Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DB4B4/CEEEADECB46111E5B4A90854F8AEA228/z9HOEVgucPjVG3hwclwV72fgxlE.mft
File:                     z9HOEVgucPjVG3hwclwV72fgxlE.mft (raw, json)
Hash identifier:          JPYrJSHC9eecfF6UiKV8nZjAa2zzKxc2OFaKx6igDxM=
Subject key identifier:   3F:27:4C:BD:2A:28:A8:18:79:1A:A6:AF:EC:BC:C9:24:76:EB:B6:F5
Authority key identifier: CF:D1:CE:11:58:2E:70:F8:D5:1B:78:70:72:5C:15:EF:67:E0:C6:51
Certificate issuer:       /CN=F36DB4B4AF/serialNumber=CFD1CE11582E70F8D51B7870725C15EF67E0C651
Certificate serial:       0EC7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/z9HOEVgucPjVG3hwclwV72fgxlE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DB4B4/CEEEADECB46111E5B4A90854F8AEA228/z9HOEVgucPjVG3hwclwV72fgxlE.mft
Manifest number:          0EC4
Signing time:             Mon 02 Mar 2026 00:56:15 +0000
Manifest this update:     Mon 02 Mar 2026 00:56:14 +0000
Manifest next update:     Wed 04 Mar 2026 00:56:14 +0000
Files and hashes:         1: z9HOEVgucPjVG3hwclwV72fgxlE.crl (hash: JpGuU9YVrt4D7/4OyoaBgC9vFMnAnCfudkQ9iHIVXx8=)
                          2: 44FF457CB46311E58407FA55F8AEA228.roa (hash: B9WSKZRqziRr6GOCV6BDWegKxCtGmeVw42cvf6ryK9U=)
                          3: A17B340AB46311E59241EB56F8AEA228.roa (hash: 7FwQeUfCbVL0Bd2EXyoVC5y/xe6Lbd8u11SpNh5f5zI=)
                          4: F0D40794B46211E5A330CA55F8AEA228.roa (hash: t2nsrO2U23DwtiWKoe3fqAaOO4rdHwgErkagqsJpKHc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DB4B4/CEEEADECB46111E5B4A90854F8AEA228/z9HOEVgucPjVG3hwclwV72fgxlE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DB4B4/CEEEADECB46111E5B4A90854F8AEA228/z9HOEVgucPjVG3hwclwV72fgxlE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/z9HOEVgucPjVG3hwclwV72fgxlE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3783 (0xec7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DB4B4AF, serialNumber=CFD1CE11582E70F8D51B7870725C15EF67E0C651
        Validity
            Not Before: Mar  2 00:56:14 2026 GMT
            Not After : Mar  4 00:56:14 2026 GMT
        Subject: CN=69a4e02f-2cf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:c6:27:c8:57:7a:09:80:d0:76:85:35:72:46:
                    a7:7d:25:40:4b:a7:3c:a0:09:50:01:77:36:e4:b1:
                    cb:49:de:ec:99:f2:c3:14:94:1d:5c:0f:6e:4f:63:
                    72:77:9b:f5:be:a3:58:54:6c:13:0b:1f:2b:97:cd:
                    70:44:d4:dd:49:83:a4:88:d0:e2:5e:9f:35:e0:e2:
                    fb:f2:e8:5d:a6:e9:8c:52:eb:de:a2:5a:ce:38:c4:
                    fc:e8:31:ed:93:31:c0:91:74:49:88:0f:e1:87:a4:
                    7c:9a:9b:fc:41:0a:ca:cc:9b:f0:6b:09:9f:16:cd:
                    c9:07:bb:16:d0:c3:a0:4c:9a:93:5a:ca:be:4b:21:
                    72:7c:19:76:fb:63:21:b8:61:4d:86:32:5a:2e:f2:
                    24:42:cf:d6:4c:28:18:5a:0f:17:d3:67:9d:18:ae:
                    ce:d0:d1:5d:5c:89:c9:87:30:19:21:03:21:89:1f:
                    dd:d1:34:8d:a8:6f:b1:46:e3:ac:80:b9:2f:c4:6f:
                    e7:7e:2d:b8:78:6a:f0:12:e4:41:85:c2:d0:7f:90:
                    ed:60:c6:99:d4:e4:55:a5:d9:7d:39:42:22:f9:d6:
                    05:80:81:9c:43:19:1a:51:dd:3c:72:13:5d:61:98:
                    ea:0c:d2:1f:1d:ad:b5:3f:c4:59:08:e0:31:ff:d7:
                    99:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:27:4C:BD:2A:28:A8:18:79:1A:A6:AF:EC:BC:C9:24:76:EB:B6:F5
            X509v3 Authority Key Identifier:
                keyid:CF:D1:CE:11:58:2E:70:F8:D5:1B:78:70:72:5C:15:EF:67:E0:C6:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB4B4/CEEEADECB46111E5B4A90854F8AEA228/z9HOEVgucPjVG3hwclwV72fgxlE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/z9HOEVgucPjVG3hwclwV72fgxlE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB4B4/CEEEADECB46111E5B4A90854F8AEA228/z9HOEVgucPjVG3hwclwV72fgxlE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:1f:2c:64:f8:25:aa:53:c0:1b:b9:01:82:08:c0:72:91:1c:
         0a:d9:73:0f:f0:e8:fa:3e:7a:27:ae:25:a5:29:39:e2:87:32:
         ee:be:10:3f:cd:7f:ac:f7:1b:0c:8d:f3:09:53:d0:6a:4e:31:
         aa:0e:21:4e:9e:85:cc:7e:80:79:f0:59:9c:4c:57:e3:ec:03:
         a3:d5:31:04:df:aa:96:3c:e2:6e:7e:c0:e8:96:5e:7c:4d:14:
         36:bc:cf:6a:e7:df:31:18:25:6d:b2:29:dd:b0:45:77:45:2d:
         ec:e6:4e:d5:f7:c4:b6:5f:ef:4a:93:19:71:33:e4:7d:61:45:
         63:3e:03:22:d1:f2:1f:80:d7:28:1c:ac:bb:bf:36:14:f0:98:
         ee:8f:f4:d8:79:ab:33:f7:0b:77:23:eb:a8:55:1f:40:78:07:
         a5:81:51:4e:2d:d3:bc:05:47:8a:32:6c:8c:0e:14:5c:82:e4:
         ae:70:d6:95:84:bd:fc:28:3e:84:5c:d1:06:cc:64:82:19:95:
         44:ce:bb:ab:d0:7e:be:ff:c1:33:36:00:71:8a:c6:c4:4d:80:
         e4:fb:ea:d2:e8:27:3d:fe:1b:3b:d1:23:66:15:7f:34:55:6f:
         2b:9e:aa:b8:64:94:26:e9:da:c2:e5:2f:04:b3:90:bd:4e:70:
         0a:e6:d2:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:16:51 2026 by rpki-client