Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3680B36/F5EDFAE6DFD611F09ABD8DD4DAE4EC9C/U8Hm1J_Vpk57YAHyLj-kLHDbo04.mft
File:                     U8Hm1J_Vpk57YAHyLj-kLHDbo04.mft (raw, json)
Hash identifier:          1S3RRJ/Q7Y+HENU+hzzkgPJyUMwETthVOqS51F/Umwc=
Subject key identifier:   20:28:0F:33:9F:D0:48:B5:5F:E9:80:FF:01:40:AB:44:DB:CA:1B:A4
Authority key identifier: 53:C1:E6:D4:9F:D5:A6:4E:7B:60:01:F2:2E:3F:A4:2C:70:DB:A3:4E
Certificate issuer:       /CN=F3680B36AF/serialNumber=53C1E6D49FD5A64E7B6001F22E3FA42C70DBA34E
Certificate serial:       6E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/U8Hm1J_Vpk57YAHyLj-kLHDbo04.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3680B36/F5EDFAE6DFD611F09ABD8DD4DAE4EC9C/U8Hm1J_Vpk57YAHyLj-kLHDbo04.mft
Manifest number:          67
Signing time:             Thu 26 Mar 2026 06:26:16 +0000
Manifest this update:     Thu 26 Mar 2026 06:26:15 +0000
Manifest next update:     Sat 28 Mar 2026 06:26:15 +0000
Files and hashes:         1: U8Hm1J_Vpk57YAHyLj-kLHDbo04.crl (hash: UTtAjXFp9UQqF7HUPjEVoOLktgRV5WZMzIwJflxLI/8=)
                          2: 43279162FCEE11F091E2CFB7DAE4EC9C.roa (hash: 8iWAoEcu2JRkaSfW7LLNHzaA85uJseksE0k+atfwJ1Y=)
                          3: B3530534FCEE11F0B6A0D0B9DAE4EC9C.roa (hash: +mmFwnc73ilgRHTfnv5GGjohhpC1WWGRkLfhPedgtjk=)
                          4: C21E2EB4FCED11F0A38CD2B3DAE4EC9C.roa (hash: TZxQdHMqwlzzmOZhgJdbZKKdEmkCcevU8yASkdu/7dk=)
                          5: 67C4DC0AFCEE11F0B6B0F9B7DAE4EC9C.roa (hash: 6+DDMWurPSS0Etmmbqp8HRbgnzyjgRHUp+NQ0zReDcs=)
                          6: F0F91352FCED11F0817BD9B3DAE4EC9C.roa (hash: HxbFOGVGICyK7Qo30yLsCkbUxYdMBBCg5Bv1Lkdl1sw=)
                          7: 79A2B826FCED11F08EBD8BB3DAE4EC9C.roa (hash: A6E21hHJIX9e6bqxV8HLjdqokAtD3hBxiXscbQoJ16Y=)
                          8: 1A762274FCEE11F0A39F6FB7DAE4EC9C.roa (hash: k3B8WZ+3jMO7LWbkb2rUTFFzzMA1baZgUheZKGM3Zb0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3680B36/F5EDFAE6DFD611F09ABD8DD4DAE4EC9C/U8Hm1J_Vpk57YAHyLj-kLHDbo04.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3680B36/F5EDFAE6DFD611F09ABD8DD4DAE4EC9C/U8Hm1J_Vpk57YAHyLj-kLHDbo04.mft
                          rsync://rpki.afrinic.net/repository/afrinic/U8Hm1J_Vpk57YAHyLj-kLHDbo04.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110 (0x6e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3680B36AF, serialNumber=53C1E6D49FD5A64E7B6001F22E3FA42C70DBA34E
        Validity
            Not Before: Mar 26 06:26:15 2026 GMT
            Not After : Mar 28 06:26:15 2026 GMT
        Subject: CN=69c4d188-5a69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:0a:2d:97:87:50:64:a0:2f:73:f2:1f:ad:4c:
