Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D7B70/311539A0AD6111ED8C82DB9DF1222468/1dvrzXwb7_KENX_wZHrIt0liD9Q.mft
File:                     1dvrzXwb7_KENX_wZHrIt0liD9Q.mft (raw, json)
Hash identifier:          LnETNQSxAsfbP9hrtZCI3v6BC4TX9f7jEZlBqYeG8Wk=
Subject key identifier:   04:F1:5B:A6:3B:99:49:C2:41:47:A8:D1:D8:BC:8F:96:00:D4:D9:18
Authority key identifier: D5:DB:EB:CD:7C:1B:EF:F2:84:35:7F:F0:64:7A:C8:B7:49:62:0F:D4
Certificate issuer:       /CN=F36D7B70AF/serialNumber=D5DBEBCD7C1BEFF284357FF0647AC8B749620FD4
Certificate serial:       047D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/1dvrzXwb7_KENX_wZHrIt0liD9Q.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D7B70/311539A0AD6111ED8C82DB9DF1222468/1dvrzXwb7_KENX_wZHrIt0liD9Q.mft
Manifest number:          047B
Signing time:             Sun 01 Mar 2026 02:19:41 +0000
Manifest this update:     Sun 01 Mar 2026 02:19:41 +0000
Manifest next update:     Tue 03 Mar 2026 02:19:41 +0000
Files and hashes:         1: 1dvrzXwb7_KENX_wZHrIt0liD9Q.crl (hash: OMbJrsmrsb8C6ykz3ZF3btUE796dWrr39sSzRc/I7is=)
                          2: BE9F0310ADB511ED9BFAA497F1222468.roa (hash: QYIDCJXoNqvHg1YdgKjgPsS1L4uv/2EzjaMHwhM8yjk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D7B70/311539A0AD6111ED8C82DB9DF1222468/1dvrzXwb7_KENX_wZHrIt0liD9Q.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D7B70/311539A0AD6111ED8C82DB9DF1222468/1dvrzXwb7_KENX_wZHrIt0liD9Q.mft
                          rsync://rpki.afrinic.net/repository/afrinic/1dvrzXwb7_KENX_wZHrIt0liD9Q.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 03 Mar 2026 02:19:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1149 (0x47d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D7B70AF, serialNumber=D5DBEBCD7C1BEFF284357FF0647AC8B749620FD4
        Validity
            Not Before: Mar  1 02:19:41 2026 GMT
            Not After : Mar  3 02:19:41 2026 GMT
        Subject: CN=69a3a23d-bec9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:4e:13:98:b8:ac:b8:0e:4f:8a:22:76:e5:e6:
                    b2:33:86:9a:68:f1:14:44:26:64:ac:f9:74:47:8c:
                    f5:a0:e6:30:b9:8a:ce:31:ca:be:a8:f3:f7:f7:97:
                    00:c5:9e:58:89:c5:e8:85:57:bb:1a:53:4b:a3:7d:
                    10:42:db:ae:39:46:16:f8:06:75:49:05:c1:ee:9f:
                    82:8f:87:c8:aa:42:44:c3:9e:fe:f0:bc:6c:98:d0:
                    e0:26:3a:14:23:94:8d:de:bb:eb:99:22:a5:85:d1:
                    df:87:22:a4:c2:93:23:0b:76:f4:7d:bf:23:a4:3d:
                    30:33:67:81:0e:e1:09:43:16:cd:14:9b:19:fd:65:
                    57:56:ab:63:27:83:e3:2c:47:2a:b2:53:00:c5:5d:
                    d7:1b:6f:7a:62:9f:85:f1:2e:f2:74:d5:49:23:b5:
                    14:91:23:02:7b:a5:cf:0e:aa:8c:08:81:f6:b6:23:
                    5f:a6:17:a9:b3:33:1e:5b:a7:62:35:7c:1f:56:bb:
                    6a:c7:b0:cb:9e:9f:87:ec:fa:60:04:00:21:a2:dd:
                    73:87:73:24:1e:63:e7:82:cb:bc:27:db:09:65:b8:
                    5c:ac:10:72:f2:1c:d0:83:45:da:a9:b7:cf:26:9a:
                    7f:28:2f:14:c2:36:fb:82:08:d5:08:9a:20:c3:b5:
