Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3627065/65AD365853D311EF9BB76F6F762E951A/XA6PHouQ_dKUtU1XMJAT_FoGo1s.mft
File:                     XA6PHouQ_dKUtU1XMJAT_FoGo1s.mft (raw, json)
Hash identifier:          fgJ2Lz+SARby1EZ9jvVK4oz5yKmlWMSdvcTvXM3Dk4A=
Subject key identifier:   BD:56:AF:82:BA:03:E9:B7:F7:4D:B1:D8:E1:82:37:A4:0C:14:80:CC
Authority key identifier: 5C:0E:8F:1E:8B:90:FD:D2:94:B5:4D:57:30:90:13:FC:5A:06:A3:5B
Certificate issuer:       /CN=F3627065AF/serialNumber=5C0E8F1E8B90FDD294B54D57309013FC5A06A35B
Certificate serial:       0290
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/XA6PHouQ_dKUtU1XMJAT_FoGo1s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3627065/65AD365853D311EF9BB76F6F762E951A/XA6PHouQ_dKUtU1XMJAT_FoGo1s.mft
Manifest number:          028F
Signing time:             Thu 07 May 2026 04:22:48 +0000
Manifest this update:     Thu 07 May 2026 04:22:47 +0000
Manifest next update:     Sat 09 May 2026 04:22:47 +0000
Files and hashes:         1: XA6PHouQ_dKUtU1XMJAT_FoGo1s.crl (hash: tvh85hSDXg1YRzxeC3rC5H9Hl3+4Z5WWHccT0V2/1nw=)
                          2: 47D8021A53D411EFA7C83C74762E951A.roa (hash: QwK+XpG/BTzSdMaFzgcL2FXrrpo9GOI3wltkdoXtHnY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3627065/65AD365853D311EF9BB76F6F762E951A/XA6PHouQ_dKUtU1XMJAT_FoGo1s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3627065/65AD365853D311EF9BB76F6F762E951A/XA6PHouQ_dKUtU1XMJAT_FoGo1s.mft
                          rsync://rpki.afrinic.net/repository/afrinic/XA6PHouQ_dKUtU1XMJAT_FoGo1s.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 09 May 2026 00:07:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 656 (0x290)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3627065AF, serialNumber=5C0E8F1E8B90FDD294B54D57309013FC5A06A35B
        Validity
            Not Before: May  7 04:22:47 2026 GMT
            Not After : May  9 04:22:47 2026 GMT
        Subject: CN=69fc1398-f4b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c2:97:24:4b:51:2f:34:51:2e:cc:66:5f:25:
                    e2:48:ce:3c:f3:d5:bd:0d:55:db:f5:f0:bd:ff:06:
                    0c:20:3b:d5:7f:55:92:26:03:2f:91:2b:d0:8e:1d:
                    da:a8:37:f1:a5:33:c3:a1:a2:40:2e:2a:6d:ea:fd:
                    82:ea:e1:5f:7f:e5:c7:a6:b9:da:be:13:37:d0:86:
                    28:cb:a4:d8:b3:15:4b:30:9f:9a:8e:ac:4f:70:e0:
                    76:ca:e1:4c:f8:08:ae:cd:da:4f:71:41:d7:12:68:
                    8f:08:66:4b:f8:94:70:df:44:6d:55:30:0f:18:51:
                    6c:96:c9:af:67:4a:46:44:ee:ab:50:d9:ed:0b:12:
                    7d:df:a2:bf:48:3d:c2:71:ac:c2:23:16:7b:e7:68:
                    be:dd:23:64:ab:e4:d2:1b:64:43:4b:c1:55:e8:ad:
                    0d:43:c2:d3:83:25:41:4c:ef:9a:a9:d1:d4:d2:f3:
                    7f:9c:6d:fa:46:46:eb:a8:aa:92:c3:c0:dc:4b:d4:
                    3e:d5:10:75:39:cf:3f:88:6f:67:20:25:da:d8:e9:
                    c1:9a:40:7a:12:18:9b:f8:13:47:cf:77:fd:ce:e6:
                    c1:3d:f4:73:a7:19:de:f4:89:93:c6:d3:71:6e:6c:
                    b3:51:3b:63:0a:d0:ff:fd:c5:53:36:61:df:0f:00:
                    c2:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:56:AF:82:BA:03:E9:B7:F7:4D:B1:D8:E1:82:37:A4:0C:14:80:CC
            X509v3 Authority Key Identifier:
                keyid:5C:0E:8F:1E:8B:90:FD:D2:94:B5:4D:57:30:90:13:FC:5A:06:A3:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3627065/65AD365853D311EF9BB76F6F762E951A/XA6PHouQ_dKUtU1XMJAT_FoGo1s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XA6PHouQ_dKUtU1XMJAT_FoGo1s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3627065/65AD365853D311EF9BB76F6F762E951A/XA6PHouQ_dKUtU1XMJAT_FoGo1s.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:c8:f7:34:ee:a4:d7:d0:df:87:75:1e:a2:64:36:a0:91:ca:
         c0:b1:66:9b:fe:95:1d:7c:d2:c5:d0:2e:2e:0a:2d:43:be:b2:
         28:1d:44:2c:91:34:da:fb:42:66:96:a8:e8:31:1c:3a:b1:fd:
         01:17:b0:91:2e:88:e0:e6:1c:f7:e3:73:fe:4d:4b:58:74:8c:
         79:41:05:8a:10:32:97:c5:01:bf:c2:9b:97:b0:92:82:88:37:
         db:4d:99:58:44:cd:61:90:e8:00:c3:6c:ff:8b:b8:1e:3b:cc:
         60:1d:21:1e:3c:be:23:e5:23:5a:20:ba:89:37:6b:fd:3e:b9:
         aa:1f:d5:1f:ed:d5:56:71:44:72:33:ef:d1:fc:b0:8a:b2:32:
         d0:db:c1:6a:3f:74:eb:07:28:df:b7:97:c9:f4:d4:e0:96:9f:
         54:7a:7c:03:ce:42:35:58:cf:87:bf:e9:17:cd:ad:c3:25:86:
         8a:d8:f9:7f:3b:a9:8b:bb:42:76:48:02:c8:cd:04:9c:cc:25:
         2c:a9:86:bb:80:41:a6:53:bb:b4:2b:08:b7:cd:84:58:ce:c9:
         00:89:28:0c:b2:1a:b2:ab:e9:83:08:83:49:c4:ac:64:dc:ac:
         ca:0a:a0:7e:5c:6b:75:eb:d7:f1:71:26:c8:45:d4:39:9f:a3:
         9c:ba:80:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 21:34:33 2026 by rpki-client