Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A9F58/2674144C1D5E11F1BB6B757FDAE4EC9C/LLe0CZqpG_BaF2pF-h63Z-m1oq8.mft
File:                     LLe0CZqpG_BaF2pF-h63Z-m1oq8.mft (raw, json)
Hash identifier:          b49+4rISzEo5GpyhYyrySlU+A/+WUHU3C2DAyfJQvP4=
Subject key identifier:   52:EB:63:FD:2E:00:24:95:0E:25:15:D0:2D:73:B6:0A:80:6D:C0:5D
Authority key identifier: 2C:B7:B4:09:9A:A9:1B:F0:5A:17:6A:45:FA:1E:B7:67:E9:B5:A2:AF
Certificate issuer:       /CN=F36A9F58AF/serialNumber=2CB7B4099AA91BF05A176A45FA1EB767E9B5A2AF
Certificate serial:       10
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/LLe0CZqpG_BaF2pF-h63Z-m1oq8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A9F58/2674144C1D5E11F1BB6B757FDAE4EC9C/LLe0CZqpG_BaF2pF-h63Z-m1oq8.mft
Manifest number:          0F
Signing time:             Mon 23 Mar 2026 06:37:55 +0000
Manifest this update:     Mon 23 Mar 2026 06:37:54 +0000
Manifest next update:     Wed 25 Mar 2026 06:37:54 +0000
Files and hashes:         1: LLe0CZqpG_BaF2pF-h63Z-m1oq8.crl (hash: VTuomPX4TT1ZvVth11BbnXsVSMiR6mVgaddI8ElS6oc=)
                          2: 27F68F001D6011F189B5A389DAE4EC9C.roa (hash: r131pu8xYiTZt6DCD0vKC9bThOnceIVZGaBlMh5whio=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A9F58/2674144C1D5E11F1BB6B757FDAE4EC9C/LLe0CZqpG_BaF2pF-h63Z-m1oq8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A9F58/2674144C1D5E11F1BB6B757FDAE4EC9C/LLe0CZqpG_BaF2pF-h63Z-m1oq8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/LLe0CZqpG_BaF2pF-h63Z-m1oq8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 25 Mar 2026 00:06:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16 (0x10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A9F58AF, serialNumber=2CB7B4099AA91BF05A176A45FA1EB767E9B5A2AF
        Validity
            Not Before: Mar 23 06:37:54 2026 GMT
            Not After : Mar 25 06:37:54 2026 GMT
        Subject: CN=69c0dfc3-dcc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:bb:7c:6c:ad:7b:77:72:d2:8c:62:2d:b2:74:
                    5b:01:e2:eb:fe:57:71:e2:13:c0:c2:dd:40:a7:17:
                    bc:8f:e5:66:80:b1:76:36:2f:58:d8:e5:77:07:3d:
                    5a:60:1c:61:79:32:a2:5a:1b:cd:59:9f:6f:be:0e:
                    a9:93:0b:28:35:3a:f3:b9:d3:9c:e1:a3:f5:20:f3:
                    76:92:53:23:18:5d:89:c1:11:83:4d:87:22:54:6a:
                    03:51:65:ed:5e:6d:1a:7d:bd:d3:a9:eb:75:15:f3:
                    e1:5a:b6:5f:9e:1f:d9:5e:57:84:9c:70:fe:a7:de:
                    b4:02:96:5f:85:21:9b:f7:28:e2:5a:06:0f:f6:c6:
                    cd:f9:c3:5c:46:e2:81:3a:be:0b:d2:2f:ae:5f:a5:
                    dd:4c:27:42:7b:69:7d:80:54:c1:9c:37:70:46:c6:
                    58:d9:4b:c0:77:b2:e5:02:58:b1:4f:21:05:82:31:
                    e2:00:a2:22:1a:59:d8:db:08:db:7a:92:8d:41:59:
                    92:38:8c:2a:40:43:73:ee:26:98:78:b5:b7:bf:c5:
                    73:92:da:4b:b1:74:f9:04:3d:16:ce:02:f5:63:91:
                    fc:e3:68:63:7c:b6:2e:07:10:92:73:a0:8b:73:c0:
                    13:f0:c1:53:47:25:77:20:c2:e4:64:f7:76:02:b2:
                    9e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:EB:63:FD:2E:00:24:95:0E:25:15:D0:2D:73:B6:0A:80:6D:C0:5D
            X509v3 Authority Key Identifier:
                keyid:2C:B7:B4:09:9A:A9:1B:F0:5A:17:6A:45:FA:1E:B7:67:E9:B5:A2:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A9F58/2674144C1D5E11F1BB6B757FDAE4EC9C/LLe0CZqpG_BaF2pF-h63Z-m1oq8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LLe0CZqpG_BaF2pF-h63Z-m1oq8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A9F58/2674144C1D5E11F1BB6B757FDAE4EC9C/LLe0CZqpG_BaF2pF-h63Z-m1oq8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:41:94:2c:43:4c:a8:79:b7:f7:63:ae:7a:96:26:6e:42:62:
         37:3a:71:9b:76:08:87:21:52:47:35:f2:cc:31:19:cd:32:97:
         77:63:86:da:da:be:6c:1e:db:e3:9c:69:ba:f5:e4:6e:e6:53:
         72:18:15:9d:4e:e5:80:65:c2:7c:1d:50:62:a6:0b:2e:86:32:
         a0:e8:ad:aa:e8:3b:bb:c4:81:39:25:61:43:c0:fd:ab:de:b1:
         8c:6c:bf:20:e1:e3:8c:75:8b:ba:b2:f8:86:24:08:bb:ae:8d:
         ce:ab:82:42:7b:b9:61:fe:53:ff:8a:cb:5b:70:fb:bc:39:d1:
         a9:ff:3f:ee:cb:34:4a:70:1d:bd:ff:fd:b1:bb:89:49:0e:43:
         46:41:de:3e:6f:95:c1:e3:ed:3d:46:14:12:39:ed:d4:21:93:
         3c:34:69:ce:08:25:de:e1:4a:12:b1:8f:4e:41:84:db:6b:02:
         8f:8a:03:9a:f4:7f:b0:9e:01:8e:b5:49:e1:1d:ae:b6:b1:b6:
         3d:f2:15:10:8d:55:75:a6:09:84:f4:f0:8b:b7:7a:4a:b0:84:
         15:88:30:fa:c0:56:2d:da:57:a1:29:32:d1:31:48:2e:c9:10:
         05:72:da:ae:09:af:66:8d:fb:ec:b0:f0:00:d7:5d:aa:62:f6:
         d3:dd:af:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 23 10:30:44 2026 by rpki-client