Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3689F69/B6B5A48C2FC411EFA04CDA8D762E951A/KF9hqPUjMGRTeGWSdEagBQLhHr8.mft
File:                     KF9hqPUjMGRTeGWSdEagBQLhHr8.mft (raw, json)
Hash identifier:          eU911a9Lzro/eiQm95jznxe5spTJqDL2ZJtMfrTlcoI=
Subject key identifier:   FD:43:CC:05:B1:51:B8:16:22:DC:31:4C:23:4B:67:C9:FB:29:DA:9B
Authority key identifier: 28:5F:61:A8:F5:23:30:64:53:78:65:92:74:46:A0:05:02:E1:1E:BF
Certificate issuer:       /CN=F3689F69AF/serialNumber=285F61A8F5233064537865927446A00502E11EBF
Certificate serial:       0293
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/KF9hqPUjMGRTeGWSdEagBQLhHr8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3689F69/B6B5A48C2FC411EFA04CDA8D762E951A/KF9hqPUjMGRTeGWSdEagBQLhHr8.mft
Manifest number:          0292
Signing time:             Thu 26 Mar 2026 05:04:39 +0000
Manifest this update:     Thu 26 Mar 2026 05:04:38 +0000
Manifest next update:     Sat 28 Mar 2026 05:04:38 +0000
Files and hashes:         1: KF9hqPUjMGRTeGWSdEagBQLhHr8.crl (hash: sEtee3/JMT9pngR1/HwFT8SV8AXnAU53Pjd2sk8tS40=)
                          2: A2FF32042FC511EFBE676196762E951A.roa (hash: MuoQsTFj3ssT2hnoWxBqVt3bP80rh30BWABu61vrcCw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3689F69/B6B5A48C2FC411EFA04CDA8D762E951A/KF9hqPUjMGRTeGWSdEagBQLhHr8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3689F69/B6B5A48C2FC411EFA04CDA8D762E951A/KF9hqPUjMGRTeGWSdEagBQLhHr8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/KF9hqPUjMGRTeGWSdEagBQLhHr8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 659 (0x293)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3689F69AF, serialNumber=285F61A8F5233064537865927446A00502E11EBF
        Validity
            Not Before: Mar 26 05:04:38 2026 GMT
            Not After : Mar 28 05:04:38 2026 GMT
        Subject: CN=69c4be67-1db5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:8b:24:9e:91:32:0a:07:00:e3:26:ac:68:22:
                    f2:a2:d6:cf:fd:e1:1c:82:a4:4d:7f:6b:49:a1:24:
                    9c:8b:97:46:e2:8d:2b:0f:81:63:05:c4:b5:4c:ef:
                    76:50:2b:a2:33:e1:c8:39:ec:77:00:8a:f6:ee:51:
                    03:0c:10:a6:70:f2:54:0f:dc:61:60:f8:bb:32:f2:
                    af:8f:97:b7:e9:16:6f:30:17:bc:58:1a:92:8d:18:
                    db:d0:7b:52:c4:0b:9f:29:62:39:a4:ef:eb:f9:32:
                    6a:87:ae:bb:de:f8:50:cf:ca:6e:59:68:b8:ba:19:
                    2a:c1:d6:12:0c:66:6c:3c:81:80:0e:37:04:fa:6d:
                    bf:84:68:e2:b3:80:86:c1:86:0e:1f:15:cf:9b:1c:
                    c5:16:bc:8d:d7:4b:6d:fb:21:3d:94:27:c4:0c:21:
                    14:ba:a1:82:55:79:0e:4c:54:a4:84:59:cd:9e:c6:
                    4d:19:65:56:c7:8b:cf:c7:95:f5:6d:5f:e5:ef:c7:
                    79:b9:2c:48:60:d0:de:ce:94:39:a0:6e:f3:c1:55:
                    36:26:cb:4d:68:eb:90:fd:be:66:cf:9c:58:c2:d7:
                    0c:69:9d:7e:71:20:63:d1:dc:94:29:5c:20:db:5a:
                    ee:e1:7c:ff:e6:11:1b:b7:ff:5a:4b:0e:a0:85:9f:
                    d7:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:43:CC:05:B1:51:B8:16:22:DC:31:4C:23:4B:67:C9:FB:29:DA:9B
            X509v3 Authority Key Identifier:
                keyid:28:5F:61:A8:F5:23:30:64:53:78:65:92:74:46:A0:05:02:E1:1E:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3689F69/B6B5A48C2FC411EFA04CDA8D762E951A/KF9hqPUjMGRTeGWSdEagBQLhHr8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KF9hqPUjMGRTeGWSdEagBQLhHr8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3689F69/B6B5A48C2FC411EFA04CDA8D762E951A/KF9hqPUjMGRTeGWSdEagBQLhHr8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:0c:78:8a:b2:16:75:15:0c:b0:ce:ac:e2:e5:23:b1:67:a6:
         64:69:99:6f:d8:b6:c0:42:34:19:9d:9f:47:6f:da:54:0a:34:
         2c:43:f9:f3:4c:05:4e:1a:3e:19:37:68:00:2f:0f:28:3a:eb:
         04:9f:81:e6:cf:2d:8e:4b:d2:3c:b6:5e:7e:0b:99:5a:dd:17:
         a3:2b:bc:f7:9f:c6:78:a1:67:44:6c:7a:f9:36:26:7f:47:b3:
         7d:73:c9:88:69:04:6e:07:5a:08:47:37:3f:9d:c7:a0:9c:87:
         34:2d:3a:b8:9b:49:73:8a:c6:d4:2c:ac:52:cb:fb:2a:ca:2e:
         18:52:2e:6f:7d:49:a0:08:e1:39:a9:1f:c6:a5:0c:34:82:67:
         2a:44:c9:7b:c7:02:23:f3:17:e8:06:d0:16:f8:7b:0d:3e:8e:
         7a:1c:f0:0e:f0:9d:1f:5d:7b:07:b7:56:60:5b:56:f8:ec:36:
         a6:b5:85:68:9c:e3:55:e0:5f:8b:80:91:4e:05:f5:3e:4e:ca:
         04:9b:12:d7:cc:83:aa:69:df:b0:d2:a0:02:c1:11:55:f8:58:
         bb:c3:d9:ca:88:91:6c:b1:e7:a5:78:26:b6:1e:d0:29:80:26:
         7b:2c:13:c4:4a:b1:62:e5:81:1b:75:82:29:48:c8:b6:5c:80:
         f6:88:31:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:20:33 2026 by rpki-client