Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3644574/1EB618CA778011EF9C5A1CB2762E951A/Gui5Af04SDp0-NI1YM3fc7TRUGM.mft
File:                     Gui5Af04SDp0-NI1YM3fc7TRUGM.mft (raw, json)
Hash identifier:          AA2j5jy2KIFVnpc+/1Hq/3uz3PEKRcCDEWj5ZsM/IMQ=
Subject key identifier:   EE:75:7F:6B:8E:49:14:2D:E9:E0:A3:7F:F4:73:32:A4:16:81:EC:09
Authority key identifier: 1A:E8:B9:01:FD:38:48:3A:74:F8:D2:35:60:CD:DF:73:B4:D1:50:63
Certificate issuer:       /CN=F3644574AF/serialNumber=1AE8B901FD38483A74F8D23560CDDF73B4D15063
Certificate serial:       0235
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Gui5Af04SDp0-NI1YM3fc7TRUGM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3644574/1EB618CA778011EF9C5A1CB2762E951A/Gui5Af04SDp0-NI1YM3fc7TRUGM.mft
Manifest number:          0235
Signing time:             Thu 26 Mar 2026 05:26:05 +0000
Manifest this update:     Thu 26 Mar 2026 05:26:04 +0000
Manifest next update:     Sat 28 Mar 2026 05:26:04 +0000
Files and hashes:         1: Gui5Af04SDp0-NI1YM3fc7TRUGM.crl (hash: RysOennH0wggQJ2JSyLlD5ZhcYKgecJjPZu0Ey7E0Pk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3644574/1EB618CA778011EF9C5A1CB2762E951A/Gui5Af04SDp0-NI1YM3fc7TRUGM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3644574/1EB618CA778011EF9C5A1CB2762E951A/Gui5Af04SDp0-NI1YM3fc7TRUGM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Gui5Af04SDp0-NI1YM3fc7TRUGM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 565 (0x235)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3644574AF, serialNumber=1AE8B901FD38483A74F8D23560CDDF73B4D15063
        Validity
            Not Before: Mar 26 05:26:04 2026 GMT
            Not After : Mar 28 05:26:04 2026 GMT
        Subject: CN=69c4c36d-4523
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8b:51:30:df:d3:22:c2:47:d4:08:b6:93:b5:
                    5f:b5:c5:30:25:88:ca:e7:ac:c6:eb:8c:36:39:2e:
                    f2:51:d1:2c:5a:fd:38:04:cb:e8:2c:a5:1e:59:cd:
                    73:d7:32:ab:14:ce:66:81:82:8f:34:79:73:c9:2f:
                    37:ec:ee:44:79:6d:7f:ff:e4:38:f1:76:1d:e7:02:
                    b6:fd:d4:25:44:0d:44:a0:07:03:c7:bc:74:f5:de:
                    c4:9f:21:62:b5:15:d4:5d:22:62:48:f9:dc:66:0b:
                    cd:b3:73:b5:fb:bd:0f:03:c5:86:ca:0c:df:c1:31:
                    85:57:6a:ee:e1:41:2b:6a:2c:98:17:0e:5f:13:ef:
                    52:2a:58:f1:0e:99:ee:10:e3:be:9a:08:9a:79:ef:
                    0d:6a:59:b2:1f:06:27:19:e5:0e:7c:76:ca:b1:18:
                    eb:0d:b6:03:12:44:9a:55:62:7e:94:5f:34:8a:af:
                    5b:de:ad:cc:07:bf:bb:17:46:7f:97:5e:0d:00:70:
                    35:27:69:87:ab:3d:4b:92:a2:1a:82:4e:92:fb:2f:
                    07:6d:cb:91:97:bf:d1:7c:78:ec:2b:c1:b3:da:4c:
                    d7:df:4a:60:2f:21:7d:87:9d:1f:ca:24:2f:fd:1b:
                    1a:a4:56:c7:27:e7:36:9d:74:d8:e9:aa:59:a1:85:
                    51:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:75:7F:6B:8E:49:14:2D:E9:E0:A3:7F:F4:73:32:A4:16:81:EC:09
            X509v3 Authority Key Identifier:
                keyid:1A:E8:B9:01:FD:38:48:3A:74:F8:D2:35:60:CD:DF:73:B4:D1:50:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3644574/1EB618CA778011EF9C5A1CB2762E951A/Gui5Af04SDp0-NI1YM3fc7TRUGM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Gui5Af04SDp0-NI1YM3fc7TRUGM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3644574/1EB618CA778011EF9C5A1CB2762E951A/Gui5Af04SDp0-NI1YM3fc7TRUGM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:46:ed:c3:df:7e:60:eb:84:a5:4e:11:e3:89:c3:c7:3d:d3:
         25:0b:ba:0f:48:94:37:55:17:c7:95:24:d6:06:bd:d1:ec:13:
         ad:af:29:91:fc:0c:f8:7e:04:4f:9c:d3:0f:cd:27:f3:09:ec:
         7b:1c:83:b6:72:8e:e4:67:c0:8c:ab:3f:0f:46:77:8f:19:06:
         27:56:30:75:03:36:42:63:18:aa:3f:6f:d8:8d:42:91:90:e5:
         5d:52:64:c0:60:0c:1f:81:b4:75:54:5d:2a:84:18:62:6b:0f:
         83:33:03:6c:66:4b:60:ec:e7:ad:04:6e:58:82:c9:15:ae:a1:
         53:dc:f8:c5:88:e7:33:a0:c6:91:cf:ca:26:d4:ae:77:6e:e5:
         dd:89:b8:9b:9b:37:95:ce:a7:e8:4d:b2:9c:c9:08:20:3f:86:
         aa:03:b7:6e:01:c4:c1:ba:ea:80:19:fa:86:3a:b7:30:23:73:
         61:6b:ba:d6:2a:90:fb:ca:21:22:1a:f0:da:e9:4d:89:4e:a3:
         40:f8:af:ba:0f:be:31:b0:93:b3:7e:51:9a:e5:c0:1b:2e:d9:
         47:34:48:b7:47:9e:80:2b:61:9a:c7:23:44:99:02:2d:93:83:
         be:26:20:a2:d5:48:7a:bd:7e:16:fd:22:f5:35:b5:29:b5:e8:
         27:a7:a7:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:28:53 2026 by rpki-client