Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EB6AE/381289B283DC11EA96D3CC4EF8AEA228/NzwYJ-JwTD_cFqh4mA-tyINfpII.mft
File:                     NzwYJ-JwTD_cFqh4mA-tyINfpII.mft (raw, json)
Hash identifier:          1DOQ+1KCNVquMJH6xGvRLLjeqwJoXZbiKfa0M2KQ2Zw=
Subject key identifier:   0B:15:57:30:F2:3B:19:4D:0F:C9:01:AD:5C:55:C4:2E:F1:9C:84:A0
Authority key identifier: 37:3C:18:27:E2:70:4C:3F:DC:16:A8:78:98:0F:AD:C8:83:5F:A4:82
Certificate issuer:       /CN=F36EB6AEAF/serialNumber=373C1827E2704C3FDC16A878980FADC8835FA482
Certificate serial:       08B0
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/NzwYJ-JwTD_cFqh4mA-tyINfpII.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EB6AE/381289B283DC11EA96D3CC4EF8AEA228/NzwYJ-JwTD_cFqh4mA-tyINfpII.mft
Manifest number:          08AE
Signing time:             Sat 28 Mar 2026 01:58:38 +0000
Manifest this update:     Sat 28 Mar 2026 01:58:37 +0000
Manifest next update:     Mon 30 Mar 2026 01:58:37 +0000
Files and hashes:         1: NzwYJ-JwTD_cFqh4mA-tyINfpII.crl (hash: kOIwPbPHy98WFH1MyvkVLa7DmZBGYUlBQSfCWGuSbYE=)
                          2: 194DF7D868FB11EFB7429B90762E951A.roa (hash: NFQt82rMb7NWbYXB4Ts4sK7O+uFyIpzTw3E2kXEqFmc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EB6AE/381289B283DC11EA96D3CC4EF8AEA228/NzwYJ-JwTD_cFqh4mA-tyINfpII.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EB6AE/381289B283DC11EA96D3CC4EF8AEA228/NzwYJ-JwTD_cFqh4mA-tyINfpII.mft
                          rsync://rpki.afrinic.net/repository/afrinic/NzwYJ-JwTD_cFqh4mA-tyINfpII.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 30 Mar 2026 00:07:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2224 (0x8b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EB6AEAF, serialNumber=373C1827E2704C3FDC16A878980FADC8835FA482
        Validity
            Not Before: Mar 28 01:58:37 2026 GMT
            Not After : Mar 30 01:58:37 2026 GMT
        Subject: CN=69c735ce-3a37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:d7:04:78:8d:c8:ea:99:ce:b3:c0:a4:29:21:
                    84:a0:52:dd:e6:31:e5:fd:78:a0:29:16:e4:1d:95:
                    fe:96:a7:86:d9:85:ba:9f:cc:5f:17:54:20:bf:37:
                    6a:8c:18:4e:5c:75:29:ea:86:d0:2d:6e:85:15:6c:
                    4f:64:76:87:5c:1d:cf:46:f6:77:ae:5f:d8:1c:c0:
                    2e:a7:85:0a:20:20:35:7c:21:34:26:8f:2b:b1:5f:
                    8d:27:b2:5d:1d:d3:43:52:79:8b:de:cd:6f:36:95:
                    cc:b2:bd:83:b1:de:02:4b:cf:25:b4:53:76:d7:64:
                    2f:f9:c7:d3:4b:66:12:21:52:83:86:a7:00:29:eb:
                    f4:0a:7e:51:b5:a4:1a:e9:a4:29:b8:74:95:61:f7:
                    9f:af:5d:a7:b8:0d:33:b1:51:a3:e3:42:2b:90:44:
                    e7:0a:23:94:c9:8d:ef:70:2a:aa:35:bd:36:02:39:
                    e3:03:60:64:d3:f1:d1:d8:d5:c3:f2:b3:29:f1:2e:
                    8d:c5:bf:2e:a4:9a:94:ff:44:77:6f:a2:11:cd:21:
                    e6:3e:9d:e7:84:a7:b3:5b:3e:69:ad:90:ed:f3:ef:
                    d2:c9:3a:83:ab:47:3a:9f:fc:3b:83:7b:d0:f4:fb:
                    f1:6c:f0:bb:1c:c8:f1:65:6e:ce:9d:f5:05:80:de:
                    3a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:15:57:30:F2:3B:19:4D:0F:C9:01:AD:5C:55:C4:2E:F1:9C:84:A0
            X509v3 Authority Key Identifier:
                keyid:37:3C:18:27:E2:70:4C:3F:DC:16:A8:78:98:0F:AD:C8:83:5F:A4:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EB6AE/381289B283DC11EA96D3CC4EF8AEA228/NzwYJ-JwTD_cFqh4mA-tyINfpII.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/NzwYJ-JwTD_cFqh4mA-tyINfpII.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EB6AE/381289B283DC11EA96D3CC4EF8AEA228/NzwYJ-JwTD_cFqh4mA-tyINfpII.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:54:cd:c6:8e:d7:85:4d:02:d7:47:86:97:da:18:a4:66:e3:
         58:1c:07:e7:2f:92:c2:42:32:ef:2e:bf:66:18:d7:67:19:f1:
         f4:19:8d:6d:4c:18:56:4f:17:3b:b1:13:10:6a:8f:a4:72:f9:
         3f:8e:c4:e9:df:8b:f9:94:7f:9d:5c:69:24:2c:c6:5c:4a:57:
         89:d0:b6:00:a9:19:39:cd:ec:a3:e3:4c:29:6a:8b:59:7b:72:
         02:2b:a9:44:3e:34:65:a0:49:b3:f7:d2:5f:cb:ac:2a:22:bd:
         9b:6a:a8:68:65:5c:86:7a:77:bf:6e:ef:05:39:f0:97:3d:37:
         27:42:21:72:c5:47:7a:8f:db:7d:e9:aa:19:66:e0:ec:c1:89:
         4a:59:e5:c2:c3:a8:4f:f4:f2:62:e9:33:7a:d6:c4:6b:e9:7d:
         c6:88:d5:a0:f6:2a:5e:8c:ae:f2:9d:73:63:50:b2:c3:3a:e7:
         18:27:7d:9c:30:f9:15:74:fa:28:e4:7b:7f:c5:35:80:a9:a4:
         8a:81:4b:fe:90:c0:71:47:db:42:b3:35:87:70:8d:c6:fd:ec:
         d6:1d:a3:47:b0:bf:39:9a:90:fe:bf:54:ac:e1:1b:35:02:72:
         da:ed:5d:b0:72:49:d6:c7:c0:87:1d:7a:c4:88:eb:09:ea:54:
         9d:60:4b:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 07:17:04 2026 by rpki-client