Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36700DB/F9B08F00F50111EB9095E604D8A014CE/SmfXXBQJ0u538xkN5zXsl-9jDVg.mft
File:                     SmfXXBQJ0u538xkN5zXsl-9jDVg.mft (raw, json)
Hash identifier:          HKC4/92KaNcFKp5jrFf6UBw6WziElsNHqVGqcjhLYpc=
Subject key identifier:   D9:C6:67:BB:13:8A:7F:F6:F2:04:E3:50:7E:FB:31:84:12:A3:15:3F
Authority key identifier: 4A:67:D7:5C:14:09:D2:EE:77:F3:19:0D:E7:35:EC:97:EF:63:0D:58
Certificate issuer:       /CN=F36700DBAF/serialNumber=4A67D75C1409D2EE77F3190DE735EC97EF630D58
Certificate serial:       06CA
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SmfXXBQJ0u538xkN5zXsl-9jDVg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36700DB/F9B08F00F50111EB9095E604D8A014CE/SmfXXBQJ0u538xkN5zXsl-9jDVg.mft
Manifest number:          06CA
Signing time:             Thu 26 Mar 2026 02:41:00 +0000
Manifest this update:     Thu 26 Mar 2026 02:40:59 +0000
Manifest next update:     Sat 28 Mar 2026 02:40:59 +0000
Files and hashes:         1: SmfXXBQJ0u538xkN5zXsl-9jDVg.crl (hash: hgyi90rjxxfULhjbrzihkbm8xoaHbV1iWknmq8huzKs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36700DB/F9B08F00F50111EB9095E604D8A014CE/SmfXXBQJ0u538xkN5zXsl-9jDVg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36700DB/F9B08F00F50111EB9095E604D8A014CE/SmfXXBQJ0u538xkN5zXsl-9jDVg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SmfXXBQJ0u538xkN5zXsl-9jDVg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1738 (0x6ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36700DBAF, serialNumber=4A67D75C1409D2EE77F3190DE735EC97EF630D58
        Validity
            Not Before: Mar 26 02:40:59 2026 GMT
            Not After : Mar 28 02:40:59 2026 GMT
        Subject: CN=69c49cbb-406c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:86:65:b1:43:06:42:9f:41:7c:a2:2b:8d:a4:
                    91:29:e4:08:56:64:b0:bd:23:ca:4c:9e:6c:5a:09:
                    5e:6f:22:5a:5c:4a:05:7b:6f:ea:a0:11:f1:fd:aa:
                    a1:c1:e2:3d:85:6e:43:84:81:f6:85:2a:a4:65:3a:
                    f5:36:c6:64:f7:fc:84:90:22:d0:dc:6c:12:03:2a:
                    67:24:fc:11:d8:81:f5:21:65:e8:e8:c2:d0:84:8b:
                    d3:0b:aa:dd:07:de:bc:39:3f:fb:e4:e1:22:8c:50:
                    91:44:5c:f4:ed:fa:ea:c9:49:78:b1:7b:b9:c6:82:
                    7e:6e:df:ab:f8:c1:65:54:9b:be:42:03:c7:ea:6a:
                    0b:df:97:e3:14:3a:35:83:d1:eb:6b:3f:d5:8e:9b:
                    65:39:13:f8:b7:cd:95:65:9e:8f:d7:3e:34:0a:e5:
                    47:11:9d:f4:ad:1a:ae:36:a1:98:b7:0c:e8:3f:7a:
                    cc:2e:bd:5b:00:38:18:c7:2c:9b:ba:90:85:55:28:
                    32:76:e2:95:19:fc:6b:ec:45:61:d0:74:bc:b9:a1:
                    b2:0a:fa:e6:4a:ad:54:9c:be:d7:c7:2c:24:31:e9:
                    de:b4:9a:75:54:bd:91:cd:60:96:ef:14:ab:ac:31:
                    f0:76:cf:5b:4c:35:cc:89:58:92:47:3f:f2:7c:cd:
                    cc:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:C6:67:BB:13:8A:7F:F6:F2:04:E3:50:7E:FB:31:84:12:A3:15:3F
            X509v3 Authority Key Identifier:
                keyid:4A:67:D7:5C:14:09:D2:EE:77:F3:19:0D:E7:35:EC:97:EF:63:0D:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36700DB/F9B08F00F50111EB9095E604D8A014CE/SmfXXBQJ0u538xkN5zXsl-9jDVg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SmfXXBQJ0u538xkN5zXsl-9jDVg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36700DB/F9B08F00F50111EB9095E604D8A014CE/SmfXXBQJ0u538xkN5zXsl-9jDVg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:91:0f:92:2f:0f:63:16:79:17:5d:b0:6b:5e:2e:2a:45:8d:
         a8:e2:b0:67:0f:95:1a:14:a4:97:e1:91:55:ae:89:4d:36:dc:
         9b:71:50:c3:c3:d6:d0:cc:9a:fd:fe:16:cc:0d:32:6e:8b:b6:
         3c:b5:c6:51:94:60:f0:e7:7d:71:7b:10:74:0c:87:67:ba:65:
         b4:ec:c9:ec:9a:c4:71:1e:2b:90:c5:b1:50:f2:7a:8e:be:e0:
         b2:26:8f:f3:ae:42:48:41:14:46:be:78:12:29:ad:08:1d:f5:
         87:a8:0e:1c:fe:e3:0b:d1:3b:5c:3b:cc:3f:51:70:9b:69:3f:
         f4:13:2a:d0:5f:d2:4a:be:e4:8c:12:33:77:42:09:af:b5:23:
         24:31:c3:91:00:85:57:bb:6e:94:5a:d9:f3:c0:47:eb:3d:79:
         a2:bb:8c:9f:6d:2f:81:86:34:45:c8:bd:ee:2e:f8:fc:16:e8:
         5e:cb:03:99:7b:cc:91:44:a0:9d:0e:94:81:a9:3c:6e:b0:6e:
         aa:3c:ec:78:b6:f0:52:54:f8:97:96:de:2e:9d:73:35:f0:db:
         4c:04:4a:a2:61:c8:15:53:a4:33:d8:62:6b:17:ee:42:a5:6d:
         1e:ed:34:e4:f3:77:7b:2f:2a:67:ea:c8:33:19:ca:5b:24:d2:
         46:c3:3e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:55:19 2026 by rpki-client