Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B9A81/0B27C0F2F1A111EEA48FB64C775412E6/2WACNlD1TrS44dw0q9RZ9QJw140.mft
File:                     2WACNlD1TrS44dw0q9RZ9QJw140.mft (raw, json)
Hash identifier:          1RQKb1E1xYcDgqNWWi5XBDBQaTTmb5T5kBsV7GSG4ME=
Subject key identifier:   A6:E0:DE:D2:68:F8:6B:6B:E9:E7:17:4A:8C:51:51:24:6E:46:E7:BC
Authority key identifier: D9:60:02:36:50:F5:4E:B4:B8:E1:DC:34:AB:D4:59:F5:02:70:D7:8D
Certificate issuer:       /CN=F36B9A81AF/serialNumber=D960023650F54EB4B8E1DC34ABD459F50270D78D
Certificate serial:       02CC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/2WACNlD1TrS44dw0q9RZ9QJw140.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B9A81/0B27C0F2F1A111EEA48FB64C775412E6/2WACNlD1TrS44dw0q9RZ9QJw140.mft
Manifest number:          02CB
Signing time:             Mon 02 Mar 2026 02:51:21 +0000
Manifest this update:     Mon 02 Mar 2026 02:51:20 +0000
Manifest next update:     Wed 04 Mar 2026 02:51:20 +0000
Files and hashes:         1: 2WACNlD1TrS44dw0q9RZ9QJw140.crl (hash: eO3mHZ2jy35WKcJ9kOT7cYW8cyaZ5soh4H942LAenX0=)
                          2: 31539876F1A311EEAC1F355D775412E6.roa (hash: j6M+6W88movOdd6zMZWbEb9mu+RhA+HSxS5xxIDt/qU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B9A81/0B27C0F2F1A111EEA48FB64C775412E6/2WACNlD1TrS44dw0q9RZ9QJw140.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B9A81/0B27C0F2F1A111EEA48FB64C775412E6/2WACNlD1TrS44dw0q9RZ9QJw140.mft
                          rsync://rpki.afrinic.net/repository/afrinic/2WACNlD1TrS44dw0q9RZ9QJw140.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 716 (0x2cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B9A81AF, serialNumber=D960023650F54EB4B8E1DC34ABD459F50270D78D
        Validity
            Not Before: Mar  2 02:51:20 2026 GMT
            Not After : Mar  4 02:51:20 2026 GMT
        Subject: CN=69a4fb29-4908
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d6:ab:91:4d:08:ab:8a:6f:fb:23:e3:6f:ae:
                    14:fc:b4:53:74:6e:22:ad:80:5d:37:d7:eb:a7:b6:
                    71:2a:a6:e8:94:f2:f1:3b:a9:18:21:04:a2:32:78:
                    26:cd:d3:41:47:9b:2a:74:57:29:ae:e6:74:6e:43:
                    a8:af:dc:c2:fd:ad:85:a7:7c:c9:99:31:43:64:78:
                    a5:28:7a:18:31:78:aa:34:02:4d:c9:2b:93:19:a4:
                    58:f7:51:25:20:31:7a:be:6a:b7:81:f9:04:15:8d:
                    a8:21:aa:49:2a:5d:06:d6:64:50:44:80:3e:3c:14:
                    16:f6:8c:40:d9:84:19:c6:5d:2f:1a:65:e9:db:e2:
                    53:c1:79:c0:1f:99:cf:55:fa:0c:69:cf:70:69:69:
                    3e:c9:b2:82:07:b8:5f:11:e2:00:4b:d0:10:58:d5:
                    64:9e:f7:8e:b4:09:c2:b2:dc:5a:31:1c:56:7c:cf:
                    a9:26:12:c3:71:a7:99:21:1e:41:3f:15:d5:99:7c:
                    23:61:22:97:d9:4a:26:e8:64:8a:57:5b:c4:4b:1d:
                    d9:45:00:3c:95:8b:d9:75:c9:c3:14:fb:87:ee:a8:
                    16:dd:04:1e:5b:9a:14:3d:47:10:e2:71:30:75:78:
                    d3:64:66:0f:5b:16:1e:0a:18:f6:ed:1e:0e:1b:4a:
                    d2:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:E0:DE:D2:68:F8:6B:6B:E9:E7:17:4A:8C:51:51:24:6E:46:E7:BC
