Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3678D2D/186D29CE12B111EA8C9E843AF8AEA228/7KUu1usrGLOvGbp5LPM-AO_td-o.mft
File:                     7KUu1usrGLOvGbp5LPM-AO_td-o.mft (raw, json)
Hash identifier:          d5mwhFkfrKbRg3iCbnK3KEs8rGA75Dm59zpFmAoOdyI=
Subject key identifier:   3D:8E:37:B9:A2:29:64:5A:B2:11:B0:78:62:85:B7:44:1E:A8:B9:96
Authority key identifier: EC:A5:2E:D6:EB:2B:18:B3:AF:19:BA:79:2C:F3:3E:00:EF:ED:77:EA
Certificate issuer:       /CN=F3678D2DAF/serialNumber=ECA52ED6EB2B18B3AF19BA792CF33E00EFED77EA
Certificate serial:       0943
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/7KUu1usrGLOvGbp5LPM-AO_td-o.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3678D2D/186D29CE12B111EA8C9E843AF8AEA228/7KUu1usrGLOvGbp5LPM-AO_td-o.mft
Manifest number:          0941
Signing time:             Sun 29 Mar 2026 01:40:31 +0000
Manifest this update:     Sun 29 Mar 2026 01:40:30 +0000
Manifest next update:     Tue 31 Mar 2026 01:40:30 +0000
Files and hashes:         1: 7KUu1usrGLOvGbp5LPM-AO_td-o.crl (hash: 8S9GtJzooeM5sV1+EXcGWADngOEWmtR6YEy1A1C2IVc=)
                          2: 72E4BD0412B111EA9EACDA3AF8AEA228.roa (hash: lEGlEyNpK2D28OfWSczq5nyD+T86uHXMrbx63t8Ft0s=)
                          3: 5142A9C212B111EAAF53AF3AF8AEA228.roa (hash: xG/mwLzjMt/AD4VCyWzSqQgk/KYhEOItbq9UQDh1nvU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3678D2D/186D29CE12B111EA8C9E843AF8AEA228/7KUu1usrGLOvGbp5LPM-AO_td-o.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3678D2D/186D29CE12B111EA8C9E843AF8AEA228/7KUu1usrGLOvGbp5LPM-AO_td-o.mft
                          rsync://rpki.afrinic.net/repository/afrinic/7KUu1usrGLOvGbp5LPM-AO_td-o.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 31 Mar 2026 00:06:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2371 (0x943)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3678D2DAF, serialNumber=ECA52ED6EB2B18B3AF19BA792CF33E00EFED77EA
        Validity
            Not Before: Mar 29 01:40:30 2026 GMT
            Not After : Mar 31 01:40:30 2026 GMT
        Subject: CN=69c8830f-3075
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fe:50:1f:94:d0:fc:e2:81:fb:bc:1f:ae:ca:76:
                    61:30:75:7c:0e:04:02:9a:28:cd:c0:92:61:87:b7:
                    27:fc:02:9c:80:07:f9:84:dd:67:4b:19:ae:42:26:
                    cc:5c:43:52:91:e9:5d:20:ff:ef:ed:7a:07:7f:16:
                    91:14:1c:07:59:fb:5b:d9:28:29:90:74:93:f3:ac:
                    a3:2b:3b:2a:96:1d:68:ab:11:d3:5f:44:28:15:32:
                    42:79:fe:3b:9f:d0:29:da:36:d0:8e:10:31:f5:14:
                    f3:de:87:28:78:f0:22:d1:de:87:b3:4d:24:3d:e8:
                    1b:e2:d2:fc:bc:c8:00:57:80:d3:b3:d5:27:9a:95:
                    8e:2a:d5:51:42:ee:57:c9:a1:13:e2:85:29:46:f3:
                    f3:e3:d6:ca:ca:b7:7f:e2:51:e9:61:40:9d:1a:f6:
                    13:95:23:df:55:36:69:49:75:1a:63:d1:cf:1e:29:
                    05:a4:c1:7d:b7:d9:e1:42:06:37:bf:5f:88:4b:b2:
                    4d:25:9c:00:5a:6e:4e:22:97:94:01:85:24:10:53:
                    b9:6f:67:80:51:75:1c:12:d6:7b:bb:6a:57:94:33:
                    e8:ec:d8:b3:c9:76:6d:3c:a3:82:97:43:e0:9a:07:
                    89:70:07:8b:72:7b:5f:d6:17:cb:e7:c3:ae:6f:36:
