Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369F2FA/69B05CBABB0C11ECA7DC65BB5A40D577/lHgxWh5cVhWpIou-ykijlocLhH4.mft
File:                     lHgxWh5cVhWpIou-ykijlocLhH4.mft (raw, json)
Hash identifier:          eQ2Qxcl9Dz6TxYzRcP8VlA7i18QOMbOjAj7D2lUO3Po=
Subject key identifier:   DF:20:15:15:A2:5E:FF:CD:53:21:9C:3B:66:F4:CD:76:C6:A3:A2:F9
Authority key identifier: 94:78:31:5A:1E:5C:56:15:A9:22:8B:BE:CA:48:A3:96:87:0B:84:7E
Certificate issuer:       /CN=F369F2FAAF/serialNumber=9478315A1E5C5615A9228BBECA48A396870B847E
Certificate serial:       05DE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/lHgxWh5cVhWpIou-ykijlocLhH4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369F2FA/69B05CBABB0C11ECA7DC65BB5A40D577/lHgxWh5cVhWpIou-ykijlocLhH4.mft
Manifest number:          05D6
Signing time:             Thu 26 Mar 2026 03:06:44 +0000
Manifest this update:     Thu 26 Mar 2026 03:06:43 +0000
Manifest next update:     Sat 28 Mar 2026 03:06:43 +0000
Files and hashes:         1: lHgxWh5cVhWpIou-ykijlocLhH4.crl (hash: 9QilyoDgZE6OQl8PL6yZBLwEndfHUCNYTugUghm+8xk=)
                          2: 24554486C9F911ECB39679CEF1222468.roa (hash: XsnSZz8OGPdhLfHSwPrQf7FThXHRJnZONeqAKHHP2C4=)
                          3: C1E11DF2C9F811EC8EF65BCDF1222468.roa (hash: cjfho8EHQEv43WroTa6NNGIUf9j7w7qHahJeAutEI1k=)
                          4: BE1A524EBB0F11EC88DCF0C45A40D577.roa (hash: oQGN0BRTI6ZglLf4IQsOiJFLwuWSpy1Ec45AeAPikeI=)
                          5: AB485D40BB1011EC8593AFC75A40D577.roa (hash: oaACRYJ/pF9OJAPz1+dSFwiOIu+zR3+hzGtxNETwOrM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369F2FA/69B05CBABB0C11ECA7DC65BB5A40D577/lHgxWh5cVhWpIou-ykijlocLhH4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369F2FA/69B05CBABB0C11ECA7DC65BB5A40D577/lHgxWh5cVhWpIou-ykijlocLhH4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/lHgxWh5cVhWpIou-ykijlocLhH4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1502 (0x5de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369F2FAAF, serialNumber=9478315A1E5C5615A9228BBECA48A396870B847E
        Validity
            Not Before: Mar 26 03:06:43 2026 GMT
            Not After : Mar 28 03:06:43 2026 GMT
        Subject: CN=69c4a2c4-162d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:4d:f9:68:7f:9a:e0:7e:14:a4:c1:cf:50:d1:
                    74:d5:91:65:73:13:d3:b5:d0:c5:3d:b9:01:c7:05:
                    8a:a7:34:7f:9f:2a:67:2d:04:d6:53:bb:29:b1:42:
                    bc:8d:93:fc:0f:cb:82:31:c0:81:1e:e8:e5:cd:b9:
                    76:aa:ee:86:5c:68:1e:c1:13:b8:b4:94:72:ba:95:
                    4a:72:eb:c9:3b:31:67:8b:46:e3:22:85:c9:ee:5f:
                    d6:ab:5d:bb:a9:95:8e:63:15:ba:d8:a9:e7:3c:3e:
                    48:90:79:a9:da:d5:56:6b:ad:89:09:80:4f:14:2c:
                    ed:55:cc:df:54:41:ae:30:a9:50:3a:d2:7c:57:fa:
                    98:4c:c3:58:dc:97:87:37:ef:fb:38:86:05:81:ef:
                    ba:12:16:e1:4c:5e:60:ff:99:40:6d:ed:aa:3a:dd:
                    17:59:35:d8:9d:f6:2b:67:88:03:33:b0:87:d5:06:
                    be:fa:e1:d0:55:4c:7f:16:ec:d0:c7:ed:2e:ce:12:
                    08:1f:28:f0:48:a7:cc:e9:3f:2e:40:ba:d9:d6:71:
                    a6:3b:3f:e0:8d:81:5a:af:de:ac:d7:07:aa:28:01:
                    3c:b8:c9:25:42:4b:59:21:55:f7:3d:19:c1:50:5e:
                    cd:cc:dd:1b:fd:7b:c9:a9:0a:ec:e9:5f:c2:8d:60:
                    64:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:20:15:15:A2:5E:FF:CD:53:21:9C:3B:66:F4:CD:76:C6:A3:A2:F9
            X509v3 Authority Key Identifier:
                keyid:94:78:31:5A:1E:5C:56:15:A9:22:8B:BE:CA:48:A3:96:87:0B:84:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369F2FA/69B05CBABB0C11ECA7DC65BB5A40D577/lHgxWh5cVhWpIou-ykijlocLhH4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lHgxWh5cVhWpIou-ykijlocLhH4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369F2FA/69B05CBABB0C11ECA7DC65BB5A40D577/lHgxWh5cVhWpIou-ykijlocLhH4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:2f:d8:45:6f:00:27:52:9e:47:21:7f:49:8d:40:20:c4:d4:
         78:66:8f:f5:8a:fc:91:65:2d:82:fc:e6:86:df:5a:5a:8a:76:
         fa:dd:c4:da:dc:31:38:30:d5:c8:06:98:e1:51:c7:62:89:b8:
         81:85:e8:3d:86:c7:65:8f:b0:cb:47:e7:75:b2:15:62:1a:f9:
         fb:2b:fc:d9:1c:a9:3d:4e:73:86:11:01:1d:cf:6c:79:83:65:
         5e:2b:71:04:4d:f0:7e:2c:99:fc:15:90:9e:da:f3:89:2c:de:
         2e:ff:32:db:0c:42:52:9e:24:3b:6e:14:09:c2:da:10:f0:fc:
         7a:3b:59:0c:aa:be:18:54:a7:d1:5f:d9:c7:d2:f2:d2:fd:5a:
         9f:ae:49:d5:a2:cd:8f:1a:55:1a:d6:d0:bf:0d:ba:a2:bd:e9:
         01:94:0c:89:e5:d0:77:24:89:0e:69:a1:5f:54:8f:5a:66:b9:
         0e:8c:8e:8e:b0:65:7e:df:de:c2:d2:83:86:f7:2e:7b:9a:a1:
         3c:bb:29:54:a3:f6:37:96:e7:c3:f4:ce:e8:18:51:50:f1:45:
         a9:e0:93:3d:12:e6:9a:17:3c:59:03:a6:c1:1b:ad:96:93:56:
         d3:c7:ec:c6:10:33:e6:da:a2:75:ae:08:d5:c8:c2:0f:ba:d5:
         76:bd:53:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:08:33 2026 by rpki-client