Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B7E77/B6BE040424CB11F0BF5B50A6DAE4EC9C/bj0aqU4tYq-BEr3_sEnED_m9bWQ.mft
File:                     bj0aqU4tYq-BEr3_sEnED_m9bWQ.mft (raw, json)
Hash identifier:          qgFu3VpaeSDO5yzXbKjlmgj+Q+77RwrKx/aVyFpwmRk=
Subject key identifier:   CE:D8:14:08:E2:A0:6C:0E:E8:DD:62:7A:D1:56:FE:9B:89:85:DA:96
Authority key identifier: 6E:3D:1A:A9:4E:2D:62:AF:81:12:BD:FF:B0:49:C4:0F:F9:BD:6D:64
Certificate issuer:       /CN=F36B7E77AF/serialNumber=6E3D1AA94E2D62AF8112BDFFB049C40FF9BD6D64
Certificate serial:       013A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/bj0aqU4tYq-BEr3_sEnED_m9bWQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B7E77/B6BE040424CB11F0BF5B50A6DAE4EC9C/bj0aqU4tYq-BEr3_sEnED_m9bWQ.mft
Manifest number:          0139
Signing time:             Mon 02 Mar 2026 03:19:00 +0000
Manifest this update:     Mon 02 Mar 2026 03:19:00 +0000
Manifest next update:     Wed 04 Mar 2026 03:19:00 +0000
Files and hashes:         1: bj0aqU4tYq-BEr3_sEnED_m9bWQ.crl (hash: pX330E5VRwobSSPHpzIf9yO2fJUmWGj6DhHmeSOcVdk=)
                          2: EC8CEE0424CD11F0A95A70B7DAE4EC9C.roa (hash: vHw6M4Jn3ZWzx4xczXCaEyluLBv1RtYMY0f4ZJEhTsk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B7E77/B6BE040424CB11F0BF5B50A6DAE4EC9C/bj0aqU4tYq-BEr3_sEnED_m9bWQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B7E77/B6BE040424CB11F0BF5B50A6DAE4EC9C/bj0aqU4tYq-BEr3_sEnED_m9bWQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/bj0aqU4tYq-BEr3_sEnED_m9bWQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 314 (0x13a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B7E77AF, serialNumber=6E3D1AA94E2D62AF8112BDFFB049C40FF9BD6D64
        Validity
            Not Before: Mar  2 03:19:00 2026 GMT
            Not After : Mar  4 03:19:00 2026 GMT
        Subject: CN=69a501a4-3c17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:97:de:a6:ab:5f:ab:b5:d9:52:be:88:dc:da:
                    88:3d:92:d2:4e:f2:d2:39:b3:00:17:d1:fb:fe:1a:
                    a6:58:ea:cb:74:2a:c8:d5:b0:2b:44:18:5b:36:51:
                    f8:4f:e7:f8:cf:58:bb:eb:23:71:23:95:3b:2b:c3:
                    c4:0f:e1:b1:e6:8e:18:0b:38:e0:48:60:ce:c8:7b:
                    24:69:42:33:17:cb:0e:86:0b:d1:42:64:f2:7c:a8:
                    09:07:13:cd:72:aa:b8:3c:76:58:2b:0e:7f:c3:c9:
                    b4:47:45:49:8f:f4:df:60:1c:b4:db:ad:b2:ff:e8:
                    d3:8e:a4:ba:44:84:95:b8:01:27:56:6c:29:75:ad:
                    65:07:90:fc:c7:e7:b4:2d:0c:5f:9a:02:eb:74:92:
                    e1:d8:d6:53:83:ac:0b:e0:18:1d:91:c6:94:7f:5b:
                    80:a5:75:5e:ab:37:cf:b5:e8:f8:42:9e:5f:0b:1e:
                    95:63:10:61:53:67:e8:1b:dc:8a:05:a1:0f:a0:e5:
                    8d:09:23:89:a5:d6:23:81:72:b9:49:1f:15:bd:13:
                    77:59:c5:67:41:3c:e5:7b:5e:d3:58:cd:0b:5f:50:
                    63:ac:cc:1e:d5:da:8a:37:0f:86:f8:57:7f:af:93:
                    12:a2:8a:9c:fa:00:1f:a4:d2:47:b2:da:e6:58:e1:
                    9a:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:D8:14:08:E2:A0:6C:0E:E8:DD:62:7A:D1:56:FE:9B:89:85:DA:96
            X509v3 Authority Key Identifier:
                keyid:6E:3D:1A:A9:4E:2D:62:AF:81:12:BD:FF:B0:49:C4:0F:F9:BD:6D:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B7E77/B6BE040424CB11F0BF5B50A6DAE4EC9C/bj0aqU4tYq-BEr3_sEnED_m9bWQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/bj0aqU4tYq-BEr3_sEnED_m9bWQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B7E77/B6BE040424CB11F0BF5B50A6DAE4EC9C/bj0aqU4tYq-BEr3_sEnED_m9bWQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:ef:3f:0b:26:04:f7:85:a9:e3:be:19:fb:8a:18:80:07:33:
         21:68:55:4b:97:42:23:a7:d0:5d:62:6f:a7:cc:6a:45:48:73:
         d2:66:de:c2:99:a4:99:b4:46:05:4d:a0:24:86:22:7a:b9:04:
         cc:59:47:99:1b:f0:72:8e:98:a3:a3:28:0e:34:05:e3:4d:14:
         df:15:0a:57:c9:1d:f3:ff:99:df:0c:62:94:19:fa:16:5d:37:
         e1:90:4a:62:e4:91:c7:23:8a:99:bd:d7:f8:cd:c6:22:d4:33:
         da:f8:a4:05:ff:bf:a5:f4:bc:7a:df:15:52:fa:4c:8b:ac:77:
         ed:79:a3:21:24:ce:5e:01:ce:25:5d:df:84:61:0e:a9:29:3a:
         bd:e1:fe:45:0f:da:65:7c:38:33:a7:09:e2:8f:c9:46:d9:a4:
         d6:c3:48:b5:fa:79:c7:31:a7:ae:a9:a8:fe:04:d3:ea:bb:1c:
         b4:3c:2e:e7:1e:64:b3:44:fb:76:df:10:a9:ee:15:41:f2:5c:
         75:64:a5:25:65:cd:b3:34:a5:56:b6:75:da:29:aa:81:71:fe:
         0c:1a:21:d0:41:10:31:6c:37:45:a5:f8:ce:8e:7f:2f:e3:99:
         1a:69:3f:8c:24:f4:aa:8f:a0:47:98:87:51:25:05:fe:32:54:
         f2:17:1e:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:17:23 2026 by rpki-client