            X509v3 Authority Key Identifier:
                keyid:D9:60:02:36:50:F5:4E:B4:B8:E1:DC:34:AB:D4:59:F5:02:70:D7:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B9A81/0B27C0F2F1A111EEA48FB64C775412E6/2WACNlD1TrS44dw0q9RZ9QJw140.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2WACNlD1TrS44dw0q9RZ9QJw140.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B9A81/0B27C0F2F1A111EEA48FB64C775412E6/2WACNlD1TrS44dw0q9RZ9QJw140.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:5e:ca:97:64:6a:57:c6:d5:6c:0d:65:43:c3:a7:b8:63:f9:
         a7:6d:60:b3:f9:e3:fa:64:c7:d9:29:e6:e4:49:db:27:5c:f7:
         05:62:c7:6a:9a:7f:42:dc:82:fb:d8:fa:94:90:d2:c3:30:dd:
         85:5c:c2:e9:88:39:00:e8:38:f3:4d:40:df:b0:e8:5e:ce:0b:
         8b:d5:e8:58:7b:bb:6e:49:6f:4c:d1:52:1a:26:cb:ab:80:9e:
         c2:b2:3c:0d:51:79:22:3f:47:13:21:01:0c:af:ca:ec:f6:85:
         1d:71:7d:cf:36:20:6e:cc:cf:0d:20:ce:3b:7f:69:ac:fd:47:
         05:f1:67:85:eb:92:3d:8f:44:35:7b:e7:ef:bb:9e:0d:47:3b:
         d2:88:89:cd:32:dc:ea:59:ee:cd:49:46:b2:88:55:21:36:83:
         fd:ba:63:04:da:8b:17:23:67:9e:a7:d5:9a:fa:81:16:6e:98:
         41:95:ee:c0:23:d5:0c:0d:11:08:bf:50:af:39:3e:83:48:f4:
         83:ef:01:8e:02:58:db:14:5a:8d:37:25:64:61:d9:60:d2:b1:
         ec:29:57:26:64:9f:af:ef:7a:5c:39:ee:3e:c5:63:6d:c7:88:
         bd:81:26:3d:23:29:89:ef:65:39:4d:b4:6f:6b:53:a9:4c:bd:
         19:e7:65:11
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAswwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QjlBODFBRjExMC8GA1UEBRMoRDk2MDAyMzY1MEY1NEVCNEI4RTFEQzM0QUJENDU5
RjUwMjcwRDc4RDAeFw0yNjAzMDIwMjUxMjBaFw0yNjAzMDQwMjUxMjBaMBgxFjAU
BgNVBAMTDTY5YTRmYjI5LTQ5MDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDO1quRTQirim/7I+NvrhT8tFN0biKtgF031+untnEqpuiU8vE7qRghBKIy
eCbN00FHmyp0Vymu5nRuQ6iv3ML9rYWnfMmZMUNkeKUoehgxeKo0Ak3JK5MZpFj3
USUgMXq+areB+QQVjaghqkkqXQbWZFBEgD48FBb2jEDZhBnGXS8aZenb4lPBecAf
mc9V+gxpz3BpaT7JsoIHuF8R4gBL0BBY1WSe9460CcKy3FoxHFZ8z6kmEsNxp5kh
HkE/FdWZfCNhIpfZSiboZIpXW8RLHdlFADyVi9l1ycMU+4fuqBbdBB5bmhQ9RxDi
cTB1eNNkZg9bFh4KGPbtHg4bStI1AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUpuDe
0mj4a2vp5xdKjFFRJG5G57wwHwYDVR0jBBgwFoAU2WACNlD1TrS44dw0q9RZ9QJw
140wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkI5QTgxLzBCMjdDMEYyRjFBMTExRUVBNDhGQjY0Qzc3NTQxMkU2LzJXQUNO
bEQxVHJTNDRkdzBxOVJaOVFKdzE0MC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzJXQUNObEQxVHJTNDRkdzBxOVJaOVFKdzE0MC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QjlBODEvMEIyN0MwRjJGMUExMTFFRUE0OEZCNjRDNzc1
NDEyRTYvMldBQ05sRDFUclM0NGR3MHE5Ulo5UUp3MTQwLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQANXsqXZGpXxtVsDWVDw6e4Y/mnbWCz
+eP6ZMfZKebkSdsnXPcFYsdqmn9C3IL72PqUkNLDMN2FXMLpiDkA6DjzTUDfsOhe
zguL1ehYe7tuSW9M0VIaJsurgJ7CsjwNUXkiP0cTIQEMr8rs9oUdcX3PNiBuzM8N
IM47f2ms/UcF8WeF65I9j0Q1e+fvu54NRzvSiInNMtzqWe7NSUayiFUhNoP9umME
2osXI2eep9Wa+oEWbphBle7AI9UMDREIv1CvOT6DSPSD7wGOAljbFFqNNyVkYdlg
0rHsKVcmZJ+v73pcOe4+xWNtx4i9gSY9IymJ72U5TbRva1OpTL0Z52UR
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:18:36 2026 by rpki-client