Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F61A5/06F7F66C0FC911EC8545E973D8A014CE/4u30RuwlLhL_hY7r4xim2a4EMbA.mft
File:                     4u30RuwlLhL_hY7r4xim2a4EMbA.mft (raw, json)
Hash identifier:          1B8mAPIuwlPN4JMLhXJvRG6KTXaUvzPZ6kQAbzsEGg4=
Subject key identifier:   5F:F6:4A:54:7F:CA:6B:19:B9:71:B2:E5:3A:ED:B3:A2:D1:E6:BE:55
Authority key identifier: E2:ED:F4:46:EC:25:2E:12:FF:85:8E:EB:E3:18:A6:D9:AE:04:31:B0
Certificate issuer:       /CN=F36F61A5AF/serialNumber=E2EDF446EC252E12FF858EEBE318A6D9AE0431B0
Certificate serial:       0691
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/4u30RuwlLhL_hY7r4xim2a4EMbA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F61A5/06F7F66C0FC911EC8545E973D8A014CE/4u30RuwlLhL_hY7r4xim2a4EMbA.mft
Manifest number:          0690
Signing time:             Mon 02 Mar 2026 01:47:22 +0000
Manifest this update:     Mon 02 Mar 2026 01:47:21 +0000
Manifest next update:     Wed 04 Mar 2026 01:47:21 +0000
Files and hashes:         1: 4u30RuwlLhL_hY7r4xim2a4EMbA.crl (hash: 7b1UOGgYbagp1ZxRspHAfXtn+8eHohddsOKwFigwHoM=)
                          2: F2E8745215FF11EC9C41353BD8A014CE.roa (hash: DALkcQgZJxSOm1jJNi52fbxFVjnJTlBys9WoNl+MGWs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F61A5/06F7F66C0FC911EC8545E973D8A014CE/4u30RuwlLhL_hY7r4xim2a4EMbA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F61A5/06F7F66C0FC911EC8545E973D8A014CE/4u30RuwlLhL_hY7r4xim2a4EMbA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/4u30RuwlLhL_hY7r4xim2a4EMbA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1681 (0x691)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F61A5AF, serialNumber=E2EDF446EC252E12FF858EEBE318A6D9AE0431B0
        Validity
            Not Before: Mar  2 01:47:21 2026 GMT
            Not After : Mar  4 01:47:21 2026 GMT
        Subject: CN=69a4ec2a-8ffa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:1a:0f:06:e4:b9:b7:80:77:b7:fc:11:28:c4:
                    67:e6:e2:b5:79:73:e9:af:de:76:78:5a:cd:52:a6:
                    a3:24:81:88:4a:59:52:41:21:6e:15:0e:ed:c5:13:
                    44:ea:2c:57:4b:e2:e8:bd:28:38:ac:ff:f4:c6:a9:
                    53:dc:47:5f:05:bc:16:c3:82:f1:56:79:91:43:8b:
                    f4:e5:01:cc:de:62:1b:56:12:dc:98:a7:75:bf:61:
                    92:c4:0e:10:3b:89:44:4d:7d:11:5e:60:2c:a8:e7:
                    4c:22:f5:d4:14:ce:04:0e:5b:4a:6c:35:d2:25:6f:
                    48:97:5a:1f:bd:10:0d:3a:96:7a:12:dd:c9:14:52:
                    bd:2d:fb:b5:fd:0c:5e:b3:2d:6e:1f:2a:12:9e:49:
                    6f:01:22:ca:bf:08:31:81:1a:9f:fa:b2:2c:36:8f:
                    91:d4:95:50:cc:9c:8b:9c:ec:2d:5b:33:f3:76:10:
                    6c:00:62:0c:17:8f:9c:46:ed:83:32:40:89:01:cb:
                    c9:56:6b:dd:b7:86:70:7d:d0:a8:e0:ed:8e:e7:cb:
                    cf:71:c9:e6:16:eb:55:6b:c8:a0:8c:6a:ad:a3:7b:
                    02:25:72:3f:4a:c6:4f:66:05:07:f1:13:10:7e:36:
                    57:77:50:f7:92:b5:c9:32:5d:88:87:32:4a:db:70:
                    e4:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:F6:4A:54:7F:CA:6B:19:B9:71:B2:E5:3A:ED:B3:A2:D1:E6:BE:55
            X509v3 Authority Key Identifier:
                keyid:E2:ED:F4:46:EC:25:2E:12:FF:85:8E:EB:E3:18:A6:D9:AE:04:31:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F61A5/06F7F66C0FC911EC8545E973D8A014CE/4u30RuwlLhL_hY7r4xim2a4EMbA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4u30RuwlLhL_hY7r4xim2a4EMbA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F61A5/06F7F66C0FC911EC8545E973D8A014CE/4u30RuwlLhL_hY7r4xim2a4EMbA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:a5:a2:a2:a3:4b:77:85:bc:7e:15:cb:9a:f4:a0:7d:e2:a3:
         a6:00:85:63:c5:1a:2a:a6:55:94:93:4a:70:02:7a:16:df:ce:
         c8:eb:cb:81:b7:02:e3:c0:d2:5c:03:d0:0e:2c:b3:34:43:f4:
         99:17:ef:07:7c:39:1b:f9:bb:74:6e:ac:92:05:94:07:0c:2b:
         a0:e5:15:b7:72:97:04:58:1f:75:bd:9e:7e:0f:a4:08:46:71:
         ab:12:b5:fa:fd:88:84:64:e7:7d:d2:bc:4b:77:4c:21:a5:7c:
         8a:fb:35:9c:24:b0:a2:b4:ef:c8:1b:ff:cb:92:44:1b:3d:55:
         54:b1:21:43:fc:44:95:a8:62:77:40:cd:bb:88:5a:f9:c5:96:
         4e:7a:bb:49:47:47:7d:e1:c2:f1:d3:2d:53:4f:27:b2:2b:08:
         4e:2a:61:99:cd:7d:aa:62:a6:e3:93:e8:3d:98:e9:9c:ad:df:
         a3:02:c1:d7:27:80:00:66:db:e1:71:3b:88:75:fb:2a:4f:20:
         36:dd:3d:30:88:db:f3:b3:bd:37:95:b7:cb:e2:f5:7b:be:55:
         dc:24:2b:c9:a7:b3:9b:fd:91:15:28:61:60:55:dc:67:c6:c0:
         88:4b:89:d4:98:1f:23:f6:b2:cb:da:51:3e:83:87:d4:c4:51:
         27:ab:eb:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:04:04 2026 by rpki-client