Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft
File:                     l8kOJSEtiHz54d5v3fVRuoEvoTk.mft (raw, json)
Hash identifier:          DVMuF/DzoZHCPd1fwVPQzZbtCEHG9gzOOE/QiTYI120=
Subject key identifier:   72:65:E9:A4:4E:DE:82:CA:67:52:04:C7:AA:35:03:AE:3F:1B:F3:E5
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Certificate issuer:       /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial:       091C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft
Manifest number:          0838
Signing time:             Thu 26 Mar 2026 02:21:44 +0000
Manifest this update:     Thu 26 Mar 2026 02:21:43 +0000
Manifest next update:     Sat 28 Mar 2026 02:21:43 +0000
Files and hashes:         1: l8kOJSEtiHz54d5v3fVRuoEvoTk.crl (hash: y6WfWUShNC5HMSM9Rm4NG7jlERNSmEP4WoMS/H7s4v4=)
                          2: DBA98D145B2211F0A20E2EA0DAE4EC9C.roa (hash: baX/jyqbDDRWJ52IpaUoPLaTxEVM5KXNaJC/ks++xuQ=)
                          3: 883A6EA01D3711F1979BA3A1DAE4EC9C.roa (hash: UA9UI4d18rq6rBPVQ1y6Q/PX1lx2KaDCc9BKpN3d+HQ=)
                          4: D555ACF47ED111F08EE5E58BDAE4EC9C.roa (hash: 47vFvhPfYF8MRZPiu19cy9fhXJPFVZu9WXQ1eMHjtak=)
                          5: 1310CD3A237811F1BCBD5FA0DAE4EC9C.roa (hash: qF3hG1/6g8gsTprcC6hzsx2uNOQ7cvqSo6+AiuAa4B0=)
                          6: 9A84AD3E11C311F1BF5B00B3DAE4EC9C.roa (hash: P/lqdhKz2qnZ4C+UPmgXSJnw29EF+B0hRLQpPCRGO9g=)
                          7: 31AC1B067F2B11F0A2FC2DE1DAE4EC9C.roa (hash: pJmfeAp3o89ojiARZABIHNF+5KqQANGXnVyfWK3JWAo=)
                          8: 3D71A6821C9111F18CCD2AD1DAE4EC9C.roa (hash: UVwSMaGbMl/DAfWetirdJftqh3TSiqq+bvhtljLq+s8=)
                          9: EE4BCA50C51611F0882C7A79DAE4EC9C.roa (hash: QORpqLPUnemyJVfwyKiR9rBTSjXXBwPxprwBhq4ORos=)
                          10: 8F66F9F2625011F093EF34AEDAE4EC9C.roa (hash: azeXExxPadQBtZQAbA3QmCVU3GUpPn3GgN81W/kzNws=)
                          11: DE2FE726163011F1829CE9EADAE4EC9C.roa (hash: TMIMgwsogkJNyAx0X77xxGocwvE2m5HEfSTcrhrwoyI=)
                          12: E230D98211C311F19EC4DEB6DAE4EC9C.roa (hash: gOYSWL2Lg9L2pOgZoVRNIEaVmFGhDhKeXyI02beuiOk=)
                          13: 37683106C51711F0831FC779DAE4EC9C.roa (hash: X7+3tEI76PBXlAAcgP4WQPX2ONBme8iwLb9ftSScgDo=)
                          14: C36E5120609611F0AB6F15F2DAE4EC9C.roa (hash: Fk+IfFMpvi36aQyLQYlmv26xnAUJjv0obfvmLZs4rLU=)
                          15: FC053F5CAF7A11F09C68E3B1DAE4EC9C.roa (hash: ovkEHwqKLlju8yGU3yNPqm9jMYWfqRxIBEHgStiUby0=)
                          16: CEA072D8776A11EEA49F007D4AD9E6FC.roa (hash: oG1ErKkSbYpP5X6eq2VOONQIy8u5lFGEO9d6IZTGw04=)
                          17: 1DA0B1A4502C11F08AB1C8C2DAE4EC9C.roa (hash: O39HvXcGM8vCDm9DfWvAXNTa9fV5PX5xkVsjsSq21p8=)
                          18: 3AE05628237811F1966164A0DAE4EC9C.roa (hash: 24Q/iN3IITD01IOkQTNwboLkZsMjqiYfwPg+zgtpD/4=)
                          19: 1BF4F8CC187E11F1BA032D93DAE4EC9C.roa (hash: zXtWle/yOTpKwLGIe5XmsNFjkXiS/vvqgdWG5YsQ/bE=)
                          20: 8EC0956E70A411F094929688DAE4EC9C.roa (hash: Dmc5XqbplUaGfABGKpPzYUPx32YybXd085DRK5wjFm4=)
                          21: D3F7ECBE237711F1B5789F9EDAE4EC9C.roa (hash: m3i0l0lNUH6ltsGq6+F120+QsjNXJkq9PihsuoVPVvI=)
