Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A8A05/ED868168816111EF972F4779762E951A/3tjUZmQoMBoc4GZckKo0Jgr_74k.mft
File:                     3tjUZmQoMBoc4GZckKo0Jgr_74k.mft (raw, json)
Hash identifier:          A3A+oqLmaKQlIP5z9znvKsHHg/kFC9jpHZq0kmTa/Gk=
Subject key identifier:   19:1E:2B:33:79:3B:D3:B8:61:F7:38:2F:D6:34:98:0C:CB:B6:F9:88
Authority key identifier: DE:D8:D4:66:64:28:30:1A:1C:E0:66:5C:90:AA:34:26:0A:FF:EF:89
Certificate issuer:       /CN=F36A8A05AF/serialNumber=DED8D4666428301A1CE0665C90AA34260AFFEF89
Certificate serial:       0212
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/3tjUZmQoMBoc4GZckKo0Jgr_74k.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A8A05/ED868168816111EF972F4779762E951A/3tjUZmQoMBoc4GZckKo0Jgr_74k.mft
Manifest number:          0211
Signing time:             Mon 02 Mar 2026 03:07:54 +0000
Manifest this update:     Mon 02 Mar 2026 03:07:53 +0000
Manifest next update:     Wed 04 Mar 2026 03:07:53 +0000
Files and hashes:         1: 3tjUZmQoMBoc4GZckKo0Jgr_74k.crl (hash: Zh1cFGYt2r7nAn5pwH48LhjbkxLHF/1/bbPuA8F25/I=)
                          2: 9058BEEA816411EF8E2AA088762E951A.roa (hash: RCn22Xwu4T2MS/ROjl1vK38sisW96USMCz48c97gNCE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A8A05/ED868168816111EF972F4779762E951A/3tjUZmQoMBoc4GZckKo0Jgr_74k.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A8A05/ED868168816111EF972F4779762E951A/3tjUZmQoMBoc4GZckKo0Jgr_74k.mft
                          rsync://rpki.afrinic.net/repository/afrinic/3tjUZmQoMBoc4GZckKo0Jgr_74k.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 530 (0x212)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A8A05AF, serialNumber=DED8D4666428301A1CE0665C90AA34260AFFEF89
        Validity
            Not Before: Mar  2 03:07:53 2026 GMT
            Not After : Mar  4 03:07:53 2026 GMT
        Subject: CN=69a4ff0a-14c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:96:d2:35:49:05:cf:6f:d1:3f:7c:90:bb:0c:
                    3c:a5:a7:dc:45:c5:d4:67:b9:41:52:c4:08:ab:e5:
                    a3:93:9e:82:8c:ef:88:65:8e:5b:5b:f2:b2:bb:c2:
                    77:f8:c9:e0:8a:fe:02:e8:e1:e8:29:f4:7b:24:50:
                    e1:7b:a0:f3:99:be:3a:6e:e1:94:08:8f:5a:0a:6f:
                    b9:65:a6:ff:03:c7:1b:88:21:68:cf:24:17:49:91:
                    14:7a:1f:42:fb:ae:27:8b:13:c9:7c:8f:ba:ea:41:
                    04:aa:66:42:23:06:cf:52:2c:5f:35:7c:15:68:bd:
                    80:cb:7e:3d:ac:48:d9:ca:ea:8e:34:4c:fb:cb:26:
                    df:fc:02:7f:0d:e7:90:51:27:6e:ef:d5:90:08:24:
                    41:53:94:fd:e4:19:49:b5:c3:d0:2a:af:38:5d:93:
                    39:02:bf:31:45:53:1b:a8:1b:ac:23:52:de:76:f6:
                    5a:36:c4:ec:a9:a2:46:a7:61:54:7b:45:c4:3d:71:
                    a7:74:e2:54:0d:fe:09:2f:1b:4d:56:ca:8a:ed:2c:
                    90:24:45:2c:49:95:44:f7:b5:07:62:ab:f5:5a:33:
                    ed:09:13:88:d6:19:54:7f:58:ac:43:06:84:8d:56:
                    b7:4d:5f:46:9a:f4:40:bf:07:e6:d6:a3:dc:98:98:
                    95:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:1E:2B:33:79:3B:D3:B8:61:F7:38:2F:D6:34:98:0C:CB:B6:F9:88
