Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DF2C0/D50D7F0E5A0311EFABD2477A762E951A/ksDdANVwLjkO0njypv3Heeq3uoo.mft
File:                     ksDdANVwLjkO0njypv3Heeq3uoo.mft (raw, json)
Hash identifier:          cb7qFH6NPwa9a9WTMMy/yJQsFVtNK8hTskhFeWVCkXI=
Subject key identifier:   EB:36:67:AD:F7:78:41:03:CB:02:F8:ED:41:DD:38:B9:C3:74:C2:83
Authority key identifier: 92:C0:DD:00:D5:70:2E:39:0E:D2:78:F2:A6:FD:C7:79:EA:B7:BA:8A
Certificate issuer:       /CN=F36DF2C0AF/serialNumber=92C0DD00D5702E390ED278F2A6FDC779EAB7BA8A
Certificate serial:       0245
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ksDdANVwLjkO0njypv3Heeq3uoo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DF2C0/D50D7F0E5A0311EFABD2477A762E951A/ksDdANVwLjkO0njypv3Heeq3uoo.mft
Manifest number:          0244
Signing time:             Mon 02 Mar 2026 03:01:52 +0000
Manifest this update:     Mon 02 Mar 2026 03:01:52 +0000
Manifest next update:     Wed 04 Mar 2026 03:01:52 +0000
Files and hashes:         1: ksDdANVwLjkO0njypv3Heeq3uoo.crl (hash: pQhz/Im29UnKtAaG5t2JQ7JuWULLXR0uH2/OyvNNDMA=)
                          2: 66FDD6885A0A11EFBC9CDBA8762E951A.roa (hash: aVnUgk3NY8yjcG/DFLWQpoxsTPLV3bCNwJvFvS9FExw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DF2C0/D50D7F0E5A0311EFABD2477A762E951A/ksDdANVwLjkO0njypv3Heeq3uoo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DF2C0/D50D7F0E5A0311EFABD2477A762E951A/ksDdANVwLjkO0njypv3Heeq3uoo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ksDdANVwLjkO0njypv3Heeq3uoo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 581 (0x245)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DF2C0AF, serialNumber=92C0DD00D5702E390ED278F2A6FDC779EAB7BA8A
        Validity
            Not Before: Mar  2 03:01:52 2026 GMT
            Not After : Mar  4 03:01:52 2026 GMT
        Subject: CN=69a4fda0-3652
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:1d:d5:e7:00:64:5c:2a:1c:92:2b:09:50:83:
                    5f:3b:6e:66:49:ed:89:21:44:df:1a:40:64:34:33:
                    40:34:9c:e1:06:a7:80:2e:29:24:d5:b0:d5:0d:ef:
                    73:29:aa:b6:52:75:8b:59:3c:c1:40:b2:79:a0:da:
                    7c:a1:11:d4:27:6a:1e:cb:18:e6:97:2b:24:77:cd:
                    87:98:e0:f9:42:ff:a4:0a:0c:e1:07:d8:60:63:4a:
                    7a:57:17:bb:2f:94:a2:5a:70:0c:31:5b:c6:11:43:
                    98:15:68:3b:0e:62:33:85:46:f6:b2:38:b6:cc:71:
                    28:f1:77:02:e2:a6:2b:ad:5c:5f:f2:4a:31:52:22:
                    43:2f:7a:bc:4a:ea:40:68:ff:53:30:53:13:99:98:
                    b0:05:d9:2b:3e:d4:9e:b6:ef:f3:ea:6e:c2:f9:be:
                    13:cc:85:4b:2b:ef:3d:d1:89:a5:d9:5d:07:db:4d:
                    04:c6:9c:16:b4:21:60:a1:55:a3:17:a0:63:45:d7:
                    28:64:06:3e:5b:de:dd:9d:1d:b3:e9:73:79:05:5e:
                    be:c3:66:34:20:6f:cd:c6:66:3c:82:b0:cd:db:26:
                    67:7c:2a:54:17:19:29:ff:87:19:67:f8:6d:1e:50:
                    11:d9:a6:82:b6:b5:1c:98:ce:58:7e:76:56:f8:90:
                    9d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:36:67:AD:F7:78:41:03:CB:02:F8:ED:41:DD:38:B9:C3:74:C2:83
            X509v3 Authority Key Identifier:
                keyid:92:C0:DD:00:D5:70:2E:39:0E:D2:78:F2:A6:FD:C7:79:EA:B7:BA:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DF2C0/D50D7F0E5A0311EFABD2477A762E951A/ksDdANVwLjkO0njypv3Heeq3uoo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ksDdANVwLjkO0njypv3Heeq3uoo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DF2C0/D50D7F0E5A0311EFABD2477A762E951A/ksDdANVwLjkO0njypv3Heeq3uoo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:cf:7f:dc:52:02:74:55:95:cf:01:1f:3d:cf:e7:81:01:bc:
         ea:6c:dd:00:ef:88:9b:1f:2a:4d:8f:7c:dd:ec:77:3c:ef:2b:
         67:97:45:27:a3:c8:a9:25:c0:ae:a8:38:c4:7a:51:b0:72:7b:
         a5:fc:9e:69:54:fc:c3:9c:87:39:1c:3c:eb:1f:51:35:c2:62:
         a1:29:7b:77:33:e3:38:f8:22:a4:44:df:8a:99:84:66:00:bd:
         53:9d:32:8b:0f:c8:7b:9b:f1:5d:77:0d:18:cc:41:1b:e8:fc:
         f7:8f:d3:ae:85:65:05:bb:40:bf:fa:ea:52:12:62:32:20:23:
         72:3b:00:e4:9c:87:f9:f3:92:0c:f2:16:3d:63:67:9d:7a:4f:
         1e:f1:a7:c5:6c:a3:ab:a0:58:40:9e:6a:a0:d8:bf:b8:38:d7:
         e0:58:83:f3:d5:f6:ee:29:69:a1:d4:1f:23:ca:47:19:2a:ce:
         ad:31:35:41:80:51:e7:40:48:00:00:3b:71:7f:47:56:34:a3:
         dd:a5:1d:98:cd:d1:9d:15:00:aa:2f:ab:ed:fb:83:10:a6:96:
         d2:0d:be:cc:16:18:24:e4:32:6b:29:60:0a:77:85:67:07:8b:
         b0:cd:1b:d4:e4:f0:23:30:cd:d1:fb:c2:9c:df:dd:5f:49:93:
         77:3c:2c:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:37:35 2026 by rpki-client