Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369C0BE/6338402078A911EAB80A662CF8AEA228/vY7ReUeW-s0Fq4qzboGCgYmDQXg.mft
File:                     vY7ReUeW-s0Fq4qzboGCgYmDQXg.mft (raw, json)
Hash identifier:          3Iw8mfS/pjNANYxpbHWnP/oCYTKkFovP2U5hy7+UcXY=
Subject key identifier:   30:F6:A2:76:69:1D:FE:F0:ED:2C:A2:2B:D4:F7:98:80:BD:AD:11:EF
Authority key identifier: BD:8E:D1:79:47:96:FA:CD:05:AB:8A:B3:6E:81:82:81:89:83:41:78
Certificate issuer:       /CN=F369C0BEAF/serialNumber=BD8ED1794796FACD05AB8AB36E81828189834178
Certificate serial:       08CF
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/vY7ReUeW-s0Fq4qzboGCgYmDQXg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369C0BE/6338402078A911EAB80A662CF8AEA228/vY7ReUeW-s0Fq4qzboGCgYmDQXg.mft
Manifest number:          08C8
Signing time:             Thu 26 Mar 2026 01:57:22 +0000
Manifest this update:     Thu 26 Mar 2026 01:57:21 +0000
Manifest next update:     Sat 28 Mar 2026 01:57:21 +0000
Files and hashes:         1: vY7ReUeW-s0Fq4qzboGCgYmDQXg.crl (hash: BAQ94nKurxowbXFkNW2jJx4lsAzkdesJQmo+BYPmYgI=)
                          2: 0C6C3F5EB70411EB9D753576F8AEA228.roa (hash: +PFAfP8Xt+CTgkJYHoN92NGejp4nVmF+Cp6+W4LzC3w=)
                          3: EF61FD46917211ECB626B7875A40D577.roa (hash: yMtEtqwksBqdr8P02P5a1wWKENboO3gP4qLKp2M/yy8=)
                          4: F5F55F64B9A911EBA799CD74F8AEA228.roa (hash: CxWzYNFUIcQ5tttsLCb4NWj7+HYKhAKh4WcFTusbCIk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369C0BE/6338402078A911EAB80A662CF8AEA228/vY7ReUeW-s0Fq4qzboGCgYmDQXg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369C0BE/6338402078A911EAB80A662CF8AEA228/vY7ReUeW-s0Fq4qzboGCgYmDQXg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/vY7ReUeW-s0Fq4qzboGCgYmDQXg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2255 (0x8cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369C0BEAF, serialNumber=BD8ED1794796FACD05AB8AB36E81828189834178
        Validity
            Not Before: Mar 26 01:57:21 2026 GMT
            Not After : Mar 28 01:57:21 2026 GMT
        Subject: CN=69c49282-9ed3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:86:d1:6d:cb:66:21:79:45:93:88:ea:90:4d:
                    ef:e8:da:19:e1:2d:13:8d:d5:f7:df:6b:ad:70:78:
                    c7:e7:ea:54:ab:85:12:20:9c:83:a5:14:42:76:38:
                    3e:4d:00:29:5a:db:7f:de:6c:ab:ea:1c:f9:41:e8:
                    f0:ea:0c:89:c3:7e:d4:7f:b8:d4:bc:c7:e8:40:36:
                    67:e1:5e:c1:15:33:0b:ef:45:fc:88:9c:c2:45:95:
                    a1:8c:c1:be:f3:5b:2a:61:8f:9f:67:ad:6f:65:6e:
                    bd:8c:f5:3e:c3:c9:64:61:bb:73:d9:d1:7f:50:78:
                    f7:e6:ac:bb:87:32:2b:d1:97:dc:d7:7b:2e:d6:b6:
                    f9:72:ec:e9:e3:ce:8a:f4:71:b6:8f:b5:9a:08:70:
                    31:15:c6:67:35:e3:5b:35:43:90:43:71:87:61:67:
                    a8:d8:42:a9:c8:08:9f:09:c3:b8:42:c5:0e:7c:76:
                    ea:d7:9a:7d:02:68:54:29:3b:68:84:6c:0c:b5:3d:
                    16:5b:ef:46:ea:4a:9a:66:c2:e1:72:6b:56:37:fc:
                    a0:ce:33:59:5a:d5:d3:31:de:a7:18:ee:f8:b7:57:
                    b2:bc:2c:78:b3:e7:08:8f:1b:89:a6:5b:a0:5e:c1:
                    1f:53:27:d7:1d:27:18:da:4c:9d:ea:1a:2f:db:82:
                    66:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:F6:A2:76:69:1D:FE:F0:ED:2C:A2:2B:D4:F7:98:80:BD:AD:11:EF
            X509v3 Authority Key Identifier:
                keyid:BD:8E:D1:79:47:96:FA:CD:05:AB:8A:B3:6E:81:82:81:89:83:41:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369C0BE/6338402078A911EAB80A662CF8AEA228/vY7ReUeW-s0Fq4qzboGCgYmDQXg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/vY7ReUeW-s0Fq4qzboGCgYmDQXg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369C0BE/6338402078A911EAB80A662CF8AEA228/vY7ReUeW-s0Fq4qzboGCgYmDQXg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:93:f6:53:07:5b:56:78:10:f2:08:a2:5f:4e:2e:da:b5:56:
         88:90:71:32:03:51:fa:51:bf:a3:8c:10:f0:a1:50:c0:a3:21:
         8b:ef:96:2c:58:8e:28:a3:90:68:c0:f0:ef:16:dd:1a:1b:8a:
         d3:20:a1:95:09:f1:b5:b7:e7:64:4e:05:d8:57:13:28:d5:15:
         23:b0:cc:0d:54:64:34:b2:ca:fe:e0:b5:60:b5:e0:91:80:8a:
         0d:19:63:44:d8:e1:1f:d2:fd:bf:bf:ca:37:7a:a2:20:6d:08:
         d5:51:29:87:99:e1:52:e5:3b:d4:c6:b5:82:9c:31:2e:b2:0f:
         83:bc:88:a5:37:e2:94:0e:5c:fe:d9:be:e9:b1:df:b7:43:90:
         07:ed:98:92:6b:2d:3c:08:6d:df:bd:e8:df:1c:57:e6:c0:5b:
         c7:0b:5d:33:58:ca:8f:5f:5b:12:c4:19:bd:28:41:a3:62:01:
         15:de:d1:5f:b3:45:36:48:da:bd:03:a4:ce:00:1a:57:f0:8f:
         ab:ad:16:e7:cb:be:f7:31:0c:24:7e:38:ed:e4:09:49:19:70:
         45:f7:53:12:5c:24:cd:4b:c7:d2:f7:51:54:bc:33:5d:8f:88:
         4b:e3:3c:1e:4e:7d:3f:97:1a:de:89:3c:f4:f6:1c:d3:28:47:
         19:30:1b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:06:34 2026 by rpki-client