Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3629B7B/D1FD7020E35511ECB0A0F090F1222468/QfCSTGDWjh-8ANKZ8hiUzkyhtck.mft
File:                     QfCSTGDWjh-8ANKZ8hiUzkyhtck.mft (raw, json)
Hash identifier:          yrYwJyCV9g4GtvT9ZjovANLmCPMIPdW/yw2P0wabGWY=
Subject key identifier:   51:0D:4B:EF:0D:EF:5D:F0:40:66:AC:BF:25:90:FF:56:CB:60:51:E4
Authority key identifier: 41:F0:92:4C:60:D6:8E:1F:BC:00:D2:99:F2:18:94:CE:4C:A1:B5:C9
Certificate issuer:       /CN=F3629B7BAF/serialNumber=41F0924C60D68E1FBC00D299F21894CE4CA1B5C9
Certificate serial:       05F1
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QfCSTGDWjh-8ANKZ8hiUzkyhtck.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3629B7B/D1FD7020E35511ECB0A0F090F1222468/QfCSTGDWjh-8ANKZ8hiUzkyhtck.mft
Manifest number:          05F0
Signing time:             Sun 21 Jun 2026 02:45:46 +0000
Manifest this update:     Sun 21 Jun 2026 02:45:45 +0000
Manifest next update:     Tue 23 Jun 2026 02:45:45 +0000
Files and hashes:         1: QfCSTGDWjh-8ANKZ8hiUzkyhtck.crl (hash: FQ9y0Ode5hGQfSz21pZmMBZPlZIAxsbPNJW2f5xfbyg=)
                          2: 8923FE84E70411ECB97A00C7F1222468.roa (hash: ef6Udp4f7yAWn4yjb6CIRvJunMzfPBNgWsJ+Z6PTHZE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3629B7B/D1FD7020E35511ECB0A0F090F1222468/QfCSTGDWjh-8ANKZ8hiUzkyhtck.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3629B7B/D1FD7020E35511ECB0A0F090F1222468/QfCSTGDWjh-8ANKZ8hiUzkyhtck.mft
                          rsync://rpki.afrinic.net/repository/afrinic/QfCSTGDWjh-8ANKZ8hiUzkyhtck.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Jun 2026 00:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1521 (0x5f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3629B7BAF, serialNumber=41F0924C60D68E1FBC00D299F21894CE4CA1B5C9
        Validity
            Not Before: Jun 21 02:45:45 2026 GMT
            Not After : Jun 23 02:45:45 2026 GMT
        Subject: CN=6a37505a-51c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:55:79:a0:dd:b5:e7:4f:87:08:11:40:ff:88:
                    cc:63:8c:9a:38:3c:52:4f:88:7a:35:66:6c:44:be:
                    15:f5:4a:f7:38:1e:16:50:26:32:c8:99:e3:d9:e0:
                    32:f0:ef:74:4b:82:bf:a0:7b:5e:cc:11:ae:33:4f:
                    49:ee:3c:ac:af:5c:82:7e:98:e2:65:b8:76:30:2e:
                    9f:63:7b:21:d5:1e:42:7d:46:bd:ad:b7:c0:38:38:
                    b8:50:fa:22:81:9f:14:bf:b7:19:41:3e:a3:96:e3:
                    14:cf:89:e4:c0:30:01:9b:2a:7e:63:3f:6c:4e:6f:
                    79:63:49:af:81:4d:6c:d3:46:b1:db:c5:df:8b:24:
                    2f:69:83:49:63:4d:00:59:42:0c:28:b1:62:5b:99:
                    01:c2:50:5c:d3:85:13:84:32:12:da:35:5c:7d:ee:
                    2c:89:6a:86:9e:d8:50:7d:ee:ef:8d:15:4e:fb:ea:
                    8e:e4:ff:43:fd:c3:e1:20:e0:2c:6f:be:1e:99:df:
                    15:2b:c7:d8:9f:3a:05:68:d3:2e:f6:29:aa:af:96:
                    0d:ea:bf:78:80:ed:d5:fb:d7:27:41:82:cb:59:76:
                    56:ab:d9:93:a4:d1:89:62:80:ef:56:1a:b2:5f:43:
                    fc:42:bb:f5:98:f4:fd:f8:0d:a2:22:e1:2b:ce:4d:
                    9a:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:0D:4B:EF:0D:EF:5D:F0:40:66:AC:BF:25:90:FF:56:CB:60:51:E4
            X509v3 Authority Key Identifier:
                keyid:41:F0:92:4C:60:D6:8E:1F:BC:00:D2:99:F2:18:94:CE:4C:A1:B5:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3629B7B/D1FD7020E35511ECB0A0F090F1222468/QfCSTGDWjh-8ANKZ8hiUzkyhtck.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QfCSTGDWjh-8ANKZ8hiUzkyhtck.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3629B7B/D1FD7020E35511ECB0A0F090F1222468/QfCSTGDWjh-8ANKZ8hiUzkyhtck.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:67:81:6d:8b:70:4e:85:ab:45:d9:85:ad:17:1d:9f:59:ca:
         e2:05:7c:49:55:ec:ff:18:c4:c6:22:b4:64:d3:44:55:d3:95:
         00:55:93:88:ed:6f:72:ee:ad:2a:7d:9a:61:6d:5b:99:c6:50:
         4b:9a:c7:8f:bf:d2:1b:ac:5c:87:16:0a:8c:2e:60:ef:ec:e4:
         44:0f:03:10:37:91:73:5c:73:53:93:51:d5:3f:d4:ab:79:10:
         b5:00:6f:27:75:dd:2a:e9:ee:f3:77:b3:74:23:7d:40:09:2b:
         6a:c8:2a:0f:15:11:76:25:a7:59:09:46:b1:b1:ea:8f:25:f0:
         ca:7d:58:ca:c6:a1:50:ee:84:52:f4:a7:37:d8:70:5f:2f:85:
         9d:c1:bf:15:11:77:be:6c:5b:51:13:cf:3c:58:fc:6e:e7:24:
         f6:7a:21:56:74:1d:08:e8:56:7a:ee:ae:05:6c:e6:16:35:80:
         bb:b3:4b:81:d1:ab:18:af:62:73:f3:8f:1f:57:7e:b3:7b:aa:
         22:23:d4:db:09:42:9f:fa:8f:4e:fb:22:1f:ba:5b:ac:92:8d:
         30:75:89:de:4c:77:3a:94:31:49:ff:09:c1:cd:ce:a8:e5:b4:
         7b:4b:a0:01:e4:b4:34:71:fd:d5:b0:70:82:df:ed:4f:b0:94:
         e1:00:d2:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 23:38:27 2026 by rpki-client