Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369D48A/C4097DD038D611ECA501247DD8A014CE/u_8lJAsgf5usxcuVSmIwmrulNl0.mft
File:                     u_8lJAsgf5usxcuVSmIwmrulNl0.mft (raw, json)
Hash identifier:          kuQ8YbMroLQbh2YGuGL8Vw31t1tEeg7Ids9ed6pOyFc=
Subject key identifier:   3A:83:A8:D3:7E:74:F4:CB:4E:C3:38:C3:11:83:A8:6C:20:84:F1:A2
Authority key identifier: BB:FF:25:24:0B:20:7F:9B:AC:C5:CB:95:4A:62:30:9A:BB:A5:36:5D
Certificate issuer:       /CN=F369D48AAF/serialNumber=BBFF25240B207F9BACC5CB954A62309ABBA5365D
Certificate serial:       067E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/u_8lJAsgf5usxcuVSmIwmrulNl0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369D48A/C4097DD038D611ECA501247DD8A014CE/u_8lJAsgf5usxcuVSmIwmrulNl0.mft
Manifest number:          067C
Signing time:             Sun 29 Mar 2026 02:30:01 +0000
Manifest this update:     Sun 29 Mar 2026 02:30:01 +0000
Manifest next update:     Tue 31 Mar 2026 02:30:00 +0000
Files and hashes:         1: u_8lJAsgf5usxcuVSmIwmrulNl0.crl (hash: ci7yyKTLs5ZXvIxpxoylnZI+OztUe9y5uVbzYgh9cX0=)
                          2: 5C15170E7C3F11ED8559019DF1222468.roa (hash: Fnw4e2Z6mQxfu98S+Kvx8lPub/zYdBqQ2Qpl3ytsjPY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369D48A/C4097DD038D611ECA501247DD8A014CE/u_8lJAsgf5usxcuVSmIwmrulNl0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369D48A/C4097DD038D611ECA501247DD8A014CE/u_8lJAsgf5usxcuVSmIwmrulNl0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/u_8lJAsgf5usxcuVSmIwmrulNl0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 31 Mar 2026 00:06:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1662 (0x67e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369D48AAF, serialNumber=BBFF25240B207F9BACC5CB954A62309ABBA5365D
        Validity
            Not Before: Mar 29 02:30:01 2026 GMT
            Not After : Mar 31 02:30:00 2026 GMT
        Subject: CN=69c88ea9-586a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:68:35:db:1d:18:f1:28:60:10:f2:18:98:0c:
                    fa:cf:78:1c:1b:6e:fa:22:b2:be:20:62:47:89:3b:
                    10:41:82:5b:b3:e2:ea:81:2d:6f:fd:00:a6:bc:99:
                    7b:bd:83:36:75:c8:03:86:e8:97:b4:8e:c7:69:7f:
                    16:b9:c6:29:d1:86:a5:7b:43:10:8e:6b:cc:dd:0b:
                    30:58:31:20:be:fd:94:f3:36:3d:fd:33:74:0b:12:
                    64:28:d9:08:61:ae:71:8b:1a:a0:f5:fd:c5:4c:d6:
                    92:fe:a0:7e:61:55:37:7f:1e:5a:f2:d2:c8:e6:f7:
                    3c:5a:9a:ac:af:a1:e8:0e:dc:44:b4:06:bc:59:67:
                    77:b4:77:3b:74:79:30:94:39:ce:ea:3c:ce:66:ec:
                    20:7d:e3:14:2d:89:41:b4:0f:21:5a:a5:ed:bc:ef:
                    6d:7c:26:6a:bf:20:46:a9:dc:bf:5c:fd:44:b0:3d:
                    47:2e:5f:7e:55:15:3b:de:02:9d:a0:e6:f1:22:1e:
                    2a:73:c1:57:8c:d3:0e:ff:1d:e1:49:01:7f:cc:3c:
                    81:81:be:df:1c:16:b0:5d:80:cc:76:03:fe:d8:68:
                    5b:17:22:8c:46:35:c2:c0:e0:bb:b9:e4:52:0c:40:
                    e0:58:d7:56:b1:e2:22:bb:c8:93:4b:99:b3:f4:8c:
                    39:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:83:A8:D3:7E:74:F4:CB:4E:C3:38:C3:11:83:A8:6C:20:84:F1:A2
            X509v3 Authority Key Identifier:
                keyid:BB:FF:25:24:0B:20:7F:9B:AC:C5:CB:95:4A:62:30:9A:BB:A5:36:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369D48A/C4097DD038D611ECA501247DD8A014CE/u_8lJAsgf5usxcuVSmIwmrulNl0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/u_8lJAsgf5usxcuVSmIwmrulNl0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369D48A/C4097DD038D611ECA501247DD8A014CE/u_8lJAsgf5usxcuVSmIwmrulNl0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:0a:42:8d:ae:82:15:53:cd:10:a3:e6:2d:87:10:b9:9b:b3:
         ae:89:47:2a:e6:ea:fd:a8:3d:ac:21:02:e6:de:2d:9e:fa:3c:
         06:91:5a:b3:7e:49:0c:b4:e3:5b:e1:ee:d0:d0:57:ee:12:ca:
         ff:56:15:83:3a:7d:99:e5:dc:95:77:c2:a2:54:b9:72:dd:bd:
         52:bb:c3:6a:b1:e7:2e:14:b2:8c:de:a0:fd:8c:0a:fe:58:0d:
         94:bf:13:e5:84:71:6f:c2:c8:34:27:36:95:dc:c6:5a:6d:f7:
         23:02:35:2a:89:fd:f8:d6:e9:64:07:fe:6d:11:a3:80:bd:48:
         d5:27:0a:7e:05:2c:81:f8:98:d3:0c:67:42:2b:fd:cd:98:79:
         93:ce:6e:5f:a0:b3:ac:50:04:d0:81:72:59:57:34:9e:db:24:
         27:13:3d:a5:9d:ee:ee:93:1b:61:6a:50:3c:5b:bd:62:32:a3:
         a1:4b:df:ed:0f:eb:35:30:3b:34:87:c5:c8:e9:e1:d1:87:57:
         58:8e:7c:cc:40:a5:1c:19:80:eb:a3:d7:72:c4:9b:57:4e:2c:
         c0:f1:95:69:7a:8b:a6:dc:f2:2a:f1:54:e9:6b:cb:48:74:23:
         e7:65:dd:1b:a7:d2:48:7c:83:4f:73:f8:fe:14:f8:95:76:c8:
         12:de:bd:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 30 01:53:05 2026 by rpki-client