Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FC4AA/43A969D46DFC11F08A39DCC1DAE4EC9C/dUkJrgeKY-ifABHj0kq7f951hnc.mft
File:                     dUkJrgeKY-ifABHj0kq7f951hnc.mft (raw, json)
Hash identifier:          uKNhP9A01r8yJjXX2dfzIAaZUSiLBouKh5gVTKXL2Ho=
Subject key identifier:   AF:8B:E0:74:B4:06:ED:42:CF:BA:DC:EF:F6:A8:CB:84:04:22:A4:CA
Authority key identifier: 75:49:09:AE:07:8A:63:E8:9F:00:11:E3:D2:4A:BB:7F:DE:75:86:77
Certificate issuer:       /CN=F36FC4AAAF/serialNumber=754909AE078A63E89F0011E3D24ABB7FDE758677
Certificate serial:       DB
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/dUkJrgeKY-ifABHj0kq7f951hnc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FC4AA/43A969D46DFC11F08A39DCC1DAE4EC9C/dUkJrgeKY-ifABHj0kq7f951hnc.mft
Manifest number:          DA
Signing time:             Sun 01 Mar 2026 03:26:43 +0000
Manifest this update:     Sun 01 Mar 2026 03:26:43 +0000
Manifest next update:     Tue 03 Mar 2026 03:26:43 +0000
Files and hashes:         1: dUkJrgeKY-ifABHj0kq7f951hnc.crl (hash: 0pIorxPKrtJG8aOMB1AlG2e2JDbPzavmJ96L/1BhnmQ=)
                          2: 433EBDCA6DFF11F0AA2AADD3DAE4EC9C.roa (hash: A3nkp4rPy53u0Z5Ms+sfzKlD65yMF9PSrDUFPQ1Fzco=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FC4AA/43A969D46DFC11F08A39DCC1DAE4EC9C/dUkJrgeKY-ifABHj0kq7f951hnc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FC4AA/43A969D46DFC11F08A39DCC1DAE4EC9C/dUkJrgeKY-ifABHj0kq7f951hnc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/dUkJrgeKY-ifABHj0kq7f951hnc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 03 Mar 2026 00:07:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 219 (0xdb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FC4AAAF, serialNumber=754909AE078A63E89F0011E3D24ABB7FDE758677
        Validity
            Not Before: Mar  1 03:26:43 2026 GMT
            Not After : Mar  3 03:26:43 2026 GMT
        Subject: CN=69a3b1f3-c125
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:52:08:bd:b4:3b:00:6f:be:a2:6d:0b:ee:7f:
                    10:70:4c:98:90:ca:01:c6:bc:81:c3:c3:45:aa:a0:
                    77:20:e7:ce:2c:e4:35:25:8c:2d:f3:87:0b:88:ab:
                    46:50:2b:7c:a5:5b:e5:7d:70:23:bd:8a:15:71:e1:
                    5e:32:47:6c:be:78:27:c8:e9:af:f8:80:b3:1c:24:
                    1e:f0:ee:ed:90:d4:1d:65:8c:04:11:eb:f0:d1:88:
                    e2:ec:0c:53:03:f7:73:19:fc:d6:14:33:d9:a9:5b:
                    58:69:60:a1:f4:84:1b:ac:f6:b1:84:97:17:11:51:
                    ea:bc:10:b9:34:0d:61:24:8a:88:05:35:89:a0:bd:
                    25:50:9e:a8:ad:83:f6:f2:b7:22:c1:74:ca:c2:8c:
                    17:cf:ca:af:22:88:33:20:46:22:1a:d9:23:2c:c1:
                    c3:17:4f:47:84:dc:c6:51:6c:7e:c6:54:33:c6:64:
                    26:0d:1b:82:31:4c:c0:81:2e:9c:35:24:bc:df:be:
                    27:95:ce:18:dd:b6:c5:93:cb:13:26:b1:fb:c7:d2:
                    90:84:e0:fb:60:06:8a:6f:13:ff:97:b5:dd:cb:d0:
                    4b:95:9b:2d:ae:3c:77:a7:4e:e4:50:5a:29:71:ce:
                    ac:88:21:51:e4:d6:e5:55:da:fa:f8:16:f6:09:a8:
                    76:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:8B:E0:74:B4:06:ED:42:CF:BA:DC:EF:F6:A8:CB:84:04:22:A4:CA
            X509v3 Authority Key Identifier:
                keyid:75:49:09:AE:07:8A:63:E8:9F:00:11:E3:D2:4A:BB:7F:DE:75:86:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FC4AA/43A969D46DFC11F08A39DCC1DAE4EC9C/dUkJrgeKY-ifABHj0kq7f951hnc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/dUkJrgeKY-ifABHj0kq7f951hnc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FC4AA/43A969D46DFC11F08A39DCC1DAE4EC9C/dUkJrgeKY-ifABHj0kq7f951hnc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:49:aa:2c:47:73:77:4b:87:71:6a:f1:90:40:45:be:35:f4:
         1d:9a:3b:eb:71:3b:74:bb:76:16:32:21:95:d3:36:25:9b:23:
         bf:a5:94:40:64:f2:40:b6:84:b0:35:73:f8:b3:51:8e:4f:a2:
         a2:d3:6b:7f:42:84:fe:4c:02:14:5e:a5:fc:e3:6c:fe:d2:72:
         6c:71:cc:eb:eb:ca:e8:37:24:fb:55:a3:64:19:f5:24:54:04:
         03:5d:66:e5:d9:a8:9a:72:ca:bd:16:78:74:c9:52:c2:0d:3c:
         42:87:91:b2:13:b8:aa:87:17:d3:88:4f:4e:32:1b:23:ca:67:
         3d:0c:64:74:7a:b1:03:3d:8f:19:80:a5:1b:e4:91:62:05:d7:
         10:8e:8b:2c:21:5d:33:17:78:96:70:4d:29:62:97:e5:2a:4a:
         f9:69:07:b9:29:85:49:bb:55:d7:d5:78:0e:b3:29:80:2c:09:
         5c:0f:08:c7:88:dd:c7:74:a3:ed:9c:52:32:a4:93:a2:72:cc:
         9f:e5:7d:c4:8c:65:e0:66:d4:6b:d8:cb:2a:e7:b5:ae:2a:82:
         4f:4c:2c:57:a1:b9:62:93:f7:fe:25:65:4f:c1:a1:f1:2d:4c:
         e0:ff:bd:90:76:f7:10:0e:46:b2:5c:64:25:bf:ca:3d:28:d7:
         13:ad:95:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:51:51 2026 by rpki-client