Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C5814/CFBB0A84A75111E6B023E037F8AEA228/0mlPWs5d97eiscdbRLGLWndoOGg.mft
File:                     0mlPWs5d97eiscdbRLGLWndoOGg.mft (raw, json)
Hash identifier:          eVnx7pTzWwBop1EeodP9ZIXSPPLiQfTtC8BnE/4c1Do=
Subject key identifier:   BA:BA:B8:EC:55:8C:61:44:1B:5E:3E:99:3D:CA:08:F3:58:DE:0A:2F
Authority key identifier: D2:69:4F:5A:CE:5D:F7:B7:A2:B1:C7:5B:44:B1:8B:5A:77:68:38:68
Certificate issuer:       /CN=F36C5814AF/serialNumber=D2694F5ACE5DF7B7A2B1C75B44B18B5A77683868
Certificate serial:       0DA3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/0mlPWs5d97eiscdbRLGLWndoOGg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C5814/CFBB0A84A75111E6B023E037F8AEA228/0mlPWs5d97eiscdbRLGLWndoOGg.mft
Manifest number:          0D9E
Signing time:             Mon 02 Mar 2026 00:59:57 +0000
Manifest this update:     Mon 02 Mar 2026 00:59:56 +0000
Manifest next update:     Wed 04 Mar 2026 00:59:56 +0000
Files and hashes:         1: 0mlPWs5d97eiscdbRLGLWndoOGg.crl (hash: RXunPceXzMu8ERaz52TX5QRHO2adgXw7a8EcKnIe6oo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C5814/CFBB0A84A75111E6B023E037F8AEA228/0mlPWs5d97eiscdbRLGLWndoOGg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C5814/CFBB0A84A75111E6B023E037F8AEA228/0mlPWs5d97eiscdbRLGLWndoOGg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/0mlPWs5d97eiscdbRLGLWndoOGg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3491 (0xda3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C5814AF, serialNumber=D2694F5ACE5DF7B7A2B1C75B44B18B5A77683868
        Validity
            Not Before: Mar  2 00:59:56 2026 GMT
            Not After : Mar  4 00:59:56 2026 GMT
        Subject: CN=69a4e10d-e023
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:db:3a:fe:6f:52:36:58:61:db:48:d1:b4:60:
                    9f:9c:1e:d6:4c:ed:ae:5e:5e:9a:92:49:c2:d6:06:
                    30:73:83:ca:7f:db:88:39:eb:7f:3b:ea:14:41:c5:
                    42:9a:bf:fc:7d:3b:fc:91:d3:cb:6c:99:6b:f9:d8:
                    fe:3b:30:24:35:04:a4:56:8d:fb:60:e3:80:bc:a0:
                    d8:da:2c:84:7e:6c:53:3a:62:13:68:9f:cb:af:db:
                    be:5f:0a:da:51:a0:20:18:03:ed:95:c4:cb:b3:0e:
                    92:18:a4:80:ad:f3:8f:18:65:69:2d:44:1d:16:ff:
                    39:4b:b1:c9:eb:36:08:7f:34:5b:72:e8:20:8f:ae:
                    82:d2:4b:8b:b1:94:94:ce:bf:d8:24:cf:b6:7e:19:
                    78:f8:96:d4:d4:c7:55:15:1f:9a:c4:46:b9:3b:ed:
                    c0:7f:9a:5d:76:82:2f:84:ce:b6:b4:02:6d:3b:f8:
                    f6:46:1e:f4:11:3e:83:8e:21:d3:ad:bf:93:69:6e:
                    c3:db:3d:a7:c2:de:5a:64:8e:65:c4:4b:ff:36:1e:
                    bf:80:39:9a:c3:95:e5:ab:99:cd:8f:c3:c5:f5:ca:
                    cd:2a:7e:20:0f:44:66:8d:bb:37:9a:ee:19:f5:36:
                    84:ab:ca:53:bf:d5:9b:dd:b2:34:df:d4:f8:01:85:
                    65:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:BA:B8:EC:55:8C:61:44:1B:5E:3E:99:3D:CA:08:F3:58:DE:0A:2F