                    9f:fa:60:7d:7d:5a:aa:3f:19:59:64:f6:7f:7d:07:
                    0a:0a:8e:45:b0:c7:7d:b3:f7:6c:69:29:9f:1b:94:
                    3d:b3:5c:77:92:0a:2b:fb:08:43:86:8a:79:38:33:
                    d2:a2:7e:44:c9:54:3e:ef:ac:c9:c3:d3:85:df:88:
                    d1:39:f4:7e:a7:52:34:eb:05:aa:e4:9e:86:1f:d0:
                    bb:ab:cb:70:8c:b8:dd:55:ef:15:4f:88:7b:58:5c:
                    b9:06:bc:84:36:44:1c:c6:8e:30:f1:0f:87:9b:8e:
                    7a:8d:f1:2e:bf:39:0f:0a:98:91:1a:63:ef:b8:12:
                    6b:26:70:7f:bf:5c:48:74:db:56:96:e9:c1:c4:08:
                    cd:48:bf:80:33:58:b9:9b:78:26:c0:0d:6b:9c:4a:
                    d8:dc:ca:9b:08:39:1b:65:35:73:14:a5:d0:34:e4:
                    40:60:03:9b:d7:1a:7c:15:a0:db:0d:b7:11:d7:1a:
                    7b:1f:34:be:56:c2:e1:66:a2:d0:b4:bd:76:6b:e7:
                    80:1d:30:d0:e8:b3:af:15:93:7e:23:4e:f1:e1:6d:
                    38:ab:40:fe:0d:b5:86:4b:bb:ec:c0:30:f2:00:ef:
                    5c:38:4a:37:70:1f:2e:90:8d:8b:6c:38:62:7d:bb:
                    0b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:28:0F:33:9F:D0:48:B5:5F:E9:80:FF:01:40:AB:44:DB:CA:1B:A4
            X509v3 Authority Key Identifier:
                keyid:53:C1:E6:D4:9F:D5:A6:4E:7B:60:01:F2:2E:3F:A4:2C:70:DB:A3:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3680B36/F5EDFAE6DFD611F09ABD8DD4DAE4EC9C/U8Hm1J_Vpk57YAHyLj-kLHDbo04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/U8Hm1J_Vpk57YAHyLj-kLHDbo04.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3680B36/F5EDFAE6DFD611F09ABD8DD4DAE4EC9C/U8Hm1J_Vpk57YAHyLj-kLHDbo04.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:80:b1:3e:05:b3:54:fc:b5:25:61:21:a3:9d:e9:c1:57:37:
         4f:89:d3:e9:14:cf:78:e1:c5:03:5f:91:5d:d0:0a:95:a6:d2:
         f9:75:ac:af:b3:32:f7:c7:38:e9:42:b1:fd:79:b8:67:be:d1:
         72:b2:ad:e5:e4:a0:d7:bd:78:a2:e1:96:91:d4:7d:7d:da:04:
         20:16:2f:08:7b:d9:22:d4:73:95:1b:c2:9b:07:5d:90:d0:63:
         6e:e2:0a:8c:e9:7c:1b:93:eb:42:54:18:9e:99:07:80:02:4b:
         f7:9b:a2:44:6a:63:ce:45:e3:af:35:77:e0:85:88:68:49:07:
         b4:54:97:72:f3:e4:46:72:22:59:c7:a9:a0:40:11:a3:33:3f:
         1b:d2:89:6b:2a:b3:da:bd:a1:0c:00:2f:7e:d2:a6:5e:08:52:
         c4:7b:db:36:3e:a8:20:c6:3f:ca:20:ef:54:6e:5b:01:cf:f6:
         8c:5a:6c:ff:81:52:fd:1c:8d:63:94:ba:24:87:ec:e5:5e:af:
         e5:ea:1b:1e:41:b4:1d:a2:86:bc:5f:0f:18:b7:3f:de:5b:46:
         93:da:b2:0f:35:9c:3d:70:16:c7:72:55:3e:02:84:1f:b1:9c:
         b3:32:42:1c:12:17:f0:b4:af:2d:8a:ff:7e:13:57:76:3d:89:
         1a:a2:dd:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:25:25 2026 by rpki-client