Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369E4C8/BDF05D7C7D3811ED8C9D06C7F1222468/x2kBfEr3fF65-LyEaI2IawFQMjo.mft
File:                     x2kBfEr3fF65-LyEaI2IawFQMjo.mft (raw, json)
Hash identifier:          WVsUN+S8JKsj6nHxLtX1ZyfqK4J5U+4JPt6f5WCF7Dw=
Subject key identifier:   6C:8F:D5:F5:D3:DF:93:B9:F3:C8:9C:28:C3:BD:6D:92:D2:E3:2A:52
Authority key identifier: C7:69:01:7C:4A:F7:7C:5E:B9:F8:BC:84:68:8D:88:6B:01:50:32:3A
Certificate issuer:       /CN=F369E4C8AF/serialNumber=C769017C4AF77C5EB9F8BC84688D886B0150323A
Certificate serial:       04E4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/x2kBfEr3fF65-LyEaI2IawFQMjo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369E4C8/BDF05D7C7D3811ED8C9D06C7F1222468/x2kBfEr3fF65-LyEaI2IawFQMjo.mft
Manifest number:          04DF
Signing time:             Thu 26 Mar 2026 03:39:15 +0000
Manifest this update:     Thu 26 Mar 2026 03:39:14 +0000
Manifest next update:     Sat 28 Mar 2026 03:39:14 +0000
Files and hashes:         1: x2kBfEr3fF65-LyEaI2IawFQMjo.crl (hash: CFwcr0AZgf32ALbukMBdPnfkdk7Cp3rD3iu4XxVOSOI=)
                          2: 72225BFEA05C11EFA3BA68B5762E951A.roa (hash: ptoIi4ERlN82BasAiG/RRS1jzH5R046ZZLHto70J/kQ=)
                          3: B6F83C207D4111ED99A5A8DEF1222468.roa (hash: Z4JFecH0Pxw3ortmqmh93AEMH7ET0Xm0pVB1yg4vYI0=)
                          4: 6F61D56CD3F011EF874D80BD762E951A.roa (hash: aQ5eotveqGJrhssXyUfqPg5E0r4EtEOvK2qBBQ8Oc9Q=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369E4C8/BDF05D7C7D3811ED8C9D06C7F1222468/x2kBfEr3fF65-LyEaI2IawFQMjo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369E4C8/BDF05D7C7D3811ED8C9D06C7F1222468/x2kBfEr3fF65-LyEaI2IawFQMjo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/x2kBfEr3fF65-LyEaI2IawFQMjo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1252 (0x4e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369E4C8AF, serialNumber=C769017C4AF77C5EB9F8BC84688D886B0150323A
        Validity
            Not Before: Mar 26 03:39:14 2026 GMT
            Not After : Mar 28 03:39:14 2026 GMT
        Subject: CN=69c4aa63-c67d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ce:44:67:d6:bc:94:3e:1c:7e:24:ec:2a:35:
                    0e:60:ca:83:2e:bb:ee:28:0b:3e:a3:f6:6a:2b:dc:
                    66:1d:e7:db:2d:f1:fc:12:a8:91:53:a0:44:fa:55:
                    e4:c0:d0:33:58:b5:8e:44:ef:2e:10:c6:98:1e:10:
                    4f:4b:bc:d5:9f:d4:47:bd:d7:50:74:6c:0a:ec:9f:
                    44:9e:66:a4:fd:12:6f:0c:16:2f:4e:a3:26:d3:59:
                    cc:50:3d:76:e7:15:6c:d5:b8:87:2e:5a:b8:c0:6d:
                    7e:cd:11:00:1a:5c:1a:24:80:6c:b3:6d:8d:de:74:
                    d5:92:4a:45:49:f5:a7:c8:1f:38:b4:55:76:9d:a4:
                    16:18:73:43:6d:68:ea:68:b0:ce:31:63:47:93:dd:
                    33:36:2b:11:c2:83:a1:bd:ce:f7:8e:00:22:93:a1:
                    b5:a0:3e:b5:74:ad:ae:63:ec:07:7d:5f:40:8c:87:
                    1e:25:aa:3c:99:6e:6e:fa:97:21:9f:52:59:8b:8e:
                    5e:e1:9c:1d:d3:86:5c:00:d1:da:38:22:99:9e:74:
                    3c:14:a7:3c:f7:5c:24:9e:dd:a0:f2:3d:10:a0:35:
                    0e:99:61:b1:ca:9c:08:ed:5a:5a:49:21:ba:5a:a2:
                    6e:5d:e6:40:61:b3:e3:4c:63:af:85:98:a7:e9:e2:
                    d2:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:8F:D5:F5:D3:DF:93:B9:F3:C8:9C:28:C3:BD:6D:92:D2:E3:2A:52
            X509v3 Authority Key Identifier:
                keyid:C7:69:01:7C:4A:F7:7C:5E:B9:F8:BC:84:68:8D:88:6B:01:50:32:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369E4C8/BDF05D7C7D3811ED8C9D06C7F1222468/x2kBfEr3fF65-LyEaI2IawFQMjo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/x2kBfEr3fF65-LyEaI2IawFQMjo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369E4C8/BDF05D7C7D3811ED8C9D06C7F1222468/x2kBfEr3fF65-LyEaI2IawFQMjo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:88:af:5d:57:90:3d:4e:71:11:a0:d0:00:91:b0:88:b5:31:
         58:02:fa:9f:a3:8e:22:71:54:05:1e:04:e7:3e:90:8e:ad:c4:
         d1:bf:55:63:8c:d8:eb:a9:e3:c1:12:66:0e:ee:bc:3f:ba:11:
         a9:c7:7d:e2:c4:9d:be:f9:ce:a3:20:80:82:64:e2:a8:00:c6:
         13:df:4e:16:0c:28:3b:55:36:cc:b3:de:59:1f:b4:0c:de:b3:
         87:48:51:f5:d7:85:d9:59:0f:0e:34:ff:bc:e8:23:e3:56:ac:
         1e:27:64:f2:04:17:74:7c:18:8e:63:e6:08:a6:19:ac:d7:85:
         5e:14:84:93:6f:09:03:b2:7d:83:7b:78:07:c0:62:e2:1d:02:
         57:1f:87:22:e4:e8:87:02:50:24:1d:37:0f:dc:c1:c0:ba:3a:
         b6:dc:8d:ad:ff:00:52:ec:cf:ff:cd:09:eb:86:9e:64:68:2a:
         f1:e0:9b:d5:e8:86:27:fd:6e:39:ea:05:a5:c3:af:93:77:27:
         ae:56:25:93:aa:4c:94:c4:14:02:89:d3:41:03:f4:c7:f5:c9:
         03:c8:31:50:48:6a:46:a6:91:e2:fc:8e:40:82:83:05:cb:f7:
         97:9d:51:43:70:e2:f8:76:a1:66:c3:8e:67:46:d0:97:eb:8a:
         88:c2:0e:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:55:58 2026 by rpki-client