Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C11E4/13DDD38883AD11EEA0A81B324AD9E6FC/8CO5dwgZb_nyC8kofVbELKrlFA8.mft
File:                     8CO5dwgZb_nyC8kofVbELKrlFA8.mft (raw, json)
Hash identifier:          cimCZfvN9h4g3muZs+KHISLf7aZDmUt8IF38sikUzrI=
Subject key identifier:   BF:83:29:E8:A1:0C:57:14:B0:FC:C6:A6:F5:68:3A:3B:72:A4:8B:2D
Authority key identifier: F0:23:B9:77:08:19:6F:F9:F2:0B:C9:28:7D:56:C4:2C:AA:E5:14:0F
Certificate issuer:       /CN=F36C11E4AF/serialNumber=F023B97708196FF9F20BC9287D56C42CAAE5140F
Certificate serial:       0377
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/8CO5dwgZb_nyC8kofVbELKrlFA8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C11E4/13DDD38883AD11EEA0A81B324AD9E6FC/8CO5dwgZb_nyC8kofVbELKrlFA8.mft
Manifest number:          036A
Signing time:             Mon 02 Mar 2026 02:41:14 +0000
Manifest this update:     Mon 02 Mar 2026 02:41:13 +0000
Manifest next update:     Wed 04 Mar 2026 02:41:13 +0000
Files and hashes:         1: 8CO5dwgZb_nyC8kofVbELKrlFA8.crl (hash: pvUEToAV0CtUR//zs1pFBvmyxOcD6IcbI0x+ifs2/oE=)
                          2: E426B5CC979D11F096A760E0DAE4EC9C.roa (hash: Qu1bT2FOjPIO4pS4cjspkc4hPfnA5gSZp8GQU69NlgU=)
                          3: C59D974E977D11F0B8898995DAE4EC9C.roa (hash: 9sQYBw+BJR4l43uVbgekzScfJJnTJXulZoG2Q7RECiE=)
                          4: F7859C76D43511F08FA009DFDAE4EC9C.roa (hash: t58rkAW+tki8gdKysYBKMUhjxgpa2MMuVeZqcgJgAb4=)
                          5: B8CC164AD43511F08A5377DEDAE4EC9C.roa (hash: NBitB2nQFOfV9ys3SiMTOmjXMmCIcDc7sWeKdyJpeo8=)
                          6: 35870488D43611F08728FBE0DAE4EC9C.roa (hash: Rm/s93U7Kp3F1Riav5LiVCWaFcWiqPFSK5/3AkP+uUI=)
                          7: 0EF6C094979E11F0A1367EE0DAE4EC9C.roa (hash: rudQgiGZO9W2N58KhjAh5JgOESyQ2q7XBM+cgROdak8=)
                          8: DB8FF5EC8FCB11F0AB6B7CC3DAE4EC9C.roa (hash: MWBh8j3tbpFo+evponTu0mS8C9DNHC3IYuWTwyyHOBg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C11E4/13DDD38883AD11EEA0A81B324AD9E6FC/8CO5dwgZb_nyC8kofVbELKrlFA8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C11E4/13DDD38883AD11EEA0A81B324AD9E6FC/8CO5dwgZb_nyC8kofVbELKrlFA8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/8CO5dwgZb_nyC8kofVbELKrlFA8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 887 (0x377)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C11E4AF, serialNumber=F023B97708196FF9F20BC9287D56C42CAAE5140F
        Validity
            Not Before: Mar  2 02:41:13 2026 GMT
            Not After : Mar  4 02:41:13 2026 GMT
        Subject: CN=69a4f8c9-b234
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:2b:01:22:c9:fa:ec:45:9c:33:9b:69:8e:eb:
                    53:6f:20:bd:7f:52:f8:4b:87:27:6c:5f:78:2b:76:
                    38:04:20:56:cc:d8:ab:92:7c:a4:ad:62:09:3b:12:
                    e4:ce:05:ef:a4:89:3e:8c:58:ff:ab:1c:2a:23:79:
                    35:11:23:c1:03:74:01:66:d2:2d:04:30:79:11:1e:
                    30:37:0e:df:44:e5:55:d3:6c:07:2d:17:1a:66:12:
                    b3:ee:a7:9d:f7:db:96:ec:85:d7:fb:92:bf:11:9f:
                    70:2b:4e:c3:c5:e7:cf:ac:d2:ca:ce:56:c0:71:c0:
                    2c:1f:f0:c6:96:c2:d0:7c:3e:8a:70:f5:fc:80:68:
                    bd:f6:69:9f:5d:3a:f7:42:db:41:57:04:ca:14:90:
                    5a:36:e3:c9:0c:67:27:ca:df:6f:91:4f:e4:5f:c9:
                    a2:7b:50:1c:8a:3b:d8:1f:47:57:b1:41:92:21:04:
                    06:05:8f:02:5f:93:7a:19:59:8c:a3:d5:8a:13:13:
