Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/iCYpiV2NtXslQepI-hEmMl4pAgs.mft
File:                     iCYpiV2NtXslQepI-hEmMl4pAgs.mft (raw, json)
Hash identifier:          htWdfYZ4s+tXSsgqfAiZMgga0ELqOSJKmH+Moplz5VI=
Subject key identifier:   C8:75:1B:43:2C:5E:1B:48:35:03:62:A7:1C:7A:85:54:1D:25:F2:CF
Authority key identifier: 88:26:29:89:5D:8D:B5:7B:25:41:EA:48:FA:11:26:32:5E:29:02:0B
Certificate issuer:       /CN=F3620ACFAF/serialNumber=882629895D8DB57B2541EA48FA1126325E29020B
Certificate serial:       0FA7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/iCYpiV2NtXslQepI-hEmMl4pAgs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/iCYpiV2NtXslQepI-hEmMl4pAgs.mft
Manifest number:          0F9B
Signing time:             Wed 13 May 2026 00:57:03 +0000
Manifest this update:     Wed 13 May 2026 00:57:03 +0000
Manifest next update:     Fri 15 May 2026 00:57:03 +0000
Files and hashes:         1: iCYpiV2NtXslQepI-hEmMl4pAgs.crl (hash: M4vxAgSdmCLt7/BKloqpP7CpczVU0tYBMSdEA9E28KQ=)
                          2: AA3A8B5E155611ECB70DA62FD8A014CE.roa (hash: oylej++hlt4CSGV5/IZZeR0C3dM4otrHkh7MutLV9Go=)
                          3: AC9E51C2D4DE11EBADC42846F8AEA228.roa (hash: 5Ggz3Te0vgHLm/Kbv+y3MXeLbDbWl36tckNnmxxM2SA=)
                          4: BE6404FAD4DF11EBBA81A747F8AEA228.roa (hash: GH3Ja4snhwLWpp5ydwcxU3wl3XfH8RIdlELqY5Zsj+E=)
                          5: 705E5CA8155611ECA3F1402FD8A014CE.roa (hash: BvaUlhFB8dhvbeBRjwtIRVfG1DlJ/s5hWEEmmbVV+rk=)
                          6: 78C71AF4D4DF11EB91BD5247F8AEA228.roa (hash: IMIVkoVO+LqKsmy3JpQMcRirZ3OyWFNrawFCvM6fDOk=)
                          7: 1C5E9EFED4DF11EB9185D046F8AEA228.roa (hash: eN89IVYVfW57zUXGRLnTAOoNL9FLLc3vgrYPZzt46O0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/iCYpiV2NtXslQepI-hEmMl4pAgs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/iCYpiV2NtXslQepI-hEmMl4pAgs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/iCYpiV2NtXslQepI-hEmMl4pAgs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 15 May 2026 00:57:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4007 (0xfa7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3620ACFAF, serialNumber=882629895D8DB57B2541EA48FA1126325E29020B
        Validity
            Not Before: May 13 00:57:03 2026 GMT
            Not After : May 15 00:57:03 2026 GMT
        Subject: CN=6a03cc5f-f19c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:90:f9:f0:0c:10:fc:1b:29:77:ed:47:08:d2:
                    bb:1b:36:45:70:31:8a:82:57:77:38:76:5d:b5:84:
                    5e:6f:61:a7:6d:c7:a3:20:29:0a:af:62:e8:e7:4c:
                    09:e3:6b:34:6f:b1:2f:f3:09:43:98:db:96:34:b7:
                    fe:51:22:29:a7:5a:de:3a:47:de:c0:1b:92:60:fc:
                    d7:e1:83:ad:4c:3c:03:35:ef:1b:b9:1d:8d:2b:87:
                    f4:50:e2:ed:10:7f:ea:7d:2f:70:7a:6e:44:47:48:
                    db:db:52:32:36:a0:fa:d5:80:cf:08:f0:0c:8f:00:
                    04:cf:63:05:4d:0b:56:5c:d2:b8:59:43:e0:8f:b2:
                    06:f2:9c:5a:d0:80:4d:ff:69:69:70:ef:24:c7:6d:
                    1d:13:4d:1f:2e:9b:bb:df:4c:0c:4a:0d:2e:10:c1:
                    28:97:a3:50:39:30:e7:8c:25:86:67:ed:1e:31:d2:
                    61:f3:72:cf:f6:25:52:d7:7b:8b:bf:75:ef:57:1d:
                    1f:a3:6d:0a:8a:dd:dd:97:cc:e2:95:39:30:03:c6:
