Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E38E5/C89F9E94553E11ED8E2230CAF1222468/e5XIh1o9qSB6rcxUQDFzjYpiLas.mft
File:                     e5XIh1o9qSB6rcxUQDFzjYpiLas.mft (raw, json)
Hash identifier:          zV/IXku4LI/aTy4jIP0W4e2qqB5WYEeTO6hdNQLHQnU=
Subject key identifier:   31:AC:D3:09:8D:B4:29:4F:91:3C:90:55:E2:B5:99:DE:58:B8:9C:C1
Authority key identifier: 7B:95:C8:87:5A:3D:A9:20:7A:AD:CC:54:40:31:73:8D:8A:62:2D:AB
Certificate issuer:       /CN=F36E38E5AF/serialNumber=7B95C8875A3DA9207AADCC544031738D8A622DAB
Certificate serial:       04EF
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/e5XIh1o9qSB6rcxUQDFzjYpiLas.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E38E5/C89F9E94553E11ED8E2230CAF1222468/e5XIh1o9qSB6rcxUQDFzjYpiLas.mft
Manifest number:          04EF
Signing time:             Mon 02 Mar 2026 02:13:20 +0000
Manifest this update:     Mon 02 Mar 2026 02:13:19 +0000
Manifest next update:     Wed 04 Mar 2026 02:13:19 +0000
Files and hashes:         1: e5XIh1o9qSB6rcxUQDFzjYpiLas.crl (hash: 2hbd88Rh9L+hW6dCvbIl7W66wAXFqMPLANTjB3dghGY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E38E5/C89F9E94553E11ED8E2230CAF1222468/e5XIh1o9qSB6rcxUQDFzjYpiLas.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E38E5/C89F9E94553E11ED8E2230CAF1222468/e5XIh1o9qSB6rcxUQDFzjYpiLas.mft
                          rsync://rpki.afrinic.net/repository/afrinic/e5XIh1o9qSB6rcxUQDFzjYpiLas.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1263 (0x4ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E38E5AF, serialNumber=7B95C8875A3DA9207AADCC544031738D8A622DAB
        Validity
            Not Before: Mar  2 02:13:19 2026 GMT
            Not After : Mar  4 02:13:19 2026 GMT
        Subject: CN=69a4f23f-36e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8d:a7:bc:c2:a4:8e:20:85:0f:72:a6:cc:12:
                    87:46:f2:fd:05:60:cf:a0:f0:b0:cf:06:4d:20:9f:
                    2d:ac:0c:7d:7d:79:3c:01:f5:57:7b:02:25:b3:f4:
                    c7:c2:9a:24:9e:c6:8d:4f:a3:c2:8c:2f:e6:04:cc:
                    28:70:bb:82:dc:70:a3:8d:b4:97:41:59:37:8b:cf:
                    6d:dd:c8:78:4c:34:e3:16:c9:cb:3a:2a:52:c9:91:
                    de:b2:60:21:79:cc:3d:6f:7f:a4:08:d3:11:2a:09:
                    df:a3:cd:b3:f2:2e:9c:b7:01:cb:72:85:4a:3f:23:
                    03:17:a1:8f:65:80:51:12:16:ec:94:06:b7:7b:a6:
                    87:0d:ba:4d:81:8a:77:c4:2f:01:3b:3b:2b:ea:94:
                    26:50:6b:c3:cc:ff:20:8f:97:bf:07:4a:bd:fe:0f:
                    73:51:33:c0:00:05:9c:f8:19:cc:88:a0:fa:cf:ba:
                    5b:32:cb:2d:39:4f:c5:80:78:ca:41:f5:5f:05:ab:
                    b9:5e:fd:95:be:aa:74:f1:36:ef:45:2e:b7:a6:b9:
                    2d:f1:f7:71:45:86:ab:13:d7:5d:7a:b5:ec:6d:87:
                    2f:26:d5:1d:b1:e3:9b:17:4e:7b:c9:54:0c:ca:bf:
                    aa:3a:23:02:13:79:f2:9b:87:0d:a0:c9:09:04:65:
                    cd:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:AC:D3:09:8D:B4:29:4F:91:3C:90:55:E2:B5:99:DE:58:B8:9C:C1
            X509v3 Authority Key Identifier:
                keyid:7B:95:C8:87:5A:3D:A9:20:7A:AD:CC:54:40:31:73:8D:8A:62:2D:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E38E5/C89F9E94553E11ED8E2230CAF1222468/e5XIh1o9qSB6rcxUQDFzjYpiLas.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/e5XIh1o9qSB6rcxUQDFzjYpiLas.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E38E5/C89F9E94553E11ED8E2230CAF1222468/e5XIh1o9qSB6rcxUQDFzjYpiLas.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:6b:60:06:03:0b:6b:6a:d1:9f:33:df:f2:2f:2c:79:9f:0d:
         5d:c0:8e:77:3e:db:2c:2e:53:5e:20:fe:44:4b:f0:06:b3:20:
         e4:44:bf:24:ba:f1:d3:4e:08:c8:30:27:3a:9a:07:12:3d:d0:
         45:dd:94:82:01:40:cc:c9:dd:81:c9:d9:a0:bd:47:90:bf:97:
         69:a2:0b:2e:7b:9a:34:52:1c:c4:d4:bc:84:77:76:ad:35:5f:
         9d:96:c3:1b:e4:61:f9:79:85:74:ab:7b:c2:d1:0d:bb:64:02:
         68:57:20:7b:7f:0d:5b:a6:b7:9c:e5:6e:97:5f:f1:d5:70:fa:
         f9:41:65:a2:bf:b4:b8:30:ac:c5:05:8e:50:35:c2:3c:2c:46:
         5d:92:fe:aa:cc:53:e5:c6:e9:1c:02:15:a3:2b:3d:ba:0e:8d:
         e7:54:99:cb:e7:c4:2f:20:40:ff:dd:a7:2b:8b:1b:e4:44:98:
         3a:a8:51:bb:5c:06:6c:1c:2f:12:94:29:91:71:18:66:7b:bc:
         c7:61:e6:b7:62:4c:6d:c2:a9:a2:88:4a:97:fe:cb:33:9c:ff:
         6c:68:4f:08:f3:37:f3:04:32:ca:e4:2d:7a:be:0c:77:1a:88:
         37:81:38:9c:97:9d:af:7e:48:08:37:27:fc:35:76:1c:ed:b2:
         91:f2:15:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:31:05 2026 by rpki-client