Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36628E9/FCDCD124833211EC890A0BAF5A40D577/qO2f3Jdp7203QbndrnI9MYFl51A.mft
File:                     qO2f3Jdp7203QbndrnI9MYFl51A.mft (raw, json)
Hash identifier:          YJJW6j8JnesjcDzmzgjGr46FfGeoJOIRm+Fpru5Wljo=
Subject key identifier:   AA:B7:F6:0F:CB:7C:AE:C4:A4:7F:49:B5:F8:30:E9:45:C4:12:34:F0
Authority key identifier: A8:ED:9F:DC:97:69:EF:6D:37:41:B9:DD:AE:72:3D:31:81:65:E7:50
Certificate issuer:       /CN=F36628E9AF/serialNumber=A8ED9FDC9769EF6D3741B9DDAE723D318165E750
Certificate serial:       0618
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/qO2f3Jdp7203QbndrnI9MYFl51A.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36628E9/FCDCD124833211EC890A0BAF5A40D577/qO2f3Jdp7203QbndrnI9MYFl51A.mft
Manifest number:          0616
Signing time:             Sat 28 Mar 2026 03:01:08 +0000
Manifest this update:     Sat 28 Mar 2026 03:01:07 +0000
Manifest next update:     Mon 30 Mar 2026 03:01:07 +0000
Files and hashes:         1: qO2f3Jdp7203QbndrnI9MYFl51A.crl (hash: 6S7OfQdrlGQALCzdOS0m3s5kszaODn8iCz+sSBgHCfU=)
                          2: B4CDDFBA096511F09EE29CA4762E951A.roa (hash: AGjlXws4tctUuB4WUyHecSclAJY+HCC3k/CqmlHphvQ=)
                          3: 4A7BCEDE833411ECA330C8B25A40D577.roa (hash: w7j8NF07MRPRcWLZHO+fmpCs8k7Jimz6EpCqZnbOkz8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36628E9/FCDCD124833211EC890A0BAF5A40D577/qO2f3Jdp7203QbndrnI9MYFl51A.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36628E9/FCDCD124833211EC890A0BAF5A40D577/qO2f3Jdp7203QbndrnI9MYFl51A.mft
                          rsync://rpki.afrinic.net/repository/afrinic/qO2f3Jdp7203QbndrnI9MYFl51A.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 30 Mar 2026 00:07:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1560 (0x618)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36628E9AF, serialNumber=A8ED9FDC9769EF6D3741B9DDAE723D318165E750
        Validity
            Not Before: Mar 28 03:01:07 2026 GMT
            Not After : Mar 30 03:01:07 2026 GMT
        Subject: CN=69c74474-8143
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:94:22:bc:38:aa:2b:29:6d:f1:bf:48:39:3c:
                    01:fc:b6:c4:e8:d8:69:c2:45:f6:c8:b3:3f:43:a4:
                    62:26:ac:9e:ff:11:1c:1d:d6:b6:c8:5e:3e:04:d5:
                    86:2b:69:6f:c7:be:3c:d8:e9:63:ae:bb:88:9e:f7:
                    ab:b2:51:fc:24:e0:ff:77:11:8e:1c:d2:4c:03:0a:
                    b9:8f:67:85:3a:bd:f8:d5:9e:8e:f8:1c:19:cf:ce:
                    03:48:e5:6d:ed:44:ed:42:60:a0:6c:f9:59:68:20:
                    35:a6:ff:fc:c7:61:db:52:51:88:03:61:26:45:a2:
                    92:cd:fb:44:f1:a3:c6:3a:f1:a4:bb:61:9d:10:e2:
                    ce:ad:e9:1f:0e:68:90:a4:c6:01:a4:7a:16:c7:51:
                    c8:d8:3b:0a:fd:2f:ad:2d:99:16:55:5a:ca:d8:c1:
                    10:4d:2c:d1:2f:09:1d:0a:a4:b5:60:10:77:6e:d2:
                    32:af:2f:27:f3:00:39:c4:2b:82:93:1a:dc:5b:d2:
                    77:2f:07:31:ca:77:60:87:2a:a4:50:25:c4:ea:e5:
                    5c:a9:4a:2a:7c:d2:d0:7b:92:39:ec:3c:05:cf:1a:
                    2a:08:f0:d4:f2:52:2a:b1:61:43:d7:68:e4:a7:0c:
                    66:73:ed:59:35:82:74:f6:51:d9:7d:6e:05:56:5c:
                    09:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:B7:F6:0F:CB:7C:AE:C4:A4:7F:49:B5:F8:30:E9:45:C4:12:34:F0
            X509v3 Authority Key Identifier:
                keyid:A8:ED:9F:DC:97:69:EF:6D:37:41:B9:DD:AE:72:3D:31:81:65:E7:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36628E9/FCDCD124833211EC890A0BAF5A40D577/qO2f3Jdp7203QbndrnI9MYFl51A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/qO2f3Jdp7203QbndrnI9MYFl51A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36628E9/FCDCD124833211EC890A0BAF5A40D577/qO2f3Jdp7203QbndrnI9MYFl51A.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:cb:06:fc:9d:3a:e1:2a:7a:52:9d:bd:fa:75:22:30:84:13:
         1e:32:e1:b3:56:cf:b2:6f:c1:cc:13:3b:47:86:a1:8f:41:ee:
         0d:3f:42:2e:fc:73:dc:f4:47:88:6f:76:55:35:a9:b1:0d:ce:
         3d:ba:f6:0a:9c:1c:7d:7c:50:7c:47:61:b2:34:00:a3:c6:ef:
         43:84:42:2e:5b:6e:dd:c5:4e:5b:63:3a:bb:c7:fb:cb:83:c1:
         44:4d:23:8a:6e:10:13:e6:b2:89:6f:04:2f:c0:ba:2d:8f:fb:
         0d:b9:47:46:a2:64:b7:28:b2:67:b6:0e:ca:a9:1b:8a:f6:5e:
         d7:6d:83:f4:3d:51:da:6a:32:c5:76:4b:ad:18:4e:cc:db:d8:
         41:03:04:40:bd:8e:b8:7c:16:fe:17:17:fd:ea:33:99:91:b6:
         63:40:29:ce:e7:7f:fd:e5:44:14:66:f9:b0:17:2b:f0:81:73:
         f9:93:e6:08:1b:b0:81:e2:c9:81:94:61:66:3c:8e:67:b1:a9:
         2d:bf:73:dd:37:29:44:98:f5:8a:e8:66:1b:6b:23:fd:4b:50:
         c6:9a:69:f9:ea:d2:dc:3f:c5:d0:7d:ce:e6:8f:67:d6:ca:03:
         e8:55:eb:12:ab:b0:15:53:41:21:4a:73:5c:e3:5a:46:3f:2e:
         ba:97:c7:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 07:00:22 2026 by rpki-client