Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3679CB8/BE22C8C645E811ECBE967719D8A014CE/OwiJEFfOiidoEQQFlcyqxAjfUaY.mft
File:                     OwiJEFfOiidoEQQFlcyqxAjfUaY.mft (raw, json)
Hash identifier:          jBXbJXx8wg/5AOwx70FUe6o2nxDisLJfrGWO5dqCEaY=
Subject key identifier:   DC:8E:91:15:31:8F:54:BE:40:43:FF:0D:94:00:12:E2:F7:88:27:DA
Authority key identifier: 3B:08:89:10:57:CE:8A:27:68:11:04:05:95:CC:AA:C4:08:DF:51:A6
Certificate issuer:       /CN=F3679CB8AF/serialNumber=3B08891057CE8A276811040595CCAAC408DF51A6
Certificate serial:       0660
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/OwiJEFfOiidoEQQFlcyqxAjfUaY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3679CB8/BE22C8C645E811ECBE967719D8A014CE/OwiJEFfOiidoEQQFlcyqxAjfUaY.mft
Manifest number:          065F
Signing time:             Thu 26 Mar 2026 02:54:01 +0000
Manifest this update:     Thu 26 Mar 2026 02:54:00 +0000
Manifest next update:     Sat 28 Mar 2026 02:54:00 +0000
Files and hashes:         1: OwiJEFfOiidoEQQFlcyqxAjfUaY.crl (hash: AhQQCTOOGy69HQen6t9dfJDB2EgUWPVf8/R1xjvPtyM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3679CB8/BE22C8C645E811ECBE967719D8A014CE/OwiJEFfOiidoEQQFlcyqxAjfUaY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3679CB8/BE22C8C645E811ECBE967719D8A014CE/OwiJEFfOiidoEQQFlcyqxAjfUaY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/OwiJEFfOiidoEQQFlcyqxAjfUaY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1632 (0x660)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3679CB8AF, serialNumber=3B08891057CE8A276811040595CCAAC408DF51A6
        Validity
            Not Before: Mar 26 02:54:00 2026 GMT
            Not After : Mar 28 02:54:00 2026 GMT
        Subject: CN=69c49fc9-23c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:cb:88:0c:5f:02:36:7f:60:d6:62:ae:7a:ec:
                    d2:57:96:9f:f7:68:40:56:ab:5c:dc:33:b5:0f:18:
                    b4:d3:61:0c:7f:e3:ba:a1:4b:eb:95:1b:5c:bd:1c:
                    89:f1:06:4d:48:a4:77:4e:98:e7:ff:e2:e0:0e:88:
                    e7:1a:5e:32:cd:84:5e:57:60:61:85:6a:ef:cf:16:
                    34:de:47:f6:26:f2:f8:31:40:79:bb:bd:f9:f1:66:
                    b0:45:10:1e:15:c3:29:30:3b:d6:af:81:3c:69:6d:
                    18:a9:34:b4:b7:2e:34:27:5a:a3:a5:70:45:fc:23:
                    7f:76:d7:55:25:40:33:47:68:b0:b5:91:04:ee:d2:
                    a1:28:ef:72:20:69:5f:f7:d9:74:41:d3:71:95:94:
                    07:bb:24:50:82:dc:88:82:13:9f:73:4c:1d:18:6c:
                    3c:59:94:bd:fb:bf:1a:d4:cb:bc:e1:aa:cc:6f:96:
                    9c:f1:98:6b:d0:7d:f7:4a:e6:0c:4b:5a:c0:aa:e6:
                    61:fa:da:94:36:3e:e7:35:94:2c:45:c4:37:2a:45:
                    a1:65:cd:ad:6f:a6:d2:c4:64:30:e1:94:4e:13:50:
                    6c:b6:08:67:9e:41:d1:6d:9b:b8:2e:2c:27:9f:eb:
                    6a:3b:df:92:7d:29:bf:17:e1:cf:55:da:a9:92:31:
                    98:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:8E:91:15:31:8F:54:BE:40:43:FF:0D:94:00:12:E2:F7:88:27:DA
            X509v3 Authority Key Identifier:
                keyid:3B:08:89:10:57:CE:8A:27:68:11:04:05:95:CC:AA:C4:08:DF:51:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3679CB8/BE22C8C645E811ECBE967719D8A014CE/OwiJEFfOiidoEQQFlcyqxAjfUaY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OwiJEFfOiidoEQQFlcyqxAjfUaY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3679CB8/BE22C8C645E811ECBE967719D8A014CE/OwiJEFfOiidoEQQFlcyqxAjfUaY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:21:75:92:f6:f0:55:4e:6e:6b:61:5b:3a:d9:81:4f:b3:ad:
         c1:e3:91:c3:0d:63:25:2b:0d:77:82:53:d7:f9:50:70:6a:f6:
         99:e0:ac:9d:4e:ed:78:50:06:d6:68:18:c8:be:77:a7:4c:60:
         a8:5c:02:36:ad:af:51:62:c9:8f:ea:3e:87:05:d1:3f:2c:b9:
         d0:6a:e4:d0:df:ef:ce:c8:ea:a2:e5:4a:f1:41:fb:a7:d1:41:
         7e:c3:10:04:7d:e8:fa:1c:a1:11:3e:85:6e:a0:10:7e:4a:8b:
         28:e7:22:4b:2f:0c:0f:b5:d3:8b:c0:fe:34:8f:4d:a0:9e:a6:
         b4:75:b6:db:0d:ec:5c:e3:2f:ba:e8:c7:e3:a3:6c:f9:31:fd:
         c4:ad:cb:80:fa:66:50:c1:39:fc:fd:de:ea:29:ea:8d:5e:cc:
         db:9c:85:27:6a:5d:f9:47:32:ca:4c:32:75:a4:b0:13:5c:1e:
         2c:89:39:ca:c2:57:69:da:3c:55:4f:eb:88:c8:c5:4e:5e:09:
         f5:4a:d8:51:95:db:2d:09:0a:a0:0f:0c:ca:d0:54:aa:9c:f4:
         9b:a5:51:22:e8:b5:25:f4:c7:ed:75:9c:ee:0f:8f:82:f4:78:
         fd:5c:ea:55:24:68:36:34:d2:09:42:68:e5:5e:80:7e:c0:42:
         b4:ab:60:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:37:02 2026 by rpki-client