Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DB560/8DC5FACE6EFF11F0B3F601D1DAE4EC9C/8_0Ihk_kFUNsHqEI7VrP6Q1LsNw.mft
File:                     8_0Ihk_kFUNsHqEI7VrP6Q1LsNw.mft (raw, json)
Hash identifier:          KqgR9y5obthHav72wzEPtZpazrsRAMP0GB3I1y16Em0=
Subject key identifier:   3B:B5:60:98:A9:6D:24:CE:04:9E:54:A4:32:73:09:9A:3D:CA:A7:07
Authority key identifier: F3:FD:08:86:4F:E4:15:43:6C:1E:A1:08:ED:5A:CF:E9:0D:4B:B0:DC
Certificate issuer:       /CN=F36DB560AF/serialNumber=F3FD08864FE415436C1EA108ED5ACFE90D4BB0DC
Certificate serial:       DD
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/8_0Ihk_kFUNsHqEI7VrP6Q1LsNw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DB560/8DC5FACE6EFF11F0B3F601D1DAE4EC9C/8_0Ihk_kFUNsHqEI7VrP6Q1LsNw.mft
Manifest number:          DB
Signing time:             Sun 01 Mar 2026 03:26:51 +0000
Manifest this update:     Sun 01 Mar 2026 03:26:50 +0000
Manifest next update:     Tue 03 Mar 2026 03:26:50 +0000
Files and hashes:         1: 8_0Ihk_kFUNsHqEI7VrP6Q1LsNw.crl (hash: 7n7NaUrUi3ldFqgUV7hq1mTZMHFjd8oPd/k+jgZ3YuU=)
                          2: EF1EDC126F1511F0896E51DFDAE4EC9C.roa (hash: nncn04IJgdyOwnNCorMzliS/IExnEzLZa8RXxvCREP8=)
                          3: 36A34100A71911F0A69F4CB4DAE4EC9C.roa (hash: QKfK7l11b05pQefRS0a/vN3KNRRCGjDcx7/+8e1H4sA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DB560/8DC5FACE6EFF11F0B3F601D1DAE4EC9C/8_0Ihk_kFUNsHqEI7VrP6Q1LsNw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DB560/8DC5FACE6EFF11F0B3F601D1DAE4EC9C/8_0Ihk_kFUNsHqEI7VrP6Q1LsNw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/8_0Ihk_kFUNsHqEI7VrP6Q1LsNw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 03 Mar 2026 00:07:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 221 (0xdd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DB560AF, serialNumber=F3FD08864FE415436C1EA108ED5ACFE90D4BB0DC
        Validity
            Not Before: Mar  1 03:26:50 2026 GMT
            Not After : Mar  3 03:26:50 2026 GMT
        Subject: CN=69a3b1fa-ceeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:7e:31:a0:cc:aa:b3:f3:3a:fd:01:9a:3e:44:
                    e1:8c:da:b7:e7:2b:ff:37:31:3c:ae:2c:8f:d6:ac:
                    81:f7:6c:dd:e2:50:b1:39:1c:5f:e3:c5:65:2b:bd:
                    ab:ce:01:06:43:ee:5b:ee:6f:53:eb:38:c5:e3:f3:
                    5d:b4:3d:57:1c:b7:e9:29:e6:8f:13:5e:3f:e2:c8:
                    6a:06:55:a3:88:82:3a:f6:49:31:21:95:07:8d:22:
                    bb:35:e8:1c:19:90:11:48:e4:11:7f:e1:4a:32:56:
                    83:36:14:62:c2:91:0c:f9:99:90:67:94:21:05:03:
                    95:dd:2e:a3:ac:21:c7:1a:80:2e:e5:e9:cd:03:06:
                    ad:8c:08:a1:0d:16:d4:1f:85:2f:11:bd:98:9a:9a:
                    04:96:3a:1c:7c:a1:c2:c8:54:db:af:b1:63:cc:d5:
                    d0:1d:b7:e0:14:00:96:35:47:db:6b:44:08:7d:b7:
                    9b:a3:bf:52:f0:40:09:4a:34:67:1c:5b:06:ad:4b:
                    39:be:b9:73:1c:1b:52:49:5b:dd:12:f3:9d:8b:33:
                    5f:1e:f9:5e:5f:c1:65:77:ba:ab:b6:86:05:78:89:
                    4f:bb:8d:75:d6:f9:6f:6d:ad:b3:e3:c3:1a:72:e4:
                    99:57:3e:eb:d8:f7:87:c0:26:a9:4f:e8:a8:88:85:
                    54:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:B5:60:98:A9:6D:24:CE:04:9E:54:A4:32:73:09:9A:3D:CA:A7:07
            X509v3 Authority Key Identifier:
                keyid:F3:FD:08:86:4F:E4:15:43:6C:1E:A1:08:ED:5A:CF:E9:0D:4B:B0:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB560/8DC5FACE6EFF11F0B3F601D1DAE4EC9C/8_0Ihk_kFUNsHqEI7VrP6Q1LsNw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/8_0Ihk_kFUNsHqEI7VrP6Q1LsNw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB560/8DC5FACE6EFF11F0B3F601D1DAE4EC9C/8_0Ihk_kFUNsHqEI7VrP6Q1LsNw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:6f:73:e7:3f:54:fe:d7:53:05:06:a8:6f:de:90:b4:d2:83:
         b5:92:56:62:9a:9a:ae:36:84:ec:ea:e8:d1:88:52:3f:dd:07:
         c9:87:5e:fe:a9:c5:85:52:c0:0c:b5:29:bb:b2:cc:fe:83:52:
         bf:b2:c0:72:4d:76:68:36:39:5a:0f:c4:6a:eb:5d:e1:73:2c:
         78:56:c5:5f:30:da:5d:c3:1c:b9:ab:d6:c4:a6:40:00:46:fa:
         19:28:ea:a0:79:0f:42:1b:3b:ed:96:c9:95:92:6f:b4:1f:a9:
         b9:0f:93:e4:51:c5:59:c5:e5:6d:62:f6:67:48:5c:7a:68:8c:
         be:a4:32:90:6e:1a:31:ed:49:a7:71:af:f4:27:79:31:c3:4c:
         e4:dc:e6:42:b5:b7:36:2e:29:b9:96:37:47:17:e6:54:81:06:
         9f:14:ff:d2:9c:39:36:2e:50:56:64:27:1e:c1:83:dc:13:da:
         6c:96:01:af:12:9d:81:46:7b:12:6a:81:f1:9c:51:d8:fa:63:
         35:5d:35:ec:0c:ac:e8:a1:40:ed:9e:3f:d8:5e:99:08:16:e2:
         59:6a:a8:9d:9f:e5:fc:4f:d5:f4:8d:17:4e:05:af:e5:f9:e8:
         13:61:4f:09:4f:1b:0d:ee:23:d2:e5:ec:6f:7c:31:2d:59:aa:
         83:48:85:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:43:28 2026 by rpki-client