Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366AE59/E029D1E6F57511EEA87EEF4F775412E6/OV0yW2nyp6M_rgog4SIm0pgbsF4.mft
File:                     OV0yW2nyp6M_rgog4SIm0pgbsF4.mft (raw, json)
Hash identifier:          msa6o8uB5WeIxqy4MJNiuZ3WTMeKHr1k92GyFfjcEwk=
Subject key identifier:   7B:DD:0E:C0:98:96:BB:6D:6F:81:C1:45:58:87:29:2A:90:58:79:14
Authority key identifier: 39:5D:32:5B:69:F2:A7:A3:3F:AE:0A:20:E1:22:26:D2:98:1B:B0:5E
Certificate issuer:       /CN=F366AE59AF/serialNumber=395D325B69F2A7A33FAE0A20E12226D2981BB05E
Certificate serial:       02DE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/OV0yW2nyp6M_rgog4SIm0pgbsF4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366AE59/E029D1E6F57511EEA87EEF4F775412E6/OV0yW2nyp6M_rgog4SIm0pgbsF4.mft
Manifest number:          02DE
Signing time:             Thu 26 Mar 2026 04:53:46 +0000
Manifest this update:     Thu 26 Mar 2026 04:53:45 +0000
Manifest next update:     Sat 28 Mar 2026 04:53:45 +0000
Files and hashes:         1: OV0yW2nyp6M_rgog4SIm0pgbsF4.crl (hash: SwrHik8N1lCmbAkSq1AFCwgtxIjJSeolESCiZExB0BE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366AE59/E029D1E6F57511EEA87EEF4F775412E6/OV0yW2nyp6M_rgog4SIm0pgbsF4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366AE59/E029D1E6F57511EEA87EEF4F775412E6/OV0yW2nyp6M_rgog4SIm0pgbsF4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/OV0yW2nyp6M_rgog4SIm0pgbsF4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 734 (0x2de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366AE59AF, serialNumber=395D325B69F2A7A33FAE0A20E12226D2981BB05E
        Validity
            Not Before: Mar 26 04:53:45 2026 GMT
            Not After : Mar 28 04:53:45 2026 GMT
        Subject: CN=69c4bbda-7065
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:74:91:77:c1:1b:64:dc:4e:39:99:3f:40:21:
                    2e:7d:ea:fc:ab:e3:6c:65:15:3c:91:6e:9d:08:43:
                    10:88:9e:8a:26:89:47:2b:df:85:01:19:ab:80:bb:
                    a6:29:ba:8a:a0:96:17:6d:45:45:a6:50:fc:06:27:
                    87:85:f8:a9:24:51:95:b5:f5:4c:d3:be:29:0b:dd:
                    08:4d:ff:8a:48:69:2d:49:bf:39:54:59:4c:0e:80:
                    e6:83:7e:a4:35:85:4b:6d:10:ad:79:8a:a2:cb:4c:
                    07:96:34:d6:7b:eb:58:a3:2c:37:67:0b:38:ac:af:
                    a2:9d:09:df:f8:31:b7:c2:01:b5:aa:00:70:8f:b9:
                    db:e2:7d:b2:f1:ee:4e:4d:29:dc:8a:c8:0a:e2:c2:
                    91:c8:b9:49:81:ca:3a:e2:24:7c:75:24:1c:e3:bf:
                    f0:57:f2:1b:e5:66:07:01:bd:07:8f:c4:d4:1c:1a:
                    c2:61:4d:11:4b:d6:2f:5d:9f:78:ab:56:10:96:ee:
                    eb:18:40:75:26:26:3e:84:19:bd:10:21:f3:87:a1:
                    09:bb:d4:12:06:9d:e5:21:58:9e:6e:6b:a9:7d:44:
                    8a:aa:d2:10:9d:04:19:7a:24:7b:97:9e:9b:5d:2e:
                    78:3d:b7:31:75:79:a3:9f:f2:f9:e4:57:92:ff:63:
                    17:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:DD:0E:C0:98:96:BB:6D:6F:81:C1:45:58:87:29:2A:90:58:79:14
            X509v3 Authority Key Identifier:
                keyid:39:5D:32:5B:69:F2:A7:A3:3F:AE:0A:20:E1:22:26:D2:98:1B:B0:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366AE59/E029D1E6F57511EEA87EEF4F775412E6/OV0yW2nyp6M_rgog4SIm0pgbsF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OV0yW2nyp6M_rgog4SIm0pgbsF4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366AE59/E029D1E6F57511EEA87EEF4F775412E6/OV0yW2nyp6M_rgog4SIm0pgbsF4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:c5:d9:2c:af:fc:38:af:96:63:e7:6a:ad:27:8a:ca:63:32:
         d5:b6:e0:04:7f:f0:d5:92:03:a9:99:52:fb:0c:b1:be:09:05:
         e5:f8:f1:df:fc:82:03:36:ee:8e:14:b1:46:22:f1:9d:83:21:
         eb:63:05:b5:2b:5a:b9:22:68:77:2b:a3:5a:b7:1f:bd:20:bf:
         a5:22:d4:01:45:f2:f1:11:e7:73:8c:8a:9b:e9:fe:6a:37:71:
         88:71:92:39:5d:fb:7e:4e:80:70:73:a7:44:c8:4e:fc:de:87:
         49:36:9f:1c:f7:b2:90:e2:b3:53:37:9b:5f:86:ec:a6:07:d5:
         b0:26:55:5e:03:49:80:b5:4f:f2:bc:5d:70:ca:0d:56:ed:95:
         8c:c8:6c:1c:0a:f8:02:7b:df:6b:bf:fa:61:f3:cc:2f:06:c1:
         be:0b:96:e2:31:fd:a4:02:08:b6:b9:ec:da:ce:a7:66:cb:d4:
         0d:7a:ab:1e:1c:5d:d0:2f:59:45:a0:1a:20:7c:0a:41:5d:66:
         0b:8e:9b:9f:9b:af:30:5d:71:45:48:55:84:95:06:b9:99:8c:
         b7:fc:e3:a1:5e:d8:b7:49:e7:ef:31:4f:6f:03:0c:22:18:c2:
         4c:20:bf:cd:e4:fd:01:3e:da:d4:89:41:19:5e:6c:bb:78:2d:
         04:03:f1:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:20:27 2026 by rpki-client