Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363C3E1/AAC01F88821611E9BD1EFE3CF8AEA228/xA-V6X2DLw9XbRPuNa6z11pdMNQ.mft
File:                     xA-V6X2DLw9XbRPuNa6z11pdMNQ.mft (raw, json)
Hash identifier:          rd7QCQd40KGfwrIw9AfVVYJxvmUQphnlJc5jL/diizM=
Subject key identifier:   CA:94:DB:00:B9:E5:97:8E:5C:D4:6C:2C:75:68:D3:A3:5A:5A:07:DD
Authority key identifier: C4:0F:95:E9:7D:83:2F:0F:57:6D:13:EE:35:AE:B3:D7:5A:5D:30:D4
Certificate issuer:       /CN=F363C3E1AF/serialNumber=C40F95E97D832F0F576D13EE35AEB3D75A5D30D4
Certificate serial:       0A05
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/xA-V6X2DLw9XbRPuNa6z11pdMNQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363C3E1/AAC01F88821611E9BD1EFE3CF8AEA228/xA-V6X2DLw9XbRPuNa6z11pdMNQ.mft
Manifest number:          0A02
Signing time:             Thu 26 Mar 2026 01:31:08 +0000
Manifest this update:     Thu 26 Mar 2026 01:31:07 +0000
Manifest next update:     Sat 28 Mar 2026 01:31:07 +0000
Files and hashes:         1: xA-V6X2DLw9XbRPuNa6z11pdMNQ.crl (hash: siZR+ab5l0Jvq4UXPUbL5knTKwomgooPbNH8wl7AI84=)
                          2: 14F8A0E8AB6B11ECABB679CF5A40D577.roa (hash: jsRtwNWbCFDNk6YPeDZa2bp9O9SfXhNaNtf713XS5Jo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363C3E1/AAC01F88821611E9BD1EFE3CF8AEA228/xA-V6X2DLw9XbRPuNa6z11pdMNQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363C3E1/AAC01F88821611E9BD1EFE3CF8AEA228/xA-V6X2DLw9XbRPuNa6z11pdMNQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/xA-V6X2DLw9XbRPuNa6z11pdMNQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2565 (0xa05)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363C3E1AF, serialNumber=C40F95E97D832F0F576D13EE35AEB3D75A5D30D4
        Validity
            Not Before: Mar 26 01:31:07 2026 GMT
            Not After : Mar 28 01:31:07 2026 GMT
        Subject: CN=69c48c5c-2671
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d4:a5:5f:35:fe:7a:80:77:4c:da:99:bb:2b:
                    f0:77:68:5e:a2:90:97:bf:a3:97:dc:48:0b:19:27:
                    41:5a:74:76:c1:cd:5b:13:dd:5b:94:33:57:67:91:
                    53:5d:4b:97:fe:5e:0c:07:96:f2:d8:63:b0:80:f5:
                    7a:a0:3a:1a:7f:c6:da:61:26:f0:e5:28:32:53:f7:
                    b9:4f:b9:48:ec:19:0c:2e:a2:d8:1a:48:f8:53:d2:
                    e1:f9:c8:ce:68:ee:7c:af:c3:56:ef:0a:81:08:59:
                    be:62:83:f2:31:f5:99:61:96:03:2a:fb:ee:41:43:
                    80:12:95:7a:a9:e5:ae:29:35:53:8c:6f:af:43:9b:
                    2e:78:b7:9f:5b:bc:42:79:8c:be:96:1b:83:24:19:
                    04:18:06:21:6a:c4:9a:38:15:d3:fb:18:0a:7d:78:
                    1a:53:81:0a:4b:ae:ff:79:9b:80:d9:96:c8:3b:19:
                    8d:0a:77:ee:94:a6:9d:a3:20:99:f3:b5:d6:5f:d0:
                    fc:e6:86:f5:d0:b8:fe:f5:e2:43:09:2c:5e:a2:67:
                    84:2a:95:61:91:3c:6b:90:21:18:f6:32:ce:1f:e4:
                    0e:4f:7e:50:cc:74:8f:80:63:35:32:61:61:78:8c:
                    8a:25:f4:3e:d9:43:0a:e0:3e:44:d5:d2:eb:8c:93:
                    72:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:94:DB:00:B9:E5:97:8E:5C:D4:6C:2C:75:68:D3:A3:5A:5A:07:DD
            X509v3 Authority Key Identifier:
                keyid:C4:0F:95:E9:7D:83:2F:0F:57:6D:13:EE:35:AE:B3:D7:5A:5D:30:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363C3E1/AAC01F88821611E9BD1EFE3CF8AEA228/xA-V6X2DLw9XbRPuNa6z11pdMNQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xA-V6X2DLw9XbRPuNa6z11pdMNQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363C3E1/AAC01F88821611E9BD1EFE3CF8AEA228/xA-V6X2DLw9XbRPuNa6z11pdMNQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:fe:13:1e:c4:1d:82:8d:68:6e:c1:2e:e0:8a:9a:e7:9d:1e:
         30:8d:d8:3e:e6:41:13:a1:93:d2:94:72:5e:6d:f7:ef:fb:85:
         a2:35:2c:72:a8:60:cf:b6:e6:8b:7a:87:53:ce:ae:4d:19:89:
         ed:67:68:5f:fa:f7:b0:ba:b2:d3:70:57:ae:6c:f2:3f:ae:0c:
         ea:54:c5:90:02:99:21:a1:41:a2:37:cd:b2:99:44:30:10:64:
         8f:f4:c8:c0:d0:6d:3e:cb:df:fd:5d:ef:35:e3:be:86:ec:9c:
         71:bc:e5:2b:ee:b1:a3:6d:7b:03:e6:d6:03:60:00:02:ee:49:
         e7:2c:1a:87:e7:32:c3:0f:3e:ca:8a:f6:c1:b5:db:5c:6e:fe:
         eb:15:e9:79:34:b6:90:18:c5:d1:75:6a:cd:be:40:44:2a:a1:
         e2:45:30:7c:af:da:f9:b0:60:30:c5:81:d0:85:03:54:e7:3a:
         98:31:a4:1c:42:38:a0:cf:d2:90:5e:17:81:d1:16:fd:4a:b6:
         16:81:2d:e1:68:c2:88:e4:58:4c:bc:cb:2a:8c:23:cb:bc:03:
         7e:d6:1d:34:49:f4:2c:2e:8e:cb:50:f9:63:58:ca:c6:fe:a3:
         c7:3e:83:70:72:98:db:61:ff:26:96:d8:ca:10:82:3c:07:45:
         6e:08:ef:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:36:44 2026 by rpki-client