Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/SoPzGxsGBMptC3KkU9qj61h7TII.mft
File:                     SoPzGxsGBMptC3KkU9qj61h7TII.mft (raw, json)
Hash identifier:          LcMZgZW5clGYNeUIP+bkvprDkuUVJQYYOEaiROnIdSg=
Subject key identifier:   23:E7:BE:AC:77:31:69:95:FA:76:00:E9:C8:BA:DF:B1:D0:94:B2:B0
Authority key identifier: 4A:83:F3:1B:1B:06:04:CA:6D:0B:72:A4:53:DA:A3:EB:58:7B:4C:82
Certificate issuer:       /CN=F3681ED0AF/serialNumber=4A83F31B1B0604CA6D0B72A453DAA3EB587B4C82
Certificate serial:       0475
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SoPzGxsGBMptC3KkU9qj61h7TII.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/SoPzGxsGBMptC3KkU9qj61h7TII.mft
Manifest number:          0466
Signing time:             Tue 10 Mar 2026 02:51:53 +0000
Manifest this update:     Tue 10 Mar 2026 02:51:52 +0000
Manifest next update:     Thu 12 Mar 2026 02:51:52 +0000
Files and hashes:         1: SoPzGxsGBMptC3KkU9qj61h7TII.crl (hash: EamdIpw7KEwDrccedJnOAD4Fi9yZBZ3c7ZVX9Eot9+I=)
                          2: C644833AEE7111EE86F7F361775412E6.roa (hash: YgdlYAvq9L3YlpIV33voCNPfR5sCeCWFkjxpZfRsE/k=)
                          3: 7B89F0F65C1011F097764BA7DAE4EC9C.roa (hash: eGy/v5dJ9Sg7LBFixJArYusJNOZkmFriL3Cy5EJmVsc=)
                          4: BFD118C27C3E11F0A02173AEDAE4EC9C.roa (hash: E8rOx5Kz5JNVd/9IEaiBcjxCcyJDlnKMUqqptEDdwRw=)
                          5: 42CC1EC00B7611EEA5D28A444AD9E6FC.roa (hash: hsH3WbP2I/ts2EY2aQeTrcaXJgp89zEB64yilwHc5pg=)
                          6: 1E00E01A052911EE84BBD2454AD9E6FC.roa (hash: sJsPXhS2u3JarGDtOh1UZa0tPJmz8vwB7/YeLKri/dk=)
                          7: F8481206047B11EE91F2EF354AD9E6FC.roa (hash: jtUAjy0+9QV2iQ02jzkoPCkRiaIb/F60j3I68U9pgH4=)
                          8: F65930865B2911F0A6F411CCDAE4EC9C.roa (hash: zlBIS1j6PkXW4nIJqeYYZE1QxvGn2R6vJr3qJUI1Apc=)
                          9: C210ED2E064611F094E66494762E951A.roa (hash: Gw9d4UydYI1TKn6YtgmxyrXffZXD7vcLeB5cryG7IG4=)
                          10: F4E7AB82052811EE94115E454AD9E6FC.roa (hash: 0f6Udr5nVgdqIgPgxaXYb0TifWritIk3wQmsNXYsjss=)
                          11: 1587E6CCEE7111EEAAFBB25C775412E6.roa (hash: zasoVhr4ZDA3BPJ+ug5ooyH3/rY2lwS6n6p8BUEgx2w=)
                          12: 4F0B564AF51511EEB208C151775412E6.roa (hash: XNyDHYdBwPvc7NbnPS7pTjwqkoohEdJw312l57VSDB8=)
                          13: 4A7830A0D18B11EFAB9E6B88762E951A.roa (hash: xV745XWxYsFhNII926E/fN4gSuSPSdyN3viLNfdZy9M=)
                          14: 31CFB30C052C11EEAC0EDC4E4AD9E6FC.roa (hash: 707c2EgzG32Mlw18CbzTHauUb9G8+7v2J+8ka2UNIbA=)
                          15: 506B37B0FD0A11EEA3B5DB34017001B1.roa (hash: 12EkqcvUqaX3EcpZliJ64g6Wrfs7WAZ3LR6j5D262RI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/SoPzGxsGBMptC3KkU9qj61h7TII.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/SoPzGxsGBMptC3KkU9qj61h7TII.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SoPzGxsGBMptC3KkU9qj61h7TII.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 12 Mar 2026 00:07:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1141 (0x475)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3681ED0AF, serialNumber=4A83F31B1B0604CA6D0B72A453DAA3EB587B4C82
