Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F56CA/FAC2D5CA8E0011E99071444AF8AEA228/g_YvABqs0AtT9mDqLGYQm7u5nmQ.mft
File:                     g_YvABqs0AtT9mDqLGYQm7u5nmQ.mft (raw, json)
Hash identifier:          4j0QqgX0vfZ+CRPj8oNfP96OTNhq9Yw7cWH+ckqIssg=
Subject key identifier:   E3:AA:11:89:03:1C:5D:CA:A5:6C:A3:E6:29:CE:C1:81:0C:FC:62:BD
Authority key identifier: 83:F6:2F:00:1A:AC:D0:0B:53:F6:60:EA:2C:66:10:9B:BB:B9:9E:64
Certificate issuer:       /CN=F36F56CAAF/serialNumber=83F62F001AACD00B53F660EA2C66109BBBB99E64
Certificate serial:       09D7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/g_YvABqs0AtT9mDqLGYQm7u5nmQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F56CA/FAC2D5CA8E0011E99071444AF8AEA228/g_YvABqs0AtT9mDqLGYQm7u5nmQ.mft
Manifest number:          09D6
Signing time:             Mon 02 Mar 2026 01:14:15 +0000
Manifest this update:     Mon 02 Mar 2026 01:14:14 +0000
Manifest next update:     Wed 04 Mar 2026 01:14:14 +0000
Files and hashes:         1: g_YvABqs0AtT9mDqLGYQm7u5nmQ.crl (hash: kiSxBMgCDpGpMOmLPsUJyADuak5p5sPUv76plruTj7A=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F56CA/FAC2D5CA8E0011E99071444AF8AEA228/g_YvABqs0AtT9mDqLGYQm7u5nmQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F56CA/FAC2D5CA8E0011E99071444AF8AEA228/g_YvABqs0AtT9mDqLGYQm7u5nmQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/g_YvABqs0AtT9mDqLGYQm7u5nmQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2519 (0x9d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F56CAAF, serialNumber=83F62F001AACD00B53F660EA2C66109BBBB99E64
        Validity
            Not Before: Mar  2 01:14:14 2026 GMT
            Not After : Mar  4 01:14:14 2026 GMT
        Subject: CN=69a4e467-18f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b6:c5:18:60:07:6c:c9:bf:79:94:97:11:6b:
                    93:7e:62:7b:78:91:f7:3e:31:d0:47:fc:1e:b4:1d:
                    9e:0a:4e:c7:61:38:ae:35:6d:44:0a:1f:3e:81:37:
                    be:55:6e:90:12:58:90:26:28:0a:10:bc:c0:8a:16:
                    c7:71:d8:1f:a0:a3:0a:b9:4e:fc:4c:c3:34:00:e3:
                    54:a4:90:3f:af:c4:da:a8:14:22:a1:71:a7:74:34:
                    4a:68:08:92:c8:fd:d5:37:2e:c9:50:82:8f:ba:61:
                    0a:7d:4e:48:4e:76:3b:eb:60:71:0a:57:31:48:7f:
                    a9:5a:6d:cc:2a:47:8b:db:20:39:20:04:f5:53:9c:
                    b1:51:b0:c4:c4:87:bd:fd:f0:83:09:58:8e:8c:a5:
                    76:f6:69:e0:26:0b:e4:cd:cc:4e:e0:44:81:64:52:
                    56:57:a1:fe:b2:38:59:bc:3b:de:bc:29:99:eb:0c:
                    a7:54:b7:d9:8d:02:7d:d7:e0:f7:ae:10:81:fb:fc:
                    9a:e4:db:b1:94:7a:ed:49:30:a7:39:ca:cc:3c:6c:
                    9e:92:fe:e0:8e:48:06:67:f9:64:4e:d0:e1:08:3d:
                    87:da:aa:b7:db:12:3a:0c:a9:2c:a5:ec:f2:82:62:
                    bf:b3:0a:40:88:2a:d5:f8:75:a9:fb:fc:61:12:55:
                    bc:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:AA:11:89:03:1C:5D:CA:A5:6C:A3:E6:29:CE:C1:81:0C:FC:62:BD
            X509v3 Authority Key Identifier:
                keyid:83:F6:2F:00:1A:AC:D0:0B:53:F6:60:EA:2C:66:10:9B:BB:B9:9E:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F56CA/FAC2D5CA8E0011E99071444AF8AEA228/g_YvABqs0AtT9mDqLGYQm7u5nmQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/g_YvABqs0AtT9mDqLGYQm7u5nmQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F56CA/FAC2D5CA8E0011E99071444AF8AEA228/g_YvABqs0AtT9mDqLGYQm7u5nmQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:9a:70:2b:0b:24:bc:13:3c:62:a0:50:1b:b2:60:9a:5d:4c:
         81:d4:89:a1:93:47:36:1f:43:ae:3b:7e:da:54:d1:b2:ab:ae:
         5b:c2:33:18:47:9b:7e:51:73:59:42:f7:ba:e4:51:41:c3:00:
         ce:b1:1b:4a:2d:c6:55:cd:53:bd:28:d2:4d:b6:22:0a:e3:ba:
         3b:04:be:e7:0c:d7:5c:6c:5c:b8:ed:ab:3e:a2:d4:43:db:d3:
         bd:1a:1a:30:09:34:55:51:f6:79:a3:63:fe:6c:fb:da:39:af:
         73:b0:57:1a:3c:90:be:50:2e:a9:7c:42:97:a9:22:a0:9f:32:
         97:6d:4a:75:5b:53:d4:99:08:4d:83:e3:03:19:a7:9e:ca:62:
         e6:9f:9f:22:dc:2e:ac:41:d0:f3:39:c0:55:2f:9c:07:18:b1:
         b9:8a:c5:32:49:d3:a0:fc:68:0c:1e:eb:28:f1:8d:ba:30:18:
         63:d2:08:4d:5e:41:58:30:31:e5:bf:fd:ee:4f:fc:78:89:c8:
         be:a2:2b:93:50:9c:f5:40:1e:fb:cd:e4:e8:ff:3c:de:c7:f0:
         c3:17:3c:14:07:3d:4f:8b:6b:c2:8a:8d:75:e9:f5:15:04:a6:
         0b:22:37:b5:53:5c:09:b6:d8:4e:3d:fe:f0:a8:14:34:b2:80:
         1d:1c:4f:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:57:45 2026 by rpki-client