                          22: 087B5DDA187F11F1B908269BDAE4EC9C.roa (hash: +iSgYQye2OWt8JVvNd+soAvL1h8eN44KQQOxfGUmU6o=)
                          23: E8B4523C187D11F1A5DD0B93DAE4EC9C.roa (hash: N/GBo7sJ9sVz40T3E38ntjv4vl5jXnFQj2Tw1+btscU=)
                          24: 06EA9146625111F082ED08AFDAE4EC9C.roa (hash: DlQwSvTDJt//sym2C2UVKdfDULxPx2s6Ok+gJg27kxk=)
                          25: 991B77F8CE8811F08B0D7DCBDAE4EC9C.roa (hash: 4NDnlsPwnLQ0bvJwiU4jMN98KtaytJXKCjFbhCuymzw=)
                          26: C1E8AFA611C311F1B6BEC5B4DAE4EC9C.roa (hash: JEqp2N2TXrJ+Ky/pTVMu50jhhMR0hRKsd7V4NfPv25Y=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2332 (0x91c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367DFA4AF, serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
        Validity
            Not Before: Mar 26 02:21:43 2026 GMT
            Not After : Mar 28 02:21:43 2026 GMT
        Subject: CN=69c49838-aba2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:0d:01:d4:ab:a9:b2:bd:89:7f:b5:74:23:8b:
                    c2:b3:a7:af:4a:d7:2b:61:33:4d:5c:56:a3:28:c5:
                    eb:c4:ec:31:a7:ff:5c:cf:04:d7:6b:da:e2:47:35:
                    f6:a4:8f:f4:d8:93:af:63:54:2e:f3:ef:eb:f8:70:
                    37:62:47:1c:d6:aa:42:0a:cc:4f:47:67:73:47:14:
                    73:d6:d6:2f:5d:3d:d1:85:c9:88:a5:d3:78:53:2e:
                    ad:14:52:db:3c:ae:bc:4b:1b:97:81:83:89:af:17:
                    43:f6:26:7e:cd:fd:90:13:48:a9:8a:b0:6b:b1:76:
                    1c:cc:56:fd:a9:72:0a:36:5e:13:b9:b8:04:d5:52:
                    97:59:16:ce:fa:0a:97:8c:45:5a:ef:51:2e:ad:eb:
                    a5:e7:76:46:b4:14:52:c9:d6:83:1e:93:4e:3c:fd:
                    10:4c:ac:63:36:33:41:f2:83:f7:67:e6:3e:77:06:
                    ff:aa:8f:47:de:31:be:5e:c4:d5:32:15:fc:89:bf:
                    86:96:49:25:49:be:74:be:bb:bb:cd:ae:db:5a:e9:
                    46:1e:b9:aa:89:1d:bc:7c:a6:ae:22:a2:e7:3f:c5:
                    f6:de:42:f5:ac:e7:d3:a3:5c:10:a1:86:60:61:e9:
                    ab:e4:e9:d1:fa:90:82:a7:b9:c7:0a:eb:33:5d:5a:
                    a6:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:65:E9:A4:4E:DE:82:CA:67:52:04:C7:AA:35:03:AE:3F:1B:F3:E5
            X509v3 Authority Key Identifier:
                keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:56:36:51:5e:d8:03:23:05:23:f5:67:04:e5:83:05:99:17:
         b8:60:21:1c:c2:cb:6a:2b:6f:86:19:af:ed:13:89:0c:3b:47:
         6e:5f:28:0f:09:b5:b4:fe:79:38:f8:89:bf:35:a0:c1:ca:f9:
         61:4f:3e:32:5f:4b:9f:38:ae:8a:b7:a8:45:66:43:15:78:d7:
         39:34:c6:d0:a5:5a:f2:54:0d:04:a0:20:82:34:38:86:0d:00:
         af:aa:0f:31:fd:c6:d2:f2:92:29:0f:56:ec:1c:5b:6e:18:7d:
         a5:9e:e2:1b:7d:2c:f9:c1:64:86:13:f7:81:31:54:a3:07:7e:
         d3:33:a7:76:43:b8:e7:a5:53:76:97:91:4d:71:d0:72:a4:0a:
         91:7d:85:d3:1f:c3:83:eb:7d:92:ba:96:9f:b2:fd:08:26:a4:
         b5:47:b5:86:69:15:60:89:cd:97:31:58:0b:37:78:e0:92:23:
         1d:ae:09:6b:42:97:a6:01:db:9f:a2:13:c9:3d:7c:e7:a2:cd:
         c7:92:e8:40:72:9f:5b:21:11:4a:f0:6c:96:53:b5:b3:d8:e9:
         e6:f4:5e:b3:c7:11:01:ea:43:46:b6:d6:47:96:d1:72:cf:42:
         e6:1b:01:cf:d7:7a:5d:9a:6f:1c:e9:3e:01:0b:e5:79:05:5e:
         5c:67:26:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:04:24 2026 by rpki-client