Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365BF9E/E18FB3DECA2411EDA24C598BF1222468/UsjVbfSu4mPoplESmKYZzpjIrA4.mft
File:                     UsjVbfSu4mPoplESmKYZzpjIrA4.mft (raw, json)
Hash identifier:          mChpegXl31BC7vpfzos2NLLe6f5YnUP0KW6DGWMd/vc=
Subject key identifier:   97:47:E5:7D:55:63:2F:47:59:ED:06:5E:14:AE:A0:C6:BF:89:CD:D8
Authority key identifier: 52:C8:D5:6D:F4:AE:E2:63:E8:A6:51:12:98:A6:19:CE:98:C8:AC:0E
Certificate issuer:       /CN=F365BF9EAF/serialNumber=52C8D56DF4AEE263E8A6511298A619CE98C8AC0E
Certificate serial:       046A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/UsjVbfSu4mPoplESmKYZzpjIrA4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365BF9E/E18FB3DECA2411EDA24C598BF1222468/UsjVbfSu4mPoplESmKYZzpjIrA4.mft
Manifest number:          046A
Signing time:             Thu 26 Mar 2026 03:55:23 +0000
Manifest this update:     Thu 26 Mar 2026 03:55:22 +0000
Manifest next update:     Sat 28 Mar 2026 03:55:22 +0000
Files and hashes:         1: UsjVbfSu4mPoplESmKYZzpjIrA4.crl (hash: zsjuCgmEFPpFMMPmK7881dBdd10MYvIDqx1+fH0k8WM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365BF9E/E18FB3DECA2411EDA24C598BF1222468/UsjVbfSu4mPoplESmKYZzpjIrA4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365BF9E/E18FB3DECA2411EDA24C598BF1222468/UsjVbfSu4mPoplESmKYZzpjIrA4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/UsjVbfSu4mPoplESmKYZzpjIrA4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1130 (0x46a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365BF9EAF, serialNumber=52C8D56DF4AEE263E8A6511298A619CE98C8AC0E
        Validity
            Not Before: Mar 26 03:55:22 2026 GMT
            Not After : Mar 28 03:55:22 2026 GMT
        Subject: CN=69c4ae2b-ee27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c5:69:0c:db:57:40:e2:04:bd:61:aa:7d:9e:
                    e8:af:36:c3:bb:eb:c4:0b:0f:04:a7:96:cf:1e:6b:
                    af:1a:f7:4d:2d:c0:1c:02:fd:82:8c:b1:71:13:cf:
                    e5:30:15:cd:dc:ce:c7:76:49:ec:8a:51:86:d9:88:
                    0b:0d:e8:dd:e9:dd:2b:48:85:86:ab:78:38:aa:e8:
                    74:3a:ee:05:51:d1:fb:87:f4:5d:36:54:5e:a1:d5:
                    80:b6:74:46:cd:51:ef:a8:77:2f:69:ef:66:fd:57:
                    0a:15:4e:8a:89:18:ff:c9:75:2a:06:61:36:09:88:
                    0f:d2:e9:aa:92:a7:b9:13:c8:c8:9f:2b:28:1c:b4:
                    2c:f9:9e:2d:89:9e:e7:0d:77:08:bb:89:b6:6b:0e:
                    fd:a5:8d:31:f5:aa:6c:38:f5:ec:f7:33:b5:0d:1e:
                    7b:f8:7b:41:8e:08:b4:a6:c5:8c:c1:25:f7:57:54:
                    e3:c4:1b:5f:19:eb:5a:49:d6:42:a7:6d:b8:ea:eb:
                    43:72:86:35:cf:95:0b:82:2b:e0:3f:cd:f2:10:12:
                    4c:ce:0d:04:9f:16:53:f2:ea:ac:f8:35:3b:77:5a:
                    bb:a6:02:aa:79:46:9d:d5:b7:53:f9:f3:d1:0b:a6:
                    74:18:89:84:8c:17:11:67:45:bd:cb:35:74:76:a3:
                    e7:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:47:E5:7D:55:63:2F:47:59:ED:06:5E:14:AE:A0:C6:BF:89:CD:D8
            X509v3 Authority Key Identifier:
                keyid:52:C8:D5:6D:F4:AE:E2:63:E8:A6:51:12:98:A6:19:CE:98:C8:AC:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365BF9E/E18FB3DECA2411EDA24C598BF1222468/UsjVbfSu4mPoplESmKYZzpjIrA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/UsjVbfSu4mPoplESmKYZzpjIrA4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365BF9E/E18FB3DECA2411EDA24C598BF1222468/UsjVbfSu4mPoplESmKYZzpjIrA4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:05:a0:bd:8a:43:e5:34:b3:91:bd:05:b3:be:da:0b:14:05:
         3f:a6:a1:be:11:c2:2b:23:63:6c:43:68:26:83:1e:fd:40:db:
         9c:3d:5e:91:6a:f9:e4:8b:56:cf:f3:d0:fe:ab:2f:c0:8b:b0:
         67:80:36:38:1b:bd:5d:ed:dc:5e:59:e3:71:70:6f:96:d0:61:
         0d:a3:a7:af:ab:8e:bd:b4:d1:bf:8c:45:48:f7:03:30:83:59:
         b1:0d:1c:78:c0:f5:9c:30:d9:46:f5:96:d2:55:8f:dd:de:e8:
         06:de:08:22:94:95:cf:76:ff:80:8f:ad:63:3f:e7:7b:a2:47:
         a4:33:9d:13:72:a4:22:9f:96:3c:e1:1e:bf:34:81:cf:31:e2:
         3c:7c:19:80:fc:2b:69:64:a1:e6:6b:87:19:ec:65:54:61:b5:
         4d:59:82:2f:a7:e8:80:d5:f1:55:e9:f3:40:64:a8:75:f0:d0:
         aa:e4:fd:a7:a8:7f:64:b1:8b:0c:d8:b3:b9:ca:ea:55:54:e5:
         c2:ca:00:3b:bc:ab:c2:8e:b3:65:be:bf:59:f3:d4:ec:85:e9:
         4b:b4:26:b6:1e:dc:f7:82:48:f4:c4:1b:86:04:c3:1f:37:81:
         34:f2:0f:89:a6:12:fe:b7:0c:15:ac:2e:56:05:36:1a:0f:63:
         ce:b4:87:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:21:17 2026 by rpki-client