Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A75D2/3CFEC410059311F19F65F3D6DAE4EC9C/heLrQoy_jUsx-aZGYrwHtsPuQRE.mft
File:                     heLrQoy_jUsx-aZGYrwHtsPuQRE.mft (raw, json)
Hash identifier:          thN/TPfAt87FyyzHN0N9oZz3ud6MFOlOK/On8fbOQpE=
Subject key identifier:   FA:B1:C1:F3:EB:08:A2:40:C2:7B:33:53:2B:E4:6D:A1:12:BF:CD:43
Authority key identifier: 85:E2:EB:42:8C:BF:8D:4B:31:F9:A6:46:62:BC:07:B6:C3:EE:41:11
Certificate issuer:       /CN=F36A75D2AF/serialNumber=85E2EB428CBF8D4B31F9A64662BC07B6C3EE4111
Certificate serial:       17
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/heLrQoy_jUsx-aZGYrwHtsPuQRE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A75D2/3CFEC410059311F19F65F3D6DAE4EC9C/heLrQoy_jUsx-aZGYrwHtsPuQRE.mft
Manifest number:          16
Signing time:             Sun 01 Mar 2026 03:41:15 +0000
Manifest this update:     Sun 01 Mar 2026 03:41:15 +0000
Manifest next update:     Tue 03 Mar 2026 03:41:15 +0000
Files and hashes:         1: heLrQoy_jUsx-aZGYrwHtsPuQRE.crl (hash: aBy1ZUC3TNuyNUBzuqnVFh9hci9/BNjmSLctgWB+WyI=)
                          2: 5BE72858059411F1AB4403DFDAE4EC9C.roa (hash: 0OaZbwlKspj+/PLiCfmeszFXjMcg4792APuxNjcF8Pg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A75D2/3CFEC410059311F19F65F3D6DAE4EC9C/heLrQoy_jUsx-aZGYrwHtsPuQRE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A75D2/3CFEC410059311F19F65F3D6DAE4EC9C/heLrQoy_jUsx-aZGYrwHtsPuQRE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/heLrQoy_jUsx-aZGYrwHtsPuQRE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 03 Mar 2026 00:07:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23 (0x17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A75D2AF, serialNumber=85E2EB428CBF8D4B31F9A64662BC07B6C3EE4111
        Validity
            Not Before: Mar  1 03:41:15 2026 GMT
            Not After : Mar  3 03:41:15 2026 GMT
        Subject: CN=69a3b55b-e1c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:63:31:8b:e4:29:12:40:25:d5:ad:a9:4d:0b:
                    08:85:67:f4:9e:0a:5c:a8:b0:ed:6e:ad:ab:f2:fa:
                    77:fd:10:68:b5:b0:85:8d:36:cc:40:22:c6:a8:3f:
                    d3:87:97:ef:7a:ad:b2:6e:f7:3b:a3:f7:e5:84:fb:
                    fe:cd:73:45:c0:2c:3f:81:98:af:e1:2c:45:ad:96:
                    87:b0:6a:6e:d6:58:77:4a:23:ae:42:23:91:78:3a:
                    9b:19:13:72:68:8b:a6:e5:4e:34:d6:97:b2:b7:c8:
                    0e:15:95:dd:05:8e:d5:2c:01:c5:30:96:83:fa:8c:
                    38:e5:4f:27:43:83:0f:7b:a8:9c:18:e7:88:96:51:
                    2b:54:c4:ce:7d:c7:d0:a5:c4:78:a6:4d:fc:96:f9:
                    24:25:f0:db:83:45:18:ee:c9:a0:79:65:f9:aa:89:
                    6f:c1:18:c6:93:cd:34:86:a6:1c:80:84:04:b3:33:
                    1b:cd:be:62:f7:53:40:c8:c0:90:ff:95:dd:4e:ca:
                    34:77:a6:5e:bb:b3:46:c6:2a:1f:51:d8:58:25:9a:
                    66:c4:df:f2:8f:de:24:86:9f:68:ac:db:98:b0:86:
                    8f:a9:99:9a:1d:fc:c9:e9:29:f9:96:c2:45:56:76:
                    24:e9:98:e3:13:44:93:bf:39:fb:64:ca:59:7c:fd:
                    cb:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:B1:C1:F3:EB:08:A2:40:C2:7B:33:53:2B:E4:6D:A1:12:BF:CD:43
