Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CC4C5/04CAE4B4DE6C11F0BBD54FEADAE4EC9C/P5zY-FE-7AV78kzbzX87-jp0Pnw.mft
File:                     P5zY-FE-7AV78kzbzX87-jp0Pnw.mft (raw, json)
Hash identifier:          CUVayOx508dy0twtCPoISMSbkgfSD9YgjjwUzCRDgnQ=
Subject key identifier:   67:41:71:5A:5C:63:36:04:52:3C:0C:BE:10:CA:C7:E4:31:8D:77:F1
Authority key identifier: 3F:9C:D8:F8:51:3E:EC:05:7B:F2:4C:DB:CD:7F:3B:FA:3A:74:3E:7C
Certificate issuer:       /CN=F36CC4C5AF/serialNumber=3F9CD8F8513EEC057BF24CDBCD7F3BFA3A743E7C
Certificate serial:       4B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/P5zY-FE-7AV78kzbzX87-jp0Pnw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36CC4C5/04CAE4B4DE6C11F0BBD54FEADAE4EC9C/P5zY-FE-7AV78kzbzX87-jp0Pnw.mft
Manifest number:          4A
Signing time:             Mon 02 Mar 2026 03:36:09 +0000
Manifest this update:     Mon 02 Mar 2026 03:36:09 +0000
Manifest next update:     Wed 04 Mar 2026 03:36:09 +0000
Files and hashes:         1: P5zY-FE-7AV78kzbzX87-jp0Pnw.crl (hash: SkE5YMX2kPfbocWrf4aOCFQVceJHBcqUvdcj+sdVkSQ=)
                          2: 663044EADE6E11F08634B67BDAE4EC9C.roa (hash: LCOmuTQcwycNhMw2CFZDyotBnrzvHLmf2qdHUbahKo0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36CC4C5/04CAE4B4DE6C11F0BBD54FEADAE4EC9C/P5zY-FE-7AV78kzbzX87-jp0Pnw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36CC4C5/04CAE4B4DE6C11F0BBD54FEADAE4EC9C/P5zY-FE-7AV78kzbzX87-jp0Pnw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/P5zY-FE-7AV78kzbzX87-jp0Pnw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 75 (0x4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36CC4C5AF, serialNumber=3F9CD8F8513EEC057BF24CDBCD7F3BFA3A743E7C
        Validity
            Not Before: Mar  2 03:36:09 2026 GMT
            Not After : Mar  4 03:36:09 2026 GMT
        Subject: CN=69a505a9-820f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:65:38:37:2a:41:6a:95:bf:15:a0:28:b9:ed:
                    9a:4e:d2:15:f4:8c:60:f5:49:cb:12:b2:ce:0f:3b:
                    4d:d9:df:8d:61:35:26:48:c2:e7:20:95:7c:20:96:
                    77:0d:91:23:16:33:ff:ac:67:61:94:7e:09:e5:74:
                    0c:2a:ec:21:e7:6b:c7:7d:3c:4f:96:16:15:95:ce:
                    32:6d:4f:69:d9:ba:96:85:9a:27:c2:54:98:b1:77:
                    b5:fb:4c:ce:d6:3d:44:79:2f:82:1d:f6:29:9b:1a:
                    d1:d2:fe:9a:13:15:59:52:75:c8:76:f7:1a:1a:25:
                    25:d9:d0:9a:99:a5:5c:76:f5:40:99:4d:42:bc:ed:
                    50:e0:ef:9b:a0:a7:a4:03:90:9e:de:51:a8:59:01:
                    de:f0:3f:a7:5c:84:e1:80:2d:15:f0:50:2f:ef:b2:
                    a4:62:66:92:74:ce:30:cf:b8:f0:59:6c:07:c9:cb:
                    a2:72:1e:cc:c5:bd:67:86:1a:f4:64:d6:db:67:15:
                    83:a6:c4:b8:4e:55:42:4f:bb:6a:0d:1c:f0:6f:eb:
                    11:77:f7:bd:fd:2e:f7:de:00:44:fe:f6:20:94:ed:
                    34:e0:ed:64:fa:4f:0f:d4:36:11:69:5b:18:6c:9b:
                    79:0a:52:42:7b:20:ea:39:0b:fe:47:a7:d0:1d:c5:
                    35:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:41:71:5A:5C:63:36:04:52:3C:0C:BE:10:CA:C7:E4:31:8D:77:F1
            X509v3 Authority Key Identifier:
                keyid:3F:9C:D8:F8:51:3E:EC:05:7B:F2:4C:DB:CD:7F:3B:FA:3A:74:3E:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36CC4C5/04CAE4B4DE6C11F0BBD54FEADAE4EC9C/P5zY-FE-7AV78kzbzX87-jp0Pnw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/P5zY-FE-7AV78kzbzX87-jp0Pnw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CC4C5/04CAE4B4DE6C11F0BBD54FEADAE4EC9C/P5zY-FE-7AV78kzbzX87-jp0Pnw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:88:ed:1b:c5:10:96:94:f7:e1:b4:b5:1f:bb:1c:b1:c6:f4:
         4b:de:0f:5f:22:29:01:84:37:20:39:ff:38:bf:7b:4f:fe:1f:
         38:c0:9e:28:00:98:bf:bd:e6:a9:71:0f:0c:60:9d:dd:cb:3b:
         ce:d3:e9:2d:1f:31:27:18:50:69:92:96:ff:ca:f8:db:45:21:
         96:75:00:be:8d:9c:2b:dc:cc:95:9a:92:f6:38:f5:57:bc:c8:
         f1:4a:aa:d6:f2:cf:7f:87:4e:f8:23:3d:6a:b8:69:fc:1d:96:
         81:df:89:cc:be:b3:6f:32:67:0c:3c:09:fc:d0:42:c2:d2:ce:
         61:46:89:ba:85:4b:28:02:3b:09:4b:f6:a1:ca:5f:46:de:8d:
         85:f4:3e:d3:dc:2d:e9:41:61:70:d2:46:14:0f:ea:6b:0c:4c:
         22:a3:dc:d9:fb:26:c7:b6:01:d2:ce:ef:fe:52:3b:fc:56:3e:
         3f:52:70:20:db:14:1b:9d:62:e9:4b:0e:5d:dd:c4:60:8b:dd:
         7d:ea:7f:81:f9:27:06:b6:23:c7:58:c8:df:a5:fa:50:b1:bb:
         f0:6e:1f:63:7a:5b:35:8a:6e:0b:2c:fc:52:34:5f:db:58:ac:
         d2:cf:80:98:61:2f:3c:d9:0d:6a:0b:2a:d5:f2:2e:c8:e7:59:
         94:70:48:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:50:10 2026 by rpki-client