Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CE430/C1C65EFE115711F1BAFD10ABDAE4EC9C/IrHCTE_knGjBdmKP2mTmgXP2Hg8.mft
File:                     IrHCTE_knGjBdmKP2mTmgXP2Hg8.mft (raw, json)
Hash identifier:          P+Dh6Ar7ZA9J+h+CBWnoQ7+Ir93hb/vMIOv/zHVvRTY=
Subject key identifier:   1E:8A:5C:BD:C3:E5:E9:44:1F:00:98:59:D7:9D:61:C1:07:16:4D:E4
Authority key identifier: 22:B1:C2:4C:4F:E4:9C:68:C1:76:62:8F:DA:64:E6:81:73:F6:1E:0F
Certificate issuer:       /CN=F36CE430AF/serialNumber=22B1C24C4FE49C68C176628FDA64E68173F61E0F
Certificate serial:       0B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/IrHCTE_knGjBdmKP2mTmgXP2Hg8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36CE430/C1C65EFE115711F1BAFD10ABDAE4EC9C/IrHCTE_knGjBdmKP2mTmgXP2Hg8.mft
Manifest number:          09
Signing time:             Mon 02 Mar 2026 03:42:37 +0000
Manifest this update:     Mon 02 Mar 2026 03:42:36 +0000
Manifest next update:     Wed 04 Mar 2026 03:42:36 +0000
Files and hashes:         1: IrHCTE_knGjBdmKP2mTmgXP2Hg8.crl (hash: QKW+maMIDfABx93W4AF1U0AcU+PwHkTcWmJT20TrpOw=)
                          2: B26406B2115E11F1A6022FD5DAE4EC9C.roa (hash: 7PV+1FdMOwzL2sEcSdwc46KEV9LTzKnwF2E0RpdtuUA=)
                          3: 61252ABC115C11F195A7B0C6DAE4EC9C.roa (hash: +97KNf3zcICVtSO8hAKNcT79qEYenewn2RIftrsHFA8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36CE430/C1C65EFE115711F1BAFD10ABDAE4EC9C/IrHCTE_knGjBdmKP2mTmgXP2Hg8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36CE430/C1C65EFE115711F1BAFD10ABDAE4EC9C/IrHCTE_knGjBdmKP2mTmgXP2Hg8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/IrHCTE_knGjBdmKP2mTmgXP2Hg8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11 (0xb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36CE430AF, serialNumber=22B1C24C4FE49C68C176628FDA64E68173F61E0F
        Validity
            Not Before: Mar  2 03:42:36 2026 GMT
            Not After : Mar  4 03:42:36 2026 GMT
        Subject: CN=69a5072d-8020
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:d0:fb:7c:99:90:a7:cb:5b:17:1d:37:05:08:
                    e4:dc:07:82:c7:6b:5d:b2:4e:9e:b5:c0:e8:bf:df:
                    d2:46:0c:d2:64:49:e7:c2:d1:1f:67:fb:e2:7e:40:
                    4e:40:85:b0:0c:55:42:54:15:e4:14:6b:db:3d:4c:
                    c5:9d:c2:1a:95:c5:3a:f4:a4:76:09:59:36:af:2e:
                    af:4e:6f:5e:c5:d1:f9:5a:20:35:26:fa:fa:00:7d:
                    b9:05:d7:4c:81:01:03:f1:a2:b4:17:d8:07:79:1f:
                    f2:e2:32:16:0a:93:2d:75:6e:95:21:4d:85:e5:4f:
                    ce:25:f0:07:f0:9a:d1:48:17:7c:25:c0:e3:18:76:
                    9d:24:db:65:2a:d9:6e:b9:8f:69:67:15:11:86:8c:
                    b4:b3:dc:b3:f0:d3:10:8e:ee:2f:5c:f8:a3:15:00:
                    c0:70:bd:dd:9f:f8:0b:5b:2b:bb:ed:56:6b:af:08:
                    4b:05:c3:74:a8:ed:48:26:a5:49:55:e1:7f:3a:66:
                    bc:e4:af:aa:4d:8e:7a:e9:e8:1b:b6:e4:50:02:46:
                    e6:4f:fc:1f:bf:b2:60:ee:2a:93:e0:63:34:6f:0f:
                    57:7a:7e:a1:a0:e4:b9:4a:d8:2c:ec:68:d9:89:74:
                    90:8c:ca:9f:a6:9b:38:ed:5c:48:fe:ac:f5:55:65:
                    06:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:8A:5C:BD:C3:E5:E9:44:1F:00:98:59:D7:9D:61:C1:07:16:4D:E4
            X509v3 Authority Key Identifier:
                keyid:22:B1:C2:4C:4F:E4:9C:68:C1:76:62:8F:DA:64:E6:81:73:F6:1E:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36CE430/C1C65EFE115711F1BAFD10ABDAE4EC9C/IrHCTE_knGjBdmKP2mTmgXP2Hg8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/IrHCTE_knGjBdmKP2mTmgXP2Hg8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CE430/C1C65EFE115711F1BAFD10ABDAE4EC9C/IrHCTE_knGjBdmKP2mTmgXP2Hg8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:c3:ba:21:05:01:f4:1a:91:5e:41:c9:ad:47:4c:e9:d6:b2:
         cd:44:ef:3b:91:ea:53:f6:ba:f9:01:31:54:42:43:87:4a:ab:
         03:0d:cc:5a:b0:b9:d6:4e:5b:84:2d:78:0e:be:4d:6c:d0:51:
         44:49:cd:6f:af:84:46:24:8d:00:32:8a:8e:56:e5:3e:50:fa:
         af:82:68:08:4f:59:97:71:89:92:d3:44:bf:80:76:8e:8c:30:
         81:a5:ce:c2:1b:b8:ca:2b:15:c0:95:2b:0a:8a:43:9e:7e:dd:
         17:0d:0c:1c:2c:5b:39:e6:c8:36:f7:3c:3c:78:2a:af:c2:e8:
         09:9e:bc:c3:dd:70:74:2c:6a:1f:a1:0a:a7:bf:50:06:6f:2e:
         09:01:3a:bb:bb:bc:4d:03:3d:07:17:58:b9:17:ac:98:06:63:
         58:5b:8a:1a:88:8c:b2:89:86:e5:72:94:7e:6d:52:f9:cf:a2:
         15:cf:19:c2:64:7e:d1:12:c2:ec:7b:be:b9:9d:ac:25:cd:bb:
         78:be:ce:0f:17:59:be:54:69:b0:e7:6f:12:37:55:75:52:30:
         49:71:f1:67:98:a2:cc:cf:1f:d4:5d:e0:10:47:c2:3d:29:79:
         d3:c4:22:cc:e7:a9:64:7b:27:fc:55:20:b4:1b:2f:20:62:64:
         6c:14:da:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:52:56 2026 by rpki-client