            X509v3 Authority Key Identifier:
                keyid:DE:D8:D4:66:64:28:30:1A:1C:E0:66:5C:90:AA:34:26:0A:FF:EF:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A8A05/ED868168816111EF972F4779762E951A/3tjUZmQoMBoc4GZckKo0Jgr_74k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3tjUZmQoMBoc4GZckKo0Jgr_74k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A8A05/ED868168816111EF972F4779762E951A/3tjUZmQoMBoc4GZckKo0Jgr_74k.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:69:30:d7:f7:c2:e5:e3:59:9b:27:dc:6d:18:c5:d7:44:93:
         2f:21:63:4c:19:71:0c:7d:0b:a3:a7:67:2d:4f:13:d7:18:81:
         10:51:22:3f:07:27:ac:ee:7a:7d:3e:af:c5:dc:a6:20:d8:c7:
         d9:87:c7:0c:5c:a2:f2:93:08:92:af:b6:ca:2d:71:01:d3:6c:
         85:c6:48:d8:ee:b4:5b:7b:2b:00:88:04:a1:aa:58:47:a3:ec:
         b9:8a:f4:6e:76:cc:11:90:12:58:66:7e:e6:d5:28:0d:e6:c8:
         98:a6:bc:97:08:24:31:e3:2f:09:43:2b:c9:b2:34:1b:15:fd:
         b2:22:a7:11:91:5a:f2:14:3b:54:32:ce:8f:e5:fd:09:f3:02:
         bc:5b:da:6b:7c:3b:5a:5f:d0:ca:65:4b:57:b6:2c:33:78:96:
         42:03:68:65:ad:06:34:db:33:2e:fb:c5:8d:c6:b6:bb:46:3b:
         08:72:4b:30:e4:6c:c4:5c:b1:89:bb:f2:8b:2d:0b:61:5e:5f:
         1a:38:d0:d3:be:ee:33:bb:d0:8d:d6:ea:ff:68:26:47:ce:37:
         d5:da:5e:a8:90:5a:db:68:72:fc:4e:a2:5f:3d:25:74:eb:17:
         c1:df:02:19:be:d4:c0:cc:e3:c3:4e:72:b5:f3:9a:9e:cd:bd:
         42:1b:eb:3a
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAhIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QThBMDVBRjExMC8GA1UEBRMoREVEOEQ0NjY2NDI4MzAxQTFDRTA2NjVDOTBBQTM0
MjYwQUZGRUY4OTAeFw0yNjAzMDIwMzA3NTNaFw0yNjAzMDQwMzA3NTNaMBgxFjAU
BgNVBAMTDTY5YTRmZjBhLTE0YzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC+ltI1SQXPb9E/fJC7DDylp9xFxdRnuUFSxAir5aOTnoKM74hljltb8rK7
wnf4yeCK/gLo4egp9HskUOF7oPOZvjpu4ZQIj1oKb7llpv8DxxuIIWjPJBdJkRR6
H0L7rieLE8l8j7rqQQSqZkIjBs9SLF81fBVovYDLfj2sSNnK6o40TPvLJt/8An8N
55BRJ27v1ZAIJEFTlP3kGUm1w9AqrzhdkzkCvzFFUxuoG6wjUt529lo2xOypokan
YVR7RcQ9cad04lQN/gkvG01WyortLJAkRSxJlUT3tQdiq/VaM+0JE4jWGVR/WKxD
BoSNVrdNX0aa9EC/B+bWo9yYmJWhAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUGR4r
M3k707hh9zgv1jSYDMu2+YgwHwYDVR0jBBgwFoAU3tjUZmQoMBoc4GZckKo0Jgr/
74kwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkE4QTA1L0VEODY4MTY4ODE2MTExRUY5NzJGNDc3OTc2MkU5NTFBLzN0alVa
bVFvTUJvYzRHWmNrS28wSmdyXzc0ay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzN0alVabVFvTUJvYzRHWmNrS28wSmdyXzc0ay5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QThBMDUvRUQ4NjgxNjg4MTYxMTFFRjk3MkY0Nzc5NzYy
RTk1MUEvM3RqVVptUW9NQm9jNEdaY2tLbzBKZ3JfNzRrLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQANaTDX98Ll41mbJ9xtGMXXRJMvIWNM
GXEMfQujp2ctTxPXGIEQUSI/Byes7np9Pq/F3KYg2MfZh8cMXKLykwiSr7bKLXEB
02yFxkjY7rRbeysAiAShqlhHo+y5ivRudswRkBJYZn7m1SgN5siYpryXCCQx4y8J
QyvJsjQbFf2yIqcRkVryFDtUMs6P5f0J8wK8W9prfDtaX9DKZUtXtiwzeJZCA2hl
rQY02zMu+8WNxra7RjsIcksw5GzEXLGJu/KLLQthXl8aONDTvu4zu9CN1ur/aCZH
zjfV2l6okFrbaHL8TqJfPSV06xfB3wIZvtTAzOPDTnK185qezb1CG+s6
-----END CERTIFICATE-----
Generated at Mon Mar 2 21:55:47 2026 by rpki-client