                    b1:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:8E:37:B9:A2:29:64:5A:B2:11:B0:78:62:85:B7:44:1E:A8:B9:96
            X509v3 Authority Key Identifier:
                keyid:EC:A5:2E:D6:EB:2B:18:B3:AF:19:BA:79:2C:F3:3E:00:EF:ED:77:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3678D2D/186D29CE12B111EA8C9E843AF8AEA228/7KUu1usrGLOvGbp5LPM-AO_td-o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/7KUu1usrGLOvGbp5LPM-AO_td-o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3678D2D/186D29CE12B111EA8C9E843AF8AEA228/7KUu1usrGLOvGbp5LPM-AO_td-o.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:94:d0:75:bb:2d:04:f2:1f:76:76:d5:b2:c5:0d:82:81:e2:
         d9:ad:07:93:8b:6e:91:f5:2f:6b:16:88:1b:b4:65:9e:66:83:
         43:86:32:d3:a3:61:ae:db:4b:ec:a0:ca:ab:4f:32:47:b8:08:
         67:8e:fb:da:a3:b6:15:83:3c:f0:4f:df:28:da:fd:0e:1b:08:
         b9:e7:e8:a9:c9:c1:6a:5e:2e:c0:97:f3:ae:a1:83:b7:6b:3a:
         3a:84:9e:7b:7c:a2:2e:5c:4d:b0:c7:ea:7a:79:bb:49:32:a6:
         c4:af:b8:65:db:a5:15:51:c1:2a:00:9e:64:8b:28:b8:3a:08:
         20:18:a9:24:ed:c1:f5:66:e4:62:73:33:d9:8b:05:d8:eb:f1:
         72:59:11:9c:9f:b8:e4:a0:6b:ec:f9:51:d2:d4:e0:72:d6:e2:
         71:e9:5b:a5:a4:9a:fb:2c:21:55:81:26:20:8b:ae:74:8e:8e:
         03:eb:f9:b1:fa:bc:51:eb:27:49:4e:59:9c:5b:37:70:9a:fe:
         76:a1:bc:17:e0:e9:90:ae:e6:5a:e2:fc:19:be:d9:67:db:93:
         f7:6d:1d:db:d8:b5:75:9e:49:25:41:90:c2:98:b3:7c:03:c5:
         d0:de:35:a4:90:3e:95:ca:2a:a9:2a:c9:d3:36:36:6f:f3:7f:
         b8:53:2c:e2
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCUMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NzhEMkRBRjExMC8GA1UEBRMoRUNBNTJFRDZFQjJCMThCM0FGMTlCQTc5MkNGMzNF
MDBFRkVENzdFQTAeFw0yNjAzMjkwMTQwMzBaFw0yNjAzMzEwMTQwMzBaMBgxFjAU
BgNVBAMTDTY5Yzg4MzBmLTMwNzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQD+UB+U0Pzigfu8H67KdmEwdXwOBAKaKM3AkmGHtyf8ApyAB/mE3WdLGa5C
JsxcQ1KR6V0g/+/tegd/FpEUHAdZ+1vZKCmQdJPzrKMrOyqWHWirEdNfRCgVMkJ5
/juf0CnaNtCOEDH1FPPehyh48CLR3oezTSQ96Bvi0vy8yABXgNOz1SealY4q1VFC
7lfJoRPihSlG8/Pj1srKt3/iUelhQJ0a9hOVI99VNmlJdRpj0c8eKQWkwX232eFC
Bje/X4hLsk0lnABabk4il5QBhSQQU7lvZ4BRdRwS1nu7aleUM+js2LPJdm08o4KX
Q+CaB4lwB4tye1/WF8vnw65vNrF/AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUPY43
uaIpZFqyEbB4YoW3RB6ouZYwHwYDVR0jBBgwFoAU7KUu1usrGLOvGbp5LPM+AO/t
d+owDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjc4RDJELzE4NkQyOUNFMTJCMTExRUE4QzlFODQzQUY4QUVBMjI4LzdLVXUx
dXNyR0xPdkdicDVMUE0tQU9fdGQtby5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzdLVXUxdXNyR0xPdkdicDVMUE0tQU9fdGQtby5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NzhEMkQvMTg2RDI5Q0UxMkIxMTFFQThDOUU4NDNBRjhB
RUEyMjgvN0tVdTF1c3JHTE92R2JwNUxQTS1BT190ZC1vLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCHlNB1uy0E8h92dtWyxQ2CgeLZrQeT
i26R9S9rFogbtGWeZoNDhjLTo2Gu20vsoMqrTzJHuAhnjvvao7YVgzzwT98o2v0O
Gwi55+ipycFqXi7Al/OuoYO3azo6hJ57fKIuXE2wx+p6ebtJMqbEr7hl26UVUcEq
AJ5kiyi4OgggGKkk7cH1ZuRiczPZiwXY6/FyWRGcn7jkoGvs+VHS1OBy1uJx6Vul
pJr7LCFVgSYgi650jo4D6/mx+rxR6ydJTlmcWzdwmv52obwX4OmQruZa4vwZvtln
25P3bR3b2LV1nkklQZDCmLN8A8XQ3jWkkD6VyiqpKsnTNjZv83+4Uyzi
-----END CERTIFICATE-----
Generated at Sun Mar 29 23:45:31 2026 by rpki-client