Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3678B2C/903267CE08C511F1BD6ADA7BDAE4EC9C/_pOvT0KHl7wjB3xuK6XkNRfU4vs.mft
File:                     _pOvT0KHl7wjB3xuK6XkNRfU4vs.mft (raw, json)
Hash identifier:          oTb21ZlPhfXug1Ay13sXyoy4/jPp+2poq5kNcBv+GlM=
Subject key identifier:   D8:14:C2:62:3A:EB:5E:32:6E:6E:67:1C:F8:DC:8B:66:21:F6:09:48
Authority key identifier: FE:93:AF:4F:42:87:97:BC:23:07:7C:6E:2B:A5:E4:35:17:D4:E2:FB
Certificate issuer:       /CN=F3678B2CAF/serialNumber=FE93AF4F428797BC23077C6E2BA5E43517D4E2FB
Certificate serial:       28
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/_pOvT0KHl7wjB3xuK6XkNRfU4vs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3678B2C/903267CE08C511F1BD6ADA7BDAE4EC9C/_pOvT0KHl7wjB3xuK6XkNRfU4vs.mft
Manifest number:          27
Signing time:             Mon 23 Mar 2026 06:34:10 +0000
Manifest this update:     Mon 23 Mar 2026 06:34:10 +0000
Manifest next update:     Wed 25 Mar 2026 06:34:10 +0000
Files and hashes:         1: _pOvT0KHl7wjB3xuK6XkNRfU4vs.crl (hash: i2cV/cA5D94/hsEekvaujBAup0XTLNqzBliN2Zp3Yek=)
                          2: FE138FA208C511F1827C647CDAE4EC9C.roa (hash: VfBb7QRNJ+0kJ0a9czJU7oLPc0BoZ7T1d1tl93Q0e1I=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3678B2C/903267CE08C511F1BD6ADA7BDAE4EC9C/_pOvT0KHl7wjB3xuK6XkNRfU4vs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3678B2C/903267CE08C511F1BD6ADA7BDAE4EC9C/_pOvT0KHl7wjB3xuK6XkNRfU4vs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/_pOvT0KHl7wjB3xuK6XkNRfU4vs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 25 Mar 2026 00:06:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 40 (0x28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3678B2CAF, serialNumber=FE93AF4F428797BC23077C6E2BA5E43517D4E2FB
        Validity
            Not Before: Mar 23 06:34:10 2026 GMT
            Not After : Mar 25 06:34:10 2026 GMT
        Subject: CN=69c0dee2-aa1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:ef:b3:cf:5a:ad:d5:9f:46:f6:18:57:bb:19:
                    c5:ad:d7:f0:4e:06:3f:6e:ef:43:d7:0c:4d:06:c2:
                    bd:58:0d:7d:45:79:ab:63:be:dc:46:26:3f:b6:da:
                    f1:75:90:0e:88:c3:18:02:03:f8:47:37:3d:18:6f:
                    12:75:ab:e7:0a:19:99:75:9a:39:8b:00:75:0a:55:
                    f7:1e:ab:18:ea:f6:f4:2d:76:40:c8:a1:fa:a8:28:
                    51:eb:89:db:ed:5e:18:17:33:f8:8f:cd:c5:de:d9:
                    b7:da:fc:4a:72:57:ae:6b:0f:c6:cf:26:98:00:60:
                    77:52:12:b0:32:9b:3f:3e:eb:20:20:e6:81:c3:b9:
                    13:1e:55:62:18:95:55:7c:e5:3f:4d:c1:8f:56:24:
                    92:1f:76:d5:84:41:dd:8d:53:dc:68:68:7d:44:17:
                    c8:33:ed:f7:f5:65:6e:95:d5:60:2f:6a:bc:bf:46:
                    26:00:39:e7:c6:80:dc:1b:e9:95:b7:cf:21:ce:e3:
                    e1:1d:72:06:bc:86:a7:5d:b7:d3:24:0d:cf:02:dc:
                    b8:2e:1d:1e:50:84:30:06:59:a0:b9:5d:81:31:6b:
                    64:c9:8c:66:a1:66:48:db:75:54:59:19:53:1d:41:
                    f6:db:db:d7:f5:41:a8:c1:28:23:8d:76:48:d1:1d:
                    52:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:14:C2:62:3A:EB:5E:32:6E:6E:67:1C:F8:DC:8B:66:21:F6:09:48
            X509v3 Authority Key Identifier:
                keyid:FE:93:AF:4F:42:87:97:BC:23:07:7C:6E:2B:A5:E4:35:17:D4:E2:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3678B2C/903267CE08C511F1BD6ADA7BDAE4EC9C/_pOvT0KHl7wjB3xuK6XkNRfU4vs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_pOvT0KHl7wjB3xuK6XkNRfU4vs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3678B2C/903267CE08C511F1BD6ADA7BDAE4EC9C/_pOvT0KHl7wjB3xuK6XkNRfU4vs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:3a:33:6b:9f:bd:bf:7c:74:72:77:34:e8:b6:ab:91:23:a4:
         4e:d5:32:1a:a2:c0:a4:e9:18:a5:a2:7d:fd:c6:ba:a3:00:15:
         94:f8:ca:26:bf:ac:23:be:ea:14:3c:b4:98:5c:48:b3:2c:29:
         91:16:2c:c7:e8:24:6a:f0:fb:b3:8d:11:9c:a6:54:36:e0:0d:
         89:f7:57:81:69:f0:b2:34:fd:3a:45:1c:be:f5:64:50:92:e7:
         4c:f0:06:a9:a0:75:fe:96:89:32:65:3c:15:29:24:15:7c:89:
         f4:e9:01:ac:9c:f7:53:b3:d7:29:bf:31:74:f1:58:67:9a:47:
         00:66:81:24:f6:52:d1:29:ca:0b:27:45:41:66:52:1c:4a:11:
         bb:46:9b:88:13:80:d6:e7:81:28:93:51:80:f3:19:7d:44:e0:
         a5:72:87:2e:4e:3f:41:26:b8:ff:ce:5b:bc:47:1e:63:6b:41:
         b9:4a:2a:f6:fb:b6:44:3e:f4:1b:a2:0c:ce:ad:d0:d7:a8:5f:
         1d:89:01:45:a4:4b:1b:15:b6:ec:c1:8b:02:86:3c:15:42:48:
         82:ec:fb:ad:07:bc:38:3d:2e:4d:f2:a7:5e:cc:93:48:4d:21:
         fe:ff:44:1f:a7:4f:40:fe:cc:20:89:0d:16:6d:be:1e:4e:9a:
         c0:cf:5f:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 23 10:29:49 2026 by rpki-client