Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369B304/B98A352CEC1211F0ABA757A0DAE4EC9C/XY4nZDYESZrfo7elNFeDrRLbr_M.mft
File:                     XY4nZDYESZrfo7elNFeDrRLbr_M.mft (raw, json)
Hash identifier:          AiOS0vTLndk/wQhNn/gLP5MSUDn6QWks1Z/aBjOJPDQ=
Subject key identifier:   50:BA:F1:4E:DC:86:C5:47:47:79:AE:3C:D0:04:04:4D:A6:DD:BF:2A
Authority key identifier: 5D:8E:27:64:36:04:49:9A:DF:A3:B7:A5:34:57:83:AD:12:DB:AF:F3
Certificate issuer:       /CN=F369B304AF/serialNumber=5D8E27643604499ADFA3B7A5345783AD12DBAFF3
Certificate serial:       4F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/XY4nZDYESZrfo7elNFeDrRLbr_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369B304/B98A352CEC1211F0ABA757A0DAE4EC9C/XY4nZDYESZrfo7elNFeDrRLbr_M.mft
Manifest number:          4F
Signing time:             Thu 26 Mar 2026 06:27:31 +0000
Manifest this update:     Thu 26 Mar 2026 06:27:30 +0000
Manifest next update:     Sat 28 Mar 2026 06:27:30 +0000
Files and hashes:         1: XY4nZDYESZrfo7elNFeDrRLbr_M.crl (hash: H/9Ky9KjJ/nX3fw/LVwpKiF0rRGkwayqkIbHBryXAcg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369B304/B98A352CEC1211F0ABA757A0DAE4EC9C/XY4nZDYESZrfo7elNFeDrRLbr_M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369B304/B98A352CEC1211F0ABA757A0DAE4EC9C/XY4nZDYESZrfo7elNFeDrRLbr_M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/XY4nZDYESZrfo7elNFeDrRLbr_M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 79 (0x4f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369B304AF, serialNumber=5D8E27643604499ADFA3B7A5345783AD12DBAFF3
        Validity
            Not Before: Mar 26 06:27:30 2026 GMT
            Not After : Mar 28 06:27:30 2026 GMT
        Subject: CN=69c4d1d3-f6ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1b:09:72:56:af:cf:9f:a5:2e:af:f8:ef:9d:
                    eb:49:97:12:7a:1b:2e:d9:08:c5:11:78:88:34:db:
                    e5:05:af:cd:f4:b0:62:72:51:d5:dd:bb:5c:1c:ac:
                    a2:3f:a2:ec:84:92:ec:ce:9f:3a:39:2e:3d:43:48:
                    88:1c:1a:99:11:85:6c:2b:9e:72:df:b5:93:09:82:
                    14:9b:18:db:40:33:88:9b:1b:43:ba:b1:7d:14:97:
                    20:45:56:06:2f:8c:37:12:3e:ec:3a:dc:89:c1:27:
                    55:67:cb:4e:17:e5:97:6e:ab:ae:07:3c:ac:4d:8f:
                    91:2b:02:ba:98:dd:0f:8f:db:76:53:8e:5c:d7:b1:
                    40:4a:29:d8:b8:21:04:10:77:81:c4:1f:84:45:c3:
                    9a:ce:23:82:34:69:b8:1f:b4:b8:d9:2f:5c:34:74:
                    da:cc:3d:84:d1:37:db:cd:9b:0d:44:13:97:87:3a:
                    ca:37:ab:2d:31:9a:51:be:ca:85:6b:d8:73:ae:1c:
                    68:d8:bc:b3:59:bc:0e:90:01:49:dd:d3:fc:9f:7e:
                    fc:ed:22:9f:c5:ce:e6:ec:bd:3e:43:3f:e1:b1:3c:
                    20:e7:76:95:91:89:0a:67:29:0a:61:0c:9b:7d:db:
                    19:05:08:09:fc:3a:9d:2d:b5:f6:c5:46:87:f5:2e:
                    7e:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:BA:F1:4E:DC:86:C5:47:47:79:AE:3C:D0:04:04:4D:A6:DD:BF:2A
            X509v3 Authority Key Identifier:
                keyid:5D:8E:27:64:36:04:49:9A:DF:A3:B7:A5:34:57:83:AD:12:DB:AF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369B304/B98A352CEC1211F0ABA757A0DAE4EC9C/XY4nZDYESZrfo7elNFeDrRLbr_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XY4nZDYESZrfo7elNFeDrRLbr_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369B304/B98A352CEC1211F0ABA757A0DAE4EC9C/XY4nZDYESZrfo7elNFeDrRLbr_M.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:df:93:99:54:cc:95:b9:25:4b:7c:da:8c:d1:ff:dd:69:6a:
         ed:c1:a7:96:2a:98:fc:ea:d2:7b:f4:5e:11:b8:74:b2:bc:59:
         c5:1b:96:35:2e:f0:6e:48:89:36:b1:3d:db:46:5f:a5:3e:d3:
         f1:a3:18:7f:e0:6c:7c:7e:02:d7:1d:f2:d5:85:ea:e2:94:8f:
         01:bc:5a:18:6e:32:26:fb:93:17:a2:1f:7c:c3:5d:f4:ba:8b:
         8c:05:47:f5:8a:59:8a:e6:fa:7b:8e:3f:71:67:ac:71:09:e2:
         ed:eb:d6:96:03:39:bf:75:25:da:ac:56:03:04:ed:e8:19:05:
         7c:28:62:76:b5:f5:e6:60:be:94:43:f2:ab:df:c8:36:21:8c:
         34:8e:99:45:29:20:a5:62:a1:cf:58:20:92:bf:d8:96:4b:de:
         c4:b8:fe:27:82:90:81:62:e1:d7:d7:03:e5:9f:3c:7d:7a:7d:
         fe:c0:0f:ed:e7:74:54:5d:b3:04:1a:40:4a:e7:61:ea:69:cf:
         65:5a:70:a3:4e:1a:9a:93:4d:1d:3d:17:1e:2b:4b:9f:bb:2a:
         c2:3c:e6:15:ce:cf:7b:6e:8f:6e:48:fd:cc:52:78:76:2b:1a:
         1a:4e:8b:aa:9e:96:cd:f4:4c:20:ea:7d:63:c7:12:d2:61:1e:
         7d:ff:21:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:58:29 2026 by rpki-client