Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FF17/A44CBC7E332211EB93A21571F8AEA228/nNQTlqvPm7nv9uJoVTJPg8Wdxpo.mft
File:                     nNQTlqvPm7nv9uJoVTJPg8Wdxpo.mft (raw, json)
Hash identifier:          G+oYiGeIBzUmJ2xRVNtMGLPmF1c9OqXoqMiXlndwbgQ=
Subject key identifier:   A8:F1:92:E3:57:B6:86:BB:B5:A7:F2:10:E6:01:56:67:B5:E3:7D:2C
Authority key identifier: 9C:D4:13:96:AB:CF:9B:B9:EF:F6:E2:68:55:32:4F:83:C5:9D:C6:9A
Certificate issuer:       /CN=F362FF17AF/serialNumber=9CD41396ABCF9BB9EFF6E26855324F83C59DC69A
Certificate serial:       07D1
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/nNQTlqvPm7nv9uJoVTJPg8Wdxpo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362FF17/A44CBC7E332211EB93A21571F8AEA228/nNQTlqvPm7nv9uJoVTJPg8Wdxpo.mft
Manifest number:          07CA
Signing time:             Tue 24 Mar 2026 02:11:30 +0000
Manifest this update:     Tue 24 Mar 2026 02:11:29 +0000
Manifest next update:     Thu 26 Mar 2026 02:11:29 +0000
Files and hashes:         1: nNQTlqvPm7nv9uJoVTJPg8Wdxpo.crl (hash: 2urGe+65f7562Qb2CcFQ1rmglbTx7qgBOt8cz+C9rwM=)
                          2: 734F013479C511EFAE81627D762E951A.roa (hash: xdurMFAxJPU0CP+M6yamIm2npN94Z/AsDJKHCn0C3Ko=)
                          3: 2B48BC985C0C11EB9996AA30F8AEA228.roa (hash: q6nVowz9VuDpjWX/IbvfjqSfChWzoCDvGswNPS2gk/0=)
                          4: FE6D92CA5C0B11EB95157330F8AEA228.roa (hash: BYjhKLTeS3/YMIgCsGSrv774yAnK9WPRQzbv65YQDbs=)
                          5: A573C59E7F2111EFABEC8243762E951A.roa (hash: z2hxV4eIGWcs9mH3SGVDwRrbCV/vQwHP3UQvoUEczXo=)
                          6: 336BF2CA332411EBB561BF72F8AEA228.roa (hash: z0Vqh2yhGazkcY6WrmD+gGwdIRbocCnl8S5PFmlQhf8=)
                          7: 66D788525C0C11EB89D7F330F8AEA228.roa (hash: T1mAIRrcLYmyaqd64q3hHsdJGYOwe7vCQdctkyt3sqY=)
                          8: 4D1819725C0C11EBB458D830F8AEA228.roa (hash: Y5bEDudGZy2SxFSFnv47v/c/OeLSoqXcxTY9JA/Rm5g=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362FF17/A44CBC7E332211EB93A21571F8AEA228/nNQTlqvPm7nv9uJoVTJPg8Wdxpo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362FF17/A44CBC7E332211EB93A21571F8AEA228/nNQTlqvPm7nv9uJoVTJPg8Wdxpo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/nNQTlqvPm7nv9uJoVTJPg8Wdxpo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 26 Mar 2026 02:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2001 (0x7d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362FF17AF, serialNumber=9CD41396ABCF9BB9EFF6E26855324F83C59DC69A
        Validity
            Not Before: Mar 24 02:11:29 2026 GMT
            Not After : Mar 26 02:11:29 2026 GMT
        Subject: CN=69c1f2d2-7406
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:4a:0b:b4:c0:1b:36:79:a5:ca:e8:b3:5e:a8:
