Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CACCC/DC647B426C3011EF91DB8BBE762E951A/5U9enM9-t26XkK6VM_5KhMiy_Lw.mft
File:                     5U9enM9-t26XkK6VM_5KhMiy_Lw.mft (raw, json)
Hash identifier:          SelwkeyivLJnJFFBByv9jEkrjBLuwkSG04EOvVKjZgk=
Subject key identifier:   37:B8:E3:6A:32:30:D7:58:17:6B:85:4A:6E:9F:EA:74:73:42:1D:7E
Authority key identifier: E5:4F:5E:9C:CF:7E:B7:6E:97:90:AE:95:33:FE:4A:84:C8:B2:FC:BC
Certificate issuer:       /CN=F36CACCCAF/serialNumber=E54F5E9CCF7EB76E9790AE9533FE4A84C8B2FCBC
Certificate serial:       022E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/5U9enM9-t26XkK6VM_5KhMiy_Lw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36CACCC/DC647B426C3011EF91DB8BBE762E951A/5U9enM9-t26XkK6VM_5KhMiy_Lw.mft
Manifest number:          022D
Signing time:             Mon 02 Mar 2026 03:04:36 +0000
Manifest this update:     Mon 02 Mar 2026 03:04:36 +0000
Manifest next update:     Wed 04 Mar 2026 03:04:36 +0000
Files and hashes:         1: 5U9enM9-t26XkK6VM_5KhMiy_Lw.crl (hash: zKbJS0tNDDEQJ15Ln/II8Oer/PPwPRrQVZQbGyrjwls=)
                          2: 690AD7B26C3111EF81B16842762E951A.roa (hash: rHzjxo/eO2fqIELNKfmN3/VjzzeCb8hHN9sTo2VjXI0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36CACCC/DC647B426C3011EF91DB8BBE762E951A/5U9enM9-t26XkK6VM_5KhMiy_Lw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36CACCC/DC647B426C3011EF91DB8BBE762E951A/5U9enM9-t26XkK6VM_5KhMiy_Lw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/5U9enM9-t26XkK6VM_5KhMiy_Lw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 558 (0x22e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36CACCCAF, serialNumber=E54F5E9CCF7EB76E9790AE9533FE4A84C8B2FCBC
        Validity
            Not Before: Mar  2 03:04:36 2026 GMT
            Not After : Mar  4 03:04:36 2026 GMT
        Subject: CN=69a4fe44-5aeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e8:32:fc:c1:f7:5a:64:aa:c1:f5:f2:0b:f1:
                    29:6e:5b:31:57:12:9a:e2:8c:42:d6:83:2d:55:46:
                    75:58:5b:d6:f1:d6:06:43:db:2c:4b:fd:c5:58:7b:
                    b2:8a:65:41:d9:6d:04:9c:ed:38:2d:a3:54:54:74:
                    73:75:59:98:5d:9c:c9:87:1a:fd:13:c4:87:a8:21:
                    92:d0:14:bc:e1:d9:1e:c1:dd:4c:a1:16:35:25:85:
                    ec:81:b8:48:d2:31:07:b7:cc:c2:03:7f:49:72:77:
                    2b:7f:e7:5b:38:79:e7:3f:d8:eb:76:60:4b:01:48:
                    ab:23:30:d9:4a:88:10:70:c9:3d:9e:00:1b:0f:65:
                    50:55:e4:62:49:67:f8:f7:53:77:65:db:1e:d1:ce:
                    f8:d2:ae:f2:6b:43:24:04:d4:3c:3c:41:08:58:02:
                    f4:e2:bd:71:e0:fc:37:c3:b9:e0:5b:79:2e:43:de:
                    83:7b:c6:34:ab:ff:9a:49:8d:30:0b:72:f4:68:e6:
                    8d:5c:0f:dd:df:9e:80:3c:95:38:13:03:f7:25:aa:
                    d0:74:22:76:77:99:b8:b0:77:af:88:7c:46:89:bc:
                    07:6b:30:5f:15:bb:00:73:d3:e3:d8:7e:6e:f4:be:
                    62:c7:6d:10:9d:cf:e6:01:6e:7a:48:23:29:e6:d5:
                    76:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:B8:E3:6A:32:30:D7:58:17:6B:85:4A:6E:9F:EA:74:73:42:1D:7E
