Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B5768/D4281494258911F0A52BC8A1DAE4EC9C/nNVhTPkNpR4nc7Xrl72Jk3xQWGE.mft
File:                     nNVhTPkNpR4nc7Xrl72Jk3xQWGE.mft (raw, json)
Hash identifier:          rYq2KWyduiMdhyIPKhAQRLmN1icv1JqEsEy3IeDKeW0=
Subject key identifier:   20:6E:4E:7D:38:A6:32:1D:1D:AF:75:C6:11:C3:FB:66:FB:A3:5D:47
Authority key identifier: 9C:D5:61:4C:F9:0D:A5:1E:27:73:B5:EB:97:BD:89:93:7C:50:58:61
Certificate issuer:       /CN=F36B5768AF/serialNumber=9CD5614CF90DA51E2773B5EB97BD89937C505861
Certificate serial:       0139
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/nNVhTPkNpR4nc7Xrl72Jk3xQWGE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B5768/D4281494258911F0A52BC8A1DAE4EC9C/nNVhTPkNpR4nc7Xrl72Jk3xQWGE.mft
Manifest number:          0138
Signing time:             Mon 02 Mar 2026 03:19:08 +0000
Manifest this update:     Mon 02 Mar 2026 03:19:07 +0000
Manifest next update:     Wed 04 Mar 2026 03:19:07 +0000
Files and hashes:         1: nNVhTPkNpR4nc7Xrl72Jk3xQWGE.crl (hash: COZlga6vxUwBxkDKZOEcsbGnyuOC/J3GP5WM2UEir/w=)
                          2: 0BF4391E25BE11F0BA0F6C78DAE4EC9C.roa (hash: yV3qp3Snn6vcZINsGIupcA7CLhBh7nsh5NGhTfu+GnU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B5768/D4281494258911F0A52BC8A1DAE4EC9C/nNVhTPkNpR4nc7Xrl72Jk3xQWGE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B5768/D4281494258911F0A52BC8A1DAE4EC9C/nNVhTPkNpR4nc7Xrl72Jk3xQWGE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/nNVhTPkNpR4nc7Xrl72Jk3xQWGE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 313 (0x139)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B5768AF, serialNumber=9CD5614CF90DA51E2773B5EB97BD89937C505861
        Validity
            Not Before: Mar  2 03:19:07 2026 GMT
            Not After : Mar  4 03:19:07 2026 GMT
        Subject: CN=69a501ac-cfea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:4b:e9:2d:17:e1:af:2a:f5:c7:13:e6:b5:a6:
                    c7:34:4c:f2:cc:a5:b9:3e:ed:82:de:01:e0:aa:dd:
                    fe:d8:9a:08:c5:ac:e6:f1:fc:8b:61:5b:d8:18:2c:
                    5e:be:d4:02:e2:82:20:31:ff:83:7d:56:7d:a5:02:
                    d1:dc:c8:f3:19:b2:7c:20:60:f7:bf:fb:23:c9:80:
                    16:d0:8f:7a:17:b5:69:99:4b:3e:4e:ab:40:6c:49:
                    af:ba:e1:7f:53:16:08:20:c6:2f:dc:04:ec:2d:0f:
                    63:3e:0c:fa:a9:31:40:bd:fb:41:7c:4f:6c:7e:09:
                    2f:bb:b9:fd:55:6b:fe:98:da:39:85:4f:29:e3:9d:
                    e1:3e:f4:e9:eb:5e:62:66:1e:e8:30:1c:ad:2c:d5:
                    c4:6f:d7:f6:74:fc:22:08:2b:4c:77:50:0f:af:6e:
                    0a:6b:0e:63:38:f3:94:7d:2a:4b:15:fa:a5:50:6b:
                    06:99:7f:df:04:a8:37:d8:fd:4b:d1:ca:4d:3b:5d:
                    fd:bc:b4:13:25:76:25:73:90:e5:37:2a:02:57:d7:
                    a0:84:73:c4:65:a5:0d:eb:ba:a0:cd:d3:19:92:34:
                    e6:a4:b6:55:ca:00:b0:f1:27:c8:39:ea:ed:63:d5:
                    b9:ba:ab:f4:67:41:a0:df:22:c6:90:b5:83:dd:af:
                    5c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:6E:4E:7D:38:A6:32:1D:1D:AF:75:C6:11:C3:FB:66:FB:A3:5D:47
