Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E3D54/10D7FDF8077C11F18A9EE389DAE4EC9C/nDG_Ybi28H3SmbmF5zKd-qo84qc.mft
File:                     nDG_Ybi28H3SmbmF5zKd-qo84qc.mft (raw, json)
Hash identifier:          QduqPnFl86s6fYnWH2HztjnzKJZJPi9SaMLrh6Uw3rw=
Subject key identifier:   BC:A8:D1:6F:B2:B4:C0:A9:AB:70:85:9D:9C:C5:7A:9D:EC:6E:F5:F7
Authority key identifier: 9C:31:BF:61:B8:B6:F0:7D:D2:99:B9:85:E7:32:9D:FA:AA:3C:E2:A7
Certificate issuer:       /CN=F36E3D54AF/serialNumber=9C31BF61B8B6F07DD299B985E7329DFAAA3CE2A7
Certificate serial:       17
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/nDG_Ybi28H3SmbmF5zKd-qo84qc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E3D54/10D7FDF8077C11F18A9EE389DAE4EC9C/nDG_Ybi28H3SmbmF5zKd-qo84qc.mft
Manifest number:          15
Signing time:             Sun 01 Mar 2026 03:41:23 +0000
Manifest this update:     Sun 01 Mar 2026 03:41:22 +0000
Manifest next update:     Tue 03 Mar 2026 03:41:22 +0000
Files and hashes:         1: nDG_Ybi28H3SmbmF5zKd-qo84qc.crl (hash: tgWET+YKwEAT+IuecXoka5BJoGuNLpkKBUkX8UjICp4=)
                          2: FCE69F10077C11F1B6D7578EDAE4EC9C.roa (hash: l9w1XT16v5pOs6ZmyalOJI7UHw3oAkl12LArNgvLDY8=)
                          3: D03272A4077D11F1B2E27D92DAE4EC9C.roa (hash: MNGXrpINz1Q16hHZ2N8QvRAzr2kMre4hq/Y0Tbq6HLY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E3D54/10D7FDF8077C11F18A9EE389DAE4EC9C/nDG_Ybi28H3SmbmF5zKd-qo84qc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E3D54/10D7FDF8077C11F18A9EE389DAE4EC9C/nDG_Ybi28H3SmbmF5zKd-qo84qc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/nDG_Ybi28H3SmbmF5zKd-qo84qc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 03 Mar 2026 00:07:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23 (0x17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E3D54AF, serialNumber=9C31BF61B8B6F07DD299B985E7329DFAAA3CE2A7
        Validity
            Not Before: Mar  1 03:41:22 2026 GMT
            Not After : Mar  3 03:41:22 2026 GMT
        Subject: CN=69a3b563-59d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:43:3e:8a:e4:69:6b:df:9e:ce:b5:b5:b8:07:
                    bc:35:a1:4a:89:a8:3f:f3:e9:73:78:06:95:84:27:
                    20:29:c2:eb:87:81:1b:14:3d:92:26:58:33:35:6d:
                    a1:e5:32:a9:26:88:99:87:94:41:48:fb:5b:67:23:
                    65:da:16:3d:fb:45:64:c5:49:df:d8:3a:99:84:b0:
                    1a:a3:95:11:9e:6a:74:23:be:99:02:41:4b:85:e5:
                    11:df:15:3f:80:a5:34:a7:c0:94:44:6a:e1:eb:a0:
                    ac:36:dc:15:09:ef:6c:67:d2:06:cf:8a:30:70:25:
                    3c:e8:48:20:c8:2b:7e:43:a7:fb:85:98:06:b9:2b:
                    c4:c2:15:9c:b1:66:8e:e6:99:99:1c:e9:9b:fc:d0:
                    83:a2:9e:b8:49:3f:b8:63:c9:e3:3b:49:6d:5f:41:
                    38:bd:d6:b0:be:a0:5b:1c:80:58:c0:a0:67:46:4a:
                    f5:83:5c:a2:92:dd:8d:70:ef:1b:0d:c1:c4:df:bf:
                    0a:d0:20:8a:3d:c0:47:ed:fa:c3:0b:b5:3f:48:1f:
                    4e:4c:3a:1e:95:7b:53:b6:79:f7:f2:b9:63:96:d7:
                    e0:bb:d2:7d:f1:b9:5d:3b:f5:88:39:fe:0c:e5:69:
                    00:a7:5f:d0:54:ac:c8:e3:80:bf:73:be:53:c0:f5:
                    d2:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:A8:D1:6F:B2:B4:C0:A9:AB:70:85:9D:9C:C5:7A:9D:EC:6E:F5:F7
            X509v3 Authority Key Identifier:
                keyid:9C:31:BF:61:B8:B6:F0:7D:D2:99:B9:85:E7:32:9D:FA:AA:3C:E2:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E3D54/10D7FDF8077C11F18A9EE389DAE4EC9C/nDG_Ybi28H3SmbmF5zKd-qo84qc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/nDG_Ybi28H3SmbmF5zKd-qo84qc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E3D54/10D7FDF8077C11F18A9EE389DAE4EC9C/nDG_Ybi28H3SmbmF5zKd-qo84qc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:bd:cb:93:f8:3c:dc:5a:41:8f:01:6c:22:9e:6a:c6:06:11:
         fe:58:01:ac:38:e5:b1:60:a7:6c:53:75:2c:49:59:33:1f:95:
         81:5b:19:db:1e:ec:95:6b:39:a6:cc:04:5b:c7:1b:ba:25:69:
         3c:9a:19:7e:ab:77:44:47:15:38:86:73:9b:eb:01:d0:55:32:
         cb:0c:91:5b:d5:63:ca:53:97:51:c2:2a:d5:09:b4:d0:9e:7d:
         4b:a3:bb:c1:a0:65:0c:29:1e:11:19:06:bf:01:2f:97:c9:24:
         02:08:bb:33:8d:e0:7a:e3:96:99:5b:86:b6:9a:cf:01:0c:95:
         4f:d2:8d:77:d9:1b:d6:a3:10:5e:16:5b:27:5f:bc:d2:25:9e:
         cb:19:1e:6d:8e:3f:03:44:a2:63:c4:1f:72:bd:b2:76:7d:ab:
         bb:0d:c7:93:05:b6:61:69:a5:04:5f:e2:55:e0:53:91:c3:7c:
         42:d9:e1:7d:a4:a0:28:86:f9:9c:ed:59:26:bc:ff:d0:ac:3e:
         a7:91:dc:de:8d:e1:53:e2:57:b7:d6:ba:38:f8:8b:5a:ea:6f:
         34:65:21:80:e9:70:b6:17:60:6b:98:01:e6:d6:c1:6a:a9:dc:
         91:0d:b7:2e:d6:bd:a5:70:b6:1f:d1:af:1d:9b:3e:3d:51:65:
         4c:cc:6f:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:05:43 2026 by rpki-client