Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FDB6D/237A7BF0816E11EBA47A295BF8AEA228/Qb6TZmqjyInGqe0lr_9rhlyB6Ao.mft
File:                     Qb6TZmqjyInGqe0lr_9rhlyB6Ao.mft (raw, json)
Hash identifier:          lQBg2Za7Mc7P5v3kCb50ZiH+detSJxVCnn611fBTsHQ=
Subject key identifier:   B3:88:A3:D3:54:E2:31:0B:A6:19:73:B6:BD:7C:1E:4A:DF:EC:42:01
Authority key identifier: 41:BE:93:66:6A:A3:C8:89:C6:A9:ED:25:AF:FF:6B:86:5C:81:E8:0A
Certificate issuer:       /CN=F36FDB6DAF/serialNumber=41BE93666AA3C889C6A9ED25AFFF6B865C81E80A
Certificate serial:       074A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Qb6TZmqjyInGqe0lr_9rhlyB6Ao.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FDB6D/237A7BF0816E11EBA47A295BF8AEA228/Qb6TZmqjyInGqe0lr_9rhlyB6Ao.mft
Manifest number:          0749
Signing time:             Mon 02 Mar 2026 01:34:18 +0000
Manifest this update:     Mon 02 Mar 2026 01:34:18 +0000
Manifest next update:     Wed 04 Mar 2026 01:34:18 +0000
Files and hashes:         1: Qb6TZmqjyInGqe0lr_9rhlyB6Ao.crl (hash: NC+OtXGjp/xjuhbmRgTYu9dyulU1XEY+iG4fbTp3RcI=)
                          2: 4FD4A210816F11EBA2DB5E5CF8AEA228.roa (hash: Q9H2lKyBkMfTg6cpSiTvID4Cv4tNB4YcVP+ZoFDWIJk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FDB6D/237A7BF0816E11EBA47A295BF8AEA228/Qb6TZmqjyInGqe0lr_9rhlyB6Ao.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FDB6D/237A7BF0816E11EBA47A295BF8AEA228/Qb6TZmqjyInGqe0lr_9rhlyB6Ao.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Qb6TZmqjyInGqe0lr_9rhlyB6Ao.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1866 (0x74a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FDB6DAF, serialNumber=41BE93666AA3C889C6A9ED25AFFF6B865C81E80A
        Validity
            Not Before: Mar  2 01:34:18 2026 GMT
            Not After : Mar  4 01:34:18 2026 GMT
        Subject: CN=69a4e91a-9a8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c3:43:93:82:85:48:c6:05:d2:e5:db:c7:c0:
                    3f:3a:57:f4:4d:ac:2d:d8:dc:28:4e:44:c4:f5:8c:
                    b2:20:11:53:24:d2:fc:89:27:33:2e:70:75:34:1c:
                    fa:e6:14:68:8f:c1:52:3d:c5:eb:4b:f8:75:35:60:
                    b6:79:59:54:67:23:1e:8b:3a:d3:c7:4c:6f:e3:ef:
                    79:bc:0b:cf:e8:1d:3a:94:35:66:ee:9e:40:d1:62:
                    a1:47:1b:18:13:f5:10:75:05:dc:1d:89:8a:77:19:
                    1c:c0:59:77:7f:2f:b0:1d:1c:9c:1f:05:6b:e9:0d:
                    1d:2c:9d:ab:42:da:cc:c9:96:05:7a:b3:4d:d5:e7:
                    14:da:38:6d:d7:ed:cb:a3:32:70:df:85:91:7c:e5:
                    b8:e6:f3:72:54:d2:4f:aa:e3:b7:a2:4f:fc:a9:7c:
                    4d:0a:b2:d1:60:59:26:c4:f0:76:d1:6c:dc:90:9f:
                    cc:3f:56:c7:28:ab:a2:39:53:0b:c2:88:0e:94:0f:
                    53:7a:f9:11:60:4f:40:be:e2:29:32:b9:6a:a6:f5:
                    d3:f6:1c:b5:02:e9:1a:41:59:b0:65:db:f2:8c:fe:
                    f0:ad:db:13:eb:02:e2:5d:06:50:43:7c:a8:37:31:
                    ee:83:d1:65:f9:41:8d:98:5f:4c:c6:a7:d0:66:58:
                    53:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:88:A3:D3:54:E2:31:0B:A6:19:73:B6:BD:7C:1E:4A:DF:EC:42:01
            X509v3 Authority Key Identifier:
                keyid:41:BE:93:66:6A:A3:C8:89:C6:A9:ED:25:AF:FF:6B:86:5C:81:E8:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FDB6D/237A7BF0816E11EBA47A295BF8AEA228/Qb6TZmqjyInGqe0lr_9rhlyB6Ao.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Qb6TZmqjyInGqe0lr_9rhlyB6Ao.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FDB6D/237A7BF0816E11EBA47A295BF8AEA228/Qb6TZmqjyInGqe0lr_9rhlyB6Ao.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:58:ca:0d:89:22:36:f6:75:e2:ab:fd:26:64:32:81:16:27:
         d5:91:52:10:d8:bc:ef:5c:1f:53:af:a6:3f:9e:43:b0:86:95:
         1c:24:a9:2b:a7:18:4e:c4:01:55:78:b4:16:7f:42:a4:72:f5:
         2d:37:05:ff:80:90:70:8e:ce:db:4c:79:d9:07:26:46:83:67:
         65:e6:6d:6a:d5:eb:26:cc:a9:15:1d:87:5c:0b:8c:b1:1c:00:
         88:d6:43:e6:fa:72:b2:3e:72:40:74:b0:5e:0d:c8:f1:8d:54:
         05:de:bf:7b:c1:ea:a1:28:1d:d4:e8:cb:81:c2:b3:03:b4:f6:
         49:63:e6:c8:f3:2d:ac:b0:77:5b:79:6f:16:4a:70:ca:31:f3:
         c1:d7:39:0c:76:29:31:3c:3e:df:e4:56:b7:0b:79:c8:62:e2:
         f0:b6:f6:bf:02:01:b5:35:28:96:60:ab:7f:4b:86:e5:b7:8d:
         5e:40:c5:dc:80:cd:f7:be:c1:c7:e3:74:b3:c9:d1:67:91:82:
         97:0d:4e:b0:1e:c6:26:a9:d7:d7:a0:a4:33:17:61:2f:02:ed:
         35:3f:d9:e2:8d:a6:c6:35:06:18:bb:68:08:0b:45:08:73:86:
         e4:04:44:47:c9:97:5e:42:c7:47:fd:b5:3e:a0:6b:95:3a:b1:
         ca:13:b1:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:44:46 2026 by rpki-client