Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3679532/7DD45604C38E11F08BF6B3C7DAE4EC9C/zkYtttkR7mTZxEy4EI0T4DxaZNU.mft
File:                     zkYtttkR7mTZxEy4EI0T4DxaZNU.mft (raw, json)
Hash identifier:          1IqHPT7DMaxUCXpVhZrtPScPqkc31ccok9FKi6b8vyc=
Subject key identifier:   DE:7F:E1:97:4F:F6:96:65:F0:5D:FD:18:76:CE:BA:E4:80:A2:07:E2
Authority key identifier: CE:46:2D:B6:D9:11:EE:64:D9:C4:4C:B8:10:8D:13:E0:3C:5A:64:D5
Certificate issuer:       /CN=F3679532AF/serialNumber=CE462DB6D911EE64D9C44CB8108D13E03C5A64D5
Certificate serial:       8B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/zkYtttkR7mTZxEy4EI0T4DxaZNU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3679532/7DD45604C38E11F08BF6B3C7DAE4EC9C/zkYtttkR7mTZxEy4EI0T4DxaZNU.mft
Manifest number:          88
Signing time:             Thu 26 Mar 2026 06:20:16 +0000
Manifest this update:     Thu 26 Mar 2026 06:20:15 +0000
Manifest next update:     Sat 28 Mar 2026 06:20:15 +0000
Files and hashes:         1: zkYtttkR7mTZxEy4EI0T4DxaZNU.crl (hash: mGcPRETLywckSqsLnfTchrhcHzvLoMqwKZQAnrwGpmg=)
                          2: FDA59DF2C38E11F08B1F0FCADAE4EC9C.roa (hash: tqnDn2eXksrwnPyVC4DoYDlm3A+bfBcINzKFdaoCNAE=)
                          3: 86AD3B68C39511F0A59F00F2DAE4EC9C.roa (hash: HAj/QCJbUqOlCpJTAgH7nxk05+9O2sEd5ZgoEE+jkL0=)
                          4: 4416D8561D5211F1B09D5DBBDAE4EC9C.roa (hash: bnSYCKQteOzcDcNEFoo+uV3o4TGvuGUdVsiVEGgqdbo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3679532/7DD45604C38E11F08BF6B3C7DAE4EC9C/zkYtttkR7mTZxEy4EI0T4DxaZNU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3679532/7DD45604C38E11F08BF6B3C7DAE4EC9C/zkYtttkR7mTZxEy4EI0T4DxaZNU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/zkYtttkR7mTZxEy4EI0T4DxaZNU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 139 (0x8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3679532AF, serialNumber=CE462DB6D911EE64D9C44CB8108D13E03C5A64D5
        Validity
            Not Before: Mar 26 06:20:15 2026 GMT
            Not After : Mar 28 06:20:15 2026 GMT
        Subject: CN=69c4d020-7cfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:00:41:66:6e:87:9d:7b:4e:f6:29:51:39:16:
                    00:fc:fb:1f:f2:77:0e:25:21:50:da:8d:4a:ce:02:
                    41:dd:a7:ae:4d:12:51:ef:bd:71:74:e7:8e:27:20:
                    9c:3c:01:3c:5a:ba:56:d1:f4:03:3f:cb:fc:e5:83:
                    c0:99:94:a0:f5:07:9e:83:14:93:30:b9:2b:21:87:
                    e0:07:a5:08:14:73:3c:14:65:eb:d6:f9:3e:ff:09:
                    ad:28:b6:9b:b1:75:80:6f:7b:9a:12:12:41:70:bf:
                    0d:fe:20:65:40:11:cc:fb:b7:12:33:9a:4b:db:e0:
                    01:51:48:12:a9:70:76:73:c1:0b:a2:38:94:a9:a5:
                    47:36:e5:41:86:ae:90:1b:7d:42:fe:a1:4c:2e:92:
                    1c:40:83:b3:69:0f:86:8a:cb:32:36:f4:2c:bb:77:
                    4f:4f:bd:7e:7c:9e:93:9a:53:e2:0a:54:04:55:d8:
                    56:6e:e4:b4:fa:fe:99:78:65:e2:2e:86:15:f4:9d:
                    db:0f:ac:77:ed:9d:37:06:4b:91:7c:a6:77:d4:dc:
                    a6:d8:94:08:91:88:a1:42:c2:d6:64:0f:ae:6d:14:
                    40:92:cb:c1:d9:e2:f9:f3:66:82:39:c7:d1:b6:e0:
                    5a:d9:02:d7:40:37:12:89:3c:c0:f6:81:aa:64:f2:
                    5f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:7F:E1:97:4F:F6:96:65:F0:5D:FD:18:76:CE:BA:E4:80:A2:07:E2
            X509v3 Authority Key Identifier:
                keyid:CE:46:2D:B6:D9:11:EE:64:D9:C4:4C:B8:10:8D:13:E0:3C:5A:64:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3679532/7DD45604C38E11F08BF6B3C7DAE4EC9C/zkYtttkR7mTZxEy4EI0T4DxaZNU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zkYtttkR7mTZxEy4EI0T4DxaZNU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3679532/7DD45604C38E11F08BF6B3C7DAE4EC9C/zkYtttkR7mTZxEy4EI0T4DxaZNU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:08:5b:a0:31:67:09:d4:99:1f:f0:c9:f8:34:8b:92:44:a6:
         d9:54:4b:11:47:a6:42:69:ad:20:78:ef:34:a5:00:82:13:2b:
         36:76:28:3d:29:be:30:87:70:95:4b:50:78:eb:cd:cf:80:21:
         59:27:2b:0e:64:b5:24:35:0f:bc:56:15:d5:a6:4e:86:c3:da:
         6f:6d:d2:d8:db:a3:e0:75:10:84:36:c4:6e:e5:4d:e1:83:d9:
         5e:7b:23:ba:34:1e:44:07:1c:6a:b3:8a:84:f1:d1:73:d1:a2:
         12:66:0e:8f:c9:42:73:5e:99:02:50:cc:59:ef:a5:ec:a1:d5:
         4b:79:3f:6e:ab:07:c6:a1:66:12:c7:29:4e:91:dd:d1:68:25:
         6e:b7:64:88:4e:8a:f4:08:03:5d:e1:48:f5:92:a6:9f:83:30:
         9f:fc:83:41:84:f3:89:4f:6c:b3:2c:58:7f:25:e6:cf:66:6c:
         07:66:10:01:c1:b6:0d:64:95:f8:cd:4e:57:c8:17:76:c0:0a:
         e6:b2:d2:89:dd:9d:2c:95:b2:96:1a:4b:08:05:b5:2e:91:38:
         5c:56:4b:e9:8f:56:da:51:9a:53:97:5d:7b:d1:69:38:db:72:
         43:ef:1c:2a:e7:f8:43:5c:1f:db:87:a6:8a:51:8b:dd:37:74:
         30:6a:f5:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:18:05 2026 by rpki-client