Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E1A95/28A3BF58EFA811F0A6B991B8DAE4EC9C/zgfVJCGaKb9NDax9tiqIO3WsSUA.mft
File:                     zgfVJCGaKb9NDax9tiqIO3WsSUA.mft (raw, json)
Hash identifier:          evxnNRtS4EzB28dP1puYXRg7CL8D7BqvQ8aFV/daXcg=
Subject key identifier:   7B:B4:31:82:16:C8:39:CB:9C:B1:11:B9:B2:DD:6C:B8:2F:81:0D:92
Authority key identifier: CE:07:D5:24:21:9A:29:BF:4D:0D:AC:7D:B6:2A:88:3B:75:AC:49:40
Certificate issuer:       /CN=F36E1A95AF/serialNumber=CE07D524219A29BF4D0DAC7DB62A883B75AC4940
Certificate serial:       35
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/zgfVJCGaKb9NDax9tiqIO3WsSUA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E1A95/28A3BF58EFA811F0A6B991B8DAE4EC9C/zgfVJCGaKb9NDax9tiqIO3WsSUA.mft
Manifest number:          34
Signing time:             Mon 02 Mar 2026 03:37:30 +0000
Manifest this update:     Mon 02 Mar 2026 03:37:30 +0000
Manifest next update:     Wed 04 Mar 2026 03:37:30 +0000
Files and hashes:         1: zgfVJCGaKb9NDax9tiqIO3WsSUA.crl (hash: fenmI7hSx6HOwWWLj5uGHdDlkCchG7/kze4uJ6B580E=)
                          2: 0836D574EFA911F0AD3786BEDAE4EC9C.roa (hash: s34q98p+j1656mmnmZ5OjzaYIjMbFPtO6WF3YwxXSiA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E1A95/28A3BF58EFA811F0A6B991B8DAE4EC9C/zgfVJCGaKb9NDax9tiqIO3WsSUA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E1A95/28A3BF58EFA811F0A6B991B8DAE4EC9C/zgfVJCGaKb9NDax9tiqIO3WsSUA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/zgfVJCGaKb9NDax9tiqIO3WsSUA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 53 (0x35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E1A95AF, serialNumber=CE07D524219A29BF4D0DAC7DB62A883B75AC4940
        Validity
            Not Before: Mar  2 03:37:30 2026 GMT
            Not After : Mar  4 03:37:30 2026 GMT
        Subject: CN=69a505fa-15fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:89:7a:3e:2f:c6:e3:65:75:52:54:ec:62:bb:
                    b0:4f:e6:4f:e4:dd:5f:e2:06:44:e8:a7:10:fb:1b:
                    49:0c:a6:61:06:41:b0:86:86:58:fd:70:fe:f4:a4:
                    07:ea:86:fa:33:12:b0:46:01:03:b8:f8:8a:16:b0:
                    35:e7:f9:94:8c:19:ee:bd:36:84:85:5f:74:4a:c3:
                    be:d7:2b:50:9c:71:c2:05:76:b0:3a:54:38:f0:22:
                    90:53:67:41:c4:46:43:69:55:9e:5d:1f:bc:05:ba:
                    03:76:1c:4d:51:d1:0a:92:35:71:df:d5:a7:d4:1c:
                    81:02:bb:e7:d6:03:4b:f1:7c:64:84:b8:1c:4e:ac:
                    8c:cd:d6:cf:70:0c:40:54:b3:a4:f1:bd:6c:f4:13:
                    c4:8e:85:de:ca:c8:8d:57:d4:9a:0b:29:f2:fd:bd:
                    b0:7c:b3:09:24:08:26:21:ac:fe:b3:2d:e3:d7:22:
                    68:c8:e9:7e:f3:3a:12:79:63:2a:f4:84:2f:92:15:
                    1d:57:f9:ce:fe:89:b4:48:3b:d0:16:80:6e:8b:fc:
                    22:64:d4:21:c0:be:39:54:00:65:03:50:45:21:ec:
                    5a:e5:5f:4b:e3:d3:e6:d8:bd:d7:4f:48:8b:34:2f:
                    56:7c:8b:26:22:71:fc:6a:49:73:4d:08:55:fd:d6:
                    fe:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:B4:31:82:16:C8:39:CB:9C:B1:11:B9:B2:DD:6C:B8:2F:81:0D:92
            X509v3 Authority Key Identifier:
                keyid:CE:07:D5:24:21:9A:29:BF:4D:0D:AC:7D:B6:2A:88:3B:75:AC:49:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E1A95/28A3BF58EFA811F0A6B991B8DAE4EC9C/zgfVJCGaKb9NDax9tiqIO3WsSUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zgfVJCGaKb9NDax9tiqIO3WsSUA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E1A95/28A3BF58EFA811F0A6B991B8DAE4EC9C/zgfVJCGaKb9NDax9tiqIO3WsSUA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:90:b4:47:e4:87:fd:1a:99:49:12:26:2c:a8:87:14:26:86:
         81:5d:dc:5d:bb:00:c2:f3:de:d3:12:83:78:23:74:4b:f0:4a:
         0c:c0:df:ad:2c:3d:5c:cc:18:aa:34:10:f7:69:21:32:49:2a:
         a4:f3:22:96:05:e3:0c:b8:ef:72:7c:d9:83:87:04:ef:12:2a:
         49:f8:e3:ad:4a:11:4a:98:9d:af:45:b8:88:7d:92:4d:89:24:
         f3:b4:30:97:d8:e2:b8:66:61:d7:0f:19:78:14:bc:e0:47:f1:
         da:a2:30:24:e1:72:4a:3f:b8:60:06:fd:31:66:13:e8:5a:e6:
         82:9f:1e:47:d0:24:3a:bf:ce:ef:3d:c7:fa:7e:3e:cc:5d:ca:
         3e:d8:6f:e3:62:a5:b4:d9:34:0a:d6:7a:d3:25:2d:e4:b7:07:
         41:40:b9:2e:d6:8d:d9:c2:0c:dc:d4:d5:00:11:b9:33:01:d3:
         3a:f3:50:58:e1:85:f9:94:05:76:15:2e:3e:ca:ce:81:7d:58:
         f9:d8:af:d3:ba:9c:16:b9:7b:50:cc:62:24:a7:21:fe:ba:14:
         42:05:21:2d:51:d8:54:e2:fb:dc:20:8b:55:3e:40:49:78:55:
         8b:bc:5c:0a:d2:b7:95:7b:9c:80:5a:68:2c:ee:14:0b:9d:f0:
         0e:ec:c7:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:14:37 2026 by rpki-client