Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F8B97/E559EB4C370411EC9F5EF526D8A014CE/Qp9woBorWSL-60vwyD1zxfV08l0.mft
File:                     Qp9woBorWSL-60vwyD1zxfV08l0.mft (raw, json)
Hash identifier:          jzBhKs83YH5i++cz0zS2PxVNjYebtgltdZcLXw6f2nQ=
Subject key identifier:   4B:3F:12:FC:3A:5C:2B:5B:EE:91:D0:C5:7B:CA:FE:A2:C4:24:13:11
Authority key identifier: 42:9F:70:A0:1A:2B:59:22:FE:EB:4B:F0:C8:3D:73:C5:F5:74:F2:5D
Certificate issuer:       /CN=F36F8B97AF/serialNumber=429F70A01A2B5922FEEB4BF0C83D73C5F574F25D
Certificate serial:       0679
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Qp9woBorWSL-60vwyD1zxfV08l0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F8B97/E559EB4C370411EC9F5EF526D8A014CE/Qp9woBorWSL-60vwyD1zxfV08l0.mft
Manifest number:          0675
Signing time:             Mon 23 Mar 2026 02:52:01 +0000
Manifest this update:     Mon 23 Mar 2026 02:52:00 +0000
Manifest next update:     Wed 25 Mar 2026 02:52:00 +0000
Files and hashes:         1: Qp9woBorWSL-60vwyD1zxfV08l0.crl (hash: 2+q9dxkTHPjc1j4NlTMDKLhV1QEWiD69sPNd4TCSBRU=)
                          2: FD4DB548A1BF11EFA39151A0762E951A.roa (hash: jNJWeITwxu0vczeduFKEplO/t2/G8EFVwbsdEOzx9y0=)
                          3: 5813D9640FB411F0A6B56DA0762E951A.roa (hash: 2Q+hoGwNUDdoOl21mzLdpEGQumgusRGF7qozk0hKNmw=)
                          4: BAA0E2DEA1B411EFA1EE2F5D762E951A.roa (hash: K1xKU9htAsSiqeoEzSyp58rJTSDbVeGSEYylDFoKes4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F8B97/E559EB4C370411EC9F5EF526D8A014CE/Qp9woBorWSL-60vwyD1zxfV08l0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F8B97/E559EB4C370411EC9F5EF526D8A014CE/Qp9woBorWSL-60vwyD1zxfV08l0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Qp9woBorWSL-60vwyD1zxfV08l0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 25 Mar 2026 00:06:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1657 (0x679)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F8B97AF, serialNumber=429F70A01A2B5922FEEB4BF0C83D73C5F574F25D
        Validity
            Not Before: Mar 23 02:52:00 2026 GMT
            Not After : Mar 25 02:52:00 2026 GMT
        Subject: CN=69c0aad0-d7ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:90:4c:4e:8d:81:7d:99:da:27:a2:3d:3f:b9:
                    c6:e8:71:d5:02:bc:df:12:a3:d9:2a:95:83:77:02:
                    c2:d9:c2:33:51:91:74:5c:e0:df:55:4e:e6:08:43:
                    12:c2:07:53:08:36:9e:13:71:94:c4:ba:d8:43:bc:
                    c9:5f:19:db:d8:8b:27:a9:9d:ae:2b:76:cb:20:ce:
                    a6:3e:64:6c:b9:88:c1:9f:e8:d2:00:16:7e:e4:b2:
                    6f:7f:8c:1d:1d:ef:7a:4e:ed:8d:57:25:f3:86:91:
                    57:c8:3a:54:b3:6d:d1:86:95:17:78:2d:61:61:19:
                    30:d0:3c:f9:e6:17:22:1e:e9:0c:2f:6a:56:6c:5e:
                    8e:c0:4d:71:cd:33:a0:db:ce:67:01:b1:d5:59:e2:
                    31:51:55:c7:e9:40:e1:8a:a5:57:cd:f0:13:0c:ce:
                    d5:a4:fb:29:76:ea:e9:51:fa:ee:e4:98:db:eb:0b:
                    05:38:ab:58:5b:95:45:72:6d:8a:03:dd:bf:c6:4a:
                    ae:fe:7b:54:0f:99:2a:e0:5d:0e:2b:75:f0:d0:4b:
                    4f:42:66:4d:ce:31:0c:c3:86:c3:8e:f9:e9:25:15:
                    91:0e:a1:c8:4b:3c:ad:64:5c:c9:3d:bf:92:95:ae:
                    7d:9d:d3:eb:1d:d3:6a:5b:86:1d:b9:c7:0f:22:99:
                    7e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:3F:12:FC:3A:5C:2B:5B:EE:91:D0:C5:7B:CA:FE:A2:C4:24:13:11
            X509v3 Authority Key Identifier:
                keyid:42:9F:70:A0:1A:2B:59:22:FE:EB:4B:F0:C8:3D:73:C5:F5:74:F2:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8B97/E559EB4C370411EC9F5EF526D8A014CE/Qp9woBorWSL-60vwyD1zxfV08l0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Qp9woBorWSL-60vwyD1zxfV08l0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8B97/E559EB4C370411EC9F5EF526D8A014CE/Qp9woBorWSL-60vwyD1zxfV08l0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:01:85:84:4e:38:f0:ee:3f:dd:c6:42:5f:24:29:f0:85:bf:
         fa:d5:80:8f:19:6c:20:37:05:62:a0:91:f0:00:d6:c3:8b:7b:
         e1:65:dd:af:ca:2b:d1:6b:1c:8f:4e:76:24:04:f9:8f:d2:4c:
         2b:44:33:b6:ed:d9:83:1b:77:37:e2:1c:2d:ef:64:2c:83:b2:
         24:99:e7:e0:a7:b5:a4:75:e3:6d:b1:95:74:14:b0:41:5f:13:
         ba:47:75:fd:a4:8b:ce:41:cd:51:8b:90:0f:7b:cb:d6:33:35:
         65:b3:3e:e8:53:7b:1c:95:ae:80:71:e7:d5:4c:79:11:5a:c1:
         24:c0:fe:0e:d6:4e:71:1d:ca:a5:aa:63:ba:d9:15:98:00:58:
         e8:31:42:99:ae:2c:67:34:4a:9c:26:04:a9:38:78:56:45:78:
         d7:18:22:dc:2e:87:af:18:f8:53:a0:36:25:45:66:06:92:30:
         ae:95:f4:0c:93:2b:6e:22:8d:7d:1c:c4:d5:89:c1:35:05:a9:
         a0:f8:9e:a1:fa:74:03:46:8e:93:f5:34:28:00:48:de:0e:03:
         89:9c:40:73:c7:fb:14:82:3e:3f:bf:7f:34:c1:fb:bd:dd:29:
         35:8b:8d:c6:a0:cb:2b:ff:ba:f9:c0:ec:98:6a:bb:3c:81:4e:
         e1:be:4d:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 23 10:30:43 2026 by rpki-client