                    9b:b4:ca:99:ed:4b:18:db:51:79:eb:ea:cb:96:80:
                    c3:f8:53:8f:6e:d1:9c:62:b4:61:99:a7:bc:3c:ba:
                    eb:01:5b:3d:36:80:ac:15:a5:dd:4f:3c:74:17:6c:
                    f2:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:75:1B:43:2C:5E:1B:48:35:03:62:A7:1C:7A:85:54:1D:25:F2:CF
            X509v3 Authority Key Identifier:
                keyid:88:26:29:89:5D:8D:B5:7B:25:41:EA:48:FA:11:26:32:5E:29:02:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/iCYpiV2NtXslQepI-hEmMl4pAgs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/iCYpiV2NtXslQepI-hEmMl4pAgs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/iCYpiV2NtXslQepI-hEmMl4pAgs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:9d:5d:1f:4a:26:10:25:3f:91:40:cc:fa:96:36:62:71:b7:
         4b:e5:8f:f0:f9:5b:5b:68:32:bd:de:e6:03:92:12:77:54:77:
         7e:cd:41:c4:96:8c:be:8e:11:14:9a:d1:ca:53:b8:47:a0:7d:
         1c:90:ae:1c:fa:96:ee:49:10:54:e7:b8:b8:a1:4e:2f:ce:74:
         7a:e1:b7:2d:16:11:12:e9:49:71:0f:44:81:b5:92:57:fc:3b:
         63:58:19:73:1c:7e:45:ae:56:09:a9:44:a1:52:ee:6a:86:c1:
         a0:aa:1f:a5:c7:7f:8b:6d:9b:3c:6c:2b:29:b5:19:4a:4f:c2:
         91:16:3f:a3:22:6a:18:17:33:62:60:61:de:d7:45:71:58:09:
         eb:08:5d:08:b5:72:77:d0:0b:dc:45:e9:79:db:73:47:8c:98:
         15:34:dd:3c:c4:38:33:9a:ab:22:af:c3:8a:28:e7:a4:7d:66:
         2f:14:a1:f0:d2:54:17:6c:d4:66:32:b7:2b:86:f3:c5:2f:dc:
         f2:98:a2:b2:4a:d1:79:46:3b:c2:fe:09:12:73:87:c3:3d:6b:
         39:ad:2b:48:cd:0f:0d:94:32:d5:d7:d1:9e:f9:8c:69:b0:74:
         38:58:24:d7:7b:d1:14:aa:95:ca:04:26:20:aa:aa:de:5f:f7:
         57:e6:c5:1c
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICD6cwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MjBBQ0ZBRjExMC8GA1UEBRMoODgyNjI5ODk1RDhEQjU3QjI1NDFFQTQ4RkExMTI2
MzI1RTI5MDIwQjAeFw0yNjA1MTMwMDU3MDNaFw0yNjA1MTUwMDU3MDNaMBgxFjAU
BgNVBAMTDTZhMDNjYzVmLWYxOWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCTkPnwDBD8Gyl37UcI0rsbNkVwMYqCV3c4dl21hF5vYadtx6MgKQqvYujn
TAnjazRvsS/zCUOY25Y0t/5RIimnWt46R97AG5Jg/Nfhg61MPAM17xu5HY0rh/RQ
4u0Qf+p9L3B6bkRHSNvbUjI2oPrVgM8I8AyPAATPYwVNC1Zc0rhZQ+CPsgbynFrQ
gE3/aWlw7yTHbR0TTR8um7vfTAxKDS4QwSiXo1A5MOeMJYZn7R4x0mHzcs/2JVLX
e4u/de9XHR+jbQqK3d2XzOKVOTADxpu0ypntSxjbUXnr6suWgMP4U49u0ZxitGGZ
p7w8uusBWz02gKwVpd1PPHQXbPLjAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUyHUb
QyxeG0g1A2KnHHqFVB0l8s8wHwYDVR0jBBgwFoAUiCYpiV2NtXslQepI+hEmMl4p
AgswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjIwQUNGLzkyNUUyQkU2NTg2RDExRTVBRUI1NUMyRkY4QUVBMjI4L2lDWXBp
VjJOdFhzbFFlcEktaEVtTWw0cEFncy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2lDWXBpVjJOdFhzbFFlcEktaEVtTWw0cEFncy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MjBBQ0YvOTI1RTJCRTY1ODZEMTFFNUFFQjU1QzJGRjhB
RUEyMjgvaUNZcGlWMk50WHNsUWVwSS1oRW1NbDRwQWdzLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBBnV0fSiYQJT+RQMz6ljZicbdL5Y/w
+VtbaDK93uYDkhJ3VHd+zUHEloy+jhEUmtHKU7hHoH0ckK4c+pbuSRBU57i4oU4v
znR64bctFhES6UlxD0SBtZJX/DtjWBlzHH5FrlYJqUShUu5qhsGgqh+lx3+LbZs8
bCsptRlKT8KRFj+jImoYFzNiYGHe10VxWAnrCF0ItXJ30AvcRel523NHjJgVNN08
xDgzmqsir8OKKOekfWYvFKHw0lQXbNRmMrcrhvPFL9zymKKyStF5RjvC/gkSc4fD
PWs5rStIzQ8NlDLV19Ge+YxpsHQ4WCTXe9EUqpXKBCYgqqreX/dX5sUc
-----END CERTIFICATE-----
Generated at Wed May 13 12:26:02 2026 by rpki-client