Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3644DAB/B511F7E4F24911ECA2791192F1222468/XVwqlrLjcrCsR_SNvcfX_R-9sTI.mft
File:                     XVwqlrLjcrCsR_SNvcfX_R-9sTI.mft (raw, json)
Hash identifier:          2bFoyEdgRgtn6CHGoA6AuN+74vxWAhG5V+9NlArON4A=
Subject key identifier:   AB:18:62:A8:10:BA:C8:F0:A7:6A:E8:80:7F:01:23:B2:5C:56:F4:49
Authority key identifier: 5D:5C:2A:96:B2:E3:72:B0:AC:47:F4:8D:BD:C7:D7:FD:1F:BD:B1:32
Certificate issuer:       /CN=F3644DABAF/serialNumber=5D5C2A96B2E372B0AC47F48DBDC7D7FD1FBDB132
Certificate serial:       058B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/XVwqlrLjcrCsR_SNvcfX_R-9sTI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3644DAB/B511F7E4F24911ECA2791192F1222468/XVwqlrLjcrCsR_SNvcfX_R-9sTI.mft
Manifest number:          0589
Signing time:             Thu 26 Mar 2026 03:15:33 +0000
Manifest this update:     Thu 26 Mar 2026 03:15:32 +0000
Manifest next update:     Sat 28 Mar 2026 03:15:32 +0000
Files and hashes:         1: XVwqlrLjcrCsR_SNvcfX_R-9sTI.crl (hash: V5hpXh50oYpVbkVQ+kTpsnn/7TNSsNBZ7xVlJFBmCKU=)
                          2: 23D327BA3B9111EF8FF3E059762E951A.roa (hash: ZJ3xXOXKk7e28z2xIgECvNbu0qz58iXckPb6BX56yvQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3644DAB/B511F7E4F24911ECA2791192F1222468/XVwqlrLjcrCsR_SNvcfX_R-9sTI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3644DAB/B511F7E4F24911ECA2791192F1222468/XVwqlrLjcrCsR_SNvcfX_R-9sTI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/XVwqlrLjcrCsR_SNvcfX_R-9sTI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1419 (0x58b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3644DABAF, serialNumber=5D5C2A96B2E372B0AC47F48DBDC7D7FD1FBDB132
        Validity
            Not Before: Mar 26 03:15:32 2026 GMT
            Not After : Mar 28 03:15:32 2026 GMT
        Subject: CN=69c4a4d5-8a21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a9:12:59:83:82:f2:82:8c:78:d3:8a:43:e3:
                    5a:1f:82:21:c5:9e:d7:86:80:e2:b3:6f:22:13:d3:
                    99:6b:03:e2:66:96:9a:c6:47:29:5e:fb:b4:85:8b:
                    ba:8a:8e:1e:0e:f8:2a:3d:d0:4d:6a:9d:5c:7a:4b:
                    4e:ee:76:c6:31:75:6d:42:e8:8a:21:2c:46:3b:2f:
                    fc:19:6d:bf:24:2c:4c:e5:06:63:74:71:95:fd:ed:
                    fa:b1:a9:80:d0:c9:04:54:95:38:ee:1a:76:dc:91:
                    a4:97:30:86:80:3b:26:85:79:a2:cf:f0:6a:27:c5:
                    b5:fe:b0:9d:89:14:1f:73:bc:ac:65:ad:71:8c:f6:
                    01:00:17:a6:52:5e:3d:e6:d9:45:20:d1:d6:ca:44:
                    08:5d:03:b9:4c:85:1a:79:c5:f6:69:e1:65:45:0b:
                    12:33:0a:83:fc:c3:31:43:39:68:77:3c:72:28:62:
                    ea:cf:bc:9c:6c:08:1b:bc:ba:4d:96:ae:35:69:6c:
                    fe:06:ca:82:f1:14:2a:97:41:51:ea:ec:19:89:82:
                    d7:15:1a:85:a2:ef:94:ad:45:57:3e:99:c9:d4:46:
                    03:73:9c:e2:5e:11:ad:bf:ba:0c:82:66:f2:23:14:
                    10:19:e3:11:49:f0:cc:ce:55:3d:66:ba:cf:3e:be:
                    af:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:18:62:A8:10:BA:C8:F0:A7:6A:E8:80:7F:01:23:B2:5C:56:F4:49
            X509v3 Authority Key Identifier:
                keyid:5D:5C:2A:96:B2:E3:72:B0:AC:47:F4:8D:BD:C7:D7:FD:1F:BD:B1:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3644DAB/B511F7E4F24911ECA2791192F1222468/XVwqlrLjcrCsR_SNvcfX_R-9sTI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XVwqlrLjcrCsR_SNvcfX_R-9sTI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3644DAB/B511F7E4F24911ECA2791192F1222468/XVwqlrLjcrCsR_SNvcfX_R-9sTI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:19:74:af:ca:89:ea:0b:55:83:5a:10:fb:e6:cf:32:8a:cd:
         9d:0a:c0:fe:b0:e6:39:19:9c:9a:5f:58:cb:fe:83:ee:20:fc:
         88:b4:14:59:cf:5b:ed:93:3a:d3:87:d2:c5:18:01:c5:02:a3:
         d1:ca:e0:6f:b6:83:72:f6:57:ff:c5:9e:05:58:33:b8:c3:a9:
         c8:24:d1:7c:dd:17:02:72:da:23:5e:48:ed:b5:47:c0:13:43:
         7c:8c:99:e4:f4:e3:c1:c1:11:2b:09:79:11:9b:a6:91:e7:d1:
         b4:ee:ca:77:d2:b6:91:17:6c:3d:15:5e:d2:40:0d:f5:91:8e:
         e8:1c:90:6d:1d:26:2a:8a:bb:5a:c8:04:ea:00:c2:b8:87:16:
         86:13:76:13:0f:d1:22:5d:5a:ad:a1:f7:b5:a5:a8:84:2e:61:
         94:d0:c2:db:dd:b5:6f:78:58:fe:b7:c6:84:8e:1b:a0:2c:1f:
         fa:56:73:b3:84:3f:42:e6:c7:6f:7c:b9:ed:33:48:db:7f:09:
         49:2e:23:12:87:35:f7:48:c2:10:80:70:26:86:cb:cf:02:b2:
         37:b3:84:cd:76:be:b8:d5:8e:d4:42:7b:9c:f6:5e:96:7f:3a:
         b9:1f:53:65:91:0f:eb:4d:f0:c6:99:e9:78:78:9b:08:2b:24:
         84:7f:3b:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:57:00 2026 by rpki-client