Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36825D0/E93D27AAC7C411EC906F94DBF1222468/IhRVkFuxmsTjjt3avWyqg1KbNE8.mft
File:                     IhRVkFuxmsTjjt3avWyqg1KbNE8.mft (raw, json)
Hash identifier:          4d3O5qDCsBn3rQTgNjCsXRX6I+FGNJ9/+YnOu2WrchA=
Subject key identifier:   0F:64:85:6C:79:43:00:DF:8D:5C:E9:9F:00:68:EC:EB:3A:04:E4:C8
Authority key identifier: 22:14:55:90:5B:B1:9A:C4:E3:8E:DD:DA:BD:6C:AA:83:52:9B:34:4F
Certificate issuer:       /CN=F36825D0AF/serialNumber=221455905BB19AC4E38EDDDABD6CAA83529B344F
Certificate serial:       05C3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/IhRVkFuxmsTjjt3avWyqg1KbNE8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36825D0/E93D27AAC7C411EC906F94DBF1222468/IhRVkFuxmsTjjt3avWyqg1KbNE8.mft
Manifest number:          05C1
Signing time:             Thu 26 Mar 2026 03:08:15 +0000
Manifest this update:     Thu 26 Mar 2026 03:08:14 +0000
Manifest next update:     Sat 28 Mar 2026 03:08:14 +0000
Files and hashes:         1: IhRVkFuxmsTjjt3avWyqg1KbNE8.crl (hash: Z0qh6RSrVPYu9hs/pqWhrU+3rYx1A7/ueIdIj1oZN5o=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36825D0/E93D27AAC7C411EC906F94DBF1222468/IhRVkFuxmsTjjt3avWyqg1KbNE8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36825D0/E93D27AAC7C411EC906F94DBF1222468/IhRVkFuxmsTjjt3avWyqg1KbNE8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/IhRVkFuxmsTjjt3avWyqg1KbNE8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1475 (0x5c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36825D0AF, serialNumber=221455905BB19AC4E38EDDDABD6CAA83529B344F
        Validity
            Not Before: Mar 26 03:08:14 2026 GMT
            Not After : Mar 28 03:08:14 2026 GMT
        Subject: CN=69c4a31e-92cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:ec:ad:52:29:29:14:6f:9e:31:a0:dc:ba:7b:
                    41:cf:b8:43:0c:38:d6:6d:e0:2d:aa:d2:8c:51:04:
                    27:24:ea:25:2d:ad:50:c5:84:9b:ec:2d:fc:77:3b:
                    4b:49:f5:94:e3:64:2d:17:86:cf:6f:50:82:62:c0:
                    aa:b4:6a:27:f8:0e:10:c9:47:64:58:c7:21:ce:04:
                    55:12:b8:88:3d:84:eb:10:ea:a1:ef:62:49:ef:25:
                    bc:d2:b1:48:b5:b1:ca:c8:b3:64:23:ca:13:aa:cb:
                    ae:ba:4c:a2:a6:38:5e:be:a1:8f:44:b5:93:9a:15:
                    72:b0:56:12:ae:03:b2:05:66:7b:83:75:23:35:5d:
                    27:8c:57:1b:6c:1a:f7:b4:27:06:60:ba:13:b4:21:
                    9d:56:c3:3a:48:a1:4d:bd:dc:18:fa:00:a7:93:84:
                    0e:d1:36:71:a5:04:ec:24:61:84:5a:18:1c:dd:b1:
                    d5:c6:82:c8:23:27:b3:fe:62:12:79:5a:6f:eb:27:
                    be:ec:5a:48:de:b7:a0:45:20:3b:84:43:95:8f:5f:
                    b4:4d:6e:b2:b3:bc:d1:13:12:a6:ff:3f:8b:98:bd:
                    b2:1b:03:fa:2c:95:75:30:87:39:97:fb:eb:1b:53:
                    cc:8a:c2:cd:41:ed:68:20:9b:e9:85:b3:31:e7:68:
                    33:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:64:85:6C:79:43:00:DF:8D:5C:E9:9F:00:68:EC:EB:3A:04:E4:C8
            X509v3 Authority Key Identifier:
                keyid:22:14:55:90:5B:B1:9A:C4:E3:8E:DD:DA:BD:6C:AA:83:52:9B:34:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36825D0/E93D27AAC7C411EC906F94DBF1222468/IhRVkFuxmsTjjt3avWyqg1KbNE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/IhRVkFuxmsTjjt3avWyqg1KbNE8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36825D0/E93D27AAC7C411EC906F94DBF1222468/IhRVkFuxmsTjjt3avWyqg1KbNE8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:d1:a4:54:42:d3:d2:f0:8f:6a:c2:5f:7b:c6:32:04:a9:55:
         26:52:e4:1d:3b:44:7f:05:36:0d:18:fa:6a:1f:41:fb:8f:43:
         22:6a:7b:d7:8c:aa:cc:e2:64:ed:72:13:20:6a:f1:7b:d6:44:
         73:f2:26:7f:f4:93:eb:81:67:0d:47:87:f5:ba:70:29:0c:63:
         ea:25:35:1e:7b:60:d6:fc:7f:96:20:64:43:e9:fa:52:5f:50:
         40:3d:0c:05:dd:43:bf:67:62:79:eb:24:05:28:17:e9:73:15:
         76:bd:4a:46:99:70:fa:0f:a1:ea:2d:42:48:12:b8:66:6c:10:
         58:0c:f8:d7:bf:2f:c6:96:26:5f:20:b2:55:9a:d7:87:03:2a:
         e7:11:57:90:c1:00:cb:2e:34:de:ff:0e:6c:7d:f0:e8:4b:63:
         d4:1a:a8:c7:02:a2:2a:e9:e9:07:f2:0e:b1:2c:11:d3:3b:25:
         01:cf:99:83:9d:52:9e:6e:24:3d:26:c9:cb:77:85:5d:b2:35:
         07:8d:4e:b4:44:73:a0:44:12:85:56:75:5f:a3:4d:a7:7f:10:
         b3:32:25:6e:cb:ac:27:56:da:6b:e7:17:ad:0b:00:a2:17:d1:
         f7:88:dc:65:ed:a0:7d:5a:24:8a:a5:61:a7:c5:52:29:e0:97:
         e4:d6:5b:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:55:57 2026 by rpki-client