Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C3A58/1B78C60CA8BF11EEBB3CA855775412E6/4V9Q3dKOAv1uaWbVkY0bC79GhOg.mft
File:                     4V9Q3dKOAv1uaWbVkY0bC79GhOg.mft (raw, json)
Hash identifier:          hjeD1C8RN+omC1ULfX4cmFog598Hvw6kRbKxlXfwTuE=
Subject key identifier:   C4:7B:19:64:E4:7A:5B:55:D2:4A:59:A6:2D:86:F2:12:B5:66:6D:AA
Authority key identifier: E1:5F:50:DD:D2:8E:02:FD:6E:69:66:D5:91:8D:1B:0B:BF:46:84:E8
Certificate issuer:       /CN=F36C3A58AF/serialNumber=E15F50DDD28E02FD6E6966D5918D1B0BBF4684E8
Certificate serial:       0351
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/4V9Q3dKOAv1uaWbVkY0bC79GhOg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C3A58/1B78C60CA8BF11EEBB3CA855775412E6/4V9Q3dKOAv1uaWbVkY0bC79GhOg.mft
Manifest number:          0343
Signing time:             Mon 02 Mar 2026 02:44:32 +0000
Manifest this update:     Mon 02 Mar 2026 02:44:32 +0000
Manifest next update:     Wed 04 Mar 2026 02:44:32 +0000
Files and hashes:         1: 4V9Q3dKOAv1uaWbVkY0bC79GhOg.crl (hash: eBAQQ3/PsQaSFPurnS1570jDvCkWKpZzG52RSnJ9rJk=)
                          2: C60C59567D8711EF97D7ACB4762E951A.roa (hash: qjux6GhSq9uX5DCNJbFQuyrkaPLVantCfSfpdQCqZvM=)
                          3: 963E345AAA6E11F092CBEA92DAE4EC9C.roa (hash: pST0iqM1LIDeTWfpvZG5M6dsTHwi1B1szH8dsYd3DBU=)
                          4: 2257925CAA6E11F0A6F76B90DAE4EC9C.roa (hash: oxEm9UctpCtTUrbHITbDcrkM+rBf2+aSQrb3SqlA3kA=)
                          5: 24A9CB30596E11EFA89A0E7E762E951A.roa (hash: eSokWiFbXZKHYJAeMCSCb+kdTU9P/gdQpCGsPx3aeF0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C3A58/1B78C60CA8BF11EEBB3CA855775412E6/4V9Q3dKOAv1uaWbVkY0bC79GhOg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C3A58/1B78C60CA8BF11EEBB3CA855775412E6/4V9Q3dKOAv1uaWbVkY0bC79GhOg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/4V9Q3dKOAv1uaWbVkY0bC79GhOg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 849 (0x351)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C3A58AF, serialNumber=E15F50DDD28E02FD6E6966D5918D1B0BBF4684E8
        Validity
            Not Before: Mar  2 02:44:32 2026 GMT
            Not After : Mar  4 02:44:32 2026 GMT
        Subject: CN=69a4f990-915f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:04:2c:a2:31:b6:1b:ea:e7:21:46:8e:41:44:
                    d5:03:83:ee:bd:0f:5d:61:4a:1f:3c:cb:85:63:29:
                    97:2a:ed:3c:8f:5b:da:4e:65:f0:cc:56:73:50:04:
                    8f:02:56:56:b8:9f:75:08:be:9d:ab:3b:24:2a:f8:
                    75:58:15:91:e9:1c:27:c4:70:70:7e:cc:fc:21:30:
                    06:d5:d8:0f:30:81:2e:66:a6:4d:8c:35:d2:50:49:
                    0d:06:22:f2:cb:03:df:a9:47:2f:63:a1:03:f3:f7:
                    30:1d:6b:6a:78:be:3a:c4:c1:c9:c4:01:ca:63:da:
                    c0:61:c7:62:46:ea:3a:a2:d0:33:5e:23:3a:44:f0:
                    7f:f3:76:7c:b1:3b:4f:24:d6:aa:6b:5e:c3:bb:45:
                    90:16:f7:77:88:53:9a:53:83:ae:2f:cd:4e:02:86:
                    e2:cd:72:dc:c0:99:01:28:e2:1c:ce:6f:ba:14:ab:
                    e9:77:fe:1f:21:fe:ac:a1:54:0e:ca:1d:f7:6e:f8:
                    5a:04:68:27:33:32:ad:ca:fa:3e:e7:a0:40:23:6d:
                    0b:9d:8e:31:24:61:45:54:50:a4:5e:f3:16:38:7d:
                    61:b0:07:26:c5:b3:23:fa:38:7c:86:78:18:fb:0e:
                    90:bb:0b:69:ae:88:ad:cc:5e:e3:24:e8:c3:9b:91:
                    44:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:7B:19:64:E4:7A:5B:55:D2:4A:59:A6:2D:86:F2:12:B5:66:6D:AA
            X509v3 Authority Key Identifier:
                keyid:E1:5F:50:DD:D2:8E:02:FD:6E:69:66:D5:91:8D:1B:0B:BF:46:84:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C3A58/1B78C60CA8BF11EEBB3CA855775412E6/4V9Q3dKOAv1uaWbVkY0bC79GhOg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4V9Q3dKOAv1uaWbVkY0bC79GhOg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C3A58/1B78C60CA8BF11EEBB3CA855775412E6/4V9Q3dKOAv1uaWbVkY0bC79GhOg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:50:f5:25:3d:3f:70:3a:b0:f5:28:95:50:d9:7a:93:ff:03:
         1e:8e:ba:13:4f:c1:cc:65:00:bb:b9:9d:37:12:10:d5:1f:20:
         4c:9c:bb:27:4d:69:11:5c:32:99:c0:ee:a3:1e:a7:0a:96:2d:
         dc:64:2d:7c:16:a7:da:36:fa:d0:ec:84:ab:08:ad:4d:d5:10:
         00:13:63:a2:42:29:f7:95:07:3f:ff:c7:27:a5:40:a9:59:cd:
         73:c0:64:85:f7:a1:a9:33:67:b3:8a:cf:77:85:70:f2:c2:7a:
         09:1f:2c:e1:45:e1:16:4d:25:8c:0c:65:05:8e:62:91:71:19:
         28:d0:b7:12:c7:4f:8a:ce:ad:57:2a:90:75:b0:53:c3:0b:25:
         4f:78:e8:b0:fd:52:4c:50:31:33:c6:f2:85:5a:16:08:84:88:
         d7:1d:08:54:f0:67:c1:f1:43:e2:2f:30:f2:9e:59:c7:68:1f:
         a2:a5:b8:64:c8:ef:e6:d4:dc:eb:d8:8f:72:e6:41:bc:3b:14:
         db:49:3f:14:09:14:70:22:f4:0e:a7:ce:e1:57:cd:9a:8e:a2:
         e6:5c:ce:ba:d5:d8:72:ec:da:2d:d4:cb:ca:6d:67:d9:e8:eb:
         5a:83:a6:b2:a7:84:69:06:b3:76:bf:9c:68:d2:f9:d0:85:c9:
         e5:00:37:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:31:18 2026 by rpki-client