Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3642A06/5A984604FC6011F0A9A7EDC7DAE4EC9C/U-hK8pdaGMGaOWVSP_CxvITmAj0.mft
File:                     U-hK8pdaGMGaOWVSP_CxvITmAj0.mft (raw, json)
Hash identifier:          H6udcLefrJzEdoT49wu2ab7wVBY4vBISWipEMp5z7hI=
Subject key identifier:   8A:19:75:78:09:97:33:EB:26:CD:0C:8D:2C:E6:04:04:32:2B:AA:A7
Authority key identifier: 53:E8:4A:F2:97:5A:18:C1:9A:39:65:52:3F:F0:B1:BC:84:E6:02:3D
Certificate issuer:       /CN=F3642A06AF/serialNumber=53E84AF2975A18C19A3965523FF0B1BC84E6023D
Certificate serial:       6C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/U-hK8pdaGMGaOWVSP_CxvITmAj0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3642A06/5A984604FC6011F0A9A7EDC7DAE4EC9C/U-hK8pdaGMGaOWVSP_CxvITmAj0.mft
Manifest number:          6B
Signing time:             Tue 12 May 2026 05:24:03 +0000
Manifest this update:     Tue 12 May 2026 05:24:02 +0000
Manifest next update:     Thu 14 May 2026 05:24:02 +0000
Files and hashes:         1: U-hK8pdaGMGaOWVSP_CxvITmAj0.crl (hash: Nxczbgy5HAgf3lTYKfqnrj0lVIN/Yv7GOIJ+5mjARxE=)
                          2: 30AAB082FC6211F0840064D0DAE4EC9C.roa (hash: FTL97fxTl1eE12YVO6r15mzp9MJrM8fqutIMlkKBkag=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3642A06/5A984604FC6011F0A9A7EDC7DAE4EC9C/U-hK8pdaGMGaOWVSP_CxvITmAj0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3642A06/5A984604FC6011F0A9A7EDC7DAE4EC9C/U-hK8pdaGMGaOWVSP_CxvITmAj0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/U-hK8pdaGMGaOWVSP_CxvITmAj0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 14 May 2026 05:24:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108 (0x6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3642A06AF, serialNumber=53E84AF2975A18C19A3965523FF0B1BC84E6023D
        Validity
            Not Before: May 12 05:24:02 2026 GMT
            Not After : May 14 05:24:02 2026 GMT
        Subject: CN=6a02b973-26ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:5c:c5:a8:70:a9:ed:4e:88:bc:ab:dc:45:dc:
                    ef:75:3a:a2:31:c1:9a:3d:2c:93:8a:5b:0f:f5:f2:
                    6d:05:a3:fa:06:4a:e8:f9:1c:24:13:c4:96:f6:2d:
                    54:ab:73:34:49:a0:ba:64:4e:9e:08:87:d0:8c:1f:
                    b8:a2:92:e3:7d:e4:fe:bd:eb:de:7b:70:9c:10:d5:
                    2b:79:ac:21:60:fb:b1:f3:9b:4c:12:fb:62:76:a4:
                    cc:5e:a5:2e:94:84:a3:2a:7b:5d:ff:28:1c:f4:e9:
                    7a:28:6f:ab:71:da:5f:a9:70:97:cc:e8:6f:1b:3e:
                    65:d6:a8:c3:b3:4c:5c:b5:d3:97:e6:2c:8b:fa:5d:
                    d7:ea:34:33:23:6d:c6:f7:dd:5d:89:ca:e0:83:1f:
                    8b:bb:25:ba:57:93:0e:44:40:9f:c4:7c:15:81:cc:
                    44:6c:1e:28:3f:c1:7d:f1:7a:6c:0e:15:82:ac:46:
                    82:12:22:70:4b:1c:79:6d:be:28:01:11:0c:97:a9:
                    34:3c:6a:77:5b:e2:50:5c:82:92:0a:0c:9a:0e:cc:
                    33:31:5f:23:e4:68:1a:f0:aa:5b:49:de:73:9f:4c:
                    21:df:a4:c5:68:41:c8:63:0b:b0:99:0e:04:99:f0:
                    a7:54:2c:8e:03:e4:5a:ea:fc:ad:2c:d6:14:14:e8:
                    7e:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:19:75:78:09:97:33:EB:26:CD:0C:8D:2C:E6:04:04:32:2B:AA:A7
            X509v3 Authority Key Identifier:
                keyid:53:E8:4A:F2:97:5A:18:C1:9A:39:65:52:3F:F0:B1:BC:84:E6:02:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3642A06/5A984604FC6011F0A9A7EDC7DAE4EC9C/U-hK8pdaGMGaOWVSP_CxvITmAj0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/U-hK8pdaGMGaOWVSP_CxvITmAj0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3642A06/5A984604FC6011F0A9A7EDC7DAE4EC9C/U-hK8pdaGMGaOWVSP_CxvITmAj0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:df:1a:0b:e7:11:10:89:78:f2:0b:b4:9d:b8:ba:86:10:7e:
         4a:74:25:3f:2c:e8:1a:c5:d6:98:39:4e:ac:84:76:b6:44:c8:
         e8:a6:73:e2:ce:d7:f0:91:d4:ce:8a:1c:f4:43:d9:ae:56:14:
         ce:94:95:eb:37:db:c8:b3:4e:d3:f3:58:d5:1c:46:a6:55:ae:
         e0:91:bd:9c:20:a4:7e:6d:c2:c8:80:34:b7:a7:c6:1a:9b:ae:
         c7:51:3b:53:02:24:0a:4e:bd:97:96:32:c4:79:44:79:b3:b6:
         e3:9c:10:88:c8:59:7c:dc:06:39:44:b9:89:aa:95:f3:34:6a:
         c1:14:16:37:6b:90:87:df:39:51:96:de:51:93:20:82:df:53:
         82:d5:0a:20:c1:ac:c7:70:09:0e:ac:e3:b7:41:98:b2:3d:06:
         7f:7a:9b:f1:52:03:a3:0c:e7:e7:9c:76:e1:41:5c:2b:da:69:
         32:b7:8c:56:a8:9f:6f:88:24:cf:1e:e4:01:3b:e7:1e:74:11:
         f4:7c:f8:3b:06:61:20:dc:f1:15:3d:61:fa:11:fe:b9:1f:80:
         04:ce:52:a9:b2:2c:81:79:60:7a:52:ee:95:52:e0:95:a0:91:
         cb:33:b3:bd:65:29:65:46:25:2c:ca:a4:41:be:94:6d:36:10:
         9f:cd:f5:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:24:22 2026 by rpki-client