Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F144C/7C12AB22D2E511E98E28C968F8AEA228/DwVtu0sgGDx0BK0862l8lsYuvIE.mft
File:                     DwVtu0sgGDx0BK0862l8lsYuvIE.mft (raw, json)
Hash identifier:          BMCUd5cyvJBOiBXcKxP0Uy2UUdOigx2u3pj2hSKlxX4=
Subject key identifier:   E1:69:80:9C:4C:DD:1D:AE:7D:99:4C:C6:90:22:61:19:9D:E6:B7:0A
Authority key identifier: 0F:05:6D:BB:4B:20:18:3C:74:04:AD:3C:EB:69:7C:96:C6:2E:BC:81
Certificate issuer:       /CN=F36F144CAF/serialNumber=0F056DBB4B20183C7404AD3CEB697C96C62EBC81
Certificate serial:       0978
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/DwVtu0sgGDx0BK0862l8lsYuvIE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F144C/7C12AB22D2E511E98E28C968F8AEA228/DwVtu0sgGDx0BK0862l8lsYuvIE.mft
Manifest number:          0977
Signing time:             Sun 01 Mar 2026 01:18:13 +0000
Manifest this update:     Sun 01 Mar 2026 01:18:13 +0000
Manifest next update:     Tue 03 Mar 2026 01:18:13 +0000
Files and hashes:         1: DwVtu0sgGDx0BK0862l8lsYuvIE.crl (hash: 7Xefp1qHFX0ZgwFOQMxEDWpFteYWssggNnhIaaCwJHo=)
                          2: FF4B07AC846711F0A270AC7BDAE4EC9C.roa (hash: Q3K1cN6OB7yLaygtcJrb/JNZEt+1W3HC/PXLY3fzcBE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F144C/7C12AB22D2E511E98E28C968F8AEA228/DwVtu0sgGDx0BK0862l8lsYuvIE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F144C/7C12AB22D2E511E98E28C968F8AEA228/DwVtu0sgGDx0BK0862l8lsYuvIE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/DwVtu0sgGDx0BK0862l8lsYuvIE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 03 Mar 2026 00:07:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2424 (0x978)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F144CAF, serialNumber=0F056DBB4B20183C7404AD3CEB697C96C62EBC81
        Validity
            Not Before: Mar  1 01:18:13 2026 GMT
            Not After : Mar  3 01:18:13 2026 GMT
        Subject: CN=69a393d5-389e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a5:9a:4a:67:e5:dd:cc:87:0e:c1:cd:17:92:
                    e3:a7:ea:ea:e3:ec:44:d9:cf:64:e1:cd:9a:37:bd:
                    98:d2:34:0a:b2:6c:d2:9a:c8:f4:9f:da:33:2a:42:
                    91:84:d4:cb:75:28:2a:5c:74:8b:6f:78:77:ee:c6:
                    18:5b:bb:79:2c:20:fe:ae:55:4e:c6:4a:a5:e8:65:
                    15:55:03:47:d8:7d:e6:7f:b6:a1:1f:17:7f:e0:19:
                    d0:7f:47:41:7c:93:33:e9:e4:ff:a4:0a:72:51:92:
                    18:91:d1:ef:a6:91:fa:86:ef:fa:d4:9c:81:a7:e2:
                    f1:c7:5c:e3:b4:f4:d2:26:ab:04:54:d1:75:4f:49:
                    8f:14:ef:61:e5:9e:db:45:a0:44:e0:69:e9:40:04:
                    72:23:66:d9:54:1b:84:18:ff:4b:6e:1f:a6:5a:34:
                    06:ce:0c:44:c8:f8:aa:74:05:9c:57:19:3e:98:5a:
                    9e:3b:77:5d:b1:d1:b3:96:56:c1:74:2d:cc:cd:c5:
                    c7:f0:03:a7:ea:f7:95:02:2a:16:2d:80:26:31:a8:
                    fd:67:f7:d6:91:3d:81:2a:c6:18:41:d6:e1:b5:a0:
                    f5:ab:13:c5:b7:c3:72:1f:14:15:57:77:44:f2:76:
                    a3:f3:6d:f4:5c:81:6c:76:a0:bb:f3:dc:6f:55:89:
                    46:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:69:80:9C:4C:DD:1D:AE:7D:99:4C:C6:90:22:61:19:9D:E6:B7:0A
            X509v3 Authority Key Identifier:
                keyid:0F:05:6D:BB:4B:20:18:3C:74:04:AD:3C:EB:69:7C:96:C6:2E:BC:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F144C/7C12AB22D2E511E98E28C968F8AEA228/DwVtu0sgGDx0BK0862l8lsYuvIE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DwVtu0sgGDx0BK0862l8lsYuvIE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F144C/7C12AB22D2E511E98E28C968F8AEA228/DwVtu0sgGDx0BK0862l8lsYuvIE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:f1:72:da:0b:21:2d:a0:83:1e:84:56:c8:dc:90:da:ef:b4:
         7d:ea:ca:d8:39:5d:58:dd:45:26:f6:f9:0e:b5:21:85:4f:a9:
         0e:a3:97:53:79:12:99:27:15:f8:2d:e1:5f:8a:96:c2:7f:62:
         d7:f9:13:e4:0f:c8:a1:41:38:e8:b2:e8:ca:63:0a:93:f7:95:
         f3:b6:a5:09:76:a6:54:3b:cc:2f:2e:54:32:b5:2b:9b:0e:96:
         22:7c:ce:10:41:2f:54:90:79:ed:cc:8a:6c:30:6e:c2:92:e1:
         4d:e0:31:f0:f1:91:0a:13:3c:76:66:8d:ad:9a:ab:49:dd:c1:
         d7:73:60:8d:ec:92:e6:c7:e7:0b:4b:50:4b:bd:2f:78:26:fc:
         c5:dc:a6:de:6a:56:b4:ca:2b:c2:b8:6f:7e:97:9f:3d:93:ce:
         fc:4f:ba:aa:eb:77:4a:9c:09:b0:da:21:01:f9:c7:ec:be:9b:
         5a:ca:e5:2d:4e:e4:f3:23:ac:e1:d8:19:05:47:d5:23:c5:5c:
         d1:bc:6e:97:34:a4:6e:33:65:4b:62:93:fd:15:b7:4f:cf:f8:
         06:a6:a6:5c:ca:ff:99:2b:d6:9b:ca:26:a5:64:a1:69:32:44:
         c9:91:87:33:d3:3e:f3:50:46:00:0a:64:4f:73:e3:5a:27:4b:
         5f:71:0f:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:57:34 2026 by rpki-client