Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36162E8/785C504AFB4311EB8A8ABF3CD8A014CE/3YPIwAXNcQS4JubaokvJUXkImqM.mft
File:                     3YPIwAXNcQS4JubaokvJUXkImqM.mft (raw, json)
Hash identifier:          BVWvBNRYHZNG4yFLNtek+uqXYLLwEiC4oMugoQXrqis=
Subject key identifier:   4F:0C:A4:5F:E6:22:B6:F8:5A:C4:EE:38:89:B4:8A:27:C4:5E:0A:4E
Authority key identifier: DD:83:C8:C0:05:CD:71:04:B8:26:E6:DA:A2:4B:C9:51:79:08:9A:A3
Certificate issuer:       /CN=F36162E8AF/serialNumber=DD83C8C005CD7104B826E6DAA24BC95179089AA3
Certificate serial:       071E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/3YPIwAXNcQS4JubaokvJUXkImqM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36162E8/785C504AFB4311EB8A8ABF3CD8A014CE/3YPIwAXNcQS4JubaokvJUXkImqM.mft
Manifest number:          071C
Signing time:             Sun 21 Jun 2026 02:20:47 +0000
Manifest this update:     Sun 21 Jun 2026 02:20:46 +0000
Manifest next update:     Tue 23 Jun 2026 02:20:46 +0000
Files and hashes:         1: 3YPIwAXNcQS4JubaokvJUXkImqM.crl (hash: +Tpw3UXYJ0vV/tQP2OC1PeisEgBMtuwDWv6MyLm74GE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36162E8/785C504AFB4311EB8A8ABF3CD8A014CE/3YPIwAXNcQS4JubaokvJUXkImqM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36162E8/785C504AFB4311EB8A8ABF3CD8A014CE/3YPIwAXNcQS4JubaokvJUXkImqM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/3YPIwAXNcQS4JubaokvJUXkImqM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Jun 2026 00:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1822 (0x71e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36162E8AF, serialNumber=DD83C8C005CD7104B826E6DAA24BC95179089AA3
        Validity
            Not Before: Jun 21 02:20:46 2026 GMT
            Not After : Jun 23 02:20:46 2026 GMT
        Subject: CN=6a374a7f-994f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:75:49:dd:30:dc:e3:c3:06:ed:2c:d7:32:58:
                    b8:33:ce:66:ca:e5:f7:a7:dd:9a:00:dc:84:f1:ea:
                    71:4d:f1:1d:a4:3f:26:65:b4:83:08:ae:65:14:75:
                    d6:7d:8b:05:be:1e:0a:51:2a:53:1c:25:b0:d8:1f:
                    84:84:c5:74:24:47:ad:bf:02:3e:f9:bb:b8:27:ff:
                    e2:d7:39:6c:43:22:c8:7a:3f:28:77:d9:38:d8:d2:
                    fe:2d:8f:7a:03:cc:f3:0d:d9:cb:00:8c:69:a1:9c:
                    e9:5e:91:2d:4a:f4:f0:69:1e:9d:a4:dd:4f:00:1a:
                    32:5f:7c:92:4e:68:fb:dd:02:9c:8f:b7:c2:9c:19:
                    54:9d:c1:4f:44:8a:df:96:ef:85:8e:a8:e2:8c:53:
                    c2:4f:fd:bb:1e:29:f0:48:00:ad:15:8c:fa:a0:1c:
                    d9:20:a2:21:be:1e:f3:7d:e7:54:6c:09:57:1e:07:
                    5b:77:97:22:ab:ba:c3:ba:3e:e9:c4:96:7f:1a:a5:
                    c2:8d:b5:78:0f:47:28:76:0c:f1:d9:36:d4:b3:1f:
                    4d:1a:39:bd:96:2f:5a:c9:16:b0:45:25:f0:92:78:
                    ae:5a:dd:7b:5e:5e:b8:91:7d:ae:d7:72:27:d5:a2:
                    a3:73:76:e7:37:56:30:68:e4:a1:8c:2d:8e:aa:23:
                    15:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:0C:A4:5F:E6:22:B6:F8:5A:C4:EE:38:89:B4:8A:27:C4:5E:0A:4E
            X509v3 Authority Key Identifier:
                keyid:DD:83:C8:C0:05:CD:71:04:B8:26:E6:DA:A2:4B:C9:51:79:08:9A:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36162E8/785C504AFB4311EB8A8ABF3CD8A014CE/3YPIwAXNcQS4JubaokvJUXkImqM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3YPIwAXNcQS4JubaokvJUXkImqM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36162E8/785C504AFB4311EB8A8ABF3CD8A014CE/3YPIwAXNcQS4JubaokvJUXkImqM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:91:36:a3:aa:50:1f:16:df:93:0f:69:27:ec:b7:c8:00:76:
         5c:54:18:df:d6:3c:56:da:82:f4:57:90:b7:28:93:7e:c8:af:
         fd:bd:04:ac:dd:8c:dc:e0:30:86:26:40:a7:08:c2:a0:74:1f:
         9b:6b:96:c0:dc:96:2c:da:49:67:b7:c7:be:e5:21:17:3a:96:
         50:9c:ba:e7:e0:68:61:a8:0b:d6:07:3c:14:ab:85:c3:66:9f:
         6d:08:54:79:df:23:7b:43:ff:56:98:ca:d7:0a:ed:fd:95:91:
         02:b8:c8:65:3a:ad:3c:e4:18:6b:49:c8:87:70:7e:06:c9:aa:
         60:6c:ba:ef:8b:37:21:00:75:19:47:c6:02:dc:26:35:28:e2:
         88:6e:94:5e:da:78:32:f1:da:4d:c1:d1:20:41:b8:fc:de:35:
         1b:6a:53:92:50:4d:80:16:7d:ca:12:a4:e4:c8:62:b6:25:f2:
         f8:50:b8:a4:d1:cb:59:e5:8e:e7:5d:2d:c3:66:8a:bb:ca:30:
         c8:3d:66:0f:ea:ef:cc:29:6b:34:ed:e2:c3:91:84:39:78:0e:
         39:ea:c4:ce:87:b2:3d:2e:b9:fb:f4:88:6e:32:93:3e:99:3f:
         34:ac:80:7f:d7:f1:fb:85:0b:f2:53:54:ed:ed:53:5d:df:e6:
         99:51:c1:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 23:35:22 2026 by rpki-client