Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3617560/1E87958AF25911ECB1BDF2C1F1222468/cvCHQUzi30S8T03_W-EUenpxqa4.mft
File:                     cvCHQUzi30S8T03_W-EUenpxqa4.mft (raw, json)
Hash identifier:          On4am3eIRKmM6dAdJX3ru77fHXNBjpQ69bPCknecsXY=
Subject key identifier:   9C:E8:22:9E:2F:08:C4:7E:02:07:E5:BE:6E:C4:16:FC:E0:6E:B3:B7
Authority key identifier: 72:F0:87:41:4C:E2:DF:44:BC:4F:4D:FF:5B:E1:14:7A:7A:71:A9:AE
Certificate issuer:       /CN=F3617560AP/serialNumber=72F087414CE2DF44BC4F4DFF5BE1147A7A71A9AE
Certificate serial:       058C
Authority info access:    rsync://rpki.afrinic.net/repository/apnic/cvCHQUzi30S8T03_W-EUenpxqa4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3617560/1E87958AF25911ECB1BDF2C1F1222468/cvCHQUzi30S8T03_W-EUenpxqa4.mft
Manifest number:          0589
Signing time:             Thu 26 Mar 2026 03:15:48 +0000
Manifest this update:     Thu 26 Mar 2026 03:15:47 +0000
Manifest next update:     Sat 28 Mar 2026 03:15:47 +0000
Files and hashes:         1: cvCHQUzi30S8T03_W-EUenpxqa4.crl (hash: Az3rNY6e2JMP5UksaLKd2/vFOiknxSnOqwuLJKCfqC8=)
                          2: F4B1DA0EF3B111ECBA4AC98DF1222468.roa (hash: BVR/waIvVkSnH8oG4jnugPkg0mpFTH8yh9hr63T0ym4=)
                          3: 467B6CDCF25A11ECB0A197C5F1222468.roa (hash: nyazJHmgaeSaThwXQennWPk+RG7afiy2fNVDqJDY42s=)
                          4: 435EB3FCF3B211EC9945E28EF1222468.roa (hash: qvMEmdrAoicNI7c3xjrgpNk9h06NSfKZgjizbA2v3kE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3617560/1E87958AF25911ECB1BDF2C1F1222468/cvCHQUzi30S8T03_W-EUenpxqa4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3617560/1E87958AF25911ECB1BDF2C1F1222468/cvCHQUzi30S8T03_W-EUenpxqa4.mft
                          rsync://rpki.afrinic.net/repository/apnic/cvCHQUzi30S8T03_W-EUenpxqa4.cer
                          rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.crl
                          rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/apnic-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:15:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1420 (0x58c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3617560AP, serialNumber=72F087414CE2DF44BC4F4DFF5BE1147A7A71A9AE
        Validity
            Not Before: Mar 26 03:15:47 2026 GMT
            Not After : Mar 28 03:15:47 2026 GMT
        Subject: CN=69c4a4e4-e040
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c3:c6:0c:71:a0:73:45:c0:0c:48:23:ad:c2:
                    b5:0a:89:c7:f9:83:b3:84:dc:5f:73:a7:bb:be:a6:
                    34:4b:e4:8b:6b:71:3a:e3:8e:d8:cd:eb:e3:fe:46:
                    e9:45:02:77:7d:93:56:0c:ae:46:79:11:7e:0e:e2:
                    6b:65:f1:44:d8:d5:34:aa:0b:02:2d:da:70:c2:3d:
                    fb:34:20:97:74:71:c6:67:c6:c4:8e:a6:78:79:f9:
                    c6:d0:aa:6f:50:50:10:87:c4:db:0f:29:c0:95:05:
                    0f:2a:fc:a8:81:63:b2:2e:22:2c:89:37:e9:f6:0f:
                    8d:93:d1:2d:31:ec:c0:d8:c0:d6:97:47:26:0f:96:
                    6d:53:a1:68:33:85:51:54:f9:d6:0b:17:ef:cf:fa:
                    c4:3a:98:14:66:d9:57:9c:fe:7a:c2:84:74:c1:d3:
                    52:12:b2:84:21:e7:29:d4:12:5d:3e:1c:dc:6c:24:
                    43:81:60:36:8a:31:d3:29:21:21:8a:32:79:6c:90:
                    70:d8:69:6c:6e:16:80:e5:c8:78:d6:7c:1b:57:6a:
                    c5:f1:4d:dc:28:38:66:ee:73:f3:23:46:46:57:e8:
                    fa:af:f9:cb:68:ef:68:41:73:9a:52:bd:c1:17:41:
                    6a:b5:28:3a:4e:27:d7:ab:39:3f:01:6d:b5:9e:b3:
                    44:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:E8:22:9E:2F:08:C4:7E:02:07:E5:BE:6E:C4:16:FC:E0:6E:B3:B7
            X509v3 Authority Key Identifier:
                keyid:72:F0:87:41:4C:E2:DF:44:BC:4F:4D:FF:5B:E1:14:7A:7A:71:A9:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3617560/1E87958AF25911ECB1BDF2C1F1222468/cvCHQUzi30S8T03_W-EUenpxqa4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/apnic/cvCHQUzi30S8T03_W-EUenpxqa4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3617560/1E87958AF25911ECB1BDF2C1F1222468/cvCHQUzi30S8T03_W-EUenpxqa4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:82:bb:e0:e4:a0:96:fe:d0:34:75:79:39:b0:a7:38:f6:bc:
         86:bb:a6:0a:63:86:de:30:98:60:e7:2a:3d:f5:b8:68:d2:90:
         8d:68:69:88:d6:8c:48:91:16:8b:d5:b2:f6:c7:f3:0f:06:5a:
         bb:fa:67:46:e4:e1:9b:5c:e9:96:5e:a0:61:05:7d:4b:36:6f:
         5a:18:bb:23:cf:e3:1f:b3:ad:47:4b:9e:4f:12:ff:43:25:e5:
         0a:9a:30:e7:93:74:16:cb:31:46:17:4c:28:16:dc:3f:86:99:
         88:32:97:db:0a:4e:a8:0e:5e:10:cf:f4:35:d8:8f:51:6f:d4:
         9a:26:fd:55:8b:3d:73:b1:db:42:51:09:f9:cd:d4:52:01:fd:
         34:51:f8:3a:e1:26:ba:28:4a:02:aa:84:28:cd:95:95:3e:2a:
         4a:1c:d1:ea:d7:b5:b2:a7:c9:bf:ba:24:da:d9:c5:e4:e3:55:
         d5:42:af:4a:cb:60:31:b0:e4:f7:2e:37:dd:a4:c0:18:e1:5a:
         fa:27:ba:47:1e:ea:1e:3b:7d:9e:a3:72:a9:c3:17:21:2e:37:
         68:b5:fa:f1:b4:83:fa:0f:6c:d2:32:10:be:46:3c:f3:4c:e2:
         0c:42:b9:6c:0d:cc:dd:b1:2c:76:cb:19:4b:34:cd:5f:ad:c0:
         bb:b4:fb:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:05:32 2026 by rpki-client