Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367890A/D5950BFE814611E98A26EC23F8AEA228/DV2bCS_jnIf5O8uUysP2yR0WyOs.mft
File:                     DV2bCS_jnIf5O8uUysP2yR0WyOs.mft (raw, json)
Hash identifier:          uqhSr1DoE48tbcegI9Ss/v9tZkwFsQV1A20Sg6kvYrA=
Subject key identifier:   53:0D:10:59:04:BB:3B:AA:60:47:0B:8D:A7:47:4D:45:B1:33:8F:F1
Authority key identifier: 0D:5D:9B:09:2F:E3:9C:87:F9:3B:CB:94:CA:C3:F6:C9:1D:16:C8:EB
Certificate issuer:       /CN=F367890AAF/serialNumber=0D5D9B092FE39C87F93BCB94CAC3F6C91D16C8EB
Certificate serial:       0A0C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/DV2bCS_jnIf5O8uUysP2yR0WyOs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367890A/D5950BFE814611E98A26EC23F8AEA228/DV2bCS_jnIf5O8uUysP2yR0WyOs.mft
Manifest number:          0A02
Signing time:             Tue 10 Mar 2026 01:16:54 +0000
Manifest this update:     Tue 10 Mar 2026 01:16:53 +0000
Manifest next update:     Thu 12 Mar 2026 01:16:53 +0000
Files and hashes:         1: DV2bCS_jnIf5O8uUysP2yR0WyOs.crl (hash: vWDxq9qelszmqaph/NTAvvfJJ4Jq5k00TNi6fSh/Dnk=)
                          2: 1CD89842944B11EA8D91181BF8AEA228.roa (hash: G8QTB1cDSlhFc1aM1m+wP1xl5Ubb7Vbu7br4H677GAs=)
                          3: 1385324820B311EA8A79CB75F8AEA228.roa (hash: E+0kaNnyaz2XaAgp2UmW3UiOevGh8K77GCjxHRNxjgk=)
                          4: 8CD6FED820B311EAAC843476F8AEA228.roa (hash: Gf1aru2E3Yggqz5sr3+VkWloIXes+1L3V6Xe+EwFJW4=)
                          5: 6C0163EC20B311EAB8D01576F8AEA228.roa (hash: qKJSwkjO0UEEtt3fvEcg777sLhnc5F/s5CDz6fXaO0M=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367890A/D5950BFE814611E98A26EC23F8AEA228/DV2bCS_jnIf5O8uUysP2yR0WyOs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367890A/D5950BFE814611E98A26EC23F8AEA228/DV2bCS_jnIf5O8uUysP2yR0WyOs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/DV2bCS_jnIf5O8uUysP2yR0WyOs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 12 Mar 2026 00:07:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2572 (0xa0c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367890AAF, serialNumber=0D5D9B092FE39C87F93BCB94CAC3F6C91D16C8EB
        Validity
            Not Before: Mar 10 01:16:53 2026 GMT
            Not After : Mar 12 01:16:53 2026 GMT
        Subject: CN=69af7106-40f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4f:bb:af:c7:de:6c:3a:48:5b:dd:df:f5:9f:
                    8d:02:b0:19:03:5a:09:e4:ea:d9:4c:5b:1b:a7:a6:
                    c6:56:71:fe:79:52:30:cd:39:60:f9:70:f6:42:1a:
                    fd:5a:2b:59:70:d5:86:d2:8c:ac:a9:ee:03:74:0b:
                    ff:0b:ba:eb:fc:47:b5:0c:84:2e:4e:42:d0:5f:10:
                    12:a3:3b:1c:2f:69:27:e5:fe:06:50:54:6e:52:90:
                    d7:84:bc:9c:1f:17:77:33:72:01:b5:bc:70:63:31:
                    f9:fa:40:b1:59:52:93:0e:a8:6a:35:f1:e9:d9:ce:
                    44:a7:3d:bf:06:5d:9b:bb:3d:ce:bc:f9:6c:f6:93:
                    96:99:15:42:32:7e:d6:e9:30:7a:f4:e6:48:ed:2d:
                    2e:73:a3:e2:a4:a3:90:df:f3:99:d4:09:71:dc:ba:
                    59:78:8a:4a:ba:87:05:13:04:aa:1b:76:5b:b7:38:
                    59:d0:54:b9:00:a4:72:ce:07:8e:ea:25:3f:4b:a1:
                    9e:5f:d7:45:20:14:2b:d4:bd:61:35:d6:e1:06:bd:
                    02:a2:ba:71:5e:39:26:09:b9:42:6d:82:1c:aa:95:
