Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C3A58/1B78C60CA8BF11EEBB3CA855775412E6/4V9Q3dKOAv1uaWbVkY0bC79GhOg.mft
File:                     4V9Q3dKOAv1uaWbVkY0bC79GhOg.mft (raw, json)
Hash identifier:          afl4BIdXLxOdfPjGwfHkonxQH0SGhyOdUhrjDzj0ZeQ=
Subject key identifier:   7C:F7:7A:B5:16:33:99:D8:FA:57:69:E0:CD:58:19:17:08:3A:F6:2D
Authority key identifier: E1:5F:50:DD:D2:8E:02:FD:6E:69:66:D5:91:8D:1B:0B:BF:46:84:E8
Certificate issuer:       /CN=F36C3A58AF/serialNumber=E15F50DDD28E02FD6E6966D5918D1B0BBF4684E8
Certificate serial:       036C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/4V9Q3dKOAv1uaWbVkY0bC79GhOg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C3A58/1B78C60CA8BF11EEBB3CA855775412E6/4V9Q3dKOAv1uaWbVkY0bC79GhOg.mft
Manifest number:          035E
Signing time:             Sun 29 Mar 2026 03:54:59 +0000
Manifest this update:     Sun 29 Mar 2026 03:54:59 +0000
Manifest next update:     Tue 31 Mar 2026 03:54:59 +0000
Files and hashes:         1: 4V9Q3dKOAv1uaWbVkY0bC79GhOg.crl (hash: P2P2yMV1SKV1wfMdh79GnGObV1GcX0nyZ3WEhDBCCQA=)
                          2: C60C59567D8711EF97D7ACB4762E951A.roa (hash: qjux6GhSq9uX5DCNJbFQuyrkaPLVantCfSfpdQCqZvM=)
                          3: 963E345AAA6E11F092CBEA92DAE4EC9C.roa (hash: pST0iqM1LIDeTWfpvZG5M6dsTHwi1B1szH8dsYd3DBU=)
                          4: 2257925CAA6E11F0A6F76B90DAE4EC9C.roa (hash: oxEm9UctpCtTUrbHITbDcrkM+rBf2+aSQrb3SqlA3kA=)
                          5: 24A9CB30596E11EFA89A0E7E762E951A.roa (hash: eSokWiFbXZKHYJAeMCSCb+kdTU9P/gdQpCGsPx3aeF0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C3A58/1B78C60CA8BF11EEBB3CA855775412E6/4V9Q3dKOAv1uaWbVkY0bC79GhOg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C3A58/1B78C60CA8BF11EEBB3CA855775412E6/4V9Q3dKOAv1uaWbVkY0bC79GhOg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/4V9Q3dKOAv1uaWbVkY0bC79GhOg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 31 Mar 2026 00:06:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 876 (0x36c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C3A58AF, serialNumber=E15F50DDD28E02FD6E6966D5918D1B0BBF4684E8
        Validity
            Not Before: Mar 29 03:54:59 2026 GMT
            Not After : Mar 31 03:54:59 2026 GMT
        Subject: CN=69c8a293-2fab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:04:0e:dd:d9:16:85:71:69:f5:30:04:48:b2:
                    e8:79:be:dc:94:8d:ea:ec:76:52:0e:2c:8f:e0:04:
                    66:f9:66:06:e5:c7:da:65:ef:f2:1a:45:18:20:6e:
                    d4:16:3f:c1:11:9b:aa:11:90:65:d5:79:65:d0:48:
                    57:61:8a:d1:84:20:bd:fd:01:2e:f9:16:a0:12:23:
                    7a:71:9b:4d:f3:a9:04:fc:68:73:80:7d:6f:f6:44:
                    db:7b:dd:20:7b:d2:05:cb:0d:2e:4f:d6:64:a1:cb:
                    f2:19:7f:51:40:a8:1f:a1:bb:bf:77:6c:fb:53:0d:
                    07:54:c7:46:92:24:35:ce:cb:e3:97:ca:88:57:49:
                    c2:48:92:f8:0d:92:c7:db:d6:0c:cb:fa:2f:c0:e5:
                    50:84:ef:a6:83:7b:5c:4c:9b:e9:d3:21:e6:ca:bf:
                    f8:55:b3:ce:19:49:18:f7:bc:45:2e:ad:7b:96:b9:
                    d8:2a:04:a1:d8:08:ea:4a:4f:d9:7d:78:f4:83:a4:
                    45:ab:72:e7:dd:3f:d1:40:2a:90:24:87:b6:d6:15:
                    6d:64:3b:99:8b:7c:48:42:a4:ff:9a:33:45:82:81:
                    72:36:2d:3a:fd:80:57:ce:c5:0a:56:22:79:62:ef:
                    91:c2:cf:88:f1:cd:d9:f1:50:9e:9f:c6:31:0f:0d:
                    82:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:F7:7A:B5:16:33:99:D8:FA:57:69:E0:CD:58:19:17:08:3A:F6:2D
            X509v3 Authority Key Identifier:
                keyid:E1:5F:50:DD:D2:8E:02:FD:6E:69:66:D5:91:8D:1B:0B:BF:46:84:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C3A58/1B78C60CA8BF11EEBB3CA855775412E6/4V9Q3dKOAv1uaWbVkY0bC79GhOg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4V9Q3dKOAv1uaWbVkY0bC79GhOg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C3A58/1B78C60CA8BF11EEBB3CA855775412E6/4V9Q3dKOAv1uaWbVkY0bC79GhOg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:57:74:c7:b1:9d:5b:48:6c:27:28:a0:6c:4e:67:0d:74:5e:
         20:97:f8:3a:a4:f8:e1:e2:33:4a:a0:ef:00:3e:af:b6:d2:97:
         cf:ee:d7:78:49:6b:9c:04:b4:b0:24:01:db:45:fd:44:81:aa:
         d7:a1:3d:eb:40:c6:e8:34:02:70:28:2f:6e:7b:c1:8a:f2:74:
         4a:be:b1:98:7e:78:93:97:47:77:34:fe:3a:80:c2:04:69:72:
         e4:5d:d5:aa:6f:cd:95:e6:20:ac:5c:70:f0:32:1c:73:f9:43:
         93:07:90:ae:ef:f0:3e:21:78:2f:e7:4a:3d:67:cc:18:64:00:
         66:85:1a:08:33:55:6e:2e:5d:17:df:57:1f:e1:7e:5a:88:99:
         93:89:9a:d7:37:f5:22:1e:0e:5c:f8:74:b7:d6:94:56:92:53:
         bb:07:dd:11:73:e2:e8:76:27:56:0f:61:be:4d:f0:fa:ae:d9:
         c2:1b:2a:c4:b9:cf:10:6e:11:16:d0:74:93:77:0e:90:ff:cb:
         85:2e:c9:a2:d3:5c:2d:14:7b:f1:df:b3:c0:6d:75:d1:d9:4c:
         fa:5c:95:df:2b:0a:ca:fa:a9:b0:4f:89:4b:77:e0:76:cd:41:
         e4:9a:70:5b:cc:39:db:4d:97:4f:38:8f:05:ac:ce:fa:19:2c:
         61:b7:1f:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 30 01:31:51 2026 by rpki-client