Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3639A71/42C01EDAAD5211EE97470BAF775412E6/x_9uywvS7BI1alQX4xxzC5BQlBE.mft
File:                     x_9uywvS7BI1alQX4xxzC5BQlBE.mft (raw, json)
Hash identifier:          P8Eu79963UGeeEy+QOuQyRP6I8LnN5tT0J7B59yHK+E=
Subject key identifier:   70:9A:FA:F7:B6:ED:30:44:8B:4D:EA:E3:C6:6F:F7:83:F0:CE:D4:63
Authority key identifier: C7:FF:6E:CB:0B:D2:EC:12:35:6A:54:17:E3:1C:73:0B:90:50:94:11
Certificate issuer:       /CN=F3639A71AF/serialNumber=C7FF6ECB0BD2EC12356A5417E31C730B90509411
Certificate serial:       0346
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/x_9uywvS7BI1alQX4xxzC5BQlBE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3639A71/42C01EDAAD5211EE97470BAF775412E6/x_9uywvS7BI1alQX4xxzC5BQlBE.mft
Manifest number:          0344
Signing time:             Wed 01 Apr 2026 03:56:56 +0000
Manifest this update:     Wed 01 Apr 2026 03:56:55 +0000
Manifest next update:     Fri 03 Apr 2026 03:56:55 +0000
Files and hashes:         1: x_9uywvS7BI1alQX4xxzC5BQlBE.crl (hash: 5N46ypxoFRf3c45GV7kRaLwp+tg/1M5jN5xddT9gxOQ=)
                          2: 209064A80ECA11EFA0FB8D6C017001B1.roa (hash: SYHt2ENsggByHF7FNfIiJDtYCTGlxeYoFHTIRbjH6Hc=)
                          3: 3906A38AAD5411EEB67B65B2775412E6.roa (hash: ReFNAC4d+VQBlR/AEunK+azob89VljT5w2yD48BTB3A=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3639A71/42C01EDAAD5211EE97470BAF775412E6/x_9uywvS7BI1alQX4xxzC5BQlBE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3639A71/42C01EDAAD5211EE97470BAF775412E6/x_9uywvS7BI1alQX4xxzC5BQlBE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/x_9uywvS7BI1alQX4xxzC5BQlBE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 03 Apr 2026 03:56:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 838 (0x346)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3639A71AF, serialNumber=C7FF6ECB0BD2EC12356A5417E31C730B90509411
        Validity
            Not Before: Apr  1 03:56:55 2026 GMT
            Not After : Apr  3 03:56:55 2026 GMT
        Subject: CN=69cc9788-7f89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e6:e7:2c:83:43:f0:37:41:c4:ee:7b:23:81:
                    43:7c:0f:f0:3d:c1:a4:e2:48:e7:34:13:74:d8:79:
                    14:6b:3f:f1:1e:36:ff:5d:b3:2e:0c:8f:e1:8e:32:
                    e8:7b:62:bf:17:f7:6d:78:21:f0:ce:f8:09:9a:0d:
                    d0:d9:61:e1:d6:3e:12:fd:0a:a9:cb:0c:4d:a2:3d:
                    68:de:ce:a9:b4:58:1f:f6:69:a1:79:4b:45:7e:3a:
                    0a:16:fc:16:01:c1:05:06:8f:50:4f:bd:51:2f:61:
                    85:9b:3d:5b:21:d1:35:d4:79:ef:0d:4a:62:dc:29:
                    20:70:b8:3e:5c:77:d3:f7:77:c3:ec:26:89:8d:22:
                    ff:80:88:3a:3e:2e:a0:e1:0e:ee:b7:54:d9:0d:45:
                    76:80:d6:21:27:b3:7b:c3:9f:31:36:51:d8:ca:76:
                    49:cd:3b:d9:2d:21:ac:a5:64:91:bc:c1:ba:c2:e0:
                    f4:fb:3a:7e:cf:3c:d7:e7:41:b3:43:c4:0d:59:ba:
                    b9:20:ef:7f:aa:4f:5d:56:40:d2:2e:4e:58:e7:9f:
                    48:ac:d7:0e:46:07:48:46:b0:1a:f0:e3:d6:f0:23:
                    09:cb:e0:7b:19:d7:ed:2e:64:52:f0:52:1a:f6:68:
                    99:f3:0d:d2:2b:41:5c:2a:8a:ea:06:d3:50:3b:09:
