Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CAF37/426A0AD6586F11E5A3276231F8AEA228/imnjE5vX78CApC4WBIM5j6bHW7Y.mft
File:                     imnjE5vX78CApC4WBIM5j6bHW7Y.mft (raw, json)
Hash identifier:          e5kpmPdSkmR8DhDSK+SzHHO3IJIo7s1n8sWZfV8LB9A=
Subject key identifier:   7C:84:AA:58:6B:84:29:FB:73:48:51:CF:D5:6A:FE:C7:FD:49:A8:6A
Authority key identifier: 8A:69:E3:13:9B:D7:EF:C0:80:A4:2E:16:04:83:39:8F:A6:C7:5B:B6
Certificate issuer:       /CN=F36CAF37AF/serialNumber=8A69E3139BD7EFC080A42E160483398FA6C75BB6
Certificate serial:       0F3C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/imnjE5vX78CApC4WBIM5j6bHW7Y.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36CAF37/426A0AD6586F11E5A3276231F8AEA228/imnjE5vX78CApC4WBIM5j6bHW7Y.mft
Manifest number:          0F3C
Signing time:             Mon 02 Mar 2026 00:54:23 +0000
Manifest this update:     Mon 02 Mar 2026 00:54:22 +0000
Manifest next update:     Wed 04 Mar 2026 00:54:22 +0000
Files and hashes:         1: imnjE5vX78CApC4WBIM5j6bHW7Y.crl (hash: DKjkpwYCxZCsYopCm7jNrKnExY+skquLwRgtzfhk5Qo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36CAF37/426A0AD6586F11E5A3276231F8AEA228/imnjE5vX78CApC4WBIM5j6bHW7Y.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36CAF37/426A0AD6586F11E5A3276231F8AEA228/imnjE5vX78CApC4WBIM5j6bHW7Y.mft
                          rsync://rpki.afrinic.net/repository/afrinic/imnjE5vX78CApC4WBIM5j6bHW7Y.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3900 (0xf3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36CAF37AF, serialNumber=8A69E3139BD7EFC080A42E160483398FA6C75BB6
        Validity
            Not Before: Mar  2 00:54:22 2026 GMT
            Not After : Mar  4 00:54:22 2026 GMT
        Subject: CN=69a4dfbf-3df5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e5:45:2c:cb:3b:4d:7c:3a:b9:fc:e7:fd:b8:
                    a6:60:0d:2c:ba:da:6d:5c:0a:c3:cb:6c:ee:fb:14:
                    3e:cf:30:ed:9c:24:60:98:75:d8:5c:88:d2:32:84:
                    03:83:ff:15:74:3c:a1:69:46:21:8c:52:93:ac:8a:
                    af:6f:7b:9c:da:29:74:2c:55:36:38:4a:a9:26:9b:
                    57:e0:2e:f4:e9:98:d5:b6:fd:e1:e5:52:c3:fd:60:
                    70:ac:27:77:15:1b:57:af:3f:25:89:cb:f4:66:69:
                    60:6c:03:6c:7e:b9:2c:cc:62:ce:19:09:22:29:ef:
                    c2:2c:e4:4e:b3:8d:40:08:e6:03:7c:c1:4f:67:c0:
                    29:69:58:2e:f0:27:74:2e:0d:c2:8b:ec:36:81:6f:
                    b5:34:e2:91:3c:e7:08:e6:d6:91:0b:35:3b:66:31:
                    47:24:d9:31:52:ad:8d:5a:5d:dd:82:c0:b6:a8:0d:
                    56:1c:79:54:70:9e:1d:1a:4c:d3:84:91:9e:25:b7:
                    45:5f:a5:9b:f0:7d:18:da:72:4a:c6:7b:25:85:a5:
                    cc:3d:dc:c8:ce:30:4b:cf:71:d1:e5:ca:89:81:1a:
                    6f:b6:73:9f:38:05:c3:3b:6e:4c:44:d8:0b:6c:01:
                    4f:dd:c5:66:04:7a:69:ff:de:d1:9f:4d:51:7b:c2:
                    61:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:84:AA:58:6B:84:29:FB:73:48:51:CF:D5:6A:FE:C7:FD:49:A8:6A
            X509v3 Authority Key Identifier:
                keyid:8A:69:E3:13:9B:D7:EF:C0:80:A4:2E:16:04:83:39:8F:A6:C7:5B:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36CAF37/426A0AD6586F11E5A3276231F8AEA228/imnjE5vX78CApC4WBIM5j6bHW7Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/imnjE5vX78CApC4WBIM5j6bHW7Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CAF37/426A0AD6586F11E5A3276231F8AEA228/imnjE5vX78CApC4WBIM5j6bHW7Y.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:77:b4:59:85:7e:b0:86:48:1d:a9:58:72:4e:ac:88:a8:01:
         0f:e6:e5:e8:16:fc:5b:a8:9f:0e:e5:5e:dc:b3:d9:56:e7:d7:
         15:7e:21:49:bf:06:a3:25:f8:5e:be:6a:64:c1:54:06:49:91:
         a8:a4:3e:77:36:d6:4b:5f:50:5e:78:3e:a7:db:4b:03:c8:a4:
         d1:42:b0:a6:26:85:bf:c2:39:02:a6:74:fa:23:77:4d:04:c2:
         dc:cf:f1:09:a1:d8:08:02:80:e3:8b:2e:c2:b8:97:29:da:a9:
         fd:55:6e:d5:64:84:de:27:6a:3b:38:08:30:dc:1b:34:1f:d3:
         6a:bd:9a:cd:23:44:bf:4b:34:1f:6f:d4:8f:d4:a2:45:e0:a4:
         c0:c4:33:d2:f0:10:f7:95:1c:49:1c:9f:0e:73:be:d0:eb:ae:
         24:ad:46:90:34:0a:13:70:16:30:34:8a:13:33:42:15:d4:52:
         36:9f:31:10:44:65:04:23:c4:21:aa:91:24:26:99:cf:ec:b8:
         27:1a:25:7b:b9:c3:7f:a9:1f:e3:e7:21:2e:11:00:d6:8b:d5:
         94:c9:3f:f1:f8:d1:b3:f0:ae:52:6d:5f:31:ce:26:65:07:aa:
         ad:5f:36:e5:c6:43:3b:12:e0:91:7a:45:1c:eb:da:59:40:64:
         84:d6:67:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:44:16 2026 by rpki-client