Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B8F68/A101D01CB8AC11F0BC7A6097DAE4EC9C/0J3KDrqbho_trknCtmkq7gVFeco.mft
File:                     0J3KDrqbho_trknCtmkq7gVFeco.mft (raw, json)
Hash identifier:          kGiJ4xYnDe3wXtWg3SBnvcHbWim7ErnLwtFtFjqHxew=
Subject key identifier:   BE:7A:4F:3C:CD:8F:04:90:07:F0:B0:BA:64:49:BF:0F:76:1C:4D:68
Authority key identifier: D0:9D:CA:0E:BA:9B:86:8F:ED:AE:49:C2:B6:69:2A:EE:05:45:79:CA
Certificate issuer:       /CN=F36B8F68AF/serialNumber=D09DCA0EBA9B868FEDAE49C2B6692AEE054579CA
Certificate serial:       80
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/0J3KDrqbho_trknCtmkq7gVFeco.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B8F68/A101D01CB8AC11F0BC7A6097DAE4EC9C/0J3KDrqbho_trknCtmkq7gVFeco.mft
Manifest number:          7E
Signing time:             Mon 02 Mar 2026 03:31:54 +0000
Manifest this update:     Mon 02 Mar 2026 03:31:53 +0000
Manifest next update:     Wed 04 Mar 2026 03:31:53 +0000
Files and hashes:         1: 0J3KDrqbho_trknCtmkq7gVFeco.crl (hash: 2w+mO+JiqqGVY64XSrEKyoGW5Re0oOp/4mImya0Xc7M=)
                          2: 855E7F48D5D711F0994ACE9CDAE4EC9C.roa (hash: KQqahJlThDjSMN9OoZVjESlj+xV77EpJ7wFMyg/Ikw4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B8F68/A101D01CB8AC11F0BC7A6097DAE4EC9C/0J3KDrqbho_trknCtmkq7gVFeco.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B8F68/A101D01CB8AC11F0BC7A6097DAE4EC9C/0J3KDrqbho_trknCtmkq7gVFeco.mft
                          rsync://rpki.afrinic.net/repository/afrinic/0J3KDrqbho_trknCtmkq7gVFeco.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 128 (0x80)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B8F68AF, serialNumber=D09DCA0EBA9B868FEDAE49C2B6692AEE054579CA
        Validity
            Not Before: Mar  2 03:31:53 2026 GMT
            Not After : Mar  4 03:31:53 2026 GMT
        Subject: CN=69a504aa-73df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:dd:e1:39:b6:86:ae:4e:51:7c:24:4a:2b:6a:
                    83:19:fb:9a:93:34:87:87:4b:0b:7e:11:9c:b4:5a:
                    38:f6:ae:43:e5:cb:c1:7e:ea:cd:a7:64:47:5c:8a:
                    07:78:a6:e2:70:2e:43:9f:d9:03:d0:2b:95:9e:81:
                    df:b8:86:fa:79:95:af:f8:9e:45:50:21:4b:00:42:
                    b2:c1:2e:b5:2c:f3:fe:c9:79:fe:73:a9:fd:32:96:
                    21:47:db:a2:81:8f:1c:ac:58:df:6b:a4:64:07:65:
                    ea:07:cf:5c:9c:90:34:81:b3:73:23:86:28:e7:06:
                    91:7f:5e:51:77:28:11:16:13:84:6c:8c:d5:b3:4b:
                    04:46:fc:e0:12:d8:13:98:47:99:e1:bf:5c:f7:a9:
                    36:e3:a2:cf:66:96:8c:d3:72:4b:bf:71:d0:86:0c:
                    6b:6f:f5:34:a0:d1:fc:7e:73:af:b5:27:21:6d:8b:
                    ed:66:1f:f0:9e:19:7f:b2:7b:8c:e9:80:09:b4:34:
                    3b:57:59:96:74:a7:08:d7:e2:65:79:54:f2:f9:91:
                    22:f8:8a:4c:62:45:c6:91:ae:12:37:17:36:f6:e5:
                    66:07:37:a8:bc:cd:67:ef:66:87:30:38:19:eb:46:
                    f3:26:20:56:9b:4e:cd:8e:83:38:67:95:bb:68:90:
                    91:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:7A:4F:3C:CD:8F:04:90:07:F0:B0:BA:64:49:BF:0F:76:1C:4D:68
            X509v3 Authority Key Identifier:
                keyid:D0:9D:CA:0E:BA:9B:86:8F:ED:AE:49:C2:B6:69:2A:EE:05:45:79:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B8F68/A101D01CB8AC11F0BC7A6097DAE4EC9C/0J3KDrqbho_trknCtmkq7gVFeco.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0J3KDrqbho_trknCtmkq7gVFeco.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B8F68/A101D01CB8AC11F0BC7A6097DAE4EC9C/0J3KDrqbho_trknCtmkq7gVFeco.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:96:f2:78:a4:43:0b:21:6e:97:5e:b0:72:dd:b1:df:d9:dc:
         c4:fc:2d:c2:35:55:2b:5b:cc:7f:c6:ce:bf:2d:41:4f:68:29:
         d5:fc:16:1d:e4:2f:8c:53:e0:5e:d4:85:0c:01:be:d9:ce:ad:
         20:2d:28:f1:81:00:fc:4f:cb:26:38:43:70:a9:8d:00:66:e6:
         43:26:c7:8d:17:a2:3f:c9:b6:4a:4c:10:be:c7:e9:4a:09:31:
         08:1c:40:57:b0:46:5d:84:40:45:d2:7c:78:57:74:9c:9a:1f:
         12:dc:83:fd:c0:cf:bf:2e:9e:64:c4:0c:09:fc:b1:03:e2:f8:
         36:aa:93:19:53:21:0f:9f:4f:1d:d1:b3:4d:fd:99:54:89:48:
         4a:d8:e4:ca:da:ca:a8:c5:1c:f5:2a:e0:c6:71:21:fa:6b:9e:
         70:42:49:4b:33:0b:08:cf:36:5d:db:3b:b4:b3:d6:42:4e:e6:
         77:fe:ca:0e:f4:79:3c:9e:46:cf:f3:a1:e5:10:af:b8:c3:0a:
         64:ac:60:af:88:ff:1c:93:69:6e:7a:21:8f:10:c3:75:7f:fe:
         fe:af:02:d4:ae:98:bb:d4:7d:1a:7d:1d:8e:74:3b:7f:bb:c8:
         f1:06:cc:e1:56:2a:cb:a1:c2:ad:32:81:cd:a8:e6:9a:9c:9e:
         53:8a:d1:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:23:23 2026 by rpki-client