Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A854F/5E87C042B73411EDA8D4CCA4F1222468/i-QDW-vJyDQotaJ76Fuslm125cs.mft
File:                     i-QDW-vJyDQotaJ76Fuslm125cs.mft (raw, json)
Hash identifier:          st4cVNEg9Q77r9pD9KSdrnC82zf1w5bHk686S6mPwyk=
Subject key identifier:   54:23:79:B1:28:BB:5F:4E:64:DC:F0:FE:10:0D:34:05:55:B5:BD:12
Authority key identifier: 8B:E4:03:5B:EB:C9:C8:34:28:B5:A2:7B:E8:5B:AC:96:6D:76:E5:CB
Certificate issuer:       /CN=F36A854FAF/serialNumber=8BE4035BEBC9C83428B5A27BE85BAC966D76E5CB
Certificate serial:       0479
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/i-QDW-vJyDQotaJ76Fuslm125cs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A854F/5E87C042B73411EDA8D4CCA4F1222468/i-QDW-vJyDQotaJ76Fuslm125cs.mft
Manifest number:          0473
Signing time:             Mon 02 Mar 2026 02:20:17 +0000
Manifest this update:     Mon 02 Mar 2026 02:20:17 +0000
Manifest next update:     Wed 04 Mar 2026 02:20:17 +0000
Files and hashes:         1: i-QDW-vJyDQotaJ76Fuslm125cs.crl (hash: PztuZjB72KBFDeOwX3/Z2HvgAj8Tb1iYpRN5AX+rwUY=)
                          2: 557725A0B21511EF88D2448C762E951A.roa (hash: opZztqXESofrVmYo2p5Jk1wm+34HapZU5YnopzpKiHA=)
                          3: 9394FD62B21511EFBC825D8E762E951A.roa (hash: lu1oced98iyT24G4vw7hwl0wpa8JR56UCd+rbr6ylXY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A854F/5E87C042B73411EDA8D4CCA4F1222468/i-QDW-vJyDQotaJ76Fuslm125cs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A854F/5E87C042B73411EDA8D4CCA4F1222468/i-QDW-vJyDQotaJ76Fuslm125cs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/i-QDW-vJyDQotaJ76Fuslm125cs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1145 (0x479)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A854FAF, serialNumber=8BE4035BEBC9C83428B5A27BE85BAC966D76E5CB
        Validity
            Not Before: Mar  2 02:20:17 2026 GMT
            Not After : Mar  4 02:20:17 2026 GMT
        Subject: CN=69a4f3e1-5142
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:99:2d:a3:e8:60:48:ba:a7:4b:06:83:29:eb:
                    dd:a5:81:c9:95:bf:5e:af:f9:06:b2:5c:a6:2c:6e:
                    38:23:e6:ce:56:0e:75:cc:a9:82:2e:1e:a1:02:f1:
                    06:17:51:23:40:48:f7:99:d2:51:5a:12:4c:d1:f8:
                    cc:90:5d:b7:18:a2:ea:01:97:d3:d1:03:6c:95:a4:
                    15:08:f6:ec:de:f6:61:2d:ac:5f:cd:9d:9d:6f:35:
                    00:52:1a:54:97:9d:a1:02:8e:43:3c:14:82:46:17:
                    bc:ae:1d:5d:23:03:36:87:d1:b4:ae:8c:93:3c:21:
                    25:af:bf:aa:90:3d:d4:0a:eb:c6:99:5d:38:a2:88:
                    57:d2:a8:45:c7:67:cc:0e:22:10:76:94:2a:99:9d:
                    8f:30:e3:16:a1:d8:f7:d5:d6:e5:99:9e:21:48:26:
                    91:6b:20:e8:82:f8:70:bb:7f:71:ac:5c:64:91:9a:
                    e5:85:df:48:6f:e4:0d:21:f7:2e:46:2e:b1:21:cb:
                    a8:10:48:04:b2:e5:8e:a6:b0:2c:6d:f7:fe:39:ab:
                    26:da:0c:1a:dc:23:5e:94:e7:70:07:16:34:6a:d8:
                    14:8e:92:76:01:5a:00:47:cf:0d:b6:f1:8c:2c:54:
                    37:96:5a:d3:e2:b9:a5:31:5e:63:19:2c:38:d9:f1:
                    c2:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:23:79:B1:28:BB:5F:4E:64:DC:F0:FE:10:0D:34:05:55:B5:BD:12
            X509v3 Authority Key Identifier:
                keyid:8B:E4:03:5B:EB:C9:C8:34:28:B5:A2:7B:E8:5B:AC:96:6D:76:E5:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A854F/5E87C042B73411EDA8D4CCA4F1222468/i-QDW-vJyDQotaJ76Fuslm125cs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/i-QDW-vJyDQotaJ76Fuslm125cs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A854F/5E87C042B73411EDA8D4CCA4F1222468/i-QDW-vJyDQotaJ76Fuslm125cs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:1c:ab:37:e2:d7:0c:44:fa:3e:57:00:d0:c0:e2:59:e4:f8:
         d7:5e:52:8e:f2:c2:00:3b:53:b6:1f:6b:3f:7f:58:6a:72:24:
         1f:21:d2:90:dc:f3:78:20:a0:84:ce:44:1a:45:89:a9:f4:85:
         ed:a1:de:72:2f:a0:b6:9b:ff:d0:35:ca:ea:3c:c2:ea:44:d4:
         8e:f6:b1:0a:94:1e:68:2e:20:6e:1d:bb:eb:35:73:82:2a:e2:
         cb:b1:60:f5:0a:d1:65:af:16:72:2e:7c:fa:8d:29:d7:d9:e4:
         c6:59:01:d8:37:a9:ae:6d:a2:05:c5:72:3d:95:8a:f7:8a:1b:
         aa:55:cb:81:f4:a6:5a:82:0b:79:ae:61:0a:f7:26:50:fc:5b:
         53:b6:98:83:49:ff:87:41:f4:ea:61:f0:1a:10:cc:d7:4f:04:
         2a:00:aa:1b:ed:85:c9:1d:fa:70:80:e1:10:c6:9b:bd:bd:e1:
         a2:be:a4:7d:38:80:25:e9:81:ed:82:84:a8:63:f7:c0:2a:e5:
         75:64:a5:96:91:fc:1e:ee:aa:39:78:53:fc:da:a5:b5:45:d4:
         de:29:ca:62:d3:a1:5c:54:d1:dd:e5:79:aa:0a:e7:ff:68:f8:
         30:79:92:73:2b:39:3b:b9:e1:f4:44:f0:94:c6:df:b8:29:de:
         9a:d7:32:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:23:02 2026 by rpki-client