        Validity
            Not Before: Mar 10 02:51:52 2026 GMT
            Not After : Mar 12 02:51:52 2026 GMT
        Subject: CN=69af8749-f5c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:17:da:9e:51:a4:47:7f:7d:aa:3d:83:32:da:
                    35:9e:ac:f4:13:c5:78:b8:eb:cf:7e:f5:1a:24:12:
                    6f:a5:7f:69:14:47:b6:32:06:d4:b9:b0:06:1f:b5:
                    1a:81:86:3b:8c:f9:85:de:f1:c0:92:f6:c2:1c:cc:
                    c2:04:c7:8b:b0:b4:6a:df:d3:24:4d:8b:83:46:e5:
                    5f:d7:40:3f:43:f1:19:24:1d:35:d6:62:06:72:95:
                    7c:91:ed:0e:ea:0c:29:47:27:59:85:91:ab:04:2f:
                    24:25:73:8f:e8:70:7d:64:40:5b:cd:ed:fd:1f:5d:
                    86:de:3f:91:ba:ff:70:75:f9:2b:fd:84:d4:da:78:
                    a7:29:4c:89:43:76:d2:4a:e0:d2:da:4c:4b:69:b7:
                    fb:c2:8d:97:2d:f9:56:1c:8e:95:a4:a5:5e:42:f5:
                    cd:cf:4e:79:de:0f:a3:95:cf:a1:a1:79:dd:17:79:
                    82:eb:3c:f6:5b:d7:fe:32:e0:8e:ab:e5:e8:1c:27:
                    df:ae:96:82:67:78:6b:85:58:44:d3:a7:a6:c1:23:
                    dc:cf:fa:62:c1:22:05:9f:f2:29:67:32:60:39:89:
                    ab:59:25:05:9f:0f:59:e0:35:54:e8:71:95:0a:de:
                    99:4d:15:3b:97:ef:eb:2b:46:30:2f:e7:cd:bf:30:
                    10:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:E7:BE:AC:77:31:69:95:FA:76:00:E9:C8:BA:DF:B1:D0:94:B2:B0
            X509v3 Authority Key Identifier:
                keyid:4A:83:F3:1B:1B:06:04:CA:6D:0B:72:A4:53:DA:A3:EB:58:7B:4C:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/SoPzGxsGBMptC3KkU9qj61h7TII.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SoPzGxsGBMptC3KkU9qj61h7TII.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/SoPzGxsGBMptC3KkU9qj61h7TII.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:f1:48:c7:55:3f:a2:e2:68:f3:9d:1f:30:08:94:ce:98:45:
         ea:1a:97:0c:3d:6d:89:df:89:77:bb:4e:4f:e4:9c:01:d7:06:
         fb:a1:45:fd:b3:3b:5d:0b:2e:51:d0:0d:39:b5:5c:bc:b1:e5:
         e1:ca:68:f8:a8:18:cd:b8:21:74:ac:0d:4f:d1:20:b1:7f:0e:
         49:9f:a9:75:f6:96:b6:d6:10:a9:9f:dd:f3:3a:bf:d3:66:93:
         ab:0b:ae:4b:24:22:53:dd:25:88:2a:75:7d:2e:c9:8a:4f:fa:
         fa:18:c7:59:a7:29:1f:3c:4e:75:9e:74:26:7a:96:bd:42:4c:
         a3:14:9e:9b:e2:4c:48:74:20:54:87:dc:20:0d:d3:53:3e:03:
         88:f6:df:3d:28:1f:68:01:7a:77:bc:42:10:cc:02:f6:40:63:
         57:4e:26:eb:d9:61:54:a6:7c:b9:e9:8b:03:08:a9:0c:21:ed:
         8a:a3:14:45:96:be:8d:ba:44:1a:25:f2:58:32:90:e7:c5:a7:
         0b:4c:9c:9a:5e:31:07:f6:a5:46:af:a3:b7:85:1b:ec:ea:8b:
         79:c6:3b:a5:4b:c8:8b:f4:8e:d8:f9:09:65:84:48:c3:1a:70:
         2b:3e:52:c9:a7:e9:8d:05:63:d5:2a:7e:95:f2:ca:18:fd:05:
         1b:9f:2f:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 10 06:54:34 2026 by rpki-client