Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/KjzJ5VGaWluxPQgxDKk0gkiW-lo.mft
File:                     KjzJ5VGaWluxPQgxDKk0gkiW-lo.mft (raw, json)
Hash identifier:          0rt1RNC3wDI9FKnnHtirHWBpk/G4yACKX5xUqt0TE4E=
Subject key identifier:   CE:99:2F:A0:3B:71:0D:3C:2C:D7:95:98:A0:DE:B8:DB:0A:18:C8:57
Authority key identifier: 2A:3C:C9:E5:51:9A:5A:5B:B1:3D:08:31:0C:A9:34:82:48:96:FA:5A
Certificate issuer:       /CN=F36E29EDAF/serialNumber=2A3CC9E5519A5A5BB13D08310CA934824896FA5A
Certificate serial:       059E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/KjzJ5VGaWluxPQgxDKk0gkiW-lo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/KjzJ5VGaWluxPQgxDKk0gkiW-lo.mft
Manifest number:          0596
Signing time:             Mon 02 Mar 2026 02:01:12 +0000
Manifest this update:     Mon 02 Mar 2026 02:01:11 +0000
Manifest next update:     Wed 04 Mar 2026 02:01:11 +0000
Files and hashes:         1: KjzJ5VGaWluxPQgxDKk0gkiW-lo.crl (hash: eoLgu/pNpGsccv2e6gdsDJ36WjPwG7/gssK1uHyx8sk=)
                          2: 073BD64605C911EE95E74F304AD9E6FC.roa (hash: In9Q3d/Y0USLa0Qt9FonWtXn6zDCpfpzJ3Ey6VoUa4c=)
                          3: 16A921E4DC0B11EC947D03A2F1222468.roa (hash: vGBFcYwGWSd28shsl6wLto7Mn3qQgY7dKVAEPsi5kBs=)
                          4: A9F0CED005CB11EEAE1D25384AD9E6FC.roa (hash: zxEwyc9gplQBJFrp7SAoD+b4/1ve107UCm4IoIpj8I0=)
                          5: BF8426E405CA11EE92157D354AD9E6FC.roa (hash: A+WykTSmvAsx1MAKq+Pb3eSJ+oLcJkndPTp4NaD0n4Y=)
                          6: 3DA37FA805CA11EE97650D344AD9E6FC.roa (hash: qnjPAnaVGfXdRft23JxV+6Cp0V+QdoJKnDCoKaZOhOc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/KjzJ5VGaWluxPQgxDKk0gkiW-lo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/KjzJ5VGaWluxPQgxDKk0gkiW-lo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/KjzJ5VGaWluxPQgxDKk0gkiW-lo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1438 (0x59e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E29EDAF, serialNumber=2A3CC9E5519A5A5BB13D08310CA934824896FA5A
        Validity
            Not Before: Mar  2 02:01:11 2026 GMT
            Not After : Mar  4 02:01:11 2026 GMT
        Subject: CN=69a4ef67-76ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:41:36:60:36:02:2a:ae:46:a6:eb:93:ed:ef:
                    14:c4:08:7d:af:1b:c5:a1:10:63:16:f3:35:a4:99:
                    4e:c6:96:85:0d:34:55:55:d6:68:91:29:2e:0f:6f:
                    b5:b5:2d:e1:0a:ec:3f:1d:fd:66:08:9c:38:2d:ca:
                    e0:ee:8d:d0:dc:df:95:ac:ea:97:ed:9f:2d:cf:d6:
                    b5:a8:3f:c4:77:f4:a9:4b:38:09:e5:77:a9:cd:5a:
                    09:76:52:5d:0a:7b:49:64:f5:38:02:25:f9:4d:b1:
                    66:61:b8:64:f9:7e:f2:f9:42:be:a3:29:d9:31:d6:
                    ed:a7:70:9e:12:88:5c:cf:58:0e:2f:a5:34:84:fe:
                    3a:d6:aa:fa:7e:3d:33:66:e0:04:3a:af:3a:05:92:
                    26:49:57:50:86:87:6a:0b:64:3c:12:ab:4a:40:3e:
                    1f:22:4f:df:6a:9a:b6:dd:c0:02:ac:f1:4f:84:c7:
                    4f:d0:12:eb:3e:34:40:08:19:aa:88:88:0f:dc:24:
                    ba:44:38:0d:b3:83:11:03:11:64:18:c0:46:d5:17:
                    bf:c2:53:bf:cc:ba:e2:bc:36:f0:5e:d9:fa:ec:01:
