Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DD266/6377A4F4F21F11F0927B6DDEDAE4EC9C/ItxQEc6KH-xfhxOLC2KF-fG49XQ.mft
File:                     ItxQEc6KH-xfhxOLC2KF-fG49XQ.mft (raw, json)
Hash identifier:          sm9MLj3mje64TRZmK5ZNyw3Mtr/aPPLMkcEYh3HGHVY=
Subject key identifier:   58:05:15:E7:80:90:FB:BB:C9:7C:E5:42:6C:11:A6:50:09:E7:D0:7B
Authority key identifier: 22:DC:50:11:CE:8A:1F:EC:5F:87:13:8B:0B:62:85:F9:F1:B8:F5:74
Certificate issuer:       /CN=F36DD266AF/serialNumber=22DC5011CE8A1FEC5F87138B0B6285F9F1B8F574
Certificate serial:       31
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ItxQEc6KH-xfhxOLC2KF-fG49XQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DD266/6377A4F4F21F11F0927B6DDEDAE4EC9C/ItxQEc6KH-xfhxOLC2KF-fG49XQ.mft
Manifest number:          30
Signing time:             Mon 02 Mar 2026 03:38:14 +0000
Manifest this update:     Mon 02 Mar 2026 03:38:14 +0000
Manifest next update:     Wed 04 Mar 2026 03:38:14 +0000
Files and hashes:         1: ItxQEc6KH-xfhxOLC2KF-fG49XQ.crl (hash: hLXQwSKarum2lo8z4LEK/EyQKvK0314VUYVnFlggF8Y=)
                          2: CDA91C0EF21F11F09D0C95E1DAE4EC9C.roa (hash: i/Wi+caUXTG32H1sLXk5LlvkMGbjcNs/nOtlDeXv2gQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DD266/6377A4F4F21F11F0927B6DDEDAE4EC9C/ItxQEc6KH-xfhxOLC2KF-fG49XQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DD266/6377A4F4F21F11F0927B6DDEDAE4EC9C/ItxQEc6KH-xfhxOLC2KF-fG49XQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ItxQEc6KH-xfhxOLC2KF-fG49XQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 49 (0x31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DD266AF, serialNumber=22DC5011CE8A1FEC5F87138B0B6285F9F1B8F574
        Validity
            Not Before: Mar  2 03:38:14 2026 GMT
            Not After : Mar  4 03:38:14 2026 GMT
        Subject: CN=69a50626-0b36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:46:31:18:f3:0a:ec:d4:0f:05:d2:e3:3b:c1:
                    9b:3e:fd:a7:be:ca:33:e4:9f:d7:d5:7f:9a:25:17:
                    b7:5e:ff:3c:72:f4:59:0a:d8:76:b8:e4:81:a7:cf:
                    d9:b1:d4:9d:05:e2:96:2b:e6:c4:f4:e0:e2:cf:7d:
                    56:b5:7a:72:5d:82:34:7e:af:70:c4:c4:59:5b:ad:
                    19:5a:23:84:d2:02:6a:2a:34:2d:8c:2d:ef:93:80:
                    8a:e4:16:57:c7:04:41:85:84:86:c1:a9:4d:5c:b1:
                    4f:71:f8:fd:03:97:13:45:2f:ba:91:80:b4:e2:08:
                    31:56:c4:33:b0:41:bb:32:ff:99:6d:d9:62:4e:9e:
                    7a:a8:a1:e9:a6:ee:2d:07:31:4e:48:43:ce:26:29:
                    db:9d:5c:62:f2:cd:44:97:73:13:ac:a7:8d:f7:c9:
                    d3:20:53:69:f2:79:40:e3:6c:44:08:97:8e:37:64:
                    09:8e:d2:d9:f4:94:eb:2b:a0:0e:c4:4f:bf:c9:10:
                    83:91:34:e9:66:43:59:b9:87:8a:ba:77:c8:da:3f:
                    be:22:c0:02:26:79:62:f1:ac:50:b6:48:e7:a6:43:
                    ca:82:b5:ae:2e:e2:77:9f:fb:87:7d:af:4a:ad:c0:
                    1e:2a:46:e1:cb:76:db:94:20:ed:b4:59:a9:cf:47:
                    90:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:05:15:E7:80:90:FB:BB:C9:7C:E5:42:6C:11:A6:50:09:E7:D0:7B
            X509v3 Authority Key Identifier:
                keyid:22:DC:50:11:CE:8A:1F:EC:5F:87:13:8B:0B:62:85:F9:F1:B8:F5:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DD266/6377A4F4F21F11F0927B6DDEDAE4EC9C/ItxQEc6KH-xfhxOLC2KF-fG49XQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ItxQEc6KH-xfhxOLC2KF-fG49XQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DD266/6377A4F4F21F11F0927B6DDEDAE4EC9C/ItxQEc6KH-xfhxOLC2KF-fG49XQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:a0:19:03:13:7c:83:90:ac:7d:6e:4f:7c:8c:df:0b:ce:ad:
         00:3d:17:92:88:88:c2:db:27:e0:8c:f4:d7:c7:7c:31:74:3a:
         fe:dc:26:cb:dc:ca:87:19:94:df:3e:fc:ff:9a:ee:08:ae:b8:
         0e:85:a8:28:01:46:84:db:8c:2c:61:8d:e0:3c:d2:43:d5:ab:
         ab:15:29:35:0a:4b:b4:3c:fb:4d:9b:0b:34:a4:38:d7:97:18:
         21:37:ec:92:ca:2e:f7:64:a9:95:5b:ee:e1:4f:6a:0d:8a:6f:
         55:b1:b2:12:e6:17:ac:02:cc:2d:c7:01:61:a3:cf:e8:df:b5:
         68:eb:6f:77:40:20:2b:75:66:9b:09:18:b4:97:ff:30:e9:50:
         10:41:d6:ef:87:40:d1:d1:34:ed:ae:9f:ac:20:f0:64:67:de:
         a3:fa:2b:2c:75:0e:35:0c:d6:d0:5c:e3:42:e1:ca:1e:82:f6:
         fb:77:d1:09:08:0c:41:4c:39:e9:3f:51:c6:2d:ea:51:a9:39:
         2e:32:54:08:ef:e3:e7:86:ad:3b:2a:49:10:9c:87:d3:c8:e0:
         97:7d:06:a5:4b:e1:f6:4c:8d:86:27:e6:2a:13:24:62:22:55:
         3e:43:43:5d:5b:87:2a:5c:ca:bd:aa:ca:b9:a6:cb:f9:75:22:
         7b:c6:c5:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:15:07 2026 by rpki-client