Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3693944/16AA8A44207611ECB3060925D8A014CE/0YHpHtFz9k17-C2OC--ZTVmG31I.mft
File:                     0YHpHtFz9k17-C2OC--ZTVmG31I.mft (raw, json)
Hash identifier:          9v3I51ggDYcMdJaWMsqw4EkfCwYNef946l2KzQMuAT8=
Subject key identifier:   96:3A:5D:26:52:5B:6C:69:5F:FD:B7:C4:2F:55:99:7D:E8:F8:39:07
Authority key identifier: D1:81:E9:1E:D1:73:F6:4D:7B:F8:2D:8E:0B:EF:99:4D:59:86:DF:52
Certificate issuer:       /CN=F3693944AF/serialNumber=D181E91ED173F64D7BF82D8E0BEF994D5986DF52
Certificate serial:       069D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/0YHpHtFz9k17-C2OC--ZTVmG31I.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3693944/16AA8A44207611ECB3060925D8A014CE/0YHpHtFz9k17-C2OC--ZTVmG31I.mft
Manifest number:          0698
Signing time:             Thu 26 Mar 2026 02:48:13 +0000
Manifest this update:     Thu 26 Mar 2026 02:48:12 +0000
Manifest next update:     Sat 28 Mar 2026 02:48:12 +0000
Files and hashes:         1: 0YHpHtFz9k17-C2OC--ZTVmG31I.crl (hash: 3XDSM4uiE9omWVN6Dh0Ry7mog1XiS80j1RGjQyDlj+I=)
                          2: 9AECDB08EE3411ED9B086D5C4AD9E6FC.roa (hash: 7TbXwTAAA29/ssAknCIxCJNoExHtrE/m255Mx4kSiPE=)
                          3: 2CA2D93A038811EF9019CA30017001B1.roa (hash: Be78PaUHhsuszKdQPF/EsSUZ0AmEaz6Xf0Gf8dw0Abs=)
                          4: FE6EB5FE1A4311ED966281A5F1222468.roa (hash: lfZWe5DsRVIlTxGTn/2XYFuZb+ctw8ovU8wMMSRVTV8=)
                          5: 7F3D996AEE3411ED84E7435C4AD9E6FC.roa (hash: HFYeFndb2JxxOdKSqCujEOpY8n28a0y4vmxd4LvSXs4=)
                          6: 35E0C666207711ECA71BBD26D8A014CE.roa (hash: +cVurkAhF+yeR1OYxL2MVt7cz6AGWHeKwMma50XfssM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3693944/16AA8A44207611ECB3060925D8A014CE/0YHpHtFz9k17-C2OC--ZTVmG31I.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3693944/16AA8A44207611ECB3060925D8A014CE/0YHpHtFz9k17-C2OC--ZTVmG31I.mft
                          rsync://rpki.afrinic.net/repository/afrinic/0YHpHtFz9k17-C2OC--ZTVmG31I.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1693 (0x69d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3693944AF, serialNumber=D181E91ED173F64D7BF82D8E0BEF994D5986DF52
        Validity
            Not Before: Mar 26 02:48:12 2026 GMT
            Not After : Mar 28 02:48:12 2026 GMT
        Subject: CN=69c49e6d-d2cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ba:8f:1b:df:d1:9f:aa:5c:12:92:f3:48:01:
                    c6:04:e7:d4:fe:6a:1b:10:21:2f:5b:80:96:c6:d9:
                    d6:07:8b:92:41:b5:4a:c6:4c:37:8c:09:9f:e0:68:
                    6b:47:36:01:00:85:67:00:63:dc:c6:5c:73:5a:f4:
                    16:4d:1f:34:c9:1d:b2:ef:50:b2:52:aa:70:95:6b:
                    3f:2c:96:e2:f7:27:77:7a:3c:5c:5d:6c:ba:75:81:
                    a5:65:06:cb:80:c3:59:86:d5:cf:ea:6e:10:67:7f:
                    5b:a1:59:28:9d:4f:b4:09:5d:cf:f8:b4:48:10:88:
                    74:c4:4d:e0:2c:68:b5:cd:95:d0:70:39:e0:b4:9c:
                    4b:f0:66:49:a8:44:0a:6b:fe:26:06:dd:d8:b3:7d:
                    9b:57:55:47:6d:bd:eb:8c:b0:6a:a2:99:ae:f5:c0:
                    bc:83:07:44:fd:bf:df:42:3e:23:4d:16:11:23:4e:
                    79:d9:fc:fc:a5:5d:f6:6c:94:fc:62:9c:5f:fe:ed:
                    ca:c8:dd:cd:42:39:07:d5:b8:7f:bb:c7:14:3c:4e:
                    a4:12:fa:eb:93:7d:7c:86:e8:93:7b:56:12:d1:77:
                    3a:29:d0:ad:8e:8b:4b:85:e6:4c:6e:ce:ec:8c:ca:
                    71:25:75:28:1b:69:1f:b8:05:d0:09:1c:ba:67:6b:
                    22:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:3A:5D:26:52:5B:6C:69:5F:FD:B7:C4:2F:55:99:7D:E8:F8:39:07
            X509v3 Authority Key Identifier:
                keyid:D1:81:E9:1E:D1:73:F6:4D:7B:F8:2D:8E:0B:EF:99:4D:59:86:DF:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3693944/16AA8A44207611ECB3060925D8A014CE/0YHpHtFz9k17-C2OC--ZTVmG31I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0YHpHtFz9k17-C2OC--ZTVmG31I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3693944/16AA8A44207611ECB3060925D8A014CE/0YHpHtFz9k17-C2OC--ZTVmG31I.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:e1:ea:75:37:7e:5f:c7:a5:52:d4:30:6b:18:82:b2:c2:8f:
         a7:62:9e:cb:89:bc:d0:6c:a1:82:ea:47:cc:9f:ec:55:46:a5:
         1a:4a:e1:04:67:0f:e8:3d:2f:d1:df:2c:2b:6c:4f:8a:72:f7:
         53:5f:f4:52:6f:28:1b:61:5a:66:81:55:98:f7:cb:d0:31:0a:
         40:39:4f:5d:9f:13:3e:85:b8:21:f5:ed:a1:03:76:35:f2:94:
         f5:48:2b:5f:ed:f6:f7:97:ac:6e:94:2d:0e:90:3e:a0:bd:46:
         b8:d8:31:99:92:a6:01:c0:b8:d9:5a:78:cd:38:8c:fa:03:60:
         60:f4:36:be:3b:9b:f6:f0:cf:69:dc:28:89:c2:15:01:46:d5:
         2f:1f:52:4e:2e:80:dc:18:be:eb:57:5a:03:83:1e:b7:e3:ee:
         7c:d6:ba:23:cc:8e:cf:d0:c9:f8:cd:6d:10:ac:92:bc:7d:3d:
         f8:d9:92:86:6b:be:af:fa:32:22:83:85:c5:03:40:3c:44:b7:
         25:e8:b1:2c:88:ce:53:89:0e:71:e6:e1:2c:3b:75:86:6e:dd:
         20:9a:92:f6:7c:70:ca:f1:67:a3:82:ac:9b:ca:f2:fe:36:db:
         a1:95:ed:48:32:fd:29:65:dc:d9:ba:05:23:06:e6:18:4d:e3:
         7f:2a:0b:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:48:42 2026 by rpki-client