Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D8DFA/0E9B19BA140A11E5A7F5FC4CF8AEA228/1mi-yvPLFNtiSjQl1mZgm_J7Uu4.mft
File:                     1mi-yvPLFNtiSjQl1mZgm_J7Uu4.mft (raw, json)
Hash identifier:          CDqUIw6JUNBmJmaT8pglNuzCM2T95345BxUlasiJ7Eg=
Subject key identifier:   D6:7F:F3:78:E2:56:BA:BF:12:58:B6:06:46:03:E9:D3:24:D2:4F:17
Authority key identifier: D6:68:BE:CA:F3:CB:14:DB:62:4A:34:25:D6:66:60:9B:F2:7B:52:EE
Certificate issuer:       /CN=F36D8DFAAF/serialNumber=D668BECAF3CB14DB624A3425D666609BF27B52EE
Certificate serial:       0F9C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/1mi-yvPLFNtiSjQl1mZgm_J7Uu4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D8DFA/0E9B19BA140A11E5A7F5FC4CF8AEA228/1mi-yvPLFNtiSjQl1mZgm_J7Uu4.mft
Manifest number:          0F97
Signing time:             Mon 02 Mar 2026 00:51:02 +0000
Manifest this update:     Mon 02 Mar 2026 00:51:02 +0000
Manifest next update:     Wed 04 Mar 2026 00:51:02 +0000
Files and hashes:         1: 1mi-yvPLFNtiSjQl1mZgm_J7Uu4.crl (hash: YUfXJqnuajCuLjoKbvB/r6ZbKa40+tLwIPiMo+AxQYk=)
                          2: 88EE59C2520511F0838F9DC4DAE4EC9C.roa (hash: FNAcobe0yOGwnLd0ymzGwbW/jHGE2cTudiyiweVPang=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D8DFA/0E9B19BA140A11E5A7F5FC4CF8AEA228/1mi-yvPLFNtiSjQl1mZgm_J7Uu4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D8DFA/0E9B19BA140A11E5A7F5FC4CF8AEA228/1mi-yvPLFNtiSjQl1mZgm_J7Uu4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/1mi-yvPLFNtiSjQl1mZgm_J7Uu4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3996 (0xf9c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D8DFAAF, serialNumber=D668BECAF3CB14DB624A3425D666609BF27B52EE
        Validity
            Not Before: Mar  2 00:51:02 2026 GMT
            Not After : Mar  4 00:51:02 2026 GMT
        Subject: CN=69a4def6-2fdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:bb:f7:d0:56:04:4e:64:8d:5a:42:49:a2:e6:
                    22:c9:cd:b9:4d:4a:4f:db:7f:59:39:02:07:c5:90:
                    60:98:c0:4e:6e:f3:21:2e:1c:1e:71:96:1a:28:56:
                    10:a0:5c:a1:26:81:f3:e8:79:be:f1:51:0c:ea:dc:
                    ea:a4:47:58:c8:18:46:98:b5:ba:70:87:f4:30:6c:
                    7f:41:22:04:a1:24:f1:b7:ce:ea:ef:fa:e8:cd:5a:
                    38:dc:ed:16:2a:21:26:8d:a2:98:85:ef:78:38:46:
                    3c:b5:33:54:a7:4a:6b:75:5e:eb:30:eb:af:1b:09:
                    fc:47:ce:14:4a:72:80:06:17:c2:1b:13:74:68:db:
                    5f:fa:49:78:e3:a5:77:8e:a9:58:cc:9f:11:66:3c:
                    e3:82:63:91:3e:12:ec:27:77:54:5b:4b:09:1a:d2:
                    25:28:6b:34:0f:23:bc:4a:80:98:d1:28:cc:8d:1f:
                    e1:0a:24:a8:ba:cb:c4:33:d4:d7:ac:20:ea:34:ec:
                    f5:85:21:4d:8f:34:98:ba:e9:a7:58:13:00:65:d0:
                    d6:ee:b0:f7:88:6f:4c:7d:0b:11:e0:51:4e:3a:43:
                    f2:be:2b:7a:1b:00:32:c2:13:c9:d8:ea:9b:6b:63:
                    18:b0:e6:ea:8c:41:5b:8a:eb:b8:c8:4c:5b:f2:a2:
                    ae:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:7F:F3:78:E2:56:BA:BF:12:58:B6:06:46:03:E9:D3:24:D2:4F:17
            X509v3 Authority Key Identifier:
                keyid:D6:68:BE:CA:F3:CB:14:DB:62:4A:34:25:D6:66:60:9B:F2:7B:52:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8DFA/0E9B19BA140A11E5A7F5FC4CF8AEA228/1mi-yvPLFNtiSjQl1mZgm_J7Uu4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/1mi-yvPLFNtiSjQl1mZgm_J7Uu4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8DFA/0E9B19BA140A11E5A7F5FC4CF8AEA228/1mi-yvPLFNtiSjQl1mZgm_J7Uu4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:ee:a4:55:cc:6a:30:8b:d0:c7:5b:d5:e8:49:17:b8:fe:b1:
         8e:02:52:ec:27:16:b4:e1:5b:54:70:c6:9e:d4:17:1f:da:39:
         15:86:32:13:35:27:df:c2:a5:4c:8c:67:dd:f8:4e:02:03:4d:
         e1:9e:21:ad:e3:c1:66:ea:42:0d:e5:97:43:f2:d6:f6:72:17:
         2d:59:91:ff:af:45:e3:9f:c8:ae:83:71:d8:c0:5d:e8:69:72:
         2f:62:41:39:cd:53:3a:2d:4a:54:32:65:02:89:a2:e4:49:d4:
         21:13:4e:3e:9a:9a:3e:59:ad:20:75:4d:c0:fd:94:6c:3c:24:
         9a:45:8b:a1:d2:b3:55:46:ba:8b:fc:7c:79:78:aa:2d:6f:0d:
         40:aa:b4:8a:f3:0e:e0:1c:7d:a5:b2:3a:ba:36:37:64:59:b3:
         7e:96:77:af:9b:a3:d7:49:52:57:7f:d7:44:07:04:19:db:1e:
         3b:d7:83:72:7f:68:c5:71:bd:8e:55:b6:cf:0d:58:90:4c:7f:
         27:29:db:cf:82:28:b1:36:e8:b8:54:3e:9d:5a:34:51:9e:8f:
         fa:18:67:c7:3d:f1:10:e8:c8:a2:95:35:3c:6f:4d:4b:92:ef:
         44:5a:3a:f3:e8:ff:f1:11:f5:f4:84:c3:29:02:a2:b7:a6:41:
         f7:63:0c:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:50:18 2026 by rpki-client