Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C684F/C401133ED48311E98A92991CF8AEA228/qq2zeUNQh6CU8n12Cd-4YvxcxGU.mft
File:                     qq2zeUNQh6CU8n12Cd-4YvxcxGU.mft (raw, json)
Hash identifier:          sfFteYSE5MVsVl+mEGVH/BeydONoatO1L0WOlmQUY2c=
Subject key identifier:   3A:0F:FF:B3:E7:B9:92:01:9B:DE:16:CD:2F:87:62:5C:50:A8:25:1F
Authority key identifier: AA:AD:B3:79:43:50:87:A0:94:F2:7D:76:09:DF:B8:62:FC:5C:C4:65
Certificate issuer:       /CN=F36C684FRI/serialNumber=AAADB379435087A094F27D7609DFB862FC5CC465
Certificate serial:       097F
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/qq2zeUNQh6CU8n12Cd-4YvxcxGU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C684F/C401133ED48311E98A92991CF8AEA228/qq2zeUNQh6CU8n12Cd-4YvxcxGU.mft
Manifest number:          097F
Signing time:             Fri 13 Mar 2026 01:29:36 +0000
Manifest this update:     Fri 13 Mar 2026 01:29:36 +0000
Manifest next update:     Sun 15 Mar 2026 01:29:36 +0000
Files and hashes:         1: qq2zeUNQh6CU8n12Cd-4YvxcxGU.crl (hash: flrpYirWM/Hrv4wOC3uYjVpwy82XpyPhtmi/LzPudrg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C684F/C401133ED48311E98A92991CF8AEA228/qq2zeUNQh6CU8n12Cd-4YvxcxGU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C684F/C401133ED48311E98A92991CF8AEA228/qq2zeUNQh6CU8n12Cd-4YvxcxGU.mft
                          rsync://rpki.afrinic.net/repository/ripe/qq2zeUNQh6CU8n12Cd-4YvxcxGU.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 15 Mar 2026 00:45:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2431 (0x97f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C684FRI, serialNumber=AAADB379435087A094F27D7609DFB862FC5CC465
        Validity
            Not Before: Mar 13 01:29:36 2026 GMT
            Not After : Mar 15 01:29:36 2026 GMT
        Subject: CN=69b36880-ba49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:46:72:8e:73:39:d0:80:27:12:48:89:4b:3a:
                    70:11:be:7d:d6:d1:99:28:fc:91:71:cd:b7:4b:b3:
                    59:71:1e:a2:04:57:20:c5:53:1b:e3:df:95:94:38:
                    37:31:62:97:3b:ac:88:4c:ec:4e:15:64:d5:19:92:
                    fa:9f:f8:1f:b4:53:3f:13:56:59:ef:6a:50:6f:03:
                    07:ae:a7:70:19:f2:6b:20:e7:d5:02:02:05:8d:36:
                    c3:ac:45:c5:cf:9b:28:2f:6c:40:79:cf:e6:72:3c:
                    ce:c2:69:81:ba:d2:56:70:b8:44:ea:1e:f4:59:12:
                    4b:d4:f4:86:32:79:f2:63:bc:23:7f:89:5c:99:4c:
                    f2:48:73:71:07:84:7b:21:18:f0:f0:9f:7c:ec:2a:
                    41:05:46:20:59:1a:b8:af:90:a1:8b:2f:60:3e:47:
                    b0:85:e7:9e:14:e3:6f:1d:cf:77:a1:15:42:63:0d:
                    33:29:6b:a3:f4:ee:63:d1:fc:55:23:16:5c:b5:34:
                    d1:3e:61:3e:07:ed:49:a4:67:37:d4:cd:0f:4b:1b:
                    59:ca:04:13:76:80:8f:0c:24:7e:58:0d:0e:04:c8:
                    10:83:44:7d:90:8f:97:cd:6a:10:de:72:cf:7d:5b:
                    8e:5f:2f:4c:00:17:fa:73:40:7e:97:ce:bb:45:6e:
                    40:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:0F:FF:B3:E7:B9:92:01:9B:DE:16:CD:2F:87:62:5C:50:A8:25:1F
            X509v3 Authority Key Identifier:
                keyid:AA:AD:B3:79:43:50:87:A0:94:F2:7D:76:09:DF:B8:62:FC:5C:C4:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C684F/C401133ED48311E98A92991CF8AEA228/qq2zeUNQh6CU8n12Cd-4YvxcxGU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/qq2zeUNQh6CU8n12Cd-4YvxcxGU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C684F/C401133ED48311E98A92991CF8AEA228/qq2zeUNQh6CU8n12Cd-4YvxcxGU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:0a:1e:9f:8f:85:31:aa:6c:0e:bd:22:d9:27:f2:a5:a5:4d:
         56:42:09:68:94:86:8a:3f:17:eb:c4:18:9e:2d:80:22:2c:80:
         c0:c7:7d:36:97:48:71:21:0f:6b:30:2c:4b:82:0b:46:72:fa:
         72:6c:92:b3:86:2a:2c:8d:4d:b0:9c:33:ea:b3:79:cc:f5:08:
         e3:6b:4e:83:50:c7:ed:1f:f7:01:6f:c9:a9:62:bb:18:2d:83:
         a6:bc:4f:c5:0d:e1:b5:fa:89:12:89:bd:ba:84:5c:c0:61:f2:
         a6:40:b0:40:ec:2e:b1:5d:41:01:fc:24:81:98:9f:51:78:25:
         81:48:db:11:6e:26:f1:71:03:00:6c:55:c8:45:7f:1c:75:f9:
         08:b5:fc:ec:9e:e3:5f:fd:a0:52:a6:ef:c1:57:8a:44:ac:2d:
         80:5a:e8:84:4a:9e:c6:b8:2e:00:86:0a:45:20:39:0e:e5:2b:
         cf:c5:76:38:57:3e:c3:bc:59:ff:c4:3b:c2:db:41:31:b1:f4:
         91:cd:9a:4f:52:52:3b:9a:27:4c:31:6f:76:ed:41:af:18:3d:
         71:b4:cf:fe:31:a4:43:5b:b8:fc:88:7c:cd:08:a1:d3:b7:8b:
         ed:69:f8:d1:3e:8c:c2:f9:fd:37:66:24:47:ac:03:36:b5:ad:
         b0:fc:c9:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 07:26:09 2026 by rpki-client