            X509v3 Authority Key Identifier:
                keyid:9C:D5:61:4C:F9:0D:A5:1E:27:73:B5:EB:97:BD:89:93:7C:50:58:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B5768/D4281494258911F0A52BC8A1DAE4EC9C/nNVhTPkNpR4nc7Xrl72Jk3xQWGE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/nNVhTPkNpR4nc7Xrl72Jk3xQWGE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B5768/D4281494258911F0A52BC8A1DAE4EC9C/nNVhTPkNpR4nc7Xrl72Jk3xQWGE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:6b:fe:96:fe:1e:e3:93:92:0a:f2:5e:b4:77:42:9c:44:78:
         43:85:8f:ae:e4:ee:e5:a6:cf:40:39:fa:86:c0:6a:67:a9:16:
         be:f0:06:22:5a:6f:18:54:50:cf:6e:73:0c:90:5c:ba:54:67:
         95:ff:1e:0f:57:58:e7:48:1c:69:03:08:12:1a:82:7d:92:4e:
         d1:6e:f6:04:ad:55:52:60:33:29:04:b2:3f:e8:58:7b:49:d3:
         dd:93:32:29:68:f0:ee:54:6a:e7:77:8a:a3:3d:1d:8a:5d:07:
         8f:c1:62:61:35:4e:9c:8d:65:a9:cb:6c:52:0e:4a:a0:f0:eb:
         d6:79:f3:6d:a9:ea:df:85:ca:9a:63:57:78:19:b4:4f:35:ae:
         68:3f:bf:5d:bf:1f:59:d1:30:3c:df:fc:95:26:cd:a6:e7:f3:
         58:97:ac:1c:b0:bb:b1:08:4c:e2:0b:4a:20:9d:e9:72:0e:69:
         62:5b:a3:b4:c6:cc:88:fa:4d:ca:5f:40:63:34:71:84:71:c6:
         ee:6c:fb:87:0e:c8:ce:7f:07:f0:75:f9:fa:64:1b:82:f4:6d:
         a9:33:64:55:5c:0d:ee:ca:fa:01:cf:21:eb:0c:c8:c8:a2:60:
         23:ca:65:90:3c:b1:23:2f:8e:1e:2e:16:95:ca:75:0b:77:93:
         36:76:5c:4b
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICATkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QjU3NjhBRjExMC8GA1UEBRMoOUNENTYxNENGOTBEQTUxRTI3NzNCNUVCOTdCRDg5
OTM3QzUwNTg2MTAeFw0yNjAzMDIwMzE5MDdaFw0yNjAzMDQwMzE5MDdaMBgxFjAU
BgNVBAMTDTY5YTUwMWFjLWNmZWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDuS+ktF+GvKvXHE+a1psc0TPLMpbk+7YLeAeCq3f7YmgjFrObx/IthW9gY
LF6+1ALigiAx/4N9Vn2lAtHcyPMZsnwgYPe/+yPJgBbQj3oXtWmZSz5Oq0BsSa+6
4X9TFgggxi/cBOwtD2M+DPqpMUC9+0F8T2x+CS+7uf1Va/6Y2jmFTynjneE+9Onr
XmJmHugwHK0s1cRv1/Z0/CIIK0x3UA+vbgprDmM485R9KksV+qVQawaZf98EqDfY
/UvRyk07Xf28tBMldiVzkOU3KgJX16CEc8RlpQ3ruqDN0xmSNOaktlXKALDxJ8g5
6u1j1bm6q/RnQaDfIsaQtYPdr1wpAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUIG5O
fTimMh0dr3XGEcP7ZvujXUcwHwYDVR0jBBgwFoAUnNVhTPkNpR4nc7Xrl72Jk3xQ
WGEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkI1NzY4L0Q0MjgxNDk0MjU4OTExRjBBNTJCQzhBMURBRTRFQzlDL25OVmhU
UGtOcFI0bmM3WHJsNzJKazN4UVdHRS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL25OVmhUUGtOcFI0bmM3WHJsNzJKazN4UVdHRS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QjU3NjgvRDQyODE0OTQyNTg5MTFGMEE1MkJDOEExREFF
NEVDOUMvbk5WaFRQa05wUjRuYzdYcmw3MkprM3hRV0dFLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAha/6W/h7jk5IK8l60d0KcRHhDhY+u
5O7lps9AOfqGwGpnqRa+8AYiWm8YVFDPbnMMkFy6VGeV/x4PV1jnSBxpAwgSGoJ9
kk7RbvYErVVSYDMpBLI/6Fh7SdPdkzIpaPDuVGrnd4qjPR2KXQePwWJhNU6cjWWp
y2xSDkqg8OvWefNtqerfhcqaY1d4GbRPNa5oP79dvx9Z0TA83/yVJs2m5/NYl6wc
sLuxCEziC0ognelyDmliW6O0xsyI+k3KX0BjNHGEccbubPuHDsjOfwfwdfn6ZBuC
9G2pM2RVXA3uyvoBzyHrDMjIomAjymWQPLEjL44eLhaVynULd5M2dlxL
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:54:55 2026 by rpki-client