Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36167D3/138A951EE93311EFA3F6F559762E951A/3GuaqXm1-bN2yjKZpYKnXjgWq0E.mft
File:                     3GuaqXm1-bN2yjKZpYKnXjgWq0E.mft (raw, json)
Hash identifier:          XOUjeJVnB8SIEsaztg2Fr4hTI+0nSnvw602vAYfCneQ=
Subject key identifier:   9F:C7:15:56:EE:BB:75:F8:9F:70:8D:EB:8B:CA:67:3D:C6:3D:E3:1E
Authority key identifier: DC:6B:9A:A9:79:B5:F9:B3:76:CA:32:99:A5:82:A7:5E:38:16:AB:41
Certificate issuer:       /CN=F36167D3AF/serialNumber=DC6B9AA979B5F9B376CA3299A582A75E3816AB41
Certificate serial:       01A4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/3GuaqXm1-bN2yjKZpYKnXjgWq0E.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36167D3/138A951EE93311EFA3F6F559762E951A/3GuaqXm1-bN2yjKZpYKnXjgWq0E.mft
Manifest number:          01A2
Signing time:             Sat 28 Mar 2026 05:46:24 +0000
Manifest this update:     Sat 28 Mar 2026 05:46:23 +0000
Manifest next update:     Mon 30 Mar 2026 05:46:23 +0000
Files and hashes:         1: 3GuaqXm1-bN2yjKZpYKnXjgWq0E.crl (hash: lcp8JAbY4Vhzwfk5P4UI/obrLM6ghnDfXO5NTLdHaz4=)
                          2: 319E7D9025E111F1AAB2D0A6DAE4EC9C.roa (hash: t0hHr5N29exi7ePnnuqEX6ghsA9Kp7S/3DQ8eMKksBQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36167D3/138A951EE93311EFA3F6F559762E951A/3GuaqXm1-bN2yjKZpYKnXjgWq0E.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36167D3/138A951EE93311EFA3F6F559762E951A/3GuaqXm1-bN2yjKZpYKnXjgWq0E.mft
                          rsync://rpki.afrinic.net/repository/afrinic/3GuaqXm1-bN2yjKZpYKnXjgWq0E.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 30 Mar 2026 00:07:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 420 (0x1a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36167D3AF, serialNumber=DC6B9AA979B5F9B376CA3299A582A75E3816AB41
        Validity
            Not Before: Mar 28 05:46:23 2026 GMT
            Not After : Mar 30 05:46:23 2026 GMT
        Subject: CN=69c76b30-c222
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:40:11:60:5a:6a:6d:84:9f:c9:85:6a:a2:e7:
                    01:0b:56:1e:1c:8a:cc:a7:40:49:54:e3:a9:39:f0:
                    c4:59:2d:4c:2f:4f:1c:b9:80:89:28:90:f4:91:c8:
                    e3:c1:33:ae:23:98:9e:9b:65:df:6d:b6:7a:43:aa:
                    78:04:fb:f7:d2:94:ac:f9:b8:c8:a6:37:e5:06:47:
                    73:a0:1d:13:da:49:4b:a5:ba:31:22:10:3c:4f:ff:
                    10:4e:62:c6:6e:a8:5d:15:60:a4:69:d6:88:98:ba:
                    16:fa:b9:3d:f3:92:f8:b8:b2:be:94:a2:61:6b:16:
                    ae:77:a9:bf:e8:99:f2:17:d8:96:a7:4b:9c:58:3d:
                    59:c9:89:fc:61:a4:14:9d:7f:d9:21:b7:55:52:6e:
                    89:d6:f3:28:fb:c4:f1:ca:c5:19:e2:f9:dc:3c:8d:
                    c9:bc:84:b3:07:09:3d:5e:3d:f3:d7:39:53:83:31:
                    e3:ff:d1:44:3a:52:c4:14:72:b6:ea:c6:39:27:89:
                    7e:07:f3:b3:3f:d4:6d:05:41:60:20:77:05:40:e5:
                    66:a6:f4:c8:b0:5d:2d:01:85:79:9c:22:27:a7:f8:
                    1b:f7:6e:18:36:e3:5e:78:68:9b:9a:de:79:0e:34:
                    2d:43:64:e5:a4:8d:a4:60:16:d7:93:4b:b6:68:3d:
                    a5:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:C7:15:56:EE:BB:75:F8:9F:70:8D:EB:8B:CA:67:3D:C6:3D:E3:1E
            X509v3 Authority Key Identifier:
                keyid:DC:6B:9A:A9:79:B5:F9:B3:76:CA:32:99:A5:82:A7:5E:38:16:AB:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36167D3/138A951EE93311EFA3F6F559762E951A/3GuaqXm1-bN2yjKZpYKnXjgWq0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3GuaqXm1-bN2yjKZpYKnXjgWq0E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36167D3/138A951EE93311EFA3F6F559762E951A/3GuaqXm1-bN2yjKZpYKnXjgWq0E.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:fb:ae:75:2c:5a:7d:a1:de:ca:f5:22:dd:01:29:ab:f0:d6:
         09:e1:de:25:13:2e:a2:99:c2:31:f3:ed:ec:53:02:df:2b:05:
         fb:b0:00:ac:51:ba:44:d4:6c:0b:2e:25:f1:ad:9d:4d:88:ec:
         f8:31:7f:4f:73:90:f3:ab:06:a7:18:7d:4c:24:19:47:03:65:
         49:0c:5c:35:01:2b:51:df:51:30:dd:49:4e:71:e9:61:76:90:
         ed:52:69:48:18:96:fb:78:33:f4:0f:37:8a:ec:d1:c5:77:88:
         9a:bf:61:56:b1:f9:99:77:23:b0:5a:d6:02:ea:15:0f:f8:4b:
         c0:15:eb:15:c7:f9:eb:db:4c:cd:b5:fe:3c:d1:e8:9c:a7:e5:
         69:48:f6:c8:22:45:aa:3e:25:2f:89:f0:14:9b:b9:3e:38:0b:
         8f:05:4c:81:e0:7d:67:03:70:30:0a:cb:c7:f1:02:06:6d:72:
         36:60:11:97:dc:9b:0b:5a:a8:8f:7e:f7:4d:61:4d:52:dd:06:
         d8:ed:03:8a:50:40:2d:31:f5:e5:72:90:6a:74:6c:80:a0:a8:
         92:c7:54:56:ee:79:99:9f:62:a4:90:55:b1:a4:96:c5:c2:bd:
         cd:d1:92:cf:0d:b1:0b:60:e3:3a:5e:54:ab:d3:05:0e:05:58:
         6c:54:93:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 13:44:05 2026 by rpki-client