Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3617770/E57BA9D8DC0311EF9C482C52762E951A/v62u3NVIMg_I8seYfA4imdy6Opw.mft
File:                     v62u3NVIMg_I8seYfA4imdy6Opw.mft (raw, json)
Hash identifier:          H1zoVIrKNLI+HppVaihCe3JgZn5jD0/6+mjvqyQ7CDc=
Subject key identifier:   03:62:0E:13:08:85:3C:38:A1:FB:2B:5E:85:F6:A4:12:89:3C:EA:0D
Authority key identifier: BF:AD:AE:DC:D5:48:32:0F:C8:F2:C7:98:7C:0E:22:99:DC:BA:3A:9C
Certificate issuer:       /CN=F3617770AF/serialNumber=BFADAEDCD548320FC8F2C7987C0E2299DCBA3A9C
Certificate serial:       01DA
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/v62u3NVIMg_I8seYfA4imdy6Opw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3617770/E57BA9D8DC0311EF9C482C52762E951A/v62u3NVIMg_I8seYfA4imdy6Opw.mft
Manifest number:          01DA
Signing time:             Thu 07 May 2026 04:44:53 +0000
Manifest this update:     Thu 07 May 2026 04:44:52 +0000
Manifest next update:     Sat 09 May 2026 04:44:52 +0000
Files and hashes:         1: v62u3NVIMg_I8seYfA4imdy6Opw.crl (hash: hpoMjh+/Ou1hSm8DyqLfE81gxS9d43RAw6kgBGvmDG4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3617770/E57BA9D8DC0311EF9C482C52762E951A/v62u3NVIMg_I8seYfA4imdy6Opw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3617770/E57BA9D8DC0311EF9C482C52762E951A/v62u3NVIMg_I8seYfA4imdy6Opw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/v62u3NVIMg_I8seYfA4imdy6Opw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 09 May 2026 00:07:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 474 (0x1da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3617770AF, serialNumber=BFADAEDCD548320FC8F2C7987C0E2299DCBA3A9C
        Validity
            Not Before: May  7 04:44:52 2026 GMT
            Not After : May  9 04:44:52 2026 GMT
        Subject: CN=69fc18c4-b9c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:2d:a7:66:d9:be:7c:89:86:6e:5b:3a:41:63:
                    da:42:b4:76:2b:e2:d5:a3:7b:58:cf:34:93:93:f4:
                    60:d3:a4:e7:af:1f:c9:35:f1:58:17:56:b9:fd:33:
                    fc:f1:b7:20:1f:77:64:47:99:06:52:5f:ed:68:fd:
                    79:85:3c:c0:51:1b:ab:5f:e5:8f:98:00:7e:ef:b5:
                    a2:19:eb:97:00:92:a9:a7:d7:ed:b5:e9:fb:9c:19:
                    c3:b9:00:f1:f9:60:c7:64:a6:03:f6:fc:0c:54:1b:
                    e4:c4:18:0f:6b:44:6d:0d:e0:3a:4f:05:e3:8c:45:
                    80:ff:8a:af:00:94:a2:0f:cd:c6:e8:41:c7:07:7e:
                    c6:22:d0:67:6d:a7:b9:06:85:29:1d:db:43:92:8c:
                    77:b1:ea:29:52:bd:fc:15:08:d2:79:ea:a7:89:c6:
                    4f:e5:d1:30:37:6f:b2:34:99:ef:96:83:7a:70:86:
                    78:cd:9f:53:33:51:ae:db:90:93:4f:43:be:c0:6a:
                    fa:71:e3:c2:80:49:68:65:37:ac:2f:75:3c:68:67:
                    cf:d9:6c:92:77:ed:54:15:60:af:60:12:29:83:ad:
                    fb:a5:53:86:cd:c3:a2:01:80:4f:90:cf:5c:00:7e:
                    89:cc:ac:f3:cb:3f:4f:6c:14:15:46:66:cb:7f:6a:
                    21:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:62:0E:13:08:85:3C:38:A1:FB:2B:5E:85:F6:A4:12:89:3C:EA:0D
            X509v3 Authority Key Identifier:
                keyid:BF:AD:AE:DC:D5:48:32:0F:C8:F2:C7:98:7C:0E:22:99:DC:BA:3A:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3617770/E57BA9D8DC0311EF9C482C52762E951A/v62u3NVIMg_I8seYfA4imdy6Opw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/v62u3NVIMg_I8seYfA4imdy6Opw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3617770/E57BA9D8DC0311EF9C482C52762E951A/v62u3NVIMg_I8seYfA4imdy6Opw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:86:ea:12:13:0f:f9:f0:6f:53:d9:97:e6:c8:df:6e:24:bd:
         22:75:b4:7e:c4:e1:22:3e:69:65:08:c9:7b:da:c6:c9:82:15:
         61:9f:89:e3:ce:54:b1:9a:30:e2:06:94:58:93:0e:b7:89:5d:
         c4:90:8d:2c:5c:fb:82:06:ce:e6:98:ee:73:97:2a:98:2c:8b:
         08:b1:b4:e1:25:1c:f0:d0:5c:34:bd:1e:be:c5:e3:d4:a6:7e:
         54:b9:ed:9e:d6:c1:80:42:36:06:2c:b2:1c:35:92:4a:23:56:
         4c:af:01:c6:74:bf:a8:ef:12:ff:d1:c1:2b:6d:b9:bf:fb:46:
         ae:7d:6c:5e:83:6b:a5:ef:63:7e:b6:18:e6:46:99:9e:56:7d:
         16:b3:25:87:c7:c3:14:ae:25:d5:8f:ff:42:66:73:f0:c5:21:
         ec:f6:f8:2d:d3:7c:62:cf:ed:6f:85:99:6c:69:76:3d:35:23:
         cb:17:ba:f3:42:9a:38:80:83:2c:32:09:f6:b6:70:be:07:66:
         17:1c:c4:b2:14:b9:31:9e:0e:d5:87:fc:41:aa:a1:78:29:9a:
         ad:55:d7:00:ef:57:e9:68:52:a8:0a:eb:6a:f1:dc:38:03:df:
         84:b0:44:08:75:a3:f1:59:a3:29:56:ee:e0:ec:a5:1b:2a:91:
         8b:2e:75:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 21:38:21 2026 by rpki-client