Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3627134/10B356BC1CAB11F183CFB2E3DAE4EC9C/Y6BGXhqxi6oV3gf2J9n4XMIMlC4.mft
File:                     Y6BGXhqxi6oV3gf2J9n4XMIMlC4.mft (raw, json)
Hash identifier:          AT+HVOHh27kX9ierzPZ3glmtVSIWfWTHIHXsgs3zNhE=
Subject key identifier:   8E:DD:9E:C1:BE:3F:81:41:FD:56:A8:E7:18:BF:84:4C:29:59:72:0A
Authority key identifier: 63:A0:46:5E:1A:B1:8B:AA:15:DE:07:F6:27:D9:F8:5C:C2:0C:94:2E
Certificate issuer:       /CN=F3627134AF/serialNumber=63A0465E1AB18BAA15DE07F627D9F85CC20C942E
Certificate serial:       18
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Y6BGXhqxi6oV3gf2J9n4XMIMlC4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3627134/10B356BC1CAB11F183CFB2E3DAE4EC9C/Y6BGXhqxi6oV3gf2J9n4XMIMlC4.mft
Manifest number:          15
Signing time:             Mon 23 Mar 2026 06:37:25 +0000
Manifest this update:     Mon 23 Mar 2026 06:37:24 +0000
Manifest next update:     Wed 25 Mar 2026 06:37:24 +0000
Files and hashes:         1: Y6BGXhqxi6oV3gf2J9n4XMIMlC4.crl (hash: DXo4mQzwX/dVl4I22nHFYEszHfKXFU70/7iRkYsa2XA=)
                          2: 983C4B5A1FB411F1812591A5DAE4EC9C.roa (hash: KTS5NXcJqrcHx2Os0cQ+8xYZ5R43eh886qLWcXd28MU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3627134/10B356BC1CAB11F183CFB2E3DAE4EC9C/Y6BGXhqxi6oV3gf2J9n4XMIMlC4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3627134/10B356BC1CAB11F183CFB2E3DAE4EC9C/Y6BGXhqxi6oV3gf2J9n4XMIMlC4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Y6BGXhqxi6oV3gf2J9n4XMIMlC4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 25 Mar 2026 00:06:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24 (0x18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3627134AF, serialNumber=63A0465E1AB18BAA15DE07F627D9F85CC20C942E
        Validity
            Not Before: Mar 23 06:37:24 2026 GMT
            Not After : Mar 25 06:37:24 2026 GMT
        Subject: CN=69c0dfa5-3b8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:0f:8b:6f:c7:cc:44:00:3f:ec:65:9a:d8:a6:
                    cc:84:ee:52:a5:fd:94:0d:4e:51:e8:12:55:2f:b8:
                    98:ac:fe:79:f0:3a:68:e8:61:5b:e5:4c:13:49:d3:
                    40:f6:cb:8f:a2:a4:69:70:28:ce:44:c4:06:e0:3d:
                    d4:c2:aa:ba:b5:23:18:fe:30:ae:d5:a6:fb:85:58:
                    a2:6e:d9:b4:d2:19:d8:95:a9:4a:75:03:40:f6:66:
                    f5:29:80:cc:fb:b8:11:86:d5:82:3a:2f:39:3c:78:
                    f6:1c:80:03:2d:80:55:71:b2:49:03:75:88:02:c0:
                    03:31:7f:e9:b2:f1:13:ea:b0:d1:3d:89:17:2b:18:
                    17:a5:bc:b9:e0:ba:18:4c:3d:9c:27:1c:71:00:db:
                    1e:9d:78:ea:ee:83:0d:c4:c4:e3:5d:77:8c:cb:9b:
                    83:6e:8d:f4:ff:4e:bc:48:1e:20:1d:83:30:ea:6b:
                    9c:c9:1e:da:cf:27:44:c2:1c:9c:a2:db:6b:d5:1f:
                    47:5a:2b:d3:21:36:97:a2:e5:f7:eb:72:e9:28:2d:
                    e0:c1:9b:09:c7:1e:4d:e0:14:f0:f7:fb:da:f4:c4:
                    f7:12:83:fa:03:30:c6:67:d2:61:4a:16:27:70:df:
                    7c:a1:ac:13:88:fb:25:86:20:00:38:e7:a0:c8:c4:
                    66:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:DD:9E:C1:BE:3F:81:41:FD:56:A8:E7:18:BF:84:4C:29:59:72:0A
            X509v3 Authority Key Identifier:
                keyid:63:A0:46:5E:1A:B1:8B:AA:15:DE:07:F6:27:D9:F8:5C:C2:0C:94:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3627134/10B356BC1CAB11F183CFB2E3DAE4EC9C/Y6BGXhqxi6oV3gf2J9n4XMIMlC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Y6BGXhqxi6oV3gf2J9n4XMIMlC4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3627134/10B356BC1CAB11F183CFB2E3DAE4EC9C/Y6BGXhqxi6oV3gf2J9n4XMIMlC4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:3b:28:51:84:29:a2:90:45:6d:61:fe:12:3c:a7:52:87:89:
         4b:31:b5:da:04:67:3d:a8:7d:59:17:cf:ba:2b:20:14:bc:e7:
         d2:0f:34:0c:ad:6c:c8:f4:30:4e:4f:f9:f4:55:29:3c:64:5c:
         ab:5a:b4:1f:34:9e:65:42:36:d4:51:7f:77:08:7d:7e:8b:56:
         d9:75:37:0a:12:c6:11:ae:1a:a3:1b:3b:18:7f:a4:64:2c:c8:
         73:32:89:c4:53:03:63:e2:06:90:23:84:7f:5e:bf:17:2e:d5:
         02:72:62:66:a2:3c:31:75:57:bf:18:68:a9:f9:27:73:9d:56:
         6c:f8:e9:db:cb:7b:4e:53:ec:4f:f7:95:db:e8:0f:10:7b:a7:
         ea:c7:31:88:ad:dc:2b:e3:9f:43:cf:0d:59:ac:e5:f7:1a:e5:
         58:77:53:31:45:fd:bc:8e:9b:f5:1d:42:df:03:e5:49:67:36:
         25:eb:43:2c:b2:0f:89:28:a0:e1:3e:27:4d:3a:57:f5:19:9a:
         d9:58:cb:db:43:01:47:a6:4a:aa:c1:c0:84:c5:be:5a:65:29:
         0e:d5:d8:f0:fd:dc:68:b5:ec:07:00:5e:a5:12:50:83:1b:1c:
         86:23:fc:a5:cb:98:4e:23:c8:03:d8:0d:f6:af:a6:5f:89:23:
         0c:76:fe:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 23 10:30:45 2026 by rpki-client