            X509v3 Authority Key Identifier:
                keyid:E5:4F:5E:9C:CF:7E:B7:6E:97:90:AE:95:33:FE:4A:84:C8:B2:FC:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36CACCC/DC647B426C3011EF91DB8BBE762E951A/5U9enM9-t26XkK6VM_5KhMiy_Lw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/5U9enM9-t26XkK6VM_5KhMiy_Lw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CACCC/DC647B426C3011EF91DB8BBE762E951A/5U9enM9-t26XkK6VM_5KhMiy_Lw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:af:a2:a3:36:11:c5:14:7d:6e:1f:f9:31:67:3e:1d:1f:dc:
         86:7f:25:f0:fe:2c:ca:7c:2f:45:50:a7:6c:10:51:23:6e:82:
         f1:3f:01:4e:4d:76:43:12:5c:f3:e1:ff:e3:9d:54:8b:30:54:
         bf:06:22:a8:46:a6:d8:9a:d1:45:f1:42:a3:57:ba:35:65:63:
         b4:7e:65:37:5f:0f:a7:44:1a:74:ab:4e:29:f9:25:6d:ad:1d:
         ac:61:85:17:bb:83:7d:ca:38:46:28:d8:fd:fa:a8:05:c9:27:
         8c:56:04:da:11:6e:42:41:3f:2f:50:a3:19:7f:65:33:04:49:
         ae:5f:0f:a7:ad:60:e8:15:01:72:9a:8d:d8:f3:54:8e:87:dd:
         ca:f4:1f:9f:3d:64:eb:06:d7:01:1a:2e:42:f9:a4:92:df:1b:
         7e:b6:1c:5d:02:80:92:32:91:48:96:05:4e:20:e3:34:e2:b6:
         53:25:87:0a:61:1c:86:26:91:9f:c5:f9:24:74:b5:18:3a:ec:
         d1:8c:85:ac:0b:b4:ae:2e:09:7a:10:14:51:f7:0a:5a:42:a7:
         a8:b7:59:88:94:2d:8c:0a:39:17:b5:5c:dc:cd:e7:76:69:fc:
         63:f7:fd:6b:c4:bc:0d:dc:06:a7:e9:36:a3:6d:80:85:c3:84:
         5a:14:07:af
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAi4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
Q0FDQ0NBRjExMC8GA1UEBRMoRTU0RjVFOUNDRjdFQjc2RTk3OTBBRTk1MzNGRTRB
ODRDOEIyRkNCQzAeFw0yNjAzMDIwMzA0MzZaFw0yNjAzMDQwMzA0MzZaMBgxFjAU
BgNVBAMTDTY5YTRmZTQ0LTVhZWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDB6DL8wfdaZKrB9fIL8SluWzFXEprijELWgy1VRnVYW9bx1gZD2yxL/cVY
e7KKZUHZbQSc7Tgto1RUdHN1WZhdnMmHGv0TxIeoIZLQFLzh2R7B3UyhFjUlheyB
uEjSMQe3zMIDf0lydyt/51s4eec/2Ot2YEsBSKsjMNlKiBBwyT2eABsPZVBV5GJJ
Z/j3U3dl2x7RzvjSrvJrQyQE1Dw8QQhYAvTivXHg/DfDueBbeS5D3oN7xjSr/5pJ
jTALcvRo5o1cD93fnoA8lTgTA/clqtB0InZ3mbiwd6+IfEaJvAdrMF8VuwBz0+PY
fm70vmLHbRCdz+YBbnpIIynm1XadAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUN7jj
ajIw11gXa4VKbp/qdHNCHX4wHwYDVR0jBBgwFoAU5U9enM9+t26XkK6VM/5KhMiy
/LwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkNBQ0NDL0RDNjQ3QjQyNkMzMDExRUY5MURCOEJCRTc2MkU5NTFBLzVVOWVu
TTktdDI2WGtLNlZNXzVLaE1peV9Mdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzVVOWVuTTktdDI2WGtLNlZNXzVLaE1peV9Mdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2Q0FDQ0MvREM2NDdCNDI2QzMwMTFFRjkxREI4QkJFNzYy
RTk1MUEvNVU5ZW5NOS10MjZYa0s2Vk1fNUtoTWl5X0x3Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB/r6KjNhHFFH1uH/kxZz4dH9yGfyXw
/izKfC9FUKdsEFEjboLxPwFOTXZDElzz4f/jnVSLMFS/BiKoRqbYmtFF8UKjV7o1
ZWO0fmU3Xw+nRBp0q04p+SVtrR2sYYUXu4N9yjhGKNj9+qgFySeMVgTaEW5CQT8v
UKMZf2UzBEmuXw+nrWDoFQFymo3Y81SOh93K9B+fPWTrBtcBGi5C+aSS3xt+thxd
AoCSMpFIlgVOIOM04rZTJYcKYRyGJpGfxfkkdLUYOuzRjIWsC7SuLgl6EBRR9wpa
Qqeot1mIlC2MCjkXtVzczed2afxj9/1rxLwN3Aan6TajbYCFw4RaFAev
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:51:30 2026 by rpki-client