                    05:f8:02:10:4e:35:e3:44:95:17:4f:74:75:dd:5d:
                    35:38:f2:cc:3b:78:59:a7:ae:c3:76:4b:d9:73:6c:
                    89:3a:5c:e6:78:e7:32:55:f1:2e:fe:0c:49:ed:2b:
                    77:5b:fb:1f:1e:25:69:61:5b:72:cf:e3:54:1b:c8:
                    36:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:83:29:E8:A1:0C:57:14:B0:FC:C6:A6:F5:68:3A:3B:72:A4:8B:2D
            X509v3 Authority Key Identifier:
                keyid:F0:23:B9:77:08:19:6F:F9:F2:0B:C9:28:7D:56:C4:2C:AA:E5:14:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C11E4/13DDD38883AD11EEA0A81B324AD9E6FC/8CO5dwgZb_nyC8kofVbELKrlFA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/8CO5dwgZb_nyC8kofVbELKrlFA8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C11E4/13DDD38883AD11EEA0A81B324AD9E6FC/8CO5dwgZb_nyC8kofVbELKrlFA8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:55:01:61:af:28:3e:49:cc:30:c1:e6:23:65:be:88:c0:14:
         82:e4:56:b0:ed:46:69:e2:c6:d0:57:1c:63:e3:8d:b1:05:89:
         c8:12:1b:a1:e1:28:0d:f8:7f:1b:cf:9b:31:e2:13:66:76:03:
         03:29:77:39:d1:a8:4c:51:69:75:b4:e8:d2:fc:8d:54:b1:85:
         ca:ba:6d:d0:1d:18:ce:dc:92:62:6b:5e:56:32:ef:c3:ba:2d:
         30:e9:9e:ac:25:6c:64:06:76:14:f3:91:9e:ab:67:b8:c9:13:
         f2:1c:b2:0f:d4:21:8f:e9:fd:e7:2b:1e:24:ad:d7:e3:99:81:
         06:d0:fe:cb:1a:94:d8:f3:9a:d2:c6:c9:8c:ae:d4:64:61:57:
         8d:70:67:f7:d1:f9:83:87:3c:60:6c:5e:ee:80:6e:18:08:a5:
         8f:d9:bf:5e:9e:e5:3a:ff:8d:f6:67:c4:31:d2:a8:b8:21:63:
         1d:71:eb:1e:e7:39:9a:e8:ae:b7:ad:12:15:37:f2:c1:df:30:
         9e:56:70:cc:dc:ca:fe:a6:9b:cd:81:c5:5d:29:45:c0:36:93:
         f6:e0:a2:9e:47:26:94:bb:f3:c9:37:4a:3e:db:02:1f:25:8b:
         d3:92:44:f7:d9:71:a6:7a:59:0c:f3:6e:90:02:11:9e:c3:5b:
         6d:c2:ee:f3
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICA3cwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzExRTRBRjExMC8GA1UEBRMoRjAyM0I5NzcwODE5NkZGOUYyMEJDOTI4N0Q1NkM0
MkNBQUU1MTQwRjAeFw0yNjAzMDIwMjQxMTNaFw0yNjAzMDQwMjQxMTNaMBgxFjAU
BgNVBAMTDTY5YTRmOGM5LWIyMzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDrKwEiyfrsRZwzm2mO61NvIL1/UvhLhydsX3grdjgEIFbM2KuSfKStYgk7
EuTOBe+kiT6MWP+rHCojeTURI8EDdAFm0i0EMHkRHjA3Dt9E5VXTbActFxpmErPu
p53325bshdf7kr8Rn3ArTsPF58+s0srOVsBxwCwf8MaWwtB8Popw9fyAaL32aZ9d
OvdC20FXBMoUkFo248kMZyfK32+RT+RfyaJ7UByKO9gfR1exQZIhBAYFjwJfk3oZ
WYyj1YoTEwX4AhBONeNElRdPdHXdXTU48sw7eFmnrsN2S9lzbIk6XOZ45zJV8S7+
DEntK3db+x8eJWlhW3LP41QbyDbzAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUv4Mp
6KEMVxSw/Mam9Wg6O3Kkiy0wHwYDVR0jBBgwFoAU8CO5dwgZb/nyC8kofVbELKrl
FA8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkMxMUU0LzEzREREMzg4ODNBRDExRUVBMEE4MUIzMjRBRDlFNkZDLzhDTzVk
d2daYl9ueUM4a29mVmJFTEtybEZBOC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzhDTzVkd2daYl9ueUM4a29mVmJFTEtybEZBOC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QzExRTQvMTNEREQzODg4M0FEMTFFRUEwQTgxQjMyNEFE
OUU2RkMvOENPNWR3Z1piX255Qzhrb2ZWYkVMS3JsRkE4Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCEVQFhryg+ScwwweYjZb6IwBSC5Faw
7UZp4sbQVxxj442xBYnIEhuh4SgN+H8bz5sx4hNmdgMDKXc50ahMUWl1tOjS/I1U
sYXKum3QHRjO3JJia15WMu/Dui0w6Z6sJWxkBnYU85Geq2e4yRPyHLIP1CGP6f3n
Kx4krdfjmYEG0P7LGpTY85rSxsmMrtRkYVeNcGf30fmDhzxgbF7ugG4YCKWP2b9e
nuU6/432Z8Qx0qi4IWMdcese5zma6K63rRIVN/LB3zCeVnDM3Mr+ppvNgcVdKUXA
NpP24KKeRyaUu/PJN0o+2wIfJYvTkkT32XGmelkM826QAhGew1ttwu7z
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:42:48 2026 by rpki-client