Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3671DBD/26986406124411EDAD5815B4F1222468/_6g_-fD2ziFxW9v1xzfN3OlU53w.mft
File:                     _6g_-fD2ziFxW9v1xzfN3OlU53w.mft (raw, json)
Hash identifier:          l/sCpK1N1eg2owTkxm0GEU/D9aZNwPD7Oh2mvtnUB7o=
Subject key identifier:   12:24:B4:90:02:8B:58:4E:43:44:84:0B:93:69:E7:FD:98:8D:2A:A6
Authority key identifier: FF:A8:3F:F9:F0:F6:CE:21:71:5B:DB:F5:C7:37:CD:DC:E9:54:E7:7C
Certificate issuer:       /CN=F3671DBDAF/serialNumber=FFA83FF9F0F6CE21715BDBF5C737CDDCE954E77C
Certificate serial:       055D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/_6g_-fD2ziFxW9v1xzfN3OlU53w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3671DBD/26986406124411EDAD5815B4F1222468/_6g_-fD2ziFxW9v1xzfN3OlU53w.mft
Manifest number:          055C
Signing time:             Thu 26 Mar 2026 03:21:19 +0000
Manifest this update:     Thu 26 Mar 2026 03:21:18 +0000
Manifest next update:     Sat 28 Mar 2026 03:21:18 +0000
Files and hashes:         1: _6g_-fD2ziFxW9v1xzfN3OlU53w.crl (hash: Shm+C12y0ft5jN0Jedg6iQ1dLP7G7WfboiGi5Bw4pZ8=)
                          2: CD41BC4C987611F090377BD7DAE4EC9C.roa (hash: WIelbzepq8miuTgT/TViuYjo/4OwJv5AvUtvY4ekc/U=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3671DBD/26986406124411EDAD5815B4F1222468/_6g_-fD2ziFxW9v1xzfN3OlU53w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3671DBD/26986406124411EDAD5815B4F1222468/_6g_-fD2ziFxW9v1xzfN3OlU53w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/_6g_-fD2ziFxW9v1xzfN3OlU53w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1373 (0x55d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3671DBDAF, serialNumber=FFA83FF9F0F6CE21715BDBF5C737CDDCE954E77C
        Validity
            Not Before: Mar 26 03:21:18 2026 GMT
            Not After : Mar 28 03:21:18 2026 GMT
        Subject: CN=69c4a62f-3f76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:9f:db:4c:b9:83:da:60:91:ed:aa:db:d7:9b:
                    e1:8b:48:f1:27:3e:47:d1:b4:b6:d7:6a:77:2b:3a:
                    ab:88:fd:8b:dc:90:8f:53:c7:79:6d:bc:23:86:9f:
                    d6:e3:eb:e4:61:db:4b:ed:57:9d:37:fe:e4:85:8b:
                    f4:bd:b9:34:ed:68:15:0f:6d:47:ec:ef:cd:eb:a0:
                    3a:76:08:22:33:0b:c9:c5:c3:3c:bf:3e:57:68:35:
                    fd:12:6a:07:2e:76:09:a0:5e:40:69:db:cc:4b:42:
                    f9:98:02:a4:c6:fe:cc:50:51:f6:2e:99:df:45:3e:
                    01:a0:7d:66:d9:a2:6c:49:ea:8c:5d:97:25:f7:21:
                    11:98:10:95:f7:13:08:b8:d3:35:b9:db:f7:ff:c3:
                    fc:2d:fa:8e:40:f3:21:be:51:92:18:db:2e:6e:4f:
                    72:8b:69:ae:c9:df:35:65:82:a5:75:bd:8c:d6:20:
                    02:dd:8d:81:62:fb:3c:70:e4:70:47:10:d9:a1:46:
                    ad:fa:18:aa:57:e7:2c:db:d3:f8:d1:05:e1:09:52:
                    44:19:82:5d:04:bb:7d:e8:87:13:a0:c9:81:51:b0:
                    ef:ad:75:74:02:df:43:dc:5c:d8:20:dc:8b:3f:ee:
                    1b:cf:68:2f:12:32:68:61:dd:d3:c9:bf:6d:2c:02:
                    56:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:24:B4:90:02:8B:58:4E:43:44:84:0B:93:69:E7:FD:98:8D:2A:A6
            X509v3 Authority Key Identifier:
                keyid:FF:A8:3F:F9:F0:F6:CE:21:71:5B:DB:F5:C7:37:CD:DC:E9:54:E7:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3671DBD/26986406124411EDAD5815B4F1222468/_6g_-fD2ziFxW9v1xzfN3OlU53w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_6g_-fD2ziFxW9v1xzfN3OlU53w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3671DBD/26986406124411EDAD5815B4F1222468/_6g_-fD2ziFxW9v1xzfN3OlU53w.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:ef:b4:01:be:c9:e5:b5:0b:a9:a3:0a:da:8a:1f:c5:07:23:
         e5:e3:8d:9d:4c:1c:7d:cc:de:45:73:d1:7f:bd:cd:97:35:6c:
         99:9d:cd:5f:15:15:62:7d:85:58:81:31:3c:8d:ed:55:d9:a2:
         8e:b6:40:c5:0a:f5:a8:13:37:d9:2e:17:df:4d:52:e2:d0:05:
         3c:a1:65:9d:b8:bc:0f:fb:2c:10:79:f8:1c:4b:60:e0:83:13:
         76:43:71:b0:4e:5e:64:70:6b:8f:c6:1c:7f:11:57:0c:8c:40:
         d1:0a:9a:95:f4:fb:cf:6b:ea:48:1b:87:07:04:57:b7:7d:68:
         fa:f5:01:ee:1f:85:e0:7e:7f:ab:19:23:e4:77:95:6d:9c:99:
         be:bf:ad:ad:2a:03:07:a2:d8:2d:85:14:79:17:99:ec:26:ae:
         24:24:88:11:19:bb:1a:01:0a:a3:ff:1f:6f:ee:13:3c:9e:4a:
         d3:72:19:68:6c:d5:f3:82:ce:5d:2d:f9:ce:7c:1d:e6:80:53:
         88:01:10:06:5f:6c:2f:9e:a0:b4:a2:23:b2:ae:52:a6:de:a6:
         ab:a3:8b:e8:da:c6:47:d8:52:b9:dd:a6:22:37:5b:ba:d9:ef:
         73:65:8f:e1:0d:13:3e:94:88:13:b2:af:78:eb:f6:e2:49:69:
         8e:dd:0e:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:54:34 2026 by rpki-client