Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B4580/E19B7B22E21711EEA18E8ABF775412E6/LO0lCJLZepCqEzI6yk5F0lF2klg.mft
File:                     LO0lCJLZepCqEzI6yk5F0lF2klg.mft (raw, json)
Hash identifier:          U3SjtYXgmEsyN+DwevCeEAVqhwdDOuioj1ZU7OSQcDg=
Subject key identifier:   95:BB:02:92:A0:6D:79:D9:B8:E7:12:33:C6:27:23:DE:2D:45:93:A2
Authority key identifier: 2C:ED:25:08:92:D9:7A:90:AA:13:32:3A:CA:4E:45:D2:51:76:92:58
Certificate issuer:       /CN=F36B4580AF/serialNumber=2CED250892D97A90AA13323ACA4E45D251769258
Certificate serial:       02E0
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/LO0lCJLZepCqEzI6yk5F0lF2klg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B4580/E19B7B22E21711EEA18E8ABF775412E6/LO0lCJLZepCqEzI6yk5F0lF2klg.mft
Manifest number:          02DF
Signing time:             Mon 02 Mar 2026 02:50:28 +0000
Manifest this update:     Mon 02 Mar 2026 02:50:27 +0000
Manifest next update:     Wed 04 Mar 2026 02:50:27 +0000
Files and hashes:         1: LO0lCJLZepCqEzI6yk5F0lF2klg.crl (hash: qurPEngqRqivTiX1RTERigGW3kqkhZtTxRat+2FFmpM=)
                          2: 33CDD534E21811EEADAEADC1775412E6.roa (hash: zBCcaHSSJiFVaqIDbPbS61APz7NmOnVb/26SMlWLcvQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B4580/E19B7B22E21711EEA18E8ABF775412E6/LO0lCJLZepCqEzI6yk5F0lF2klg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B4580/E19B7B22E21711EEA18E8ABF775412E6/LO0lCJLZepCqEzI6yk5F0lF2klg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/LO0lCJLZepCqEzI6yk5F0lF2klg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 736 (0x2e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B4580AF, serialNumber=2CED250892D97A90AA13323ACA4E45D251769258
        Validity
            Not Before: Mar  2 02:50:27 2026 GMT
            Not After : Mar  4 02:50:27 2026 GMT
        Subject: CN=69a4faf4-dc72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:34:24:79:8a:42:88:ae:03:e3:14:fb:e9:62:
                    b0:b4:77:94:70:31:7b:b6:c5:92:6e:67:68:7a:4b:
                    37:4d:c3:19:db:a7:ae:f8:fc:68:18:35:c8:e4:8e:
                    d0:8d:b9:a0:10:a1:7c:b2:7d:2c:d6:8e:fe:63:91:
                    71:06:af:7e:79:aa:53:9b:12:30:44:56:04:70:ad:
                    81:22:6c:ab:5a:71:79:49:9a:5b:2f:a0:c1:d8:26:
                    1e:ad:45:d9:c0:b6:96:53:2e:75:01:6e:45:3f:02:
                    c0:7a:b7:44:25:ae:70:34:00:ba:5a:80:d4:ef:4b:
                    bf:8a:43:79:fe:80:e7:6d:46:17:c0:a6:ca:7d:5b:
                    63:c4:ac:37:8e:69:74:13:b7:ec:56:ee:8e:27:2c:
                    c7:e7:2d:79:77:6f:3f:20:14:fd:ed:ee:41:ea:39:
                    d4:53:55:4d:b5:27:26:0c:e4:4c:d0:34:e6:b0:b7:
                    e6:e4:c1:2e:e9:1e:87:6b:a2:88:d3:09:c6:bf:50:
                    d1:47:dc:94:79:11:a4:8d:f0:0d:ca:01:e1:4e:bd:
                    24:8f:67:e3:38:fd:69:d8:17:07:f1:e0:d4:35:5e:
                    10:d0:76:c2:0b:dc:03:18:50:43:22:3c:10:ea:58:
                    84:cc:03:cf:13:af:79:08:4c:da:f1:d6:3a:ce:f4:
                    ed:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:BB:02:92:A0:6D:79:D9:B8:E7:12:33:C6:27:23:DE:2D:45:93:A2