                    1e:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:F1:5B:A6:3B:99:49:C2:41:47:A8:D1:D8:BC:8F:96:00:D4:D9:18
            X509v3 Authority Key Identifier:
                keyid:D5:DB:EB:CD:7C:1B:EF:F2:84:35:7F:F0:64:7A:C8:B7:49:62:0F:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D7B70/311539A0AD6111ED8C82DB9DF1222468/1dvrzXwb7_KENX_wZHrIt0liD9Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/1dvrzXwb7_KENX_wZHrIt0liD9Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D7B70/311539A0AD6111ED8C82DB9DF1222468/1dvrzXwb7_KENX_wZHrIt0liD9Q.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:59:d2:32:46:59:4b:cd:a7:8c:a7:6d:17:51:bf:d4:c8:c8:
         cb:11:bc:98:b8:f3:ab:70:b5:5f:67:98:05:3d:47:0b:ff:82:
         40:d9:f0:94:de:98:8a:15:38:29:33:cc:cc:47:e6:ac:62:d9:
         36:01:71:17:11:6c:ca:b3:e0:af:ce:6f:cb:cb:c7:35:e6:e3:
         1a:bf:ed:99:32:a2:77:83:4a:31:41:0b:5d:27:84:c5:9a:2c:
         8f:6b:a6:54:ec:99:67:f8:e6:68:d2:59:db:67:9f:59:62:ca:
         7a:28:21:21:2c:a5:dc:be:a6:7d:ba:42:a1:d6:fc:81:5f:e0:
         ac:58:21:43:41:30:f8:a2:62:f7:d5:02:eb:73:25:7b:a0:b8:
         48:d8:3f:d7:59:5c:f0:64:2a:0e:5d:8c:fa:b1:bd:69:c7:ab:
         5f:7e:b7:3c:44:1b:b8:88:74:d1:9e:5a:f2:11:6a:7b:cc:e6:
         f3:ab:4e:b0:f4:0d:bc:22:5d:ca:4e:9a:fc:4c:c1:ca:74:d3:
         79:de:a9:8a:e1:09:9d:f4:52:51:0a:30:a5:ac:67:81:2c:7b:
         78:a6:61:a3:9c:90:c5:94:f2:a2:3f:90:93:e9:b8:51:17:14:
         53:5d:56:06:3f:96:bc:30:ce:06:53:9e:89:24:58:2f:9a:5f:
         72:c8:38:fe
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBH0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RDdCNzBBRjExMC8GA1UEBRMoRDVEQkVCQ0Q3QzFCRUZGMjg0MzU3RkYwNjQ3QUM4
Qjc0OTYyMEZENDAeFw0yNjAzMDEwMjE5NDFaFw0yNjAzMDMwMjE5NDFaMBgxFjAU
BgNVBAMTDTY5YTNhMjNkLWJlYzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDQThOYuKy4Dk+KInbl5rIzhppo8RREJmSs+XRHjPWg5jC5is4xyr6o8/f3
lwDFnliJxeiFV7saU0ujfRBC2645Rhb4BnVJBcHun4KPh8iqQkTDnv7wvGyY0OAm
OhQjlI3eu+uZIqWF0d+HIqTCkyMLdvR9vyOkPTAzZ4EO4QlDFs0Umxn9ZVdWq2Mn
g+MsRyqyUwDFXdcbb3pin4XxLvJ01UkjtRSRIwJ7pc8OqowIgfa2I1+mF6mzMx5b
p2I1fB9Wu2rHsMuen4fs+mAEACGi3XOHcyQeY+eCy7wn2wlluFysEHLyHNCDRdqp
t88mmn8oLxTCNvuCCNUImiDDtR6pAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUBPFb
pjuZScJBR6jR2LyPlgDU2RgwHwYDVR0jBBgwFoAU1dvrzXwb7/KENX/wZHrIt0li
D9QwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkQ3QjcwLzMxMTUzOUEwQUQ2MTExRUQ4QzgyREI5REYxMjIyNDY4LzFkdnJ6
WHdiN19LRU5YX3daSHJJdDBsaUQ5US5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzFkdnJ6WHdiN19LRU5YX3daSHJJdDBsaUQ5US5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RDdCNzAvMzExNTM5QTBBRDYxMTFFRDhDODJEQjlERjEy
MjI0NjgvMWR2cnpYd2I3X0tFTlhfd1pIckl0MGxpRDlRLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBfWdIyRllLzaeMp20XUb/UyMjLEbyY
uPOrcLVfZ5gFPUcL/4JA2fCU3piKFTgpM8zMR+asYtk2AXEXEWzKs+Cvzm/Ly8c1
5uMav+2ZMqJ3g0oxQQtdJ4TFmiyPa6ZU7Jln+OZo0lnbZ59ZYsp6KCEhLKXcvqZ9
ukKh1vyBX+CsWCFDQTD4omL31QLrcyV7oLhI2D/XWVzwZCoOXYz6sb1px6tffrc8
RBu4iHTRnlryEWp7zObzq06w9A28Il3KTpr8TMHKdNN53qmK4Qmd9FJRCjClrGeB
LHt4pmGjnJDFlPKiP5CT6bhRFxRTXVYGP5a8MM4GU56JJFgvml9yyDj+
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:42:42 2026 by rpki-client