Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3628DDE/BF78233A369E11E9A7D5E220F8AEA228/QrWM7qosEujy3JjWRMIM-BzhzgU.mft
File:                     QrWM7qosEujy3JjWRMIM-BzhzgU.mft (raw, json)
Hash identifier:          2sIiEeAOVQ7qGmILr0oQkK19TFBjf9490voSiXHg5VA=
Subject key identifier:   E9:32:39:C0:7D:BC:3C:51:8A:88:82:3D:99:9F:0A:A6:BB:BD:87:E2
Authority key identifier: 42:B5:8C:EE:AA:2C:12:E8:F2:DC:98:D6:44:C2:0C:F8:1C:E1:CE:05
Certificate issuer:       /CN=F3628DDEAF/serialNumber=42B58CEEAA2C12E8F2DC98D644C20CF81CE1CE05
Certificate serial:       0A69
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QrWM7qosEujy3JjWRMIM-BzhzgU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3628DDE/BF78233A369E11E9A7D5E220F8AEA228/QrWM7qosEujy3JjWRMIM-BzhzgU.mft
Manifest number:          0A65
Signing time:             Sun 29 Mar 2026 01:17:03 +0000
Manifest this update:     Sun 29 Mar 2026 01:17:02 +0000
Manifest next update:     Tue 31 Mar 2026 01:17:02 +0000
Files and hashes:         1: QrWM7qosEujy3JjWRMIM-BzhzgU.crl (hash: j2VWmBO4nu5us4qAGpGFCUU5vCVj0ZhETErGOmawiJc=)
                          2: 1119CD76DFD311EB88361B37F8AEA228.roa (hash: 4I2Xxy2pBMpErR6JgtR0kZIJe7vFEf1qAmaSQyw+k7I=)
                          3: F539AC2ADFD211EBB0D1FD36F8AEA228.roa (hash: eXFh4emIQs516bgW52azXjxVc2VVoIN8dsu/3Z+Sdok=)
                          4: EE5F2E50369E11E98EDB1621F8AEA228.roa (hash: weMqKqZKyHm0tyqjfHAxnqGFkomIgwidKnm2Dpx5xnA=)
                          5: 14DA972C369F11E9A85A3C21F8AEA228.roa (hash: rRgU+4tFqjCwv3sj5zK6L+vCSIEp2/0zfXQO2ATh2MM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3628DDE/BF78233A369E11E9A7D5E220F8AEA228/QrWM7qosEujy3JjWRMIM-BzhzgU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3628DDE/BF78233A369E11E9A7D5E220F8AEA228/QrWM7qosEujy3JjWRMIM-BzhzgU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/QrWM7qosEujy3JjWRMIM-BzhzgU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 31 Mar 2026 00:06:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2665 (0xa69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3628DDEAF, serialNumber=42B58CEEAA2C12E8F2DC98D644C20CF81CE1CE05
        Validity
            Not Before: Mar 29 01:17:02 2026 GMT
            Not After : Mar 31 01:17:02 2026 GMT
        Subject: CN=69c87d8f-8c25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:75:53:27:ae:8f:fd:41:b5:e1:61:17:99:c9:
                    6b:bd:23:cb:71:8b:c8:42:a8:7a:50:77:9d:fe:c7:
                    6c:04:20:e7:37:24:ec:81:e7:a7:15:9f:59:a4:d3:
                    08:ca:9d:a4:f7:95:18:ea:62:09:d3:b0:d8:b0:db:
                    b6:f9:68:7f:ab:7e:cf:30:06:98:91:08:44:6f:be:
                    7c:2c:19:72:6d:d5:1d:36:ff:5a:5b:ca:3c:db:0c:
                    7d:54:f9:91:a7:8a:73:88:0f:99:aa:01:b7:9f:55:
                    e2:95:23:94:34:09:b6:50:79:83:06:9f:0b:e3:96:
                    67:6f:95:a0:51:05:2d:f1:69:33:02:64:25:b9:e4:
                    8f:1e:6b:16:90:db:28:83:20:54:38:2d:6f:2d:f3:
                    f0:08:b8:81:56:58:56:f4:12:36:9c:46:af:ab:ad:
                    53:38:e2:8b:a6:c6:b2:85:b8:f1:d7:88:1b:31:07:
                    7f:28:4b:99:b3:33:1d:dc:32:38:4f:7a:11:4a:36:
                    b7:6f:c7:c8:45:1b:7c:3a:10:f8:91:f8:17:e4:e3:
                    16:21:a7:36:9a:0c:d4:0c:8d:33:75:8e:92:2a:2c:
                    78:ba:d9:ba:ba:f0:10:3e:e8:d8:9f:57:f1:45:5f:
                    30:79:bd:6a:a9:1a:c4:06:71:20:0f:c4:ee:44:98:
                    35:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:32:39:C0:7D:BC:3C:51:8A:88:82:3D:99:9F:0A:A6:BB:BD:87:E2
            X509v3 Authority Key Identifier:
                keyid:42:B5:8C:EE:AA:2C:12:E8:F2:DC:98:D6:44:C2:0C:F8:1C:E1:CE:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3628DDE/BF78233A369E11E9A7D5E220F8AEA228/QrWM7qosEujy3JjWRMIM-BzhzgU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QrWM7qosEujy3JjWRMIM-BzhzgU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3628DDE/BF78233A369E11E9A7D5E220F8AEA228/QrWM7qosEujy3JjWRMIM-BzhzgU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:bd:2b:53:87:22:f1:22:a1:a0:98:60:99:80:79:3f:e0:26:
         0b:da:6e:d4:b9:a4:57:8f:85:07:4a:2e:fa:8c:09:23:f1:fd:
         69:ce:a5:df:8b:1f:fb:c0:c0:2e:55:49:11:49:69:c6:17:8a:
         95:71:87:70:96:d9:d1:75:44:5e:cc:54:f0:ce:4c:cc:7b:36:
         70:14:77:77:ef:23:92:23:df:66:c6:db:74:c5:00:70:1b:4b:
         ac:86:bb:d9:1c:68:b4:2b:b6:c2:e0:3e:44:cd:19:b0:c6:5e:
         1b:5a:fc:f8:2e:69:ea:8f:6a:55:51:8c:55:f7:c6:52:be:de:
         87:14:48:1c:32:b8:83:28:c5:d9:de:1e:81:87:fe:10:5e:57:
         b9:f0:36:a7:71:69:2d:ff:14:d8:ae:15:50:21:41:11:db:00:
         62:37:01:61:b4:56:b4:74:cc:fc:b8:c6:2c:39:22:b0:f2:c6:
         a9:b9:6c:d3:d9:10:99:e0:19:ff:5b:bf:93:5e:b8:cf:8e:30:
         9a:16:2d:e1:a8:a9:c8:e9:62:98:79:0e:4c:c0:6b:98:0c:e5:
         20:42:9a:ae:f8:9f:0e:12:75:d2:00:5b:37:ce:36:da:80:ab:
         83:fd:03:49:b0:16:60:31:ef:34:54:cf:95:99:e7:59:7c:5a:
         2a:3c:c2:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 22:46:16 2026 by rpki-client