Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E6AB8/D8FE28F61BDC11ECB169A467D8A014CE/xel4rPl9qfSdxLKEr_AldPEDGH8.mft
File:                     xel4rPl9qfSdxLKEr_AldPEDGH8.mft (raw, json)
Hash identifier:          7rI8RT2DSRawoLrCq0DadPAHsmooSEBaKA4r/zit7gs=
Subject key identifier:   A5:20:9C:DF:E5:30:EA:D0:F5:06:BA:EF:96:BD:3A:92:BA:E1:57:EC
Authority key identifier: C5:E9:78:AC:F9:7D:A9:F4:9D:C4:B2:84:AF:F0:25:74:F1:03:18:7F
Certificate issuer:       /CN=F36E6AB8AF/serialNumber=C5E978ACF97DA9F49DC4B284AFF02574F103187F
Certificate serial:       069A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/xel4rPl9qfSdxLKEr_AldPEDGH8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E6AB8/D8FE28F61BDC11ECB169A467D8A014CE/xel4rPl9qfSdxLKEr_AldPEDGH8.mft
Manifest number:          0699
Signing time:             Thu 26 Mar 2026 02:46:27 +0000
Manifest this update:     Thu 26 Mar 2026 02:46:27 +0000
Manifest next update:     Sat 28 Mar 2026 02:46:27 +0000
Files and hashes:         1: xel4rPl9qfSdxLKEr_AldPEDGH8.crl (hash: GaLnZplcadof15uwHgAqtwBSlANBbBNvCFJnM1M8dLk=)
                          2: 1C9E519E1BDD11ECA0560768D8A014CE.roa (hash: FU98lPpwZTQalULqUls0soaKI9pnCPgBWGxAh0GDG/g=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E6AB8/D8FE28F61BDC11ECB169A467D8A014CE/xel4rPl9qfSdxLKEr_AldPEDGH8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E6AB8/D8FE28F61BDC11ECB169A467D8A014CE/xel4rPl9qfSdxLKEr_AldPEDGH8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/xel4rPl9qfSdxLKEr_AldPEDGH8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1690 (0x69a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E6AB8AF, serialNumber=C5E978ACF97DA9F49DC4B284AFF02574F103187F
        Validity
            Not Before: Mar 26 02:46:27 2026 GMT
            Not After : Mar 28 02:46:27 2026 GMT
        Subject: CN=69c49e03-a1a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:f8:fd:20:8c:4a:02:d2:e3:4f:61:2a:06:76:
                    2c:23:4f:c3:c4:ad:e6:5b:b2:35:cb:f3:e5:f2:db:
                    15:f1:21:f1:bb:80:4d:a1:0f:cb:32:ff:ae:af:3e:
                    1c:b7:3c:fc:f9:22:f2:74:c3:fe:e4:ed:0e:2e:7a:
                    3c:dc:d9:1e:16:6b:c7:05:ee:1d:99:94:2f:17:63:
                    3d:d4:51:28:2f:f1:dd:4c:77:aa:f4:ea:5c:75:d3:
                    47:b4:78:d6:e6:ef:0c:25:6f:5a:86:27:a3:9a:fc:
                    2c:a7:dd:20:24:1a:0c:ec:b1:d5:91:f3:9c:1d:51:
                    f7:fa:bd:3c:b9:79:49:e1:c4:8e:16:fe:b1:28:f4:
                    f5:e8:5e:fc:e1:96:1a:1f:ce:d9:b7:66:18:f9:06:
                    7d:50:c7:48:72:6a:24:d7:de:96:ec:2e:39:20:35:
                    9d:a4:76:b8:00:ca:57:53:9c:d3:7d:b0:d7:24:98:
                    ef:9d:d1:22:ce:0c:e0:05:a5:32:f7:88:a9:21:b7:
                    71:80:36:fe:2f:4b:c1:fb:88:9a:e4:1e:53:f4:37:
                    8c:d3:cf:e9:62:67:8a:1f:28:8d:6e:4d:ee:5c:ea:
                    75:4c:de:80:fa:37:a4:46:9f:36:14:09:18:d7:91:
                    67:ef:ad:a9:32:f8:75:65:b4:91:e8:27:8b:2b:6a:
                    68:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:20:9C:DF:E5:30:EA:D0:F5:06:BA:EF:96:BD:3A:92:BA:E1:57:EC
            X509v3 Authority Key Identifier:
                keyid:C5:E9:78:AC:F9:7D:A9:F4:9D:C4:B2:84:AF:F0:25:74:F1:03:18:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E6AB8/D8FE28F61BDC11ECB169A467D8A014CE/xel4rPl9qfSdxLKEr_AldPEDGH8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xel4rPl9qfSdxLKEr_AldPEDGH8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E6AB8/D8FE28F61BDC11ECB169A467D8A014CE/xel4rPl9qfSdxLKEr_AldPEDGH8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:8c:61:bc:4f:0f:00:f9:8f:0b:9c:98:b1:f8:14:9f:8c:67:
         51:38:68:e1:33:23:00:14:71:fd:37:86:97:d5:97:35:37:5a:
         fe:51:bf:a7:3e:69:32:1b:84:78:6d:2c:06:85:1c:21:fe:8e:
         83:1b:3a:69:f5:39:29:b0:0a:0d:48:c6:9d:3f:ab:ef:47:d0:
         28:a4:1b:9f:06:fc:45:5e:d8:9c:27:c0:88:bf:31:5c:dc:13:
         b9:4b:8c:aa:ec:9b:7e:0d:d4:78:dd:be:df:e7:7d:dc:60:29:
         14:6f:cf:26:55:9e:c5:b9:de:d9:c4:e7:e9:55:74:39:67:aa:
         98:cb:be:e8:82:1c:49:54:90:bf:6f:5b:ce:88:a1:77:ff:ac:
         3d:dd:59:9b:2f:4a:c4:3e:5f:c2:5c:b7:aa:84:2f:81:dd:69:
         8a:de:45:84:52:54:b5:e6:cb:1b:e3:8b:fc:6a:3b:e7:49:4b:
         3e:fd:59:0b:93:ff:f8:a6:08:4c:d4:24:fb:e1:e6:aa:20:7f:
         b9:34:07:e6:9e:21:f5:b2:5c:98:da:52:c7:56:32:53:37:01:
         89:95:c6:3c:83:ec:49:da:2c:73:f4:74:bb:4f:b0:ea:30:10:
         dc:1d:f6:1e:f5:b8:ac:c5:16:de:43:56:03:88:08:d4:62:98:
         c4:6f:dc:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:17:45 2026 by rpki-client