1B:0A:27:17:5D:E0:94:10:13:88:8C:DD:4D:35:B4:47:28:D1:01
Authority key identifier: DD:89:4C:C3:85:DA:2D:6E:F5:26:BB:0B:B2:CA:AA:5F:CA:66:F0:C3
Certificate issuer:       /CN=F36A39CEAF/serialNumber=DD894CC385DA2D6EF526BB0BB2CAAA5FCA66F0C3
Certificate serial:       03FA
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/3YlMw4XaLW71JrsLssqqX8pm8MM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A39CE/792DDDBE0B5311EEA6555E5D4AD9E6FC/3YlMw4XaLW71JrsLssqqX8pm8MM.mft
Manifest number:          03F9
Signing time:             Sun 01 Mar 2026 02:29:02 +0000
Manifest this update:     Sun 01 Mar 2026 02:29:01 +0000
Manifest next update:     Tue 03 Mar 2026 02:29:01 +0000
Files and hashes:         1: 3YlMw4XaLW71JrsLssqqX8pm8MM.crl (hash: 1oyKRoVDfSwFpgOmO+F7+Wcpvs0l47FEp2tGhcbd14E=)
                          2: A0B834A6403611EF97C8EE46762E951A.roa (hash: kJ/+tKAV2nU5Yw7yHfU4bK7cxohBTA9n07WDnp1GBUA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A39CE/792DDDBE0B5311EEA6555E5D4AD9E6FC/3YlMw4XaLW71JrsLssqqX8pm8MM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A39CE/792DDDBE0B5311EEA6555E5D4AD9E6FC/3YlMw4XaLW71JrsLssqqX8pm8MM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/3YlMw4XaLW71JrsLssqqX8pm8MM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 03 Mar 2026 00:07:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1018 (0x3fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A39CEAF, serialNumber=DD894CC385DA2D6EF526BB0BB2CAAA5FCA66F0C3
        Validity
            Not Before: Mar  1 02:29:01 2026 GMT
            Not After : Mar  3 02:29:01 2026 GMT
        Subject: CN=69a3a46e-561e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:3f:f1:a0:7e:d1:a8:88:8a:eb:20:9e:55:fd:
                    b1:c6:a2:87:3f:c4:10:82:80:20:69:44:23:f6:03:
                    5a:07:3a:23:c0:ad:20:eb:e8:48:b7:aa:11:0a:b0:
                    2e:42:86:a9:6b:5c:fe:2d:e0:6c:76:5a:31:05:11:
                    64:ea:04:cc:c7:c1:ce:10:3a:d7:b0:53:8d:2f:d1:
                    c8:6c:c1:34:7d:06:4b:47:e0:dd:24:a8:78:79:64:
                    24:cb:86:bd:b4:bc:da:64:69:18:a7:c1:06:52:20:
                    0c:29:13:fb:ad:e3:4a:1e:fe:47:0d:02:22:f3:a5:
                    98:e5:91:88:de:06:8d:40:35:ab:39:98:17:e1:e1:
                    8a:50:66:62:30:c1:32:d2:c5:8e:96:94:89:ab:45:
                    40:d1:72:82:02:35:f8:8c:91:d7:d3:6c:ae:0f:39:
                    b3:a9:2d:53:aa:cb:fe:b8:e3:6b:a7:68:5f:30:5d:
                    35:52:fe:ee:ec:0a:03:1f:d3:70:fa:2a:7d:4f:48:
                    38:ad:ac:44:69:a4:cc:eb:49:e3:f9:6d:6c:fb:fc:
                    e6:58:64:58:96:46:1b:ec:2c:bc:1e:c3:cd:b4:81:
                    a5:ba:65:26:58:1b:05:c0:6f:17:0d:d5:e3:b4:94:
                    bc:70:52:6d:9e:10:a2:ad:cf:45:60:78:37:e1:c7:
                    e1:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:1B:0A:27:17:5D:E0:94:10:13:88:8C:DD:4D:35:B4:47:28:D1:01
            X509v3 Authority Key Identifier:
                keyid:DD:89:4C:C3:85:DA:2D:6E:F5:26:BB:0B:B2:CA:AA:5F:CA:66:F0:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A39CE/792DDDBE0B5311EEA6555E5D4AD9E6FC/3YlMw4XaLW71JrsLssqqX8pm8MM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3YlMw4XaLW71JrsLssqqX8pm8MM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A39CE/792DDDBE0B5311EEA6555E5D4AD9E6FC/3YlMw4XaLW71JrsLssqqX8pm8MM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:6b:b3:cf:e7:88:40:61:fd:de:32:f1:58:8d:11:3f:c9:f9:
         41:2d:c4:ea:b7:6a:f2:c4:c9:2d:b8:9c:24:01:ce:39:3e:36:
         43:d4:4b:c7:20:72:a5:fc:12:89:79:ca:0b:ef:58:7c:78:eb:
         a4:48:9b:41:07:b6:32:3e:7e:2f:af:07:43:be:8e:ec:04:17:
         92:45:5c:4e:65:79:79:bd:0a:94:0c:2c:8f:ad:e6:f3:c5:7f:
         a9:2d:74:67:14:a6:f6:52:a5:13:7a:63:94:07:e0:18:98:ac:
         12:af:82:2a:54:b8:5c:c3:c5:ad:74:af:7c:e4:c7:70:f2:cb:
         e5:31:7c:38:af:df:2b:ee:c9:7d:c3:7d:43:f6:74:73:b8:42:
         f4:b5:89:e7:7f:58:1b:b3:90:b7:62:47:a4:0a:1e:7f:ed:bb:
         19:c2:59:48:54:6a:dc:4e:f6:90:b8:2e:6f:2f:14:83:e2:a2:
         d7:5e:6f:bb:0b:bc:6a:1b:8d:e9:db:2a:3e:51:e1:f2:b1:f7:
         57:57:35:3d:9c:88:13:f0:19:3e:8b:84:ed:6b:a0:e0:ba:ce:
         6a:30:97:a3:a5:cb:04:f5:07:63:3d:79:75:80:54:08:0f:cb:
         e2:f7:ee:0e:f5:0b:45:5d:c1:48:72:64:b7:b5:1b:7f:5d:9b:
         18:2b:c0:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:15:41 2026 by rpki-client