Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367D68C/B68F7ED8920611EBAB13BC7CF8AEA228/xlOxWlDuQwH_JY2KKnwYY4PFDro.mft
File:                     xlOxWlDuQwH_JY2KKnwYY4PFDro.mft (raw, json)
Hash identifier:          Yy81YeDgkrrmB58YM0Pmw3Eh98c04CyqfiQrqZhvI1w=
Subject key identifier:   D9:48:78:FB:E1:58:29:F9:7E:D9:C9:8D:D7:5E:05:76:7F:92:3D:DB
Authority key identifier: C6:53:B1:5A:50:EE:43:01:FF:25:8D:8A:2A:7C:18:63:83:C5:0E:BA
Certificate issuer:       /CN=F367D68CAF/serialNumber=C653B15A50EE4301FF258D8A2A7C186383C50EBA
Certificate serial:       074E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/xlOxWlDuQwH_JY2KKnwYY4PFDro.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367D68C/B68F7ED8920611EBAB13BC7CF8AEA228/xlOxWlDuQwH_JY2KKnwYY4PFDro.mft
Manifest number:          074D
Signing time:             Thu 26 Mar 2026 02:21:14 +0000
Manifest this update:     Thu 26 Mar 2026 02:21:13 +0000
Manifest next update:     Sat 28 Mar 2026 02:21:13 +0000
Files and hashes:         1: xlOxWlDuQwH_JY2KKnwYY4PFDro.crl (hash: 2pQVxSh2ik4O3hq1OAo/zWAr4Tbr533fhLEbAAUFODg=)
                          2: 69EE67B4920711EBA4D68A7DF8AEA228.roa (hash: PWOhXQJ0fibjAAccGAeAnloClqV+BwPlt2KmVpD849M=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367D68C/B68F7ED8920611EBAB13BC7CF8AEA228/xlOxWlDuQwH_JY2KKnwYY4PFDro.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367D68C/B68F7ED8920611EBAB13BC7CF8AEA228/xlOxWlDuQwH_JY2KKnwYY4PFDro.mft
                          rsync://rpki.afrinic.net/repository/afrinic/xlOxWlDuQwH_JY2KKnwYY4PFDro.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1870 (0x74e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367D68CAF, serialNumber=C653B15A50EE4301FF258D8A2A7C186383C50EBA
        Validity
            Not Before: Mar 26 02:21:13 2026 GMT
            Not After : Mar 28 02:21:13 2026 GMT
        Subject: CN=69c4981a-6977
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:69:8f:3f:cf:93:4b:69:d7:c6:ec:f7:e0:6f:
                    f5:f0:bc:ee:ba:d7:47:07:2d:66:71:98:7b:8a:34:
                    73:32:51:4e:5d:3e:28:d4:45:50:b2:e1:d8:b4:fa:
                    29:e4:53:4a:1a:f4:dd:fa:21:d5:7c:c0:b8:a9:00:
                    94:2d:3c:c7:9b:57:3d:0b:8b:24:7a:23:db:e5:44:
                    87:4f:83:b4:11:ef:4d:53:02:72:5c:de:ae:98:b8:
                    6f:8b:78:b1:60:0d:4c:b8:02:58:d8:96:e4:ea:50:
                    81:7e:e7:38:ed:8e:23:8b:97:89:f7:0a:35:e0:31:
                    80:75:3d:b7:77:0e:95:e0:94:16:38:fd:dd:e4:94:
                    5a:d3:b9:19:72:b9:f3:83:d7:f6:a8:66:71:9e:49:
                    93:ed:6c:38:d5:12:79:24:57:90:eb:9e:2f:38:07:
                    33:b9:a2:ed:1b:c6:91:d3:c1:13:e4:5b:76:bc:53:
                    c2:a1:b2:d3:ac:57:23:3d:19:c6:85:52:e2:21:f1:
                    3b:fb:f5:1a:35:09:83:69:b4:1c:5d:f6:66:31:0b:
                    01:df:f4:61:5d:4f:17:ce:8d:06:50:eb:e2:3e:7a:
                    62:a5:4b:74:ca:eb:24:3c:26:7a:bc:8c:7d:f5:42:
                    c1:b3:eb:11:cb:b9:a8:72:ec:56:12:a5:9e:24:e8:
                    fe:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:48:78:FB:E1:58:29:F9:7E:D9:C9:8D:D7:5E:05:76:7F:92:3D:DB
            X509v3 Authority Key Identifier:
                keyid:C6:53:B1:5A:50:EE:43:01:FF:25:8D:8A:2A:7C:18:63:83:C5:0E:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367D68C/B68F7ED8920611EBAB13BC7CF8AEA228/xlOxWlDuQwH_JY2KKnwYY4PFDro.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xlOxWlDuQwH_JY2KKnwYY4PFDro.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367D68C/B68F7ED8920611EBAB13BC7CF8AEA228/xlOxWlDuQwH_JY2KKnwYY4PFDro.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:86:16:ad:c5:a6:12:5d:64:8e:fb:51:6f:f7:31:69:1a:ba:
         ab:cf:2d:16:eb:93:23:f4:f3:c2:65:9d:48:99:16:fa:ac:c9:
         0f:35:bd:3b:f7:c2:2b:bd:ae:b7:93:78:6c:d7:f8:a7:e7:fe:
         30:df:15:1b:c0:ce:fe:4e:e1:b6:06:4f:c6:9c:19:bd:40:5f:
         70:36:f2:b6:7f:ef:26:e1:26:91:8b:f1:c1:43:bc:1f:d9:d2:
         b7:4c:68:b5:e3:64:a7:e3:f5:65:9f:a5:f2:55:4e:2b:bf:2d:
         7e:9b:01:9b:9a:10:64:be:44:05:b8:49:71:5d:8c:7a:4e:be:
         57:7d:5e:00:6a:10:42:a7:22:87:07:cd:50:f1:14:19:b1:c5:
         78:ae:d8:55:bb:58:6d:f8:b2:2e:62:df:b7:00:c0:56:22:ef:
         7c:c8:03:42:23:d6:52:f4:6d:82:43:21:be:fb:53:fd:16:c9:
         a9:6c:41:ef:82:47:42:a2:59:94:67:47:9e:9e:b3:03:eb:90:
         cc:6f:ea:67:a4:00:70:be:61:07:34:c5:74:95:96:53:8d:de:
         dc:63:79:da:ad:86:fc:48:9d:d9:af:b6:27:ec:77:6e:81:7a:
         90:9e:88:0f:97:8b:dd:fe:43:c0:be:ce:51:17:24:0f:45:dc:
         84:26:c2:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:54:13 2026 by rpki-client