                    ff:5a:40:9c:7a:49:25:07:e2:f3:ec:b2:3e:1c:ed:
                    a9:2a:4e:19:02:c2:3a:10:a7:1b:09:8b:90:9d:6d:
                    ed:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:0D:10:59:04:BB:3B:AA:60:47:0B:8D:A7:47:4D:45:B1:33:8F:F1
            X509v3 Authority Key Identifier:
                keyid:0D:5D:9B:09:2F:E3:9C:87:F9:3B:CB:94:CA:C3:F6:C9:1D:16:C8:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367890A/D5950BFE814611E98A26EC23F8AEA228/DV2bCS_jnIf5O8uUysP2yR0WyOs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DV2bCS_jnIf5O8uUysP2yR0WyOs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367890A/D5950BFE814611E98A26EC23F8AEA228/DV2bCS_jnIf5O8uUysP2yR0WyOs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:a8:75:f2:5e:2a:b2:49:98:6f:43:6f:1d:02:50:9b:75:2b:
         8e:e0:45:df:48:fd:91:e1:71:82:44:24:75:3d:98:0d:b4:c3:
         a5:9a:d3:29:3e:23:54:f6:f0:55:05:f0:11:04:2e:47:dd:f7:
         6d:6e:2e:78:50:21:bf:1b:e5:57:9b:27:08:af:b9:52:cf:f1:
         38:d8:43:a2:df:13:37:59:d2:33:22:aa:d4:58:90:fd:32:94:
         48:e5:4e:6e:6f:96:20:3a:ff:35:6f:eb:0b:97:96:e3:f5:42:
         82:64:31:af:b1:cd:42:48:05:4d:00:bc:ff:5f:5f:c5:15:8e:
         bf:37:17:7d:d9:e3:fc:4a:bf:79:8a:30:fe:c9:94:e7:66:0c:
         fb:b4:a4:da:f2:ce:1f:a1:d6:b4:5f:33:28:d4:5f:d6:4a:81:
         25:d4:b8:64:13:e1:c2:50:f3:7c:9d:74:ec:36:44:9c:86:e2:
         1e:2e:be:59:81:a1:2d:a0:d4:79:d1:6d:6c:97:7d:bb:49:13:
         c8:29:15:a5:07:3f:9e:37:bf:12:1c:85:23:4d:eb:c4:85:92:
         49:81:05:83:14:18:74:37:d2:40:82:c9:bb:5a:e8:01:a0:4d:
         5c:fd:d2:a2:8e:be:ff:f9:ee:cb:8d:92:a5:4d:e1:fa:b0:d2:
         93:43:be:cc
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCgwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
Nzg5MEFBRjExMC8GA1UEBRMoMEQ1RDlCMDkyRkUzOUM4N0Y5M0JDQjk0Q0FDM0Y2
QzkxRDE2QzhFQjAeFw0yNjAzMTAwMTE2NTNaFw0yNjAzMTIwMTE2NTNaMBgxFjAU
BgNVBAMTDTY5YWY3MTA2LTQwZjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC3T7uvx95sOkhb3d/1n40CsBkDWgnk6tlMWxunpsZWcf55UjDNOWD5cPZC
Gv1aK1lw1YbSjKyp7gN0C/8Luuv8R7UMhC5OQtBfEBKjOxwvaSfl/gZQVG5SkNeE
vJwfF3czcgG1vHBjMfn6QLFZUpMOqGo18enZzkSnPb8GXZu7Pc68+Wz2k5aZFUIy
ftbpMHr05kjtLS5zo+Kko5Df85nUCXHcull4ikq6hwUTBKobdlu3OFnQVLkApHLO
B47qJT9LoZ5f10UgFCvUvWE11uEGvQKiunFeOSYJuUJtghyqlf9aQJx6SSUH4vPs
sj4c7akqThkCwjoQpxsJi5Cdbe15AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUUw0Q
WQS7O6pgRwuNp0dNRbEzj/EwHwYDVR0jBBgwFoAUDV2bCS/jnIf5O8uUysP2yR0W
yOswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjc4OTBBL0Q1OTUwQkZFODE0NjExRTk4QTI2RUMyM0Y4QUVBMjI4L0RWMmJD
U19qbklmNU84dVV5c1AyeVIwV3lPcy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0RWMmJDU19qbklmNU84dVV5c1AyeVIwV3lPcy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2Nzg5MEEvRDU5NTBCRkU4MTQ2MTFFOThBMjZFQzIzRjhB
RUEyMjgvRFYyYkNTX2puSWY1Tzh1VXlzUDJ5UjBXeU9zLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCwqHXyXiqySZhvQ28dAlCbdSuO4EXf
SP2R4XGCRCR1PZgNtMOlmtMpPiNU9vBVBfARBC5H3fdtbi54UCG/G+VXmycIr7lS
z/E42EOi3xM3WdIzIqrUWJD9MpRI5U5ub5YgOv81b+sLl5bj9UKCZDGvsc1CSAVN
ALz/X1/FFY6/Nxd92eP8Sr95ijD+yZTnZgz7tKTa8s4foda0XzMo1F/WSoEl1Lhk
E+HCUPN8nXTsNkSchuIeLr5ZgaEtoNR50W1sl327SRPIKRWlBz+eN78SHIUjTevE
hZJJgQWDFBh0N9JAgsm7WugBoE1c/dKijr7/+e7LjZKlTeH6sNKTQ77M
-----END CERTIFICATE-----
Generated at Tue Mar 10 07:09:37 2026 by rpki-client