Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C2FCA/A0A849CC9E1511F0A83E87BFDAE4EC9C/wDEb4pGTolThzVxYy7dlalArlVo.mft
File:                     wDEb4pGTolThzVxYy7dlalArlVo.mft (raw, json)
Hash identifier:          SrqTWYYvUZkE2WCYetpwrWn7jELo9IAUMNRSeaPlph0=
Subject key identifier:   61:5A:E9:A0:E5:A5:D3:6C:FB:CF:0F:03:30:02:1D:12:F4:CA:A9:A7
Authority key identifier: C0:31:1B:E2:91:93:A2:54:E1:CD:5C:58:CB:B7:65:6A:50:2B:95:5A
Certificate issuer:       /CN=F36C2FCAAF/serialNumber=C0311BE29193A254E1CD5C58CBB7656A502B955A
Certificate serial:       9D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/wDEb4pGTolThzVxYy7dlalArlVo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C2FCA/A0A849CC9E1511F0A83E87BFDAE4EC9C/wDEb4pGTolThzVxYy7dlalArlVo.mft
Manifest number:          9D
Signing time:             Mon 02 Mar 2026 03:30:34 +0000
Manifest this update:     Mon 02 Mar 2026 03:30:34 +0000
Manifest next update:     Wed 04 Mar 2026 03:30:34 +0000
Files and hashes:         1: wDEb4pGTolThzVxYy7dlalArlVo.crl (hash: sE+rTaz9ao51iOKnfRx413Hmo7QQTfSohIlkSmyZ0EA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C2FCA/A0A849CC9E1511F0A83E87BFDAE4EC9C/wDEb4pGTolThzVxYy7dlalArlVo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C2FCA/A0A849CC9E1511F0A83E87BFDAE4EC9C/wDEb4pGTolThzVxYy7dlalArlVo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/wDEb4pGTolThzVxYy7dlalArlVo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 157 (0x9d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C2FCAAF, serialNumber=C0311BE29193A254E1CD5C58CBB7656A502B955A
        Validity
            Not Before: Mar  2 03:30:34 2026 GMT
            Not After : Mar  4 03:30:34 2026 GMT
        Subject: CN=69a5045a-c682
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b5:a1:b2:06:ae:b7:39:78:d2:23:ed:d1:0f:
                    24:84:16:7c:63:08:22:70:d4:cd:0e:96:52:5d:66:
                    88:83:ef:af:d4:dd:30:f3:4a:b0:34:8b:59:63:bf:
                    1c:0b:94:b9:3d:ec:d4:2c:35:ab:71:c6:0d:2a:7c:
                    4c:1c:aa:7e:cd:64:5b:b3:85:83:11:18:b6:d8:7e:
                    7f:a8:f8:22:d3:fc:59:d9:ef:db:54:18:f0:97:3e:
                    8c:49:1a:d5:ad:f1:31:c5:b2:a6:8c:71:cb:2d:ad:
                    7d:31:da:d9:09:83:52:c3:37:58:47:f0:38:c2:16:
                    39:03:40:d1:fb:9b:75:ba:cd:15:89:cf:3c:3c:93:
                    72:76:60:d5:ab:d3:05:1e:ca:0a:83:db:c4:31:cf:
                    3c:5f:2d:55:fe:dc:0a:b0:4d:53:74:4e:85:d7:96:
                    24:7e:22:1d:21:10:e9:7f:22:6e:0e:26:75:9e:5e:
                    2c:96:c8:07:15:6f:1b:e9:8d:c6:83:c8:5a:7f:2c:
                    b0:5d:b8:8e:58:22:8c:53:10:1b:70:85:69:6b:df:
                    34:5e:15:2f:28:f4:53:5c:66:9c:ce:c3:76:60:be:
                    73:98:77:e2:90:0b:ed:e8:b8:fd:df:4a:67:67:3b:
                    3d:b7:32:45:ac:b4:81:86:7e:a9:d2:16:5b:cc:18:
                    7c:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:5A:E9:A0:E5:A5:D3:6C:FB:CF:0F:03:30:02:1D:12:F4:CA:A9:A7
            X509v3 Authority Key Identifier:
                keyid:C0:31:1B:E2:91:93:A2:54:E1:CD:5C:58:CB:B7:65:6A:50:2B:95:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C2FCA/A0A849CC9E1511F0A83E87BFDAE4EC9C/wDEb4pGTolThzVxYy7dlalArlVo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wDEb4pGTolThzVxYy7dlalArlVo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C2FCA/A0A849CC9E1511F0A83E87BFDAE4EC9C/wDEb4pGTolThzVxYy7dlalArlVo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:37:f5:90:f4:c2:ae:1b:a3:69:45:20:59:12:21:38:f8:fc:
         21:7f:20:f8:c5:b4:93:88:50:80:d3:5d:ba:cc:a1:57:4a:2b:
         30:51:2a:57:bf:b9:ea:97:d9:74:99:6a:38:61:8f:c9:17:c8:
         c9:81:ce:a1:11:78:f8:53:ca:42:4c:b8:7f:8c:71:72:a5:58:
         78:e6:64:fa:6d:a2:e3:28:d3:6f:29:e8:e0:fd:c4:47:0f:ed:
         8d:f3:69:2f:9b:59:4f:78:42:c7:53:d8:39:94:5e:d9:53:f0:
         e0:73:ff:52:84:e4:e4:6f:14:56:5e:d2:29:ec:81:9d:36:01:
         70:5c:59:ce:f1:26:2f:e4:25:3b:f5:86:da:2f:9f:16:46:e7:
         a2:e9:2b:0c:42:d0:aa:be:f1:4e:b5:04:97:6f:7e:13:f0:98:
         df:4b:59:bf:10:11:39:d1:a8:14:34:70:8f:ae:97:fb:72:56:
         6a:68:16:50:34:b2:b9:15:94:50:a3:c6:4b:7f:27:c5:74:89:
         21:ae:f7:c5:8e:e0:16:3f:57:fd:ab:69:5d:90:fe:66:8d:6c:
         3d:15:80:c6:c2:7e:a0:4b:c7:12:99:60:53:1a:fe:cc:c8:0b:
         38:1a:f8:bc:ee:dd:8c:2e:e3:00:7e:d3:8d:71:c5:87:b2:fb:
         f1:6b:30:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:43:58 2026 by rpki-client