Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B87F4/B0DCA54A451511EFABD9FF90762E951A/TsI9Q07XmbNybP2OQaiJOGnVA6M.mft
File:                     TsI9Q07XmbNybP2OQaiJOGnVA6M.mft (raw, json)
Hash identifier:          Gj0zvEZeAlSzR0v9fM5zDJy44DvT6D59paaRgbH6gRM=
Subject key identifier:   E0:EE:02:D4:55:EE:27:29:9F:AF:A3:A8:4B:CD:6E:BE:4D:DA:F5:4C
Authority key identifier: 4E:C2:3D:43:4E:D7:99:B3:72:6C:FD:8E:41:A8:89:38:69:D5:03:A3
Certificate issuer:       /CN=F36B87F4AF/serialNumber=4EC23D434ED799B3726CFD8E41A8893869D503A3
Certificate serial:       0260
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/TsI9Q07XmbNybP2OQaiJOGnVA6M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B87F4/B0DCA54A451511EFABD9FF90762E951A/TsI9Q07XmbNybP2OQaiJOGnVA6M.mft
Manifest number:          025F
Signing time:             Mon 02 Mar 2026 02:59:30 +0000
Manifest this update:     Mon 02 Mar 2026 02:59:29 +0000
Manifest next update:     Wed 04 Mar 2026 02:59:29 +0000
Files and hashes:         1: TsI9Q07XmbNybP2OQaiJOGnVA6M.crl (hash: rT1RBDVsHSvYnxNpWhQi8BjxdAATsPPhbWJm1WkOwgU=)
                          2: 1B1E241E451711EFAD0B499A762E951A.roa (hash: Ep7yM470eEGXeNpv8ARuzKPKLgsxxmudxnGocbswnGw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B87F4/B0DCA54A451511EFABD9FF90762E951A/TsI9Q07XmbNybP2OQaiJOGnVA6M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B87F4/B0DCA54A451511EFABD9FF90762E951A/TsI9Q07XmbNybP2OQaiJOGnVA6M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/TsI9Q07XmbNybP2OQaiJOGnVA6M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 608 (0x260)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B87F4AF, serialNumber=4EC23D434ED799B3726CFD8E41A8893869D503A3
        Validity
            Not Before: Mar  2 02:59:29 2026 GMT
            Not After : Mar  4 02:59:29 2026 GMT
        Subject: CN=69a4fd12-2fcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:57:34:6f:79:c2:61:c1:16:9b:9e:3d:ba:b1:
                    e1:84:8c:76:3a:c9:a3:ea:13:d1:09:8e:e7:72:b5:
                    19:58:39:46:3c:5d:c5:94:a6:22:ea:79:b8:34:88:
                    1a:a2:41:17:2e:77:99:b0:81:61:9d:66:17:13:e0:
                    d9:d6:b4:1c:a6:5b:ed:32:ca:8d:25:ad:40:68:9a:
                    6e:9a:c6:eb:e5:29:57:c3:72:56:94:29:02:c4:44:
                    d7:08:64:3e:a1:ba:f6:8c:90:76:20:5d:c7:b9:47:
                    04:2e:f5:1b:d3:cc:96:db:b5:bb:40:e9:19:6f:70:
                    38:4a:b4:bd:50:96:07:cd:c0:bf:8e:77:a6:a4:73:
                    ea:5b:ea:65:ef:fd:a7:c3:fd:af:c7:21:67:c6:13:
                    3e:e8:07:f6:79:d3:39:d0:1f:5b:af:61:3a:eb:4f:
                    db:62:74:65:ff:08:cb:ce:2f:8b:19:43:71:65:cd:
                    f2:7f:c2:85:13:f7:03:06:12:fe:be:a4:3a:84:e7:
                    93:e0:9c:ca:70:2a:b0:5a:10:42:e7:44:ad:5d:f8:
                    64:29:b9:48:21:5a:c8:bd:6d:c6:ed:b6:ea:3a:89:
                    99:7f:8c:99:8f:ca:77:74:f6:de:78:61:b4:e8:19:
                    60:30:4d:82:1b:e8:8a:bb:5b:2d:e2:52:c6:b8:cb:
                    fb:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:EE:02:D4:55:EE:27:29:9F:AF:A3:A8:4B:CD:6E:BE:4D:DA:F5:4C
            X509v3 Authority Key Identifier:
                keyid:4E:C2:3D:43:4E:D7:99:B3:72:6C:FD:8E:41:A8:89:38:69:D5:03:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B87F4/B0DCA54A451511EFABD9FF90762E951A/TsI9Q07XmbNybP2OQaiJOGnVA6M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/TsI9Q07XmbNybP2OQaiJOGnVA6M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B87F4/B0DCA54A451511EFABD9FF90762E951A/TsI9Q07XmbNybP2OQaiJOGnVA6M.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:15:b2:81:4b:21:f1:6b:61:99:5f:71:47:6a:05:d9:ac:63:
         d8:81:b2:05:9b:76:aa:af:fe:1b:48:31:64:ed:6d:b6:45:f5:
         d1:0d:2f:5f:9d:f8:b2:4c:97:e9:ca:3a:a5:3b:97:5a:af:22:
         17:6d:63:5e:6e:f2:ed:6a:92:d8:8a:e8:f0:33:dc:4a:9c:a5:
         5b:9f:b9:f9:76:48:43:ca:8a:2c:2e:a3:77:cd:4b:77:d0:bb:
         17:a7:cd:7b:34:8f:7c:93:44:81:82:cc:74:1a:3e:cb:4e:0a:
         56:bc:58:52:8a:48:f4:1d:e9:5c:c9:2a:53:e7:59:84:7d:cf:
         d3:04:7e:40:10:1a:16:6e:ae:06:b3:d9:32:38:4d:c2:cd:d4:
         fe:7d:6c:38:f1:0e:4a:a2:e2:1e:a4:84:46:0a:56:49:db:9b:
         1b:b7:37:02:dc:9a:21:bb:80:29:01:28:9b:bb:2d:59:17:b4:
         eb:a7:7f:b0:cc:93:31:f7:d7:ca:7e:be:7c:26:8f:ac:80:8e:
         d1:0e:bb:7a:9c:1a:dc:d2:2c:90:de:47:01:9e:72:69:87:45:
         09:1a:bf:d1:a2:98:a6:f5:73:c4:e9:7c:b7:ff:66:13:a1:d4:
         66:60:b7:75:53:df:39:97:73:05:c5:a9:ec:40:5c:05:87:9e:
         46:3c:5c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:42:46 2026 by rpki-client