Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3683A54/5C3677F21F7811EC9A12311AD8A014CE/kXMyk_xjUK7funWpFv_0G1Fez0w.mft
File:                     kXMyk_xjUK7funWpFv_0G1Fez0w.mft (raw, json)
Hash identifier:          VL/CX0ma1bGJlW5+4aWCHi2cqKEUSvm9wow54DJrBqg=
Subject key identifier:   F0:A8:A7:2F:19:73:3D:45:C1:2A:C5:E1:08:29:74:15:DC:94:92:01
Authority key identifier: 91:73:32:93:FC:63:50:AE:DF:BA:75:A9:16:FF:F4:1B:51:5E:CF:4C
Certificate issuer:       /CN=F3683A54AF/serialNumber=91733293FC6350AEDFBA75A916FFF41B515ECF4C
Certificate serial:       06A0
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/kXMyk_xjUK7funWpFv_0G1Fez0w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3683A54/5C3677F21F7811EC9A12311AD8A014CE/kXMyk_xjUK7funWpFv_0G1Fez0w.mft
Manifest number:          069C
Signing time:             Sun 29 Mar 2026 02:25:33 +0000
Manifest this update:     Sun 29 Mar 2026 02:25:32 +0000
Manifest next update:     Tue 31 Mar 2026 02:25:32 +0000
Files and hashes:         1: kXMyk_xjUK7funWpFv_0G1Fez0w.crl (hash: 6YHbToCZ7lvwRpq8fh5sIYADbJHKIm1gpeoQ9rUQIWc=)
                          2: 951EA1701F7811ECB1D1961AD8A014CE.roa (hash: 1vZMKT9K0+T6pwn8OE0g59G7GIGSdRRo7NEdcXkRfVc=)
                          3: 8B40C2F2243A11F1A0BEB48ADAE4EC9C.roa (hash: 3620Wsxd/t0/oMKvGDVNw2kGd63Qxyzn+iydXrHbac4=)
                          4: 7EE185A6B21611EFA9BDF294762E951A.roa (hash: G6244Azl/uqe8/mj3zsQM21nztQl1zF4+5qvnRVhw/Q=)
                          5: E739D1BE1F7811ECBE14071BD8A014CE.roa (hash: XvzpJAf5CAfqUsf2t3F2RGOpHSqxkl68xqf6tTZaymg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3683A54/5C3677F21F7811EC9A12311AD8A014CE/kXMyk_xjUK7funWpFv_0G1Fez0w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3683A54/5C3677F21F7811EC9A12311AD8A014CE/kXMyk_xjUK7funWpFv_0G1Fez0w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/kXMyk_xjUK7funWpFv_0G1Fez0w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 31 Mar 2026 00:06:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1696 (0x6a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3683A54AF, serialNumber=91733293FC6350AEDFBA75A916FFF41B515ECF4C
        Validity
            Not Before: Mar 29 02:25:32 2026 GMT
            Not After : Mar 31 02:25:32 2026 GMT
        Subject: CN=69c88d9d-9bcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:00:45:b9:e3:1a:05:9a:4c:2b:da:f9:f4:d7:
                    1d:d0:37:08:d4:3e:c5:ae:4f:8d:92:fb:5b:0b:a6:
                    b1:16:61:33:80:1f:dc:c4:94:45:6e:6c:5c:cb:b5:
                    c4:cd:a1:98:e8:62:f3:3d:80:ae:23:de:18:52:70:
                    2e:74:f6:c8:4b:4b:05:13:fc:03:09:23:26:64:59:
                    2b:46:bc:86:f8:1c:b1:19:53:35:54:2e:57:dd:12:
                    cb:3f:a1:c8:71:e9:56:df:4c:51:19:a8:8d:ea:5a:
                    5b:08:64:17:2c:26:ed:f8:87:31:7a:6e:c6:8e:0d:
                    b7:45:06:52:87:32:11:6c:c1:2a:3e:1d:74:93:e6:
                    d9:e6:ce:93:61:27:a2:04:66:83:5a:7f:72:56:dd:
                    0f:96:f1:78:74:a8:f7:05:a6:65:d3:03:11:43:17:
                    7b:a2:0a:80:e2:38:bd:48:c7:7d:81:ab:39:57:04:
                    d1:5d:97:1f:02:f9:7a:f6:5d:0c:14:55:31:c1:2b:
                    e3:d4:86:8f:01:3c:f9:d0:ec:8b:c4:d3:18:6a:3e:
                    b2:11:ca:b6:44:19:94:7d:0a:db:e2:00:f6:fb:29:
                    15:d6:95:7a:15:fb:ca:e3:7f:1b:41:79:3d:1a:ec:
                    47:e0:f8:37:2f:0e:62:f9:19:a7:a8:28:10:eb:e0:
                    ba:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:A8:A7:2F:19:73:3D:45:C1:2A:C5:E1:08:29:74:15:DC:94:92:01
            X509v3 Authority Key Identifier:
                keyid:91:73:32:93:FC:63:50:AE:DF:BA:75:A9:16:FF:F4:1B:51:5E:CF:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3683A54/5C3677F21F7811EC9A12311AD8A014CE/kXMyk_xjUK7funWpFv_0G1Fez0w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kXMyk_xjUK7funWpFv_0G1Fez0w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3683A54/5C3677F21F7811EC9A12311AD8A014CE/kXMyk_xjUK7funWpFv_0G1Fez0w.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:00:67:c9:37:5d:9d:ac:f5:35:27:8d:f2:f9:26:6f:29:86:
         cd:8e:27:36:40:2a:71:f3:e3:80:2d:97:12:a6:42:45:12:f5:
         2e:db:5c:3c:d7:ab:db:4c:c6:c6:4d:13:05:48:40:7f:45:2f:
         e5:c4:88:b4:e0:bb:68:2b:cc:44:9c:cf:51:f2:4b:58:33:f6:
         de:c2:1d:39:df:55:94:72:5f:e7:05:e2:15:0a:f5:b4:bd:f3:
         a5:e9:c0:d0:69:1d:99:3b:68:ed:b5:a9:16:1e:8e:ca:0a:07:
         18:89:d2:ae:a0:57:27:d3:28:93:bc:94:55:9b:98:b4:01:95:
         38:72:c0:ff:c0:e3:38:c8:2c:2a:63:89:bf:b4:80:fc:8d:f1:
         49:9d:47:cf:23:11:26:e7:14:52:30:50:bb:3f:67:18:1f:77:
         02:98:43:2e:9b:82:eb:17:b5:d2:34:99:5f:84:39:95:8a:73:
         a7:2f:9a:64:c3:bc:2d:bf:52:21:11:4c:5f:ed:cc:8f:6a:30:
         06:51:5f:8b:7c:84:97:f3:dd:cd:db:bc:0a:dc:60:86:17:8b:
         c9:c5:04:f7:b6:36:fb:d3:cc:68:9d:68:fb:0e:0a:76:77:7d:
         5c:26:88:0f:32:dd:c8:56:7f:38:83:6f:3c:da:63:54:78:3a:
         47:15:dd:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 22:29:39 2026 by rpki-client