Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D03D3/3A3857B2B05111EEAFF4F09B775412E6/ffDZZHEjlpmcF8_uBLpMLB39GqE.mft
File:                     ffDZZHEjlpmcF8_uBLpMLB39GqE.mft (raw, json)
Hash identifier:          cIaAhTEDxzCBQaR3W/PtVgXM0Yxmub6lC9dm5nnd69g=
Subject key identifier:   39:9A:F9:CC:39:E6:BF:2E:49:FD:A2:7F:F1:A1:B1:12:67:F5:05:AF
Authority key identifier: 7D:F0:D9:64:71:23:96:99:9C:17:CF:EE:04:BA:4C:2C:1D:FD:1A:A1
Certificate issuer:       /CN=F36D03D3AF/serialNumber=7DF0D964712396999C17CFEE04BA4C2C1DFD1AA1
Certificate serial:       0320
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ffDZZHEjlpmcF8_uBLpMLB39GqE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D03D3/3A3857B2B05111EEAFF4F09B775412E6/ffDZZHEjlpmcF8_uBLpMLB39GqE.mft
Manifest number:          031F
Signing time:             Sun 01 Mar 2026 02:44:52 +0000
Manifest this update:     Sun 01 Mar 2026 02:44:51 +0000
Manifest next update:     Tue 03 Mar 2026 02:44:51 +0000
Files and hashes:         1: ffDZZHEjlpmcF8_uBLpMLB39GqE.crl (hash: mJy5x23jLwsaTIp7MRw1ENgfZPoPcxxfuDaee/ksn2w=)
                          2: 11714A5EB05211EEB8B0949D775412E6.roa (hash: Y74sDhVPh3sDwTRwkCR1rG2U0+ospQWmyyWML+k0YKo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D03D3/3A3857B2B05111EEAFF4F09B775412E6/ffDZZHEjlpmcF8_uBLpMLB39GqE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D03D3/3A3857B2B05111EEAFF4F09B775412E6/ffDZZHEjlpmcF8_uBLpMLB39GqE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ffDZZHEjlpmcF8_uBLpMLB39GqE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 03 Mar 2026 02:44:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 800 (0x320)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D03D3AF, serialNumber=7DF0D964712396999C17CFEE04BA4C2C1DFD1AA1
        Validity
            Not Before: Mar  1 02:44:51 2026 GMT
            Not After : Mar  3 02:44:51 2026 GMT
        Subject: CN=69a3a824-83d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:1b:f8:5a:90:67:25:d9:5b:45:8e:72:ff:43:
                    1d:86:6a:a2:5e:bf:fa:88:38:98:cd:09:96:40:e9:
                    84:4e:15:72:27:53:1e:5c:89:da:d3:8e:a3:6f:a8:
                    34:5f:4b:a6:f3:5b:6f:1e:cf:09:d1:15:a2:fa:91:
                    3c:f1:d8:10:04:27:10:86:6f:a9:73:39:40:2b:3a:
                    61:d9:73:2a:82:15:68:40:3e:9a:28:01:93:3e:fc:
                    15:62:aa:75:dd:4b:21:5a:44:4e:97:4d:28:04:7b:
                    0d:d4:24:da:45:78:7b:93:96:7a:95:28:4b:22:e4:
                    18:e7:72:1f:c3:1f:30:28:f7:da:bf:86:76:67:df:
                    ae:dd:fb:a1:0e:7f:4a:f9:c1:86:b4:22:60:67:2f:
                    dc:2d:3b:d8:cd:8b:14:95:af:8f:cd:86:78:46:bc:
                    ce:38:63:0e:5e:eb:24:00:10:30:32:9e:c4:6a:06:
                    cb:49:36:0c:3f:13:9a:1d:79:a8:35:ac:22:e2:29:
                    f4:b8:bd:a0:fd:46:56:23:6c:5f:ab:27:a8:dd:b3:
                    b4:a2:ae:df:14:c5:8b:db:15:59:1c:b9:d9:99:24:
                    21:44:eb:98:fa:d9:b1:91:1e:ee:1a:37:64:31:3b:
                    d2:88:b2:fc:64:fc:ef:d4:1c:f7:64:f3:af:57:e1:
                    17:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:9A:F9:CC:39:E6:BF:2E:49:FD:A2:7F:F1:A1:B1:12:67:F5:05:AF
            X509v3 Authority Key Identifier:
                keyid:7D:F0:D9:64:71:23:96:99:9C:17:CF:EE:04:BA:4C:2C:1D:FD:1A:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D03D3/3A3857B2B05111EEAFF4F09B775412E6/ffDZZHEjlpmcF8_uBLpMLB39GqE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ffDZZHEjlpmcF8_uBLpMLB39GqE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D03D3/3A3857B2B05111EEAFF4F09B775412E6/ffDZZHEjlpmcF8_uBLpMLB39GqE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:3d:0d:3d:a3:2b:aa:9f:2b:8b:fb:79:6c:2f:8b:fa:ba:50:
         f8:28:ea:59:4e:06:d5:30:2d:b7:4d:85:34:66:bb:d3:b0:f2:
         8e:21:29:ce:a6:c2:03:ea:35:ae:40:1a:2e:97:37:00:b6:3f:
         5c:4d:2c:f5:10:33:c1:31:af:5c:99:7d:e4:7b:39:f1:71:28:
         97:9b:2c:82:8a:af:e4:8f:cf:7f:c4:c1:66:bd:ad:8d:41:9b:
         66:f5:a3:09:24:c4:a8:31:b4:83:f5:5f:98:33:42:9c:3b:cb:
         2c:9a:83:cb:18:81:fe:5b:f1:2c:a4:95:a8:0c:cb:8e:bd:d3:
         e0:90:0d:01:43:7e:7a:e7:52:99:07:08:38:da:35:cb:8d:b8:
         0d:20:ef:d0:2e:c9:9b:e5:0d:5e:d0:e2:c8:5d:06:18:f5:88:
         6c:d7:be:ab:ea:d1:15:de:f9:18:a6:90:8e:f9:22:59:e2:c0:
         2e:65:45:eb:43:75:71:e0:e1:cc:2a:cc:f5:57:dc:24:b6:65:
         d4:e2:0b:b7:09:b1:a5:0f:c7:9b:56:4b:81:e0:ec:f9:3b:32:
         83:7a:b0:55:77:9f:24:db:c0:10:b4:a4:b3:9f:a7:d6:d4:23:
         c0:d1:cb:61:12:5b:02:0c:d2:74:fa:b6:50:ed:e7:af:26:23:
         1a:ed:4f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:35:22 2026 by rpki-client