            X509v3 Authority Key Identifier:
                keyid:D2:69:4F:5A:CE:5D:F7:B7:A2:B1:C7:5B:44:B1:8B:5A:77:68:38:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C5814/CFBB0A84A75111E6B023E037F8AEA228/0mlPWs5d97eiscdbRLGLWndoOGg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0mlPWs5d97eiscdbRLGLWndoOGg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C5814/CFBB0A84A75111E6B023E037F8AEA228/0mlPWs5d97eiscdbRLGLWndoOGg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:77:86:74:7b:92:63:98:36:a6:ff:7f:a2:5b:62:53:f5:68:
         0b:99:ad:99:34:f1:d8:d2:62:93:fb:eb:7b:57:a7:8b:85:17:
         76:14:ee:ad:17:f6:79:42:7e:46:fd:ab:22:37:63:1d:5e:0a:
         35:89:c3:7a:4a:92:1e:61:52:4d:96:95:7b:51:46:46:f7:5e:
         c2:b7:2d:a4:4c:96:e4:f0:fd:b1:33:ca:ff:9d:3d:3f:e8:bb:
         d9:2b:b0:85:ba:3b:d5:4f:6b:7a:f7:9d:03:2f:f2:b6:80:93:
         5c:ff:40:b1:1e:7e:f2:c1:de:04:9a:f7:c3:bb:8a:e0:d5:81:
         04:16:de:2b:a3:c7:66:35:28:51:94:1f:10:67:77:36:41:cc:
         96:7f:71:7b:dc:b5:f2:be:62:63:3b:93:98:e8:45:95:c6:83:
         2d:ee:0f:b5:61:1a:fe:82:f7:4d:f4:14:30:e0:a8:06:12:a5:
         94:47:3a:a2:a4:73:ae:a3:7d:10:1d:78:1e:c8:aa:20:ea:56:
         07:2d:7c:b7:c6:ed:2d:2a:5c:21:17:54:aa:6b:44:8e:ec:de:
         24:28:15:db:98:f3:16:b4:00:50:83:a2:5c:bf:b7:2f:b1:5c:
         8a:b2:be:8e:0f:7e:ae:21:38:0e:44:fd:fa:52:9b:80:a8:5a:
         80:62:9a:88
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICDaMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzU4MTRBRjExMC8GA1UEBRMoRDI2OTRGNUFDRTVERjdCN0EyQjFDNzVCNDRCMThC
NUE3NzY4Mzg2ODAeFw0yNjAzMDIwMDU5NTZaFw0yNjAzMDQwMDU5NTZaMBgxFjAU
BgNVBAMTDTY5YTRlMTBkLWUwMjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDT2zr+b1I2WGHbSNG0YJ+cHtZM7a5eXpqSScLWBjBzg8p/24g563876hRB
xUKav/x9O/yR08tsmWv52P47MCQ1BKRWjftg44C8oNjaLIR+bFM6YhNon8uv275f
CtpRoCAYA+2VxMuzDpIYpICt848YZWktRB0W/zlLscnrNgh/NFty6CCProLSS4ux
lJTOv9gkz7Z+GXj4ltTUx1UVH5rERrk77cB/ml12gi+Ezra0Am07+PZGHvQRPoOO
IdOtv5NpbsPbPafC3lpkjmXES/82Hr+AOZrDleWrmc2Pw8X1ys0qfiAPRGaNuzea
7hn1NoSrylO/1ZvdsjTf1PgBhWWVAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUurq4
7FWMYUQbXj6ZPcoI81jeCi8wHwYDVR0jBBgwFoAU0mlPWs5d97eiscdbRLGLWndo
OGgwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1ODE0L0NGQkIwQTg0QTc1MTExRTZCMDIzRTAzN0Y4QUVBMjI4LzBtbFBX
czVkOTdlaXNjZGJSTEdMV25kb09HZy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzBtbFBXczVkOTdlaXNjZGJSTEdMV25kb09HZy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QzU4MTQvQ0ZCQjBBODRBNzUxMTFFNkIwMjNFMDM3RjhB
RUEyMjgvMG1sUFdzNWQ5N2Vpc2NkYlJMR0xXbmRvT0dnLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCod4Z0e5JjmDam/3+iW2JT9WgLma2Z
NPHY0mKT++t7V6eLhRd2FO6tF/Z5Qn5G/asiN2MdXgo1icN6SpIeYVJNlpV7UUZG
917Cty2kTJbk8P2xM8r/nT0/6LvZK7CFujvVT2t6950DL/K2gJNc/0CxHn7ywd4E
mvfDu4rg1YEEFt4ro8dmNShRlB8QZ3c2QcyWf3F73LXyvmJjO5OY6EWVxoMt7g+1
YRr+gvdN9BQw4KgGEqWURzqipHOuo30QHXgeyKog6lYHLXy3xu0tKlwhF1Sqa0SO
7N4kKBXbmPMWtABQg6Jcv7cvsVyKsr6OD36uITgORP36UpuAqFqAYpqI
-----END CERTIFICATE-----
Generated at Mon Mar 2 23:24:07 2026 by rpki-client