Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FB1A3/3C789C6ED12611ECB70663DDF1222468/xfjkPM0fcvciuyN0u3q9C4iwVz8.mft
File:                     xfjkPM0fcvciuyN0u3q9C4iwVz8.mft (raw, json)
Hash identifier:          PXnAAi9SRweDxpM1jRvC7zhstp4eg6AkCY4xbXHXV9o=
Subject key identifier:   66:B4:58:9F:1E:62:99:65:90:CD:54:5D:60:A5:41:78:E4:35:CC:2C
Authority key identifier: C5:F8:E4:3C:CD:1F:72:F7:22:BB:23:74:BB:7A:BD:0B:88:B0:57:3F
Certificate issuer:       /CN=F36FB1A3AF/serialNumber=C5F8E43CCD1F72F722BB2374BB7ABD0B88B0573F
Certificate serial:       0596
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/xfjkPM0fcvciuyN0u3q9C4iwVz8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FB1A3/3C789C6ED12611ECB70663DDF1222468/xfjkPM0fcvciuyN0u3q9C4iwVz8.mft
Manifest number:          0596
Signing time:             Mon 02 Mar 2026 02:00:13 +0000
Manifest this update:     Mon 02 Mar 2026 02:00:13 +0000
Manifest next update:     Wed 04 Mar 2026 02:00:13 +0000
Files and hashes:         1: xfjkPM0fcvciuyN0u3q9C4iwVz8.crl (hash: yDi6NVYuZxpJg26IqKgoaUnDQq+YUAuCKyHJCpRZPZE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FB1A3/3C789C6ED12611ECB70663DDF1222468/xfjkPM0fcvciuyN0u3q9C4iwVz8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FB1A3/3C789C6ED12611ECB70663DDF1222468/xfjkPM0fcvciuyN0u3q9C4iwVz8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/xfjkPM0fcvciuyN0u3q9C4iwVz8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1430 (0x596)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FB1A3AF, serialNumber=C5F8E43CCD1F72F722BB2374BB7ABD0B88B0573F
        Validity
            Not Before: Mar  2 02:00:13 2026 GMT
            Not After : Mar  4 02:00:13 2026 GMT
        Subject: CN=69a4ef2d-0ea6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7b:e8:f1:71:0c:e0:b7:a0:6a:25:d2:6c:9b:
                    00:c7:46:b8:32:d8:a2:1e:c2:15:a6:8e:1b:7e:3f:
                    6e:b7:76:d9:fb:9e:74:c4:ab:f3:f2:75:45:b6:86:
                    70:03:af:38:95:13:b9:c5:f6:2e:49:0a:2f:78:cb:
                    55:96:93:dd:d0:2d:d9:5f:d8:6f:2d:cd:ea:57:d9:
                    ac:17:a1:63:5e:9f:6d:e0:67:d2:7a:0c:3f:f6:9b:
                    16:d3:91:6b:bd:9e:57:44:c8:fb:fa:6b:7b:49:ed:
                    03:6d:c5:fd:e3:2a:fb:8f:cb:26:b4:7f:2d:b1:1a:
                    93:96:57:cf:5f:b8:e1:58:75:e1:7a:fd:f4:ef:96:
                    43:34:cb:99:bb:5f:13:91:99:0b:5d:f7:04:25:81:
                    85:e7:de:ed:76:63:c6:6c:b3:f8:70:9e:01:98:6e:
                    7a:67:e9:47:12:61:ee:fc:58:bf:77:5c:90:cc:c8:
                    1b:c7:b0:f6:4c:9c:73:a2:fc:21:09:cf:40:cb:77:
                    38:31:e9:02:ea:be:ca:92:60:38:d7:35:34:f2:11:
                    69:35:37:64:50:c4:52:30:04:af:1f:8a:d4:03:7a:
                    4f:51:5e:4d:3e:22:aa:d0:e5:4b:90:d8:7c:8b:3e:
                    f3:c2:0c:80:7e:57:26:b9:de:e9:a9:9e:98:21:b6:
                    86:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:B4:58:9F:1E:62:99:65:90:CD:54:5D:60:A5:41:78:E4:35:CC:2C
            X509v3 Authority Key Identifier:
                keyid:C5:F8:E4:3C:CD:1F:72:F7:22:BB:23:74:BB:7A:BD:0B:88:B0:57:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FB1A3/3C789C6ED12611ECB70663DDF1222468/xfjkPM0fcvciuyN0u3q9C4iwVz8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xfjkPM0fcvciuyN0u3q9C4iwVz8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FB1A3/3C789C6ED12611ECB70663DDF1222468/xfjkPM0fcvciuyN0u3q9C4iwVz8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:b5:29:4c:d5:6f:56:f7:5c:9b:f3:03:04:e5:e9:e1:0f:03:
         81:17:50:f8:ed:66:77:18:0e:dd:55:46:b2:e7:c7:8e:88:cd:
         20:08:5c:70:68:25:bc:bd:d3:06:ca:ce:60:c8:5b:3e:fc:74:
         b1:70:53:e7:0d:11:09:8a:28:80:84:97:2e:aa:aa:74:b9:3e:
         db:79:23:cf:68:01:fe:2a:dc:a4:09:90:74:ca:09:56:2a:d1:
         59:f8:70:bf:eb:91:23:b8:87:43:d3:93:98:05:25:88:50:24:
         7f:22:5c:4f:b1:d4:32:16:69:38:ab:2c:11:56:1b:d3:e1:b0:
         f8:32:ed:cc:e9:e9:41:47:57:9f:4c:5d:1b:7f:ec:91:8a:7a:
         8c:ef:d3:7c:81:6a:c8:1a:b1:b4:f2:ee:e3:71:f9:49:b7:f0:
         b0:20:32:a0:4a:25:96:c7:4c:ae:dc:05:bc:19:c6:ba:90:3e:
         e9:da:c4:a1:ec:cc:08:94:17:5c:97:37:6e:a3:dd:b3:a8:b4:
         73:44:2c:d5:ce:0c:72:6d:ee:ef:c1:9f:57:5a:31:c5:55:74:
         a3:6b:81:79:d6:97:f2:15:9b:a5:17:1e:a2:c6:95:31:b8:01:
         c4:f4:43:83:73:ab:f9:fc:21:39:ac:67:87:cb:78:66:55:86:
         44:22:bb:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:19:16 2026 by rpki-client