                    e7:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:9A:FA:F7:B6:ED:30:44:8B:4D:EA:E3:C6:6F:F7:83:F0:CE:D4:63
            X509v3 Authority Key Identifier:
                keyid:C7:FF:6E:CB:0B:D2:EC:12:35:6A:54:17:E3:1C:73:0B:90:50:94:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3639A71/42C01EDAAD5211EE97470BAF775412E6/x_9uywvS7BI1alQX4xxzC5BQlBE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/x_9uywvS7BI1alQX4xxzC5BQlBE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3639A71/42C01EDAAD5211EE97470BAF775412E6/x_9uywvS7BI1alQX4xxzC5BQlBE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:cd:b5:70:e3:f9:82:74:f5:30:f4:25:34:96:50:f5:4c:98:
         5b:a6:91:95:3d:aa:b1:60:51:a3:63:5c:50:e5:43:2d:ca:c7:
         d0:d6:8e:a0:f8:7b:96:76:d0:fb:7e:22:c8:b2:a0:83:d3:1e:
         30:2c:e1:1d:ae:8f:5a:81:f2:f2:77:15:58:42:91:9d:bd:d5:
         cd:a1:ba:86:f4:9c:30:18:80:76:6d:87:f5:4a:71:e2:37:e3:
         7c:75:49:40:b6:6e:d6:61:16:22:9e:ee:0e:c8:ca:55:a0:3e:
         9d:bd:07:1f:4f:eb:0a:31:21:49:7a:32:1b:cd:75:8e:e3:a2:
         24:00:bc:80:79:8a:01:04:90:24:14:98:cd:9f:47:08:ca:88:
         99:a6:73:1b:c3:33:20:7c:b5:27:a7:bb:4c:13:0b:e1:c4:23:
         1f:cb:61:a9:3c:27:2c:64:4f:30:de:a2:ee:8d:2b:35:91:42:
         c5:14:1e:49:1a:71:94:16:ad:84:22:86:c3:79:32:4d:7e:d9:
         34:77:10:e0:2c:c7:89:bd:5c:39:79:84:7b:dd:e7:16:93:ac:
         e1:77:07:d9:71:d4:0a:4b:a3:53:62:11:3f:d9:c6:8c:ad:2f:
         0c:5b:02:64:07:23:51:f7:42:c2:50:f2:97:d1:a2:28:fa:7b:
         32:ed:73:d0
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICA0YwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MzlBNzFBRjExMC8GA1UEBRMoQzdGRjZFQ0IwQkQyRUMxMjM1NkE1NDE3RTMxQzcz
MEI5MDUwOTQxMTAeFw0yNjA0MDEwMzU2NTVaFw0yNjA0MDMwMzU2NTVaMBgxFjAU
BgNVBAMTDTY5Y2M5Nzg4LTdmODkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC65ucsg0PwN0HE7nsjgUN8D/A9waTiSOc0E3TYeRRrP/EeNv9dsy4Mj+GO
Muh7Yr8X9214IfDO+AmaDdDZYeHWPhL9CqnLDE2iPWjezqm0WB/2aaF5S0V+OgoW
/BYBwQUGj1BPvVEvYYWbPVsh0TXUee8NSmLcKSBwuD5cd9P3d8PsJomNIv+AiDo+
LqDhDu63VNkNRXaA1iEns3vDnzE2UdjKdknNO9ktIaylZJG8wbrC4PT7On7PPNfn
QbNDxA1Zurkg73+qT11WQNIuTljnn0is1w5GB0hGsBrw49bwIwnL4HsZ1+0uZFLw
Uhr2aJnzDdIrQVwqiuoG01A7CefnAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUcJr6
97btMESLTerjxm/3g/DO1GMwHwYDVR0jBBgwFoAUx/9uywvS7BI1alQX4xxzC5BQ
lBEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjM5QTcxLzQyQzAxRURBQUQ1MjExRUU5NzQ3MEJBRjc3NTQxMkU2L3hfOXV5
d3ZTN0JJMWFsUVg0eHh6QzVCUWxCRS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3hfOXV5d3ZTN0JJMWFsUVg0eHh6QzVCUWxCRS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MzlBNzEvNDJDMDFFREFBRDUyMTFFRTk3NDcwQkFGNzc1
NDEyRTYveF85dXl3dlM3QkkxYWxRWDR4eHpDNUJRbEJFLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBjzbVw4/mCdPUw9CU0llD1TJhbppGV
PaqxYFGjY1xQ5UMtysfQ1o6g+HuWdtD7fiLIsqCD0x4wLOEdro9agfLydxVYQpGd
vdXNobqG9JwwGIB2bYf1SnHiN+N8dUlAtm7WYRYinu4OyMpVoD6dvQcfT+sKMSFJ
ejIbzXWO46IkALyAeYoBBJAkFJjNn0cIyoiZpnMbwzMgfLUnp7tMEwvhxCMfy2Gp
PCcsZE8w3qLujSs1kULFFB5JGnGUFq2EIobDeTJNftk0dxDgLMeJvVw5eYR73ecW
k6zhdwfZcdQKS6NTYhE/2caMrS8MWwJkByNR90LCUPKX0aIo+nsy7XPQ
-----END CERTIFICATE-----
Generated at Thu Apr 2 05:03:47 2026 by rpki-client