Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3633DE5/FCF32D62108111F1BB49558FDAE4EC9C/W0T4JDSqcXoF9kUnlIPWmG92utQ.mft
File:                     W0T4JDSqcXoF9kUnlIPWmG92utQ.mft (raw, json)
Hash identifier:          KJJ9+DImMTU1nl3CdHQQSl0eeL+GygJDxTVVst4osDY=
Subject key identifier:   F5:FC:6F:56:CA:D2:9C:45:B1:3F:1D:80:8B:BF:C6:77:36:B5:C9:12
Authority key identifier: 5B:44:F8:24:34:AA:71:7A:05:F6:45:27:94:83:D6:98:6F:76:BA:D4
Certificate issuer:       /CN=F3633DE5AF/serialNumber=5B44F82434AA717A05F645279483D6986F76BAD4
Certificate serial:       28
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/W0T4JDSqcXoF9kUnlIPWmG92utQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3633DE5/FCF32D62108111F1BB49558FDAE4EC9C/W0T4JDSqcXoF9kUnlIPWmG92utQ.mft
Manifest number:          24
Signing time:             Thu 26 Mar 2026 06:36:36 +0000
Manifest this update:     Thu 26 Mar 2026 06:36:35 +0000
Manifest next update:     Sat 28 Mar 2026 06:36:35 +0000
Files and hashes:         1: W0T4JDSqcXoF9kUnlIPWmG92utQ.crl (hash: qfPVPGPoOlA2z+gtrYeGfLBefW3u0dc+BI1Kn98VOjU=)
                          2: E212FF1A118811F1BB5DD4D1DAE4EC9C.roa (hash: LyN13ZxZWbnnocbTKmNDNHfltdE66o4GJwgUNjqQnHY=)
                          3: 07F034A0118911F189A69ED3DAE4EC9C.roa (hash: 7d03e258Z45lOJ6Bi0wf1CYWNnr0zvsz3BVx70CiUAU=)
                          4: B61D2CFA108411F1ADE2BA9FDAE4EC9C.roa (hash: 2qZXAQI56bgc2DXv4vRTW6vQ2QZ8YolH3jT9pqajF1U=)
                          5: 4185E648108411F1867ED09BDAE4EC9C.roa (hash: 8tCHwzjQzCwuuRhirUfAdz84/IN9nQDGqOxj48hw9Qk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3633DE5/FCF32D62108111F1BB49558FDAE4EC9C/W0T4JDSqcXoF9kUnlIPWmG92utQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3633DE5/FCF32D62108111F1BB49558FDAE4EC9C/W0T4JDSqcXoF9kUnlIPWmG92utQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/W0T4JDSqcXoF9kUnlIPWmG92utQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 40 (0x28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3633DE5AF, serialNumber=5B44F82434AA717A05F645279483D6986F76BAD4
        Validity
            Not Before: Mar 26 06:36:35 2026 GMT
            Not After : Mar 28 06:36:35 2026 GMT
        Subject: CN=69c4d3f4-f628
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:17:38:e9:fe:f1:bb:c2:51:66:6b:54:00:eb:
                    8a:6e:e4:23:33:b0:5a:ed:cd:2a:fb:6a:58:3d:71:
                    20:cb:c3:2f:80:4c:e1:fb:1d:85:1c:e1:f7:05:d6:
                    07:7c:12:33:61:ec:00:45:c1:d5:5c:2c:ec:a3:9a:
                    37:11:9d:c3:0a:d6:05:d9:f1:83:55:24:12:84:7d:
                    fa:2f:47:48:69:c7:8a:c5:c8:f9:78:a9:9c:13:09:
                    33:ec:dd:44:b8:1b:d3:3a:b3:42:c3:5b:6b:0a:d5:
                    01:0d:3b:63:0b:02:5e:36:6e:67:27:e9:0b:77:cd:
                    91:3a:a9:69:c4:61:d4:3c:5d:fd:e2:ec:c9:61:9f:
                    69:8d:8f:b7:17:b9:85:78:24:2e:d8:f9:f1:de:56:
                    f0:f2:13:f4:42:ab:a6:59:4e:73:02:71:44:99:b3:
                    89:22:4e:76:ff:f0:30:d7:e6:02:4f:c1:05:fc:0a:
                    c5:02:4c:7f:b8:45:5d:3b:8f:b1:84:21:23:31:51:
                    1e:bc:23:1b:1e:f2:ce:36:0b:2f:58:b6:c9:f8:8f:
                    6c:3b:da:29:de:c6:a4:93:b1:61:30:ab:5c:8e:2e:
                    89:7f:cf:ed:80:b7:d1:5b:29:26:c4:53:df:a4:44:
                    9d:4d:20:80:97:0c:c2:5f:33:dc:c9:f0:c8:45:d2:
                    9d:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:FC:6F:56:CA:D2:9C:45:B1:3F:1D:80:8B:BF:C6:77:36:B5:C9:12
            X509v3 Authority Key Identifier:
                keyid:5B:44:F8:24:34:AA:71:7A:05:F6:45:27:94:83:D6:98:6F:76:BA:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3633DE5/FCF32D62108111F1BB49558FDAE4EC9C/W0T4JDSqcXoF9kUnlIPWmG92utQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/W0T4JDSqcXoF9kUnlIPWmG92utQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3633DE5/FCF32D62108111F1BB49558FDAE4EC9C/W0T4JDSqcXoF9kUnlIPWmG92utQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:e1:bc:cb:d7:58:92:e1:63:92:98:82:e2:2d:39:54:e1:44:
         90:12:7d:dc:d7:11:6c:9b:8e:2b:64:96:9f:da:59:d7:91:9c:
         18:e8:83:90:45:10:94:6c:78:b1:c1:35:53:f2:91:b5:7f:c7:
         a7:e5:cb:6e:5a:dd:3b:40:51:e9:1c:c9:e1:52:0d:84:3f:23:
         ae:4f:fc:7a:fa:ac:81:e7:12:2b:1b:15:4a:c7:d6:99:4d:f4:
         f9:15:d5:5e:93:4a:e8:33:88:f9:76:f8:41:01:10:f4:65:e4:
         6b:ee:fe:e2:0b:fb:a0:4a:bb:d2:a6:c0:bc:1b:b5:1b:8d:71:
         82:f4:dd:c4:2a:3a:cd:b1:5b:ba:60:40:af:7b:64:0f:e3:6a:
         bb:0f:be:f9:cf:fc:23:74:28:61:54:1a:d6:36:b7:ac:74:b9:
         ce:13:6f:46:5a:08:4e:8f:e9:1d:db:f1:4b:94:48:04:9c:1b:
         26:5d:65:cc:bb:cd:04:6a:10:1c:b1:0e:14:41:5c:28:59:0f:
         ed:3d:3c:17:c4:82:61:95:7d:5d:0e:ba:a4:25:f1:06:be:94:
         91:92:1f:a0:57:88:8d:3e:13:19:2f:68:80:4c:f1:08:f0:d7:
         73:42:84:62:3f:22:5c:cc:89:29:d0:7b:71:a8:34:26:72:2e:
         17:09:23:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:18:21 2026 by rpki-client