Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F8434/B0F319E6DF8111EE8B5FEA6D775412E6/Ch0dTjsXD5T4rnCuQqlL4b6bod4.mft
File:                     Ch0dTjsXD5T4rnCuQqlL4b6bod4.mft (raw, json)
Hash identifier:          EH4r4oBix5t33AoRWTWDD/3pTBVuBYPHMlNLDVvc6vg=
Subject key identifier:   9F:45:F9:7F:44:10:09:2D:76:9C:1E:95:CC:1B:B7:C4:CB:EC:EF:AA
Authority key identifier: 0A:1D:1D:4E:3B:17:0F:94:F8:AE:70:AE:42:A9:4B:E1:BE:9B:A1:DE
Certificate issuer:       /CN=F36F8434AF/serialNumber=0A1D1D4E3B170F94F8AE70AE42A94BE1BE9BA1DE
Certificate serial:       0339
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Ch0dTjsXD5T4rnCuQqlL4b6bod4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F8434/B0F319E6DF8111EE8B5FEA6D775412E6/Ch0dTjsXD5T4rnCuQqlL4b6bod4.mft
Manifest number:          0334
Signing time:             Tue 12 May 2026 04:03:56 +0000
Manifest this update:     Tue 12 May 2026 04:03:55 +0000
Manifest next update:     Thu 14 May 2026 04:03:55 +0000
Files and hashes:         1: Ch0dTjsXD5T4rnCuQqlL4b6bod4.crl (hash: JAIkSVviD1Ag5ueJNRJWxUOET4fe+Bm1PvaKwNg0z90=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F8434/B0F319E6DF8111EE8B5FEA6D775412E6/Ch0dTjsXD5T4rnCuQqlL4b6bod4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F8434/B0F319E6DF8111EE8B5FEA6D775412E6/Ch0dTjsXD5T4rnCuQqlL4b6bod4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Ch0dTjsXD5T4rnCuQqlL4b6bod4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 14 May 2026 04:03:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 825 (0x339)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F8434AF, serialNumber=0A1D1D4E3B170F94F8AE70AE42A94BE1BE9BA1DE
        Validity
            Not Before: May 12 04:03:55 2026 GMT
            Not After : May 14 04:03:55 2026 GMT
        Subject: CN=6a02a6ac-ea22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:59:f2:fd:aa:a7:74:86:3c:fb:f7:03:4e:b2:
                    3e:01:6c:66:47:56:0d:e0:ec:33:79:af:47:4a:9b:
                    df:df:d9:c2:cb:a1:1b:36:36:f1:c9:06:64:cb:7f:
                    d9:71:a7:fd:99:05:43:a4:b6:c7:22:d0:a8:90:27:
                    b2:e6:4c:95:8b:81:ef:aa:f4:fe:7c:db:30:54:c5:
                    9a:24:ae:a3:0a:3a:6a:87:14:ca:6c:4e:16:31:c1:
                    62:5f:78:f5:5f:ea:c0:7b:5f:cf:7f:4a:7c:00:0d:
                    ee:e4:9f:16:03:5a:65:8a:c6:08:a4:de:ae:28:a9:
                    c2:14:77:36:da:43:0b:77:8d:66:8e:0f:4a:49:28:
                    80:b4:54:ad:ba:a8:3f:c6:c0:31:0e:96:9c:52:5c:
                    28:47:d2:fb:cc:3c:dc:1e:d8:99:d4:7e:8c:fa:d1:
                    59:09:92:23:73:6c:35:db:ab:54:14:f4:15:11:7b:
                    d3:02:64:81:90:f8:b8:ae:53:0d:8c:5d:29:4a:12:
                    f1:be:7a:c7:a3:da:d0:5f:f8:7a:f9:ba:99:ae:43:
                    73:2d:b3:36:30:85:10:79:35:ba:a0:26:9f:23:8d:
                    5d:e2:43:5d:14:c7:01:f9:4b:5a:60:c3:2f:4d:92:
                    ba:ff:74:6e:12:39:e4:da:f9:85:bb:1c:4a:70:52:
                    1d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:45:F9:7F:44:10:09:2D:76:9C:1E:95:CC:1B:B7:C4:CB:EC:EF:AA
            X509v3 Authority Key Identifier:
                keyid:0A:1D:1D:4E:3B:17:0F:94:F8:AE:70:AE:42:A9:4B:E1:BE:9B:A1:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8434/B0F319E6DF8111EE8B5FEA6D775412E6/Ch0dTjsXD5T4rnCuQqlL4b6bod4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Ch0dTjsXD5T4rnCuQqlL4b6bod4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8434/B0F319E6DF8111EE8B5FEA6D775412E6/Ch0dTjsXD5T4rnCuQqlL4b6bod4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:07:8c:de:c2:63:0d:3b:16:1b:c8:c4:24:9e:b9:52:74:30:
         dc:6e:ed:69:8e:05:66:5f:69:d9:91:1b:cc:04:9d:ef:2c:8a:
         e0:ad:25:3c:c8:dd:7e:4b:d4:a3:cc:f4:de:7d:22:c7:b4:e7:
         f4:d3:50:2e:53:74:28:9b:dd:1c:1f:bb:23:ba:85:bb:9e:70:
         07:c2:a9:da:30:ea:a4:f4:c8:78:f1:2c:60:78:4f:bc:54:ad:
         87:7d:30:0a:6f:12:24:2c:e3:3e:df:e7:0a:61:59:e2:ad:f4:
         86:50:43:58:e3:c2:8a:a4:64:35:26:44:bf:8b:1e:d6:21:d5:
         e1:82:01:6d:64:a6:2d:66:d8:15:06:95:8b:3d:6f:a2:9a:98:
         77:bc:f3:05:80:b2:6d:81:2f:33:ba:60:ac:45:e1:c8:5a:45:
         ea:d7:79:a8:6b:5d:5a:9d:1f:70:26:47:92:c2:90:c7:40:08:
         92:a5:b0:dd:7c:30:04:53:50:1c:ed:42:dd:a5:1d:5c:63:0d:
         6b:f9:72:c6:2a:09:c7:ff:1e:bf:89:e2:bf:b6:8a:ec:16:64:
         cd:1a:4b:cd:ae:a8:09:0b:81:1a:b2:3a:61:00:4c:43:42:45:
         fe:db:c6:69:9b:6d:f2:60:c3:3d:0c:d8:f6:11:9b:7c:1f:c8:
         1d:ff:8e:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:05:04 2026 by rpki-client