Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365958D/9CFE89C8EF0E11EFB212E46B762E951A/F43e-Ls8_k--ATuSO8iuItZFswI.mft
File:                     F43e-Ls8_k--ATuSO8iuItZFswI.mft (raw, json)
Hash identifier:          zaRX+IHLep46LOR3MraK/lSXbAMix0rDDFWVCt4TLs4=
Subject key identifier:   DA:3A:53:90:74:CB:EB:4D:D4:06:73:77:6A:CE:4D:FA:C7:F5:B7:3F
Authority key identifier: 17:8D:DE:F8:BB:3C:FE:4F:BE:01:3B:92:3B:C8:AE:22:D6:45:B3:02
Certificate issuer:       /CN=F365958DAF/serialNumber=178DDEF8BB3CFE4FBE013B923BC8AE22D645B302
Certificate serial:       01B5
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/F43e-Ls8_k--ATuSO8iuItZFswI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365958D/9CFE89C8EF0E11EFB212E46B762E951A/F43e-Ls8_k--ATuSO8iuItZFswI.mft
Manifest number:          01AD
Signing time:             Sun 29 Mar 2026 04:47:34 +0000
Manifest this update:     Sun 29 Mar 2026 04:47:34 +0000
Manifest next update:     Tue 31 Mar 2026 04:47:34 +0000
Files and hashes:         1: F43e-Ls8_k--ATuSO8iuItZFswI.crl (hash: 4oplrxBUTIkpuXKR9nlMDFZ0DfPywycNFhae8WgVclg=)
                          2: 97ED3ED0F37211EFB23FFA43762E951A.roa (hash: FgbPNGuclB/D94qa7xSHa4fIjOIEEHBK2ubtWZfrs/8=)
                          3: 2B0D0D36F44411EF9C7CC663762E951A.roa (hash: 2Q8qL5N57SGyAwSmdLGbK9RkrcemAnA+9vfe4IdCPTs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365958D/9CFE89C8EF0E11EFB212E46B762E951A/F43e-Ls8_k--ATuSO8iuItZFswI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365958D/9CFE89C8EF0E11EFB212E46B762E951A/F43e-Ls8_k--ATuSO8iuItZFswI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/F43e-Ls8_k--ATuSO8iuItZFswI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 31 Mar 2026 00:06:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 437 (0x1b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365958DAF, serialNumber=178DDEF8BB3CFE4FBE013B923BC8AE22D645B302
        Validity
            Not Before: Mar 29 04:47:34 2026 GMT
            Not After : Mar 31 04:47:34 2026 GMT
        Subject: CN=69c8aee6-a724
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:db:d8:f9:ab:53:8d:02:d6:3e:72:32:d1:00:
                    4f:00:e8:30:00:52:18:a2:a5:c6:f8:8e:2e:e4:d9:
                    b1:76:89:7f:6c:cf:52:8d:70:be:03:44:23:f0:8e:
                    72:33:10:1c:f9:79:58:39:9d:3e:44:4f:47:29:ac:
                    4c:d5:41:a5:1a:ad:e3:75:3b:43:95:50:f4:83:89:
                    35:07:da:c6:e7:22:c3:d5:b2:68:b6:61:18:7f:10:
                    ef:0c:63:44:a7:b6:96:85:3a:ee:80:fe:53:53:43:
                    75:fe:3d:05:7e:07:30:10:86:c1:04:cd:e2:6f:7c:
                    3e:a7:84:12:fb:73:87:98:49:1e:b6:ad:95:98:37:
                    8e:78:79:68:c4:89:8b:ca:c7:c3:29:a8:17:1b:e5:
                    e7:e7:89:f3:08:d9:8e:5a:bb:4c:5d:96:f7:37:45:
                    09:9c:58:04:bb:cf:fc:43:16:c4:d8:db:c5:da:39:
                    a2:83:2a:8d:eb:47:da:6d:17:7b:f3:38:51:b2:e0:
                    eb:d7:37:c5:91:49:39:95:24:c7:d3:45:85:ec:4b:
                    1b:5d:25:2e:24:bd:96:da:d0:71:1e:db:cf:ff:c3:
                    12:9d:cf:e3:60:12:c2:8b:4d:c7:f8:69:f5:07:c6:
                    77:52:8c:a0:1c:9b:ab:46:d1:c7:32:ea:ee:8f:55:
                    61:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:3A:53:90:74:CB:EB:4D:D4:06:73:77:6A:CE:4D:FA:C7:F5:B7:3F
            X509v3 Authority Key Identifier:
                keyid:17:8D:DE:F8:BB:3C:FE:4F:BE:01:3B:92:3B:C8:AE:22:D6:45:B3:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365958D/9CFE89C8EF0E11EFB212E46B762E951A/F43e-Ls8_k--ATuSO8iuItZFswI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/F43e-Ls8_k--ATuSO8iuItZFswI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365958D/9CFE89C8EF0E11EFB212E46B762E951A/F43e-Ls8_k--ATuSO8iuItZFswI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:65:3b:40:47:60:75:6a:82:61:ae:57:20:c9:e7:99:9a:a6:
         a4:5f:c2:86:d9:f4:b5:3d:28:15:2f:1e:13:6f:b2:cd:eb:fd:
         52:15:f5:24:9a:e3:7a:64:5b:e9:b6:25:29:09:50:f2:f4:1a:
         4a:e3:b5:3b:fb:d1:b0:0f:ee:93:7f:95:0c:92:51:92:50:39:
         d3:1f:00:28:f1:ee:f1:e3:ef:64:ae:ea:85:ee:85:f2:b3:9d:
         0c:d3:d5:c3:28:56:06:6a:1f:11:93:d2:99:ce:56:a3:66:33:
         4b:c1:87:1a:6c:49:e3:9a:e2:14:bd:ad:91:d9:b5:54:c2:1f:
         f0:18:19:f6:6c:b7:2c:e3:ca:a4:dc:79:54:d4:8e:eb:58:33:
         ac:9c:fe:fc:34:0e:8f:b7:db:31:94:a7:e8:65:2e:ed:87:60:
         36:05:b9:ea:af:86:cf:6e:1d:b3:8d:7a:07:8f:b0:0c:4d:94:
         f9:be:5d:55:b3:d4:5c:92:86:a8:0a:cb:af:27:00:8c:02:af:
         de:90:fe:ea:d8:0e:92:46:cf:52:90:32:77:76:39:ff:8c:bc:
         c3:6d:1e:dc:d8:7b:70:b0:5b:ff:39:cb:f7:d1:35:9b:5b:5f:
         c8:3d:14:d5:fb:92:a0:48:8a:c3:b7:bd:a8:51:22:32:ab:ce:
         4d:02:0a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 30 01:27:10 2026 by rpki-client