Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36252A7/89497A60E38311E99E55F585F8AEA228/An4aRGPGhfvWOGP507I7rC2TsWg.mft
File:                     An4aRGPGhfvWOGP507I7rC2TsWg.mft (raw, json)
Hash identifier:          xGfuFxHoIZ9gEe+bFfivYSibGijplo7ZMjDUv/KFFWc=
Subject key identifier:   82:5D:7A:9E:AA:6F:9C:89:82:EA:BD:3A:F9:08:20:0C:15:C2:4C:9B
Authority key identifier: 02:7E:1A:44:63:C6:85:FB:D6:38:63:F9:D3:B2:3B:AC:2D:93:B1:68
Certificate issuer:       /CN=F36252A7AF/serialNumber=027E1A4463C685FBD63863F9D3B23BAC2D93B168
Certificate serial:       09DA
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/An4aRGPGhfvWOGP507I7rC2TsWg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36252A7/89497A60E38311E99E55F585F8AEA228/An4aRGPGhfvWOGP507I7rC2TsWg.mft
Manifest number:          09D6
Signing time:             Sun 21 Jun 2026 01:36:42 +0000
Manifest this update:     Sun 21 Jun 2026 01:36:41 +0000
Manifest next update:     Tue 23 Jun 2026 01:36:41 +0000
Files and hashes:         1: An4aRGPGhfvWOGP507I7rC2TsWg.crl (hash: ymslIi+TcKl6fsBVzwOqr8XSyJH/jtyyC3zlLe91IGQ=)
                          2: B2E0450EE3A911E99D048322F8AEA228.roa (hash: 9hAcLh1dvKVs2136J7HCIPg/BmbZ3SUhxACWArab3Io=)
                          3: E9F7B7D4E3A911E9BF86B122F8AEA228.roa (hash: 9COidhiFaVCAPV0UHswnXt+QzIn+TW+J/QQrjMlznyw=)
                          4: 34BC8634C70711ED87A7AD9EF1222468.roa (hash: jLffPLsCVmDn3eu+ZH7RN7a2yuNgI7fFi99PH05ncKE=)
                          5: CE979090E3A911E982D79922F8AEA228.roa (hash: ZUuGDNl5OtIqVt3JPAYRM2b5xFa0dAXmMX0QV9sXPf0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36252A7/89497A60E38311E99E55F585F8AEA228/An4aRGPGhfvWOGP507I7rC2TsWg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36252A7/89497A60E38311E99E55F585F8AEA228/An4aRGPGhfvWOGP507I7rC2TsWg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/An4aRGPGhfvWOGP507I7rC2TsWg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Jun 2026 00:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2522 (0x9da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36252A7AF, serialNumber=027E1A4463C685FBD63863F9D3B23BAC2D93B168
        Validity
            Not Before: Jun 21 01:36:41 2026 GMT
            Not After : Jun 23 01:36:41 2026 GMT
        Subject: CN=6a37402a-bb7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0d:05:1a:5d:e6:f1:c6:35:c9:02:7e:fa:ab:
                    98:b0:f0:d3:c8:7f:c7:49:a4:3b:a7:11:2e:e7:2b:
                    ff:09:cf:83:3a:fa:41:a8:66:0b:25:8a:0f:be:cd:
                    fa:19:97:ad:d8:23:a4:09:68:fd:c2:5d:ee:bf:91:
                    6a:d7:bb:41:19:e2:1a:8a:0b:78:fd:6d:5b:48:1d:
                    8a:04:59:85:6b:d2:6c:5a:31:30:c7:93:90:b9:ac:
                    58:f2:f2:ed:b7:39:60:be:75:54:d7:26:7d:5b:c7:
                    6f:86:9b:2f:9c:4d:87:5e:e6:90:cb:fe:9e:2f:82:
                    4d:a8:3b:b4:3b:ef:71:70:2f:b1:50:ba:a6:cf:82:
                    7f:d1:35:87:64:4c:bb:be:69:c4:6c:38:df:cc:c3:
                    bf:4e:ec:1f:ef:e6:a5:28:ac:69:3f:94:4b:b9:d3:
                    c6:48:6a:e4:0a:22:83:7a:31:b5:cd:c7:f9:46:ba:
                    bb:62:99:13:1e:a7:e7:10:7b:8a:d7:36:61:2d:5a:
                    fb:67:87:5b:ed:40:38:a7:af:93:da:f6:1f:40:cb:
                    64:fd:cd:85:48:9b:4a:46:15:fc:45:aa:f3:aa:de:
                    40:92:a0:a3:bd:47:c5:cf:b9:1b:61:1b:44:2d:a9:
                    42:e1:44:15:e9:3d:20:da:53:cc:46:32:0f:33:a3:
                    3c:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:5D:7A:9E:AA:6F:9C:89:82:EA:BD:3A:F9:08:20:0C:15:C2:4C:9B
            X509v3 Authority Key Identifier:
                keyid:02:7E:1A:44:63:C6:85:FB:D6:38:63:F9:D3:B2:3B:AC:2D:93:B1:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36252A7/89497A60E38311E99E55F585F8AEA228/An4aRGPGhfvWOGP507I7rC2TsWg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/An4aRGPGhfvWOGP507I7rC2TsWg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36252A7/89497A60E38311E99E55F585F8AEA228/An4aRGPGhfvWOGP507I7rC2TsWg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:33:ac:62:4f:5e:40:4c:e3:a5:ba:03:e9:24:40:0e:7c:34:
         10:07:d4:42:6c:26:07:98:2c:b0:a0:7b:d3:ba:68:47:07:9e:
         33:c8:31:99:fc:fa:4c:2a:2e:46:93:38:08:5c:69:d5:13:a4:
         bc:11:fe:9e:79:95:64:05:de:2f:96:4b:9c:a9:4a:0a:7f:6d:
         f4:b2:78:c3:ef:b6:ad:96:43:0f:12:84:f0:75:3f:07:42:64:
         ea:5b:48:7b:54:8f:ea:5c:31:71:91:aa:52:ee:8b:e4:ab:2d:
         de:bb:a5:71:8d:6c:e6:04:e7:a6:10:e1:2e:28:01:d3:15:27:
         c6:e2:5f:69:fe:15:e3:47:c2:0a:ef:af:e4:ac:38:d1:32:1b:
         3f:48:c2:df:92:26:b0:88:ba:74:2c:b1:5c:40:8a:bd:7e:28:
         0a:61:14:90:f2:ee:36:7d:8a:48:56:db:bf:5c:95:00:2a:c3:
         9e:e5:33:bd:c1:e9:ac:ff:62:5e:de:7e:3e:f8:8e:ac:45:35:
         d5:33:9e:85:1c:b7:cd:27:79:7e:2e:99:5c:97:0b:0e:51:bc:
         60:af:31:10:c9:aa:ea:63:2b:d6:9e:b2:16:b1:90:90:33:75:
         e2:f3:74:69:ff:cc:04:80:78:af:69:6e:d0:05:c3:0f:42:a9:
         d6:de:97:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 23:38:27 2026 by rpki-client