Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C7A8F/0D485FCA0A9A11EE955F44294AD9E6FC/6Z6B_I_kh8L4TcmvrcH827QCmvk.mft
File:                     6Z6B_I_kh8L4TcmvrcH827QCmvk.mft (raw, json)
Hash identifier:          pY11dlehAnFye6z/uZsyzBqag9CJiQ0pA1jJgD2uXpc=
Subject key identifier:   A4:24:1F:9F:8B:B3:68:31:CF:94:3D:07:A9:46:BB:AB:9D:25:7C:13
Authority key identifier: E9:9E:81:FC:8F:E4:87:C2:F8:4D:C9:AF:AD:C1:FC:DB:B4:02:9A:F9
Certificate issuer:       /CN=F36C7A8FAF/serialNumber=E99E81FC8FE487C2F84DC9AFADC1FCDBB4029AF9
Certificate serial:       042D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/6Z6B_I_kh8L4TcmvrcH827QCmvk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C7A8F/0D485FCA0A9A11EE955F44294AD9E6FC/6Z6B_I_kh8L4TcmvrcH827QCmvk.mft
Manifest number:          0420
Signing time:             Thu 26 Mar 2026 04:06:34 +0000
Manifest this update:     Thu 26 Mar 2026 04:06:33 +0000
Manifest next update:     Sat 28 Mar 2026 04:06:33 +0000
Files and hashes:         1: 6Z6B_I_kh8L4TcmvrcH827QCmvk.crl (hash: khtaghfuDNqDLBkSAqNRS23rcligAcL1YKmJi9JeUoM=)
                          2: D7B5D4AA3F8A11F0815BE886DAE4EC9C.roa (hash: t5z1XEoM68YeibkOYXPg25COwviOQ/1nhyVvYwVcLc0=)
                          3: 9A5FD4443F8911F0AA49157EDAE4EC9C.roa (hash: qLmVhnLX4tIjj8b3hArFHAjy/7IR4T4V3Cq6FO7FMiA=)
                          4: 795EBB4C3F8A11F0AD8BDA84DAE4EC9C.roa (hash: 6t2L+Z6NwtyN3Ljbo05uGeDqv/OHPqQk0PQIwI4ALtk=)
                          5: AD03A5023F8A11F08735E386DAE4EC9C.roa (hash: u0IiCF72rfY2DVaQwjj716SKv5t/WEVer0mJ4pvV7nU=)
                          6: 3098838E3F8A11F0BC189482DAE4EC9C.roa (hash: LUsGNRiI9jBYOMZpideG7XX0pRrmTbmUTXJNgXuuIFs=)
                          7: 1B786B4E3F8B11F0B8041489DAE4EC9C.roa (hash: /bgUPlrvnEdfkbyRwQFx/0fTSHi+6eLubObaEe1n4WY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C7A8F/0D485FCA0A9A11EE955F44294AD9E6FC/6Z6B_I_kh8L4TcmvrcH827QCmvk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C7A8F/0D485FCA0A9A11EE955F44294AD9E6FC/6Z6B_I_kh8L4TcmvrcH827QCmvk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/6Z6B_I_kh8L4TcmvrcH827QCmvk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1069 (0x42d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C7A8FAF, serialNumber=E99E81FC8FE487C2F84DC9AFADC1FCDBB4029AF9
        Validity
            Not Before: Mar 26 04:06:33 2026 GMT
            Not After : Mar 28 04:06:33 2026 GMT
        Subject: CN=69c4b0ca-91bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:83:84:8e:49:6e:ff:3e:cb:31:c5:7f:b2:0b:
                    64:30:1c:15:7d:8c:56:dc:41:2c:ab:e5:79:d6:34:
                    92:a1:49:c5:04:5b:74:26:32:59:4a:cd:6a:fe:2b:
                    63:70:af:fa:58:78:c7:2f:92:57:bf:30:63:26:eb:
                    cf:40:ce:31:92:53:f5:d3:02:f9:1a:ed:4e:07:b1:
                    ac:90:d4:e4:2a:a8:03:8e:80:db:47:2f:1d:30:bf:
                    6d:d1:ec:d5:f8:fb:9f:d9:2b:71:95:3b:fe:97:64:
                    f6:6c:b9:37:50:ff:f0:8f:ff:f8:40:e2:09:e5:77:
                    54:42:02:b3:b6:11:ca:be:f4:37:2f:52:82:11:d5:
                    7a:8b:1c:19:e3:21:22:e2:0c:fe:0f:78:b7:0f:fa:
                    c4:b0:b5:19:1e:4d:06:09:90:87:f6:d0:25:12:1a:
                    88:86:ec:29:bc:d2:e8:12:c3:c9:2a:07:33:91:a5:
                    82:73:a2:ff:54:02:11:b5:27:d6:83:f2:a4:ef:04:
                    31:f5:f2:12:97:b7:46:fa:9d:e0:ec:e3:a4:15:43:
                    e7:63:e8:c3:38:0f:85:a3:00:6b:b7:08:87:91:31:
                    34:39:7c:6a:f6:7a:b4:a5:8f:24:e3:f2:f2:17:89:
                    da:64:7b:be:75:0f:a5:88:85:e6:66:af:e7:05:2d:
                    a7:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:24:1F:9F:8B:B3:68:31:CF:94:3D:07:A9:46:BB:AB:9D:25:7C:13
            X509v3 Authority Key Identifier:
                keyid:E9:9E:81:FC:8F:E4:87:C2:F8:4D:C9:AF:AD:C1:FC:DB:B4:02:9A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C7A8F/0D485FCA0A9A11EE955F44294AD9E6FC/6Z6B_I_kh8L4TcmvrcH827QCmvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/6Z6B_I_kh8L4TcmvrcH827QCmvk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C7A8F/0D485FCA0A9A11EE955F44294AD9E6FC/6Z6B_I_kh8L4TcmvrcH827QCmvk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:62:fa:90:2e:5d:98:8a:4e:a9:21:2f:73:31:d7:53:91:15:
         8e:40:1e:4b:9b:c7:86:61:e9:b2:1b:9c:80:db:60:29:2a:b9:
         ca:70:89:47:0a:8b:2b:49:5c:cf:51:9e:07:c4:72:bd:cc:af:
         df:50:95:1d:96:e0:13:c4:e6:e1:b4:3f:fb:0c:0b:b3:a1:6f:
         91:42:ee:5b:94:f6:b8:20:8c:6a:0a:a9:6c:9d:05:17:0e:ad:
         8b:74:db:00:a6:ea:1d:8b:b1:7f:af:f9:16:98:92:12:e5:8d:
         e7:d6:a0:03:4d:52:c7:d5:5a:35:40:06:16:bc:f8:7f:da:73:
         0c:0f:a7:7a:a8:a4:34:ac:c7:66:7d:e0:5e:98:cc:43:10:26:
         ab:94:b0:c5:ce:a6:92:39:4e:25:df:f9:f5:55:d9:e8:83:71:
         a3:6a:3e:01:77:d8:46:cc:26:32:29:24:39:7a:0d:14:73:0f:
         c6:e4:1e:7c:dc:d6:1a:0e:37:d3:9f:d8:29:f1:9a:7e:da:ad:
         6b:a9:08:1b:a8:e9:e4:ac:79:48:92:ae:4a:a1:a8:ba:1b:49:
         74:be:e7:50:f6:73:5d:db:67:3f:11:e9:4d:f8:ec:60:84:54:
         8f:98:dd:94:13:15:6f:5d:5a:04:c1:e0:a3:e8:6f:23:78:42:
         62:c5:43:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:49:29 2026 by rpki-client