Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F550D/B7BF2626E13C11EFBF2AD094762E951A/P4zuwyrakEaTvUAO9yxqKMfih0g.mft
File:                     P4zuwyrakEaTvUAO9yxqKMfih0g.mft (raw, json)
Hash identifier:          y2w7mqsOVO2gL/mNtYdTD03gpnQmOOoJHy97nxLOFss=
Subject key identifier:   71:71:A2:35:C9:E3:2B:21:F8:5D:5D:94:48:5F:19:46:C0:87:F3:A8
Authority key identifier: 3F:8C:EE:C3:2A:DA:90:46:93:BD:40:0E:F7:2C:6A:28:C7:E2:87:48
Certificate issuer:       /CN=F36F550DAF/serialNumber=3F8CEEC32ADA904693BD400EF72C6A28C7E28748
Certificate serial:       0197
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/P4zuwyrakEaTvUAO9yxqKMfih0g.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F550D/B7BF2626E13C11EFBF2AD094762E951A/P4zuwyrakEaTvUAO9yxqKMfih0g.mft
Manifest number:          0195
Signing time:             Mon 02 Mar 2026 03:16:13 +0000
Manifest this update:     Mon 02 Mar 2026 03:16:12 +0000
Manifest next update:     Wed 04 Mar 2026 03:16:12 +0000
Files and hashes:         1: P4zuwyrakEaTvUAO9yxqKMfih0g.crl (hash: JI157xMLsJX/lLBTjJDhYAyYpdxF7m11Ta/sB/GQA84=)
                          2: D6E9120A4DC511F0AC59CEAFDAE4EC9C.roa (hash: fOsEo1LcqDjmwTrC6vczX+q3fF4EVxIT6Dh903EA+p8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F550D/B7BF2626E13C11EFBF2AD094762E951A/P4zuwyrakEaTvUAO9yxqKMfih0g.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F550D/B7BF2626E13C11EFBF2AD094762E951A/P4zuwyrakEaTvUAO9yxqKMfih0g.mft
                          rsync://rpki.afrinic.net/repository/afrinic/P4zuwyrakEaTvUAO9yxqKMfih0g.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 407 (0x197)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F550DAF, serialNumber=3F8CEEC32ADA904693BD400EF72C6A28C7E28748
        Validity
            Not Before: Mar  2 03:16:12 2026 GMT
            Not After : Mar  4 03:16:12 2026 GMT
        Subject: CN=69a500fd-bb29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:41:2d:5d:f8:93:0a:5f:17:35:47:98:af:07:
                    1c:e0:8d:39:b4:1f:b2:17:c4:21:59:0c:6a:eb:f1:
                    27:2c:23:1c:86:e0:98:a2:f0:7b:ae:c9:19:d7:b4:
                    02:a8:3e:27:1f:f2:42:67:7b:5a:2d:12:96:10:8b:
                    49:6a:02:46:ce:46:40:a0:51:89:06:34:08:4d:d4:
                    3a:d2:a3:f8:ce:89:78:25:98:3d:9e:2e:97:76:6d:
                    5e:82:cf:15:84:56:5c:4e:77:fa:67:5c:98:c7:e3:
                    a0:d7:63:0b:3b:7e:70:e1:42:5d:8d:f5:ac:db:21:
                    62:a8:97:74:e3:c0:d9:89:89:e9:9f:ec:02:4d:aa:
                    3c:4d:49:b2:d0:11:e8:66:e7:d6:b8:db:6a:aa:1b:
                    78:16:75:df:62:dc:ae:ef:a0:22:11:2f:17:ac:bc:
                    10:1e:73:ca:10:19:99:0e:3c:66:0b:46:aa:87:fb:
                    a3:1c:e3:f2:fb:9d:d5:8c:c2:d6:f1:04:17:19:05:
                    ff:97:9a:2e:44:e8:d0:12:3a:05:af:80:29:d3:07:
                    ae:77:35:78:f7:56:24:b0:0b:19:b0:e3:8f:0e:f1:
                    99:dd:20:11:8f:04:b6:d6:29:b3:1e:40:1b:bb:71:
                    77:86:81:67:81:5c:1a:6c:81:b5:6f:30:c2:d8:82:
                    30:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:71:A2:35:C9:E3:2B:21:F8:5D:5D:94:48:5F:19:46:C0:87:F3:A8
            X509v3 Authority Key Identifier:
                keyid:3F:8C:EE:C3:2A:DA:90:46:93:BD:40:0E:F7:2C:6A:28:C7:E2:87:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F550D/B7BF2626E13C11EFBF2AD094762E951A/P4zuwyrakEaTvUAO9yxqKMfih0g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/P4zuwyrakEaTvUAO9yxqKMfih0g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F550D/B7BF2626E13C11EFBF2AD094762E951A/P4zuwyrakEaTvUAO9yxqKMfih0g.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:62:66:56:5e:27:08:db:69:7b:4f:8d:b9:74:6b:01:f1:9e:
         5d:69:1b:e7:cd:d0:d0:78:a8:8e:95:91:55:11:7a:8a:de:fd:
         3d:5c:0e:2e:55:b0:26:d6:6e:54:74:67:67:20:c9:cd:79:83:
         5a:3b:61:c1:15:db:b2:b4:27:8d:10:23:b4:dd:90:30:32:ea:
         99:cc:da:4f:64:3a:72:28:fe:12:0c:6a:01:2f:ed:50:27:f6:
         3a:cd:8b:fe:2b:50:09:da:54:d7:78:64:b5:2c:2e:08:36:de:
         33:d7:7b:5b:fe:3f:60:6f:40:c0:16:44:b5:f9:1c:ed:96:77:
         1c:13:a2:82:ec:32:dd:f4:6f:4f:75:86:3e:11:d0:40:dc:a5:
         f1:72:71:74:20:1d:a9:2c:c8:29:82:a3:da:1e:e3:68:7a:fa:
         1b:20:a5:70:a8:8b:27:8b:b9:b4:cb:33:2b:fd:fe:d2:7c:71:
         ec:ab:e3:4f:7d:46:de:72:2f:ce:0e:ab:53:8c:cc:f1:ca:97:
         7d:c1:d3:77:6d:02:34:2d:96:52:7c:93:de:a0:5b:23:1a:0f:
         56:70:c0:3b:29:f9:2b:86:cc:92:c7:6c:30:59:47:29:03:61:
         76:04:33:81:d3:d3:8d:12:c7:e2:84:7d:e6:1c:bf:44:ec:91:
         29:8f:fd:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:59:30 2026 by rpki-client