Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614DFD/9187C5D4776711EE99DFD9724AD9E6FC/POdKxSWrybUFEx5W069Lqgyoa8c.mft
File:                     POdKxSWrybUFEx5W069Lqgyoa8c.mft (raw, json)
Hash identifier:          q0Xsuio1bidnD/pMjrkVyxi6+qoG2cQDKfgUK4cJtCo=
Subject key identifier:   6C:A1:88:86:2F:6E:D6:AF:AE:D2:CD:6B:C8:D6:CE:49:AD:9A:44:A6
Authority key identifier: 3C:E7:4A:C5:25:AB:C9:B5:05:13:1E:56:D3:AF:4B:AA:0C:A8:6B:C7
Certificate issuer:       /CN=F3614DFDAF/serialNumber=3CE74AC525ABC9B505131E56D3AF4BAA0CA86BC7
Certificate serial:       0393
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/POdKxSWrybUFEx5W069Lqgyoa8c.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3614DFD/9187C5D4776711EE99DFD9724AD9E6FC/POdKxSWrybUFEx5W069Lqgyoa8c.mft
Manifest number:          038F
Signing time:             Tue 31 Mar 2026 03:46:00 +0000
Manifest this update:     Tue 31 Mar 2026 03:45:59 +0000
Manifest next update:     Thu 02 Apr 2026 03:45:59 +0000
Files and hashes:         1: POdKxSWrybUFEx5W069Lqgyoa8c.crl (hash: /QskaA3/eiBp/3c3v9EM2MWQB6gHHFAThU6Ylb8cYhY=)
                          2: AF323FA6BEB611EE92751B56775412E6.roa (hash: GK2/9/UfmXeWntRnu6M2Z7FCwh1Nn+0g0buRneYltSM=)
                          3: 40F84818776811EEA27107754AD9E6FC.roa (hash: nFqZ/v55EZimpFy2xDwmiE1oDV8eSlURy0csO3fvt1E=)
                          4: BEC2B6AE7FD611EEA15ECB6C4AD9E6FC.roa (hash: fJFVTiESI7QrywlkzoasbC83KVzfgYWTl7sxxTe7Lrk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3614DFD/9187C5D4776711EE99DFD9724AD9E6FC/POdKxSWrybUFEx5W069Lqgyoa8c.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3614DFD/9187C5D4776711EE99DFD9724AD9E6FC/POdKxSWrybUFEx5W069Lqgyoa8c.mft
                          rsync://rpki.afrinic.net/repository/afrinic/POdKxSWrybUFEx5W069Lqgyoa8c.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 02 Apr 2026 00:07:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 915 (0x393)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3614DFDAF, serialNumber=3CE74AC525ABC9B505131E56D3AF4BAA0CA86BC7
        Validity
            Not Before: Mar 31 03:45:59 2026 GMT
            Not After : Apr  2 03:45:59 2026 GMT
        Subject: CN=69cb4378-817e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d9:59:9b:ce:9f:a5:57:d9:d6:2e:cf:82:70:
                    41:e5:9e:90:da:68:bd:f3:a7:68:3c:7f:39:b2:d4:
                    87:36:c6:df:55:23:ce:d3:0f:20:aa:5e:02:6e:ef:
                    16:11:b5:5d:eb:00:a7:02:1a:2d:96:a0:d0:fd:da:
                    4d:25:9a:32:7c:fe:48:ce:73:61:c9:01:6d:7b:65:
                    97:6f:6a:26:81:d2:2e:2e:6a:9c:2c:5f:f4:b6:e1:
                    84:3b:76:b0:b9:15:54:b9:1c:f2:a0:92:df:b5:68:
                    d4:eb:83:c9:e4:77:1e:59:7d:3a:64:66:48:fc:5f:
                    83:f4:16:ca:f6:43:6b:3e:9b:6a:90:90:fc:ad:97:
                    40:56:62:c4:ab:fc:6c:4c:44:3a:d7:ed:16:89:ef:
                    20:0d:74:55:3e:4c:b2:d2:9f:a1:b9:33:c2:e4:36:
                    67:27:e6:d5:8b:bc:de:90:d1:da:ca:0e:ab:43:f9:
                    6d:63:c3:d2:96:cb:d1:ae:5d:d7:f5:f4:3f:d6:b4:
                    4e:e1:a9:9b:99:50:75:60:15:d1:a5:8d:2a:16:0f:
                    c7:c7:f3:a6:88:0c:43:fd:f3:57:66:57:44:44:a4:
                    80:f7:5e:b0:d3:d3:5b:ed:ea:fe:53:73:5c:1a:11:
                    71:27:c7:d8:67:fb:09:53:fa:9c:ad:c0:e7:ab:ab:
                    0f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:A1:88:86:2F:6E:D6:AF:AE:D2:CD:6B:C8:D6:CE:49:AD:9A:44:A6
            X509v3 Authority Key Identifier:
                keyid:3C:E7:4A:C5:25:AB:C9:B5:05:13:1E:56:D3:AF:4B:AA:0C:A8:6B:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3614DFD/9187C5D4776711EE99DFD9724AD9E6FC/POdKxSWrybUFEx5W069Lqgyoa8c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/POdKxSWrybUFEx5W069Lqgyoa8c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614DFD/9187C5D4776711EE99DFD9724AD9E6FC/POdKxSWrybUFEx5W069Lqgyoa8c.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:9d:b9:34:a7:55:a6:5c:1b:dd:88:61:d3:f5:b6:27:56:3b:
         a5:c2:e1:01:56:e1:3a:b9:f7:ab:7e:03:30:5a:be:84:f0:20:
         8c:76:ac:42:04:cf:53:cc:ad:02:cc:26:16:d6:62:af:0c:fb:
         de:92:da:0c:c0:d0:29:d3:7b:24:c3:b9:16:4b:6f:df:c9:1c:
         81:d0:65:8b:94:30:9f:b1:bf:d4:54:ea:97:fd:ad:dd:df:e2:
         8e:1c:04:5f:23:7c:c8:ea:1f:7c:39:cb:35:79:9e:a5:97:cc:
         ef:6d:37:31:99:5e:a9:80:5d:6d:e5:1c:c4:ac:e4:78:c1:6a:
         ba:b0:96:34:61:e5:11:bc:7e:a4:a6:98:e3:0c:e7:64:c5:b4:
         3e:88:5c:ef:94:ee:10:85:b9:df:41:62:fd:55:b2:ab:e0:b5:
         ed:64:f3:38:ad:f1:f6:9b:96:42:36:24:46:18:f2:f4:1c:3d:
         d6:cf:f6:d7:d9:83:6f:a3:f3:d0:0c:1e:52:98:95:49:34:38:
         e3:77:46:91:4e:15:31:7f:76:b6:68:19:32:1a:e9:e6:e7:04:
         b8:1d:1e:57:a1:6c:91:3c:2b:70:fe:05:9b:fb:8d:10:3f:ed:
         31:d1:6d:c6:31:14:71:b7:54:b8:3a:ab:f3:ba:e4:44:23:0c:
         9b:ff:ab:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 31 18:59:51 2026 by rpki-client