Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36424BF/8B42A2923A6611F1AA691F1ECF1D38B0/BrHYy0U_06Fn6NMS7FHliT3ZldY.mft
File:                     BrHYy0U_06Fn6NMS7FHliT3ZldY.mft (raw, json)
Hash identifier:          XRMJT/1MYDfm+4xmm+Aao6qY5e6QkBrn4NH1+u4sx1Y=
Subject key identifier:   21:9F:B8:85:E9:8C:35:81:2A:92:8E:6B:5B:01:A9:8A:C1:40:84:14
Authority key identifier: 06:B1:D8:CB:45:3F:D3:A1:67:E8:D3:12:EC:51:E5:89:3D:D9:95:D6
Certificate issuer:       /CN=F36424BFAF/serialNumber=06B1D8CB453FD3A167E8D312EC51E5893DD995D6
Certificate serial:       20
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/BrHYy0U_06Fn6NMS7FHliT3ZldY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36424BF/8B42A2923A6611F1AA691F1ECF1D38B0/BrHYy0U_06Fn6NMS7FHliT3ZldY.mft
Manifest number:          1F
Signing time:             Wed 13 May 2026 05:36:31 +0000
Manifest this update:     Wed 13 May 2026 05:36:30 +0000
Manifest next update:     Fri 15 May 2026 05:36:30 +0000
Files and hashes:         1: BrHYy0U_06Fn6NMS7FHliT3ZldY.crl (hash: hU6zZEgh0UGVZ25G9m2OCWMjl33mWEh11/w6IeIi1Aw=)
                          2: 4FCC04223A6811F1A30B30AACE1D38B0.roa (hash: kWGqFsDRkG7kv8ZBBDntu5jcnDPJI4Lk8Rn5mfMvSuc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36424BF/8B42A2923A6611F1AA691F1ECF1D38B0/BrHYy0U_06Fn6NMS7FHliT3ZldY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36424BF/8B42A2923A6611F1AA691F1ECF1D38B0/BrHYy0U_06Fn6NMS7FHliT3ZldY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/BrHYy0U_06Fn6NMS7FHliT3ZldY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 15 May 2026 05:36:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32 (0x20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36424BFAF, serialNumber=06B1D8CB453FD3A167E8D312EC51E5893DD995D6
        Validity
            Not Before: May 13 05:36:30 2026 GMT
            Not After : May 15 05:36:30 2026 GMT
        Subject: CN=6a040ddf-72f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:56:64:3a:70:70:ba:cb:31:b2:e8:9b:5b:64:
                    64:1e:47:e0:c3:39:d3:b3:18:09:67:3f:99:e4:75:
                    b3:3b:44:3c:4a:ca:da:4c:98:ac:87:e8:43:11:c1:
                    9c:cf:4b:25:2e:2a:b5:ab:8a:bc:7d:37:8d:cd:5d:
                    b0:7d:0a:e7:e9:e1:cb:e8:1a:76:c4:58:44:00:51:
                    6a:55:ea:01:de:57:c9:6b:d3:ed:b4:cc:8e:31:f3:
                    6c:40:39:34:b7:c6:83:86:61:8d:8e:7b:99:57:b9:
                    ed:72:c2:f2:40:7f:9c:28:0a:cb:1c:89:79:55:4b:
                    6b:16:77:8d:45:de:59:19:2b:9a:e8:17:35:df:a8:
                    99:9f:ed:93:06:1c:21:2e:52:b6:73:5b:1a:4c:30:
                    3f:c6:2a:76:f4:d9:d6:60:4c:05:96:95:6b:51:09:
                    d4:ae:55:8f:81:9e:08:33:29:5a:d8:d8:bb:36:93:
                    bd:4d:e9:8c:53:2d:48:26:a6:40:a7:22:72:9a:77:
                    e3:00:2b:67:7b:62:e4:bd:0f:4d:39:57:2d:f6:5c:
                    13:3a:01:1f:d3:8c:03:f5:a0:26:be:3d:6a:92:11:
                    81:2f:0c:6d:4e:b3:c8:08:6a:b9:03:63:e2:e5:ef:
                    ef:c4:68:11:8e:99:c8:e0:d2:c2:b0:a9:51:56:62:
                    4c:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:9F:B8:85:E9:8C:35:81:2A:92:8E:6B:5B:01:A9:8A:C1:40:84:14
            X509v3 Authority Key Identifier:
                keyid:06:B1:D8:CB:45:3F:D3:A1:67:E8:D3:12:EC:51:E5:89:3D:D9:95:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36424BF/8B42A2923A6611F1AA691F1ECF1D38B0/BrHYy0U_06Fn6NMS7FHliT3ZldY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/BrHYy0U_06Fn6NMS7FHliT3ZldY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36424BF/8B42A2923A6611F1AA691F1ECF1D38B0/BrHYy0U_06Fn6NMS7FHliT3ZldY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:9b:7b:7f:31:ba:4e:8f:37:14:38:00:2a:41:aa:16:07:a1:
         55:db:8d:05:b3:4f:3c:07:a4:79:0f:41:83:d0:f7:01:34:ac:
         0e:85:09:c8:69:77:91:8f:16:de:45:9e:c4:95:b1:fd:17:9c:
         ca:84:63:be:81:09:6f:0a:b9:60:3d:c2:83:4b:e2:f3:f0:6e:
         66:ee:85:4b:12:13:f3:d1:8e:14:98:ce:91:42:ae:2b:af:31:
         24:eb:5a:97:ac:55:2a:0d:1f:a6:57:ef:09:6b:35:cd:21:99:
         15:c9:10:c0:4c:48:a8:8d:33:47:ba:b3:0b:22:3b:3d:c2:b0:
         0d:af:0a:08:34:28:4b:39:c8:20:2d:d2:75:23:f8:cc:64:be:
         d6:3f:b5:59:ca:b2:e9:63:cb:d2:33:0d:ae:4c:1f:20:7d:94:
         e9:79:8f:d5:04:a0:4d:c9:4f:4e:0c:de:88:c8:b8:43:3a:de:
         e3:5b:dd:8f:f6:57:1f:d8:ef:5b:5a:8b:54:91:6c:4c:1b:72:
         fb:b5:a4:2d:5e:2a:a3:ce:ea:36:65:2d:ee:21:64:d1:8d:0a:
         ee:36:d4:23:7d:9b:5d:08:bf:93:94:2e:af:88:84:a2:ca:9d:
         74:af:d3:3f:83:17:6e:56:3b:28:ca:69:f3:6b:aa:a0:41:e3:
         5e:0d:33:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:07:08 2026 by rpki-client