Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3662DAB/048F88108F3211EDB0EEF1B7F1222468/XKOJ-4BR0kErpd-AHYmyys5XJZw.mft
File:                     XKOJ-4BR0kErpd-AHYmyys5XJZw.mft (raw, json)
Hash identifier:          MkIqdeLGvnWL2VprtURr4O2Z6QpfnRchxfmfTRNDRzM=
Subject key identifier:   0D:9D:81:7D:14:FC:CE:95:0F:4D:95:8E:AE:83:DC:96:47:2C:EF:27
Authority key identifier: 5C:A3:89:FB:80:51:D2:41:2B:A5:DF:80:1D:89:B2:CA:CE:57:25:9C
Certificate issuer:       /CN=F3662DABAF/serialNumber=5CA389FB8051D2412BA5DF801D89B2CACE57259C
Certificate serial:       04BF
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/XKOJ-4BR0kErpd-AHYmyys5XJZw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/048F88108F3211EDB0EEF1B7F1222468/XKOJ-4BR0kErpd-AHYmyys5XJZw.mft
Manifest number:          04BC
Signing time:             Thu 26 Mar 2026 03:39:59 +0000
Manifest this update:     Thu 26 Mar 2026 03:39:59 +0000
Manifest next update:     Sat 28 Mar 2026 03:39:59 +0000
Files and hashes:         1: XKOJ-4BR0kErpd-AHYmyys5XJZw.crl (hash: NK4PQ4n+4eHMk65317Edo6BB5YB/gpKZux9nIusyHn4=)
                          2: 2BCE620636E811F0AFEF58D4DAE4EC9C.roa (hash: P7lmUgIS9Hm4lWbQ/Ee8DkBKFNBVl2htZZLdVzqMPOo=)
                          3: FF42A1988F3211ED86A292BAF1222468.roa (hash: x+yQ5t8NNejDnfE2F13L3hSaxA+eL6ATRpRXB3MRfYU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/048F88108F3211EDB0EEF1B7F1222468/XKOJ-4BR0kErpd-AHYmyys5XJZw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/048F88108F3211EDB0EEF1B7F1222468/XKOJ-4BR0kErpd-AHYmyys5XJZw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/XKOJ-4BR0kErpd-AHYmyys5XJZw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1215 (0x4bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3662DABAF, serialNumber=5CA389FB8051D2412BA5DF801D89B2CACE57259C
        Validity
            Not Before: Mar 26 03:39:59 2026 GMT
            Not After : Mar 28 03:39:59 2026 GMT
        Subject: CN=69c4aa8f-38b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:97:08:28:b5:5a:df:b4:6a:60:60:89:54:e9:
                    ec:1d:35:dd:f9:f2:2c:3f:c9:3a:61:6b:c8:ae:67:
                    e5:23:90:c5:b8:d3:7b:51:33:cf:76:0f:51:7b:b4:
                    df:f4:42:fe:85:fd:01:96:72:7d:c9:ad:87:3e:97:
                    ed:f9:5f:1b:21:a6:94:35:7f:0a:5b:2e:5c:9f:ba:
                    37:d8:73:57:e8:ed:49:ff:ce:a7:5a:a8:aa:68:64:
                    6b:27:81:14:1f:62:e7:c5:e2:fc:2a:c3:71:17:11:
                    85:6e:6d:51:81:39:4e:dc:78:6f:a6:88:31:b9:b9:
                    f2:d0:aa:e7:7c:39:fb:7c:e1:eb:a1:76:a1:4d:26:
                    79:c8:83:92:59:6e:66:c7:58:c4:33:75:da:3a:69:
                    ac:6e:ac:64:fc:8a:3b:49:a4:f8:b9:f2:df:44:32:
                    74:28:c2:fa:84:65:4e:3a:7c:91:94:ed:ee:bd:3b:
                    ad:b1:c6:ea:6f:54:db:65:29:28:35:0e:ba:6e:ee:
                    5c:89:cc:01:fe:69:33:87:5d:b3:56:d3:4d:98:c8:
                    59:ae:08:34:73:f2:fb:bd:79:fd:ac:fc:62:22:75:
                    14:7c:b2:e8:51:e7:69:8b:26:93:64:00:f7:e6:fa:
                    f0:4f:0a:5e:d4:74:15:39:35:52:f8:b4:c7:58:d7:
                    d2:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:9D:81:7D:14:FC:CE:95:0F:4D:95:8E:AE:83:DC:96:47:2C:EF:27
            X509v3 Authority Key Identifier:
                keyid:5C:A3:89:FB:80:51:D2:41:2B:A5:DF:80:1D:89:B2:CA:CE:57:25:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/048F88108F3211EDB0EEF1B7F1222468/XKOJ-4BR0kErpd-AHYmyys5XJZw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XKOJ-4BR0kErpd-AHYmyys5XJZw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/048F88108F3211EDB0EEF1B7F1222468/XKOJ-4BR0kErpd-AHYmyys5XJZw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d1:14:86:bf:ea:19:fc:2c:79:86:57:56:42:e1:df:dc:b4:a1:
         93:e7:76:02:bb:dc:64:88:56:c6:b0:07:5d:45:69:03:fd:b3:
         6a:f5:c3:dc:41:ec:eb:68:78:99:76:aa:fc:86:f6:d3:75:9a:
         8f:84:cf:40:b9:a4:86:56:76:0e:c8:9d:dc:56:6a:a9:60:f1:
         db:e0:08:9b:3a:95:4e:b1:ea:02:78:71:5b:c4:e4:57:cd:06:
         aa:7c:b8:36:c6:57:29:fc:d4:6e:20:1a:cd:a2:6b:71:a4:c4:
         86:06:f7:44:29:cd:9f:93:ed:29:11:45:1f:99:01:c4:7f:9a:
         21:81:fb:72:59:3a:03:a4:17:21:ea:fb:00:a1:b3:98:09:27:
         2b:f9:61:c4:3a:40:93:63:06:eb:f2:f3:76:b5:d5:fd:be:c6:
         59:25:13:5d:47:55:1e:96:d1:73:81:69:1b:20:f0:49:c6:b8:
         34:4e:cf:69:83:7a:9e:46:6f:61:eb:4b:99:bc:b9:11:35:32:
         5c:b3:60:21:ef:c0:13:ad:7e:ca:07:d5:94:d4:cc:b1:70:02:
         76:84:59:3b:07:17:18:ee:57:00:80:c3:04:d4:6f:f7:5c:48:
         96:b8:92:d4:fa:e1:05:13:45:eb:e5:fa:d6:1e:4a:d0:01:ab:
         bc:45:b1:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:10:24 2026 by rpki-client