Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E0C57/A4AE8D863AC211EFA189D362762E951A/Rh3mXlosn0bNsVRHChQs6rACo-g.mft
File:                     Rh3mXlosn0bNsVRHChQs6rACo-g.mft (raw, json)
Hash identifier:          fG1jDZonnDCd1HnCeup2AR3MZUiImbOk9xF0gzYCtHs=
Subject key identifier:   6F:8D:AB:F6:84:9D:FF:DF:E8:1D:35:58:3F:A6:FC:E4:80:4D:A5:7A
Authority key identifier: 46:1D:E6:5E:5A:2C:9F:46:CD:B1:54:47:0A:14:2C:EA:B0:02:A3:E8
Certificate issuer:       /CN=F36E0C57AF/serialNumber=461DE65E5A2C9F46CDB154470A142CEAB002A3E8
Certificate serial:       026D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Rh3mXlosn0bNsVRHChQs6rACo-g.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E0C57/A4AE8D863AC211EFA189D362762E951A/Rh3mXlosn0bNsVRHChQs6rACo-g.mft
Manifest number:          026C
Signing time:             Mon 02 Mar 2026 02:57:39 +0000
Manifest this update:     Mon 02 Mar 2026 02:57:38 +0000
Manifest next update:     Wed 04 Mar 2026 02:57:38 +0000
Files and hashes:         1: Rh3mXlosn0bNsVRHChQs6rACo-g.crl (hash: zrt0jv0/LmjwkH1d4AZey5Ct4ago3Wt6F525vLAhJwA=)
                          2: C398885E3AC311EF90F6DF67762E951A.roa (hash: ul3nn21hDO7UgXCYkLGPryVSInddXUiuHuE7QBhZSgU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E0C57/A4AE8D863AC211EFA189D362762E951A/Rh3mXlosn0bNsVRHChQs6rACo-g.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E0C57/A4AE8D863AC211EFA189D362762E951A/Rh3mXlosn0bNsVRHChQs6rACo-g.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Rh3mXlosn0bNsVRHChQs6rACo-g.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 621 (0x26d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E0C57AF, serialNumber=461DE65E5A2C9F46CDB154470A142CEAB002A3E8
        Validity
            Not Before: Mar  2 02:57:38 2026 GMT
            Not After : Mar  4 02:57:38 2026 GMT
        Subject: CN=69a4fca3-dfc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:75:23:ee:77:4a:95:09:83:65:52:df:2b:ff:
                    ee:fd:75:ff:bc:a3:c5:ed:35:6c:3e:01:1d:e8:31:
                    9d:ce:8f:ab:32:16:a1:ba:ea:70:f4:a5:ba:ec:66:
                    f5:45:62:9c:f3:87:23:93:2f:d4:d2:02:9d:7e:4a:
                    10:e4:83:fa:91:68:95:61:4c:d0:d4:ad:d3:01:56:
                    fa:63:a1:d8:2d:cb:a5:fe:17:e8:68:54:05:61:29:
                    c9:bd:85:44:75:2c:4b:c8:e0:d7:63:4e:13:36:4e:
                    49:8b:7a:00:7a:41:c5:4b:38:d1:92:7e:90:1c:68:
                    ce:ef:26:10:38:7c:1c:4b:31:6f:0c:55:3f:87:25:
                    e0:44:79:8d:8d:4a:08:1a:21:70:74:91:f3:fa:90:
                    14:7f:23:eb:1c:77:ce:c7:7c:68:a8:49:8a:7d:2f:
                    5a:af:34:99:d0:c7:1e:f3:9a:45:0d:1e:08:01:a0:
                    5f:7f:dc:68:07:d1:92:63:2f:c9:6e:fe:a8:64:97:
                    52:c6:62:3a:fb:21:e4:4d:73:d1:74:66:a1:bd:e8:
                    05:39:34:ee:c7:78:12:01:67:ff:65:6b:45:ca:56:
                    fd:68:86:dd:f1:9f:1d:8f:b4:7a:5f:5a:eb:4d:54:
                    69:83:07:15:f6:89:a3:8d:ce:76:5e:02:88:71:4e:
                    99:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:8D:AB:F6:84:9D:FF:DF:E8:1D:35:58:3F:A6:FC:E4:80:4D:A5:7A
            X509v3 Authority Key Identifier:
                keyid:46:1D:E6:5E:5A:2C:9F:46:CD:B1:54:47:0A:14:2C:EA:B0:02:A3:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E0C57/A4AE8D863AC211EFA189D362762E951A/Rh3mXlosn0bNsVRHChQs6rACo-g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Rh3mXlosn0bNsVRHChQs6rACo-g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E0C57/A4AE8D863AC211EFA189D362762E951A/Rh3mXlosn0bNsVRHChQs6rACo-g.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:03:2b:e2:a5:62:39:37:24:0d:ba:77:ad:4a:f3:84:c2:6a:
         d0:4d:55:01:ed:c3:e1:47:4c:0b:9e:b4:65:30:fc:d1:d5:af:
         43:07:13:15:c8:9b:ea:48:18:06:c5:62:5d:10:72:21:46:b7:
         57:3e:14:46:ef:6f:fd:2c:f1:78:af:0e:a7:5f:f8:ae:89:a5:
         d4:99:df:43:8a:90:6f:3f:c8:bd:66:e6:aa:6f:04:3a:6b:80:
         97:f3:e4:9c:f3:02:87:79:02:d5:b7:ef:da:a5:91:aa:5a:2f:
         cc:d0:b4:c8:e2:a2:f1:12:dd:76:76:0e:07:0a:ea:61:31:0b:
         01:dc:52:16:f5:f4:be:e3:c9:3e:8c:28:e2:00:cd:0e:3f:83:
         9c:e9:ee:85:a8:b8:7f:07:c6:ff:a0:de:7a:67:ac:14:88:49:
         39:85:e6:34:6f:f2:ec:8c:1f:f7:15:46:25:13:fa:b8:06:59:
         c4:63:a8:c6:95:60:e4:50:06:c8:d2:e2:1f:e3:d2:a4:83:1e:
         0d:fc:b8:db:84:dc:a9:15:c0:e8:0c:a4:2c:99:2f:10:ce:5d:
         d7:49:49:d0:b0:c3:3b:19:8a:ca:e5:08:d7:e7:1e:27:25:1a:
         ee:61:5d:7a:1e:93:fe:92:79:5f:6e:5b:a5:8d:60:a0:9d:35:
         7e:e6:79:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:24:33 2026 by rpki-client