            X509v3 Authority Key Identifier:
                keyid:2C:ED:25:08:92:D9:7A:90:AA:13:32:3A:CA:4E:45:D2:51:76:92:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B4580/E19B7B22E21711EEA18E8ABF775412E6/LO0lCJLZepCqEzI6yk5F0lF2klg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LO0lCJLZepCqEzI6yk5F0lF2klg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B4580/E19B7B22E21711EEA18E8ABF775412E6/LO0lCJLZepCqEzI6yk5F0lF2klg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:42:77:08:73:b8:8f:cb:41:af:45:a1:b4:bb:c7:44:10:41:
         cd:2c:a9:e2:41:c4:ec:1a:46:82:09:e4:6b:ce:12:ed:47:07:
         a5:0b:d5:a1:87:05:43:5f:87:80:02:f8:3f:72:67:f7:cf:21:
         fc:01:d4:30:58:98:48:b7:ad:97:88:8b:7f:eb:6a:03:fc:09:
         8c:14:01:16:e3:f4:a7:e0:a4:44:8a:bb:be:5f:61:af:b5:90:
         94:c5:95:ca:b4:36:95:c4:10:71:97:2e:32:f7:d6:e0:94:56:
         8d:b5:65:63:1a:7c:e7:41:61:64:15:07:0d:8f:66:56:82:6b:
         4a:ac:48:82:08:62:97:7d:92:30:9c:61:37:17:44:71:39:46:
         a3:5e:b9:32:30:a5:08:66:0b:cf:a6:49:f0:c3:68:56:83:99:
         d4:f8:22:97:c7:9b:91:91:33:3a:1a:f6:62:ec:67:22:42:f1:
         d8:05:8d:f6:8b:88:ee:bb:fd:3f:2e:b8:a2:29:44:e3:f3:f9:
         a6:ac:88:80:0f:47:64:28:c7:3a:93:0f:10:24:80:22:61:68:
         c7:37:b3:12:c4:1e:dd:7b:9d:56:ee:2e:3d:cf:6b:a6:a8:1f:
         32:bf:ca:6f:b4:51:d0:dc:a7:92:ed:6b:e3:58:08:8c:c6:a5:
         1e:ec:92:56
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAuAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QjQ1ODBBRjExMC8GA1UEBRMoMkNFRDI1MDg5MkQ5N0E5MEFBMTMzMjNBQ0E0RTQ1
RDI1MTc2OTI1ODAeFw0yNjAzMDIwMjUwMjdaFw0yNjAzMDQwMjUwMjdaMBgxFjAU
BgNVBAMTDTY5YTRmYWY0LWRjNzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC9NCR5ikKIrgPjFPvpYrC0d5RwMXu2xZJuZ2h6SzdNwxnbp674/GgYNcjk
jtCNuaAQoXyyfSzWjv5jkXEGr355qlObEjBEVgRwrYEibKtacXlJmlsvoMHYJh6t
RdnAtpZTLnUBbkU/AsB6t0QlrnA0ALpagNTvS7+KQ3n+gOdtRhfApsp9W2PErDeO
aXQTt+xW7o4nLMfnLXl3bz8gFP3t7kHqOdRTVU21JyYM5EzQNOawt+bkwS7pHodr
oojTCca/UNFH3JR5EaSN8A3KAeFOvSSPZ+M4/WnYFwfx4NQ1XhDQdsIL3AMYUEMi
PBDqWITMA88Tr3kITNrx1jrO9O2NAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUlbsC
kqBtedm45xIzxicj3i1Fk6IwHwYDVR0jBBgwFoAULO0lCJLZepCqEzI6yk5F0lF2
klgwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkI0NTgwL0UxOUI3QjIyRTIxNzExRUVBMThFOEFCRjc3NTQxMkU2L0xPMGxD
SkxaZXBDcUV6STZ5azVGMGxGMmtsZy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0xPMGxDSkxaZXBDcUV6STZ5azVGMGxGMmtsZy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QjQ1ODAvRTE5QjdCMjJFMjE3MTFFRUExOEU4QUJGNzc1
NDEyRTYvTE8wbENKTFplcENxRXpJNnlrNUYwbEYya2xnLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA4QncIc7iPy0GvRaG0u8dEEEHNLKni
QcTsGkaCCeRrzhLtRwelC9WhhwVDX4eAAvg/cmf3zyH8AdQwWJhIt62XiIt/62oD
/AmMFAEW4/Sn4KREiru+X2GvtZCUxZXKtDaVxBBxly4y99bglFaNtWVjGnznQWFk
FQcNj2ZWgmtKrEiCCGKXfZIwnGE3F0RxOUajXrkyMKUIZgvPpknww2hWg5nU+CKX
x5uRkTM6GvZi7GciQvHYBY32i4juu/0/LriiKUTj8/mmrIiAD0dkKMc6kw8QJIAi
YWjHN7MSxB7de51W7i49z2umqB8yv8pvtFHQ3KeS7WvjWAiMxqUe7JJW
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:53:32 2026 by rpki-client