            X509v3 Authority Key Identifier:
                keyid:85:E2:EB:42:8C:BF:8D:4B:31:F9:A6:46:62:BC:07:B6:C3:EE:41:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A75D2/3CFEC410059311F19F65F3D6DAE4EC9C/heLrQoy_jUsx-aZGYrwHtsPuQRE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/heLrQoy_jUsx-aZGYrwHtsPuQRE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A75D2/3CFEC410059311F19F65F3D6DAE4EC9C/heLrQoy_jUsx-aZGYrwHtsPuQRE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:4e:c0:1c:96:df:59:4a:b2:0d:4a:6f:13:16:18:6d:a3:7c:
         79:f9:b6:77:cc:16:44:ce:20:a5:7d:66:8d:34:dc:06:7b:3d:
         e0:5f:a3:39:02:1a:0c:f1:94:79:67:96:ec:07:0c:74:b9:fe:
         d2:e2:f0:cb:7c:41:38:65:37:8a:f2:87:ee:e9:68:08:b0:cd:
         76:fc:8b:1e:87:57:ed:e0:6e:95:54:3e:fa:97:22:1d:bf:6a:
         5b:6d:81:c0:2c:5b:43:99:67:a0:13:7f:59:0f:0b:29:5d:fe:
         c7:5b:e4:4e:5a:9d:43:7a:be:ed:b5:4a:3c:04:9b:13:1d:74:
         95:ca:af:78:2f:b0:74:9a:49:c1:ed:d8:af:4f:cf:a6:f6:dc:
         86:d1:ea:da:ce:b1:bc:42:9e:ae:6b:8f:c1:ae:8c:fc:7f:17:
         b6:98:21:64:1b:23:f0:de:30:07:21:1e:c3:8b:4d:55:8c:ea:
         0c:d7:cb:c2:39:93:a0:5b:9f:5c:11:bd:79:a7:9e:ad:27:bb:
         ae:28:78:17:5a:a2:91:0e:e0:b8:4b:c4:ce:cb:23:a0:cb:65:
         86:f2:d6:4c:6d:13:ee:29:8a:3c:77:a1:b8:22:b5:a4:71:b5:
         5b:ad:b4:df:51:7e:1c:f8:19:0c:d4:c5:14:c1:e1:50:c9:a7:
         4f:f0:3c:43
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIBFzANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZB
NzVEMkFGMTEwLwYDVQQFEyg4NUUyRUI0MjhDQkY4RDRCMzFGOUE2NDY2MkJDMDdC
NkMzRUU0MTExMB4XDTI2MDMwMTAzNDExNVoXDTI2MDMwMzAzNDExNVowGDEWMBQG
A1UEAxMNNjlhM2I1NWItZTFjOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALhjMYvkKRJAJdWtqU0LCIVn9J4KXKiw7W6tq/L6d/0QaLWwhY02zEAixqg/
04eX73qtsm73O6P35YT7/s1zRcAsP4GYr+EsRa2Wh7BqbtZYd0ojrkIjkXg6mxkT
cmiLpuVONNaXsrfIDhWV3QWO1SwBxTCWg/qMOOVPJ0ODD3uonBjniJZRK1TEzn3H
0KXEeKZN/Jb5JCXw24NFGO7JoHll+aqJb8EYxpPNNIamHICEBLMzG82+YvdTQMjA
kP+V3U7KNHemXruzRsYqH1HYWCWaZsTf8o/eJIafaKzbmLCGj6mZmh38yekp+ZbC
RVZ2JOmY4xNEk785+2TKWXz9y8kCAwEAAaOCArgwggK0MB0GA1UdDgQWBBT6scHz
6wiiQMJ7M1Mr5G2hEr/NQzAfBgNVHSMEGDAWgBSF4utCjL+NSzH5pkZivAe2w+5B
ETAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2QTc1RDIvM0NGRUM0MTAwNTkzMTFGMTlGNjVGM0Q2REFFNEVDOUMvaGVMclFv
eV9qVXN4LWFaR1lyd0h0c1B1UVJFLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvaGVMclFveV9qVXN4LWFaR1lyd0h0c1B1UVJFLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUF
BzALhn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzZBNzVEMi8zQ0ZFQzQxMDA1OTMxMUYxOUY2NUYzRDZEQUU0
RUM5Qy9oZUxyUW95X2pVc3gtYVpHWXJ3SHRzUHVRUkUubWZ0MDUGCCsGAQUFBzAN
hilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBAGBOwByW31lKsg1KbxMWGG2jfHn5tnfM
FkTOIKV9Zo003AZ7PeBfozkCGgzxlHlnluwHDHS5/tLi8Mt8QThlN4ryh+7paAiw
zXb8ix6HV+3gbpVUPvqXIh2/alttgcAsW0OZZ6ATf1kPCyld/sdb5E5anUN6vu21
SjwEmxMddJXKr3gvsHSaScHt2K9Pz6b23IbR6trOsbxCnq5rj8GujPx/F7aYIWQb
I/DeMAchHsOLTVWM6gzXy8I5k6Bbn1wRvXmnnq0nu64oeBdaopEO4LhLxM7LI6DL
ZYby1kxtE+4pijx3obgitaRxtVuttN9Rfhz4GQzUxRTB4VDJp0/wPEM=
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:17:57 2026 by rpki-client