                    b2:79:35:8f:0e:aa:f4:d3:0a:ee:c5:d7:a3:ca:4a:
                    c0:c4:28:1a:19:58:73:e3:08:0d:82:4a:92:21:4d:
                    37:75:6d:f6:1c:c2:63:a7:bd:de:07:0e:1e:4c:8b:
                    e7:36:61:89:4b:d5:3d:51:24:b8:5f:e3:48:07:30:
                    e1:54:b7:1d:29:9d:95:23:13:c4:68:ce:36:a5:9e:
                    3d:7d:70:6d:75:a0:27:9a:83:77:91:28:07:43:e7:
                    1a:ca:6f:b7:81:9d:cc:a1:48:98:64:f8:55:83:83:
                    67:53:05:ff:9e:c4:10:4d:d6:1e:3e:8c:50:1a:b7:
                    1d:f1:e1:4b:0c:07:3d:ae:a1:0c:10:fa:6b:80:43:
                    a1:fa:5a:51:52:ac:4a:34:fa:b2:d2:f3:62:e0:8f:
                    6d:bd:79:e2:63:21:4f:3a:6b:34:5a:f3:10:27:49:
                    d9:68:14:da:76:50:6c:be:a6:da:d6:16:32:7b:9a:
                    96:12:d6:3a:a1:70:58:c2:c2:a0:0c:d7:ba:3b:91:
                    19:31:fb:55:77:6e:51:4a:39:a3:4a:d7:07:90:02:
                    49:62:41:89:a9:ef:a1:38:a2:d0:b5:bd:72:a5:5c:
                    85:8b:b5:7c:35:ef:64:0a:cc:90:47:2e:45:49:52:
                    4e:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:F1:92:E3:57:B6:86:BB:B5:A7:F2:10:E6:01:56:67:B5:E3:7D:2C
            X509v3 Authority Key Identifier:
                keyid:9C:D4:13:96:AB:CF:9B:B9:EF:F6:E2:68:55:32:4F:83:C5:9D:C6:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362FF17/A44CBC7E332211EB93A21571F8AEA228/nNQTlqvPm7nv9uJoVTJPg8Wdxpo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/nNQTlqvPm7nv9uJoVTJPg8Wdxpo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FF17/A44CBC7E332211EB93A21571F8AEA228/nNQTlqvPm7nv9uJoVTJPg8Wdxpo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:35:36:d3:0b:61:07:28:72:a1:38:62:17:ca:3c:7e:81:6e:
         cc:61:df:f3:32:86:9d:9e:44:0c:e5:3b:8e:29:c2:94:16:c3:
         d3:af:00:15:a1:19:3c:98:49:51:6e:1a:aa:a5:7e:ad:cd:7f:
         c8:40:4c:78:3b:5b:a6:c3:c2:40:f7:35:e0:fa:1f:06:27:17:
         45:32:81:f5:46:f2:5d:f1:fa:f4:52:07:fc:2c:c0:88:57:0b:
         7d:be:83:b5:74:12:78:81:84:60:c7:88:d3:f5:43:aa:5a:8c:
         ae:22:c2:26:ae:d1:c3:32:bc:34:25:e8:e0:7b:9c:ef:d0:ff:
         a9:14:37:56:9d:38:3f:dc:92:84:c6:9e:1b:2e:3a:f4:1f:03:
         2e:9e:e3:08:d4:eb:ca:05:fe:5b:ad:b4:9b:19:64:9c:54:3b:
         dd:1d:4b:7b:7d:78:1c:83:5c:cf:4f:0c:e3:19:a4:c0:58:f0:
         39:51:11:7f:97:de:51:01:44:fa:79:80:58:34:7f:a1:9a:3e:
         ce:0d:12:ef:4b:b2:d6:96:75:d3:4b:f2:da:68:65:f4:2c:88:
         ee:6f:69:f5:e3:c7:11:35:96:ac:0d:2f:75:40:67:6e:90:43:
         7e:50:5e:9d:64:9a:f0:24:bd:01:80:8d:e2:25:b5:2b:63:96:
         90:9f:57:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 21:11:13 2026 by rpki-client