Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3617560/1E87958AF25911ECB1BDF2C1F1222468/cvCHQUzi30S8T03_W-EUenpxqa4.mft
File:                     cvCHQUzi30S8T03_W-EUenpxqa4.mft (raw, json)
Hash identifier:          oheABHBwKaV3Df3nFHL/VQQx/S+G5Yggr5PCirU7yf8=
Subject key identifier:   88:24:7C:37:FC:6C:22:74:BC:34:53:54:B6:52:1B:D4:5C:E6:C0:D5
Authority key identifier: 72:F0:87:41:4C:E2:DF:44:BC:4F:4D:FF:5B:E1:14:7A:7A:71:A9:AE
Certificate issuer:       /CN=F3617560AP/serialNumber=72F087414CE2DF44BC4F4DFF5BE1147A7A71A9AE
Certificate serial:       0596
Authority info access:    rsync://rpki.afrinic.net/repository/apnic/cvCHQUzi30S8T03_W-EUenpxqa4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3617560/1E87958AF25911ECB1BDF2C1F1222468/cvCHQUzi30S8T03_W-EUenpxqa4.mft
Manifest number:          0593
Signing time:             Sun 05 Apr 2026 05:29:55 +0000
Manifest this update:     Sun 05 Apr 2026 05:29:55 +0000
Manifest next update:     Tue 07 Apr 2026 05:29:55 +0000
Files and hashes:         1: cvCHQUzi30S8T03_W-EUenpxqa4.crl (hash: 3W7mUTGDw2EfIi+RZLu088uEnzKD7mjFqdRxK3mna+g=)
                          2: F4B1DA0EF3B111ECBA4AC98DF1222468.roa (hash: BVR/waIvVkSnH8oG4jnugPkg0mpFTH8yh9hr63T0ym4=)
                          3: 467B6CDCF25A11ECB0A197C5F1222468.roa (hash: nyazJHmgaeSaThwXQennWPk+RG7afiy2fNVDqJDY42s=)
                          4: 435EB3FCF3B211EC9945E28EF1222468.roa (hash: qvMEmdrAoicNI7c3xjrgpNk9h06NSfKZgjizbA2v3kE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3617560/1E87958AF25911ECB1BDF2C1F1222468/cvCHQUzi30S8T03_W-EUenpxqa4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3617560/1E87958AF25911ECB1BDF2C1F1222468/cvCHQUzi30S8T03_W-EUenpxqa4.mft
                          rsync://rpki.afrinic.net/repository/apnic/cvCHQUzi30S8T03_W-EUenpxqa4.cer
                          rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.crl
                          rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/apnic-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 07 Apr 2026 00:15:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1430 (0x596)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3617560AP, serialNumber=72F087414CE2DF44BC4F4DFF5BE1147A7A71A9AE
        Validity
            Not Before: Apr  5 05:29:55 2026 GMT
            Not After : Apr  7 05:29:55 2026 GMT
        Subject: CN=69d1f353-aaf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:08:59:d5:02:2c:08:71:0d:3c:74:6a:2b:81:
                    78:71:dd:ab:53:64:9f:10:9e:a0:98:55:e8:45:a0:
                    f2:ad:7f:3c:48:06:cb:0f:a3:60:96:f6:78:bb:9f:
                    da:05:53:9a:d2:55:c2:28:b7:e8:a4:47:32:31:0c:
                    a1:74:be:5a:fe:9b:b7:5c:18:63:18:a1:20:4b:e7:
                    99:1c:49:a5:f9:b9:01:87:12:69:a0:9b:a8:12:d8:
                    7c:f4:60:e0:ab:c5:af:df:f0:68:1b:b0:18:72:48:
                    10:5f:b7:94:96:a2:e5:c7:82:8f:58:06:f5:54:b3:
                    af:f3:08:36:ec:4f:c5:f5:43:bf:0d:49:bb:27:17:
                    10:42:98:da:dd:62:e0:fc:f6:f7:5c:30:b1:15:90:
                    2b:b3:da:d8:df:12:7c:d3:53:1c:aa:ee:cf:12:cf:
                    d3:81:e4:7c:f9:fc:b1:81:d2:dd:a2:4b:f6:2e:6f:
                    7d:8a:67:c8:c7:9b:2a:45:8d:b0:f9:9f:43:85:56:
                    fe:6a:f9:a8:97:c6:ce:4a:49:15:cb:87:d1:55:88:
                    80:83:1f:74:5f:a9:08:09:5e:e5:93:0c:58:a2:25:
                    2f:15:24:b1:df:91:e1:aa:39:5b:4f:ae:91:0d:8f:
                    06:33:f6:eb:e8:5d:f7:53:4c:18:21:ef:18:a0:31:
                    34:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:24:7C:37:FC:6C:22:74:BC:34:53:54:B6:52:1B:D4:5C:E6:C0:D5
            X509v3 Authority Key Identifier:
                keyid:72:F0:87:41:4C:E2:DF:44:BC:4F:4D:FF:5B:E1:14:7A:7A:71:A9:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3617560/1E87958AF25911ECB1BDF2C1F1222468/cvCHQUzi30S8T03_W-EUenpxqa4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/apnic/cvCHQUzi30S8T03_W-EUenpxqa4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3617560/1E87958AF25911ECB1BDF2C1F1222468/cvCHQUzi30S8T03_W-EUenpxqa4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:6a:f8:77:4d:3c:3f:1c:b1:22:4f:5e:0c:3f:ec:6f:f3:c6:
         f9:04:9e:50:6c:94:d5:ac:36:ff:77:18:54:52:86:c6:8c:a6:
         9f:76:bd:64:db:a8:73:b5:ad:7b:51:06:04:03:b3:cc:a7:d6:
         1c:c3:28:22:b5:8f:bc:cb:ec:86:bc:80:b9:80:b9:de:05:14:
         31:5c:4a:24:3d:85:89:3d:fc:e1:69:bb:7a:05:61:8f:3a:38:
         e2:94:2c:6b:13:77:61:7b:89:72:f9:0a:bd:13:5b:04:03:0f:
         fe:aa:03:14:22:8b:37:ea:f9:d3:0e:16:38:98:5c:81:62:0e:
         54:dd:3e:f8:84:a2:a6:8b:4a:4f:a3:b8:c3:95:06:2e:d6:f2:
         ca:21:27:84:da:0b:f1:6d:bf:6e:dd:cf:a0:04:77:e3:ce:d9:
         12:80:2d:6c:5e:8b:40:09:8d:b6:a2:d8:03:3b:20:27:80:61:
         58:0a:d9:27:69:00:d5:c3:19:be:6f:fa:7b:ca:b7:7d:a5:b8:
         91:07:cc:dc:a9:1b:f4:a0:fd:90:fc:42:06:10:d2:14:f5:5e:
         3d:a4:fc:2a:5f:a9:53:6f:db:ba:dd:30:19:55:6a:1b:d1:6c:
         24:2b:24:83:8c:9a:c6:12:e1:9c:5d:46:ff:6a:f0:2b:0f:e7:
         c1:5c:d0:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 18:48:47 2026 by rpki-client