                    b6:59:0b:c0:8c:ca:79:92:d0:0a:89:ac:83:39:62:
                    88:30:fd:a3:72:a1:05:c4:e0:50:6f:b6:73:cc:c0:
                    65:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:99:2F:A0:3B:71:0D:3C:2C:D7:95:98:A0:DE:B8:DB:0A:18:C8:57
            X509v3 Authority Key Identifier:
                keyid:2A:3C:C9:E5:51:9A:5A:5B:B1:3D:08:31:0C:A9:34:82:48:96:FA:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/KjzJ5VGaWluxPQgxDKk0gkiW-lo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KjzJ5VGaWluxPQgxDKk0gkiW-lo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/KjzJ5VGaWluxPQgxDKk0gkiW-lo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:10:50:61:b8:2d:11:37:9f:c8:aa:2c:48:20:ed:92:e6:ae:
         6d:71:1a:2c:a8:4b:4c:bc:e6:08:b1:e7:cf:f1:a1:d6:59:9c:
         b1:4e:03:3c:e8:37:c9:e8:57:ec:23:e1:f3:0b:0a:93:34:29:
         93:31:f1:8d:aa:2a:a0:d5:e8:db:aa:93:8f:5c:17:a3:43:ca:
         a2:11:b9:b3:4f:46:fd:40:3d:3a:3a:35:8f:f1:92:16:b2:c5:
         ff:b6:55:f6:3c:44:e6:64:a8:4a:36:be:e4:5e:73:43:13:fc:
         2d:06:0e:f9:60:bc:a5:d1:f1:9c:0f:a0:ff:18:d2:0c:3a:af:
         74:02:2d:72:ca:f0:1a:d1:61:a1:60:74:e0:27:1b:82:c1:09:
         73:0d:3e:b7:83:de:ff:50:e7:15:97:c1:4f:ed:ba:a1:f4:d9:
         94:8f:11:12:6d:b7:de:df:cc:d4:93:ec:99:7a:23:00:fc:ab:
         f1:35:f5:69:74:67:cb:1e:73:a7:e7:67:17:5e:1e:8b:a4:12:
         e5:c6:82:3a:74:21:31:1f:0d:29:86:9e:4b:17:d1:5e:0a:81:
         f9:7d:68:d0:a9:70:75:65:f3:d1:45:4d:d7:2c:55:76:af:ed:
         b0:db:54:3e:58:62:80:0c:1b:80:2a:1f:7a:f6:43:75:fb:74:
         45:41:67:77
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBZ4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RTI5RURBRjExMC8GA1UEBRMoMkEzQ0M5RTU1MTlBNUE1QkIxM0QwODMxMENBOTM0
ODI0ODk2RkE1QTAeFw0yNjAzMDIwMjAxMTFaFw0yNjAzMDQwMjAxMTFaMBgxFjAU
BgNVBAMTDTY5YTRlZjY3LTc2Y2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCsQTZgNgIqrkam65Pt7xTECH2vG8WhEGMW8zWkmU7GloUNNFVV1miRKS4P
b7W1LeEK7D8d/WYInDgtyuDujdDc35Ws6pftny3P1rWoP8R39KlLOAnld6nNWgl2
Ul0Ke0lk9TgCJflNsWZhuGT5fvL5Qr6jKdkx1u2ncJ4SiFzPWA4vpTSE/jrWqvp+
PTNm4AQ6rzoFkiZJV1CGh2oLZDwSq0pAPh8iT99qmrbdwAKs8U+Ex0/QEus+NEAI
GaqIiA/cJLpEOA2zgxEDEWQYwEbVF7/CU7/MuuK8NvBe2frsAbZZC8CMynmS0AqJ
rIM5Yogw/aNyoQXE4FBvtnPMwGW5AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUzpkv
oDtxDTws15WYoN642woYyFcwHwYDVR0jBBgwFoAUKjzJ5VGaWluxPQgxDKk0gkiW
+lowDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkUyOUVELzFDNUI1RDAyREMwOTExRUM5Q0VCREU5QkYxMjIyNDY4L0tqeko1
VkdhV2x1eFBRZ3hES2swZ2tpVy1sby5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0tqeko1VkdhV2x1eFBRZ3hES2swZ2tpVy1sby5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RTI5RUQvMUM1QjVEMDJEQzA5MTFFQzlDRUJERTlCRjEy
MjI0NjgvS2p6SjVWR2FXbHV4UFFneERLazBna2lXLWxvLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBdEFBhuC0RN5/IqixIIO2S5q5tcRos
qEtMvOYIsefP8aHWWZyxTgM86DfJ6FfsI+HzCwqTNCmTMfGNqiqg1ejbqpOPXBej
Q8qiEbmzT0b9QD06OjWP8ZIWssX/tlX2PETmZKhKNr7kXnNDE/wtBg75YLyl0fGc
D6D/GNIMOq90Ai1yyvAa0WGhYHTgJxuCwQlzDT63g97/UOcVl8FP7bqh9NmUjxES
bbfe38zUk+yZeiMA/KvxNfVpdGfLHnOn52cXXh6LpBLlxoI6dCExHw0php5LF9Fe
CoH5fWjQqXB1ZfPRRU3XLFV2r+2w21Q+WGKADBuAKh969kN1+3RFQWd3
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:51:53 2026 by rpki-client