Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FA5F/71124C3ED5C511F0944258ACDAE4EC9C/pCKYJAT-Aumg8-y5hTV-RG-IID0.mft
File:                     pCKYJAT-Aumg8-y5hTV-RG-IID0.mft (raw, json)
Hash identifier:          PXtSGlt50g0YG91StUxBYmALDPKgX860dFRAy6fSgU8=
Subject key identifier:   2D:8F:97:5E:D7:2E:D8:85:C3:55:6E:E1:ED:FA:B2:BC:34:8A:76:06
Authority key identifier: A4:22:98:24:04:FE:02:E9:A0:F3:EC:B9:85:35:7E:44:6F:88:20:3D
Certificate issuer:       /CN=F362FA5FAF/serialNumber=A422982404FE02E9A0F3ECB985357E446F88203D
Certificate serial:       CA
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/pCKYJAT-Aumg8-y5hTV-RG-IID0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362FA5F/71124C3ED5C511F0944258ACDAE4EC9C/pCKYJAT-Aumg8-y5hTV-RG-IID0.mft
Manifest number:          C8
Signing time:             Sun 21 Jun 2026 05:19:48 +0000
Manifest this update:     Sun 21 Jun 2026 05:19:47 +0000
Manifest next update:     Tue 23 Jun 2026 05:19:47 +0000
Files and hashes:         1: pCKYJAT-Aumg8-y5hTV-RG-IID0.crl (hash: KMOy88z9s8CjYHYBR+w0oZIlfSJwd7H7zxZL+acKadM=)
                          2: 02DBFF9AD5C911F0BEEFA9C1DAE4EC9C.roa (hash: 6Mw6IJOKCFiOFJKPzw6NDpNLOWvwX8+ywwAHH8ia5xU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362FA5F/71124C3ED5C511F0944258ACDAE4EC9C/pCKYJAT-Aumg8-y5hTV-RG-IID0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362FA5F/71124C3ED5C511F0944258ACDAE4EC9C/pCKYJAT-Aumg8-y5hTV-RG-IID0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/pCKYJAT-Aumg8-y5hTV-RG-IID0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Jun 2026 00:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 202 (0xca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362FA5FAF, serialNumber=A422982404FE02E9A0F3ECB985357E446F88203D
        Validity
            Not Before: Jun 21 05:19:47 2026 GMT
            Not After : Jun 23 05:19:47 2026 GMT
        Subject: CN=6a377474-09f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:70:cf:78:fc:ae:f4:bb:41:db:d5:a4:b5:0c:
                    d8:fc:df:2c:8b:d3:45:fd:49:65:79:df:31:77:7d:
                    25:5f:e2:97:23:a5:07:9c:71:b0:51:a9:72:85:f9:
                    23:e9:21:65:9e:b6:0f:08:ff:1f:86:f8:54:d0:dc:
                    4a:e0:e2:a4:c1:9f:a7:e2:95:ac:21:8e:1c:c5:d9:
                    d3:0d:13:3c:c7:85:e7:d3:59:d4:32:49:6f:2f:6e:
                    c6:1f:24:75:cc:f4:8f:68:d0:16:01:32:31:af:36:
                    d5:4b:56:c2:00:5e:36:28:b4:92:b8:b2:b8:2a:5a:
                    62:ef:1c:89:cd:35:46:8e:ec:47:29:55:e4:08:80:
                    0d:f1:78:c6:25:39:a5:41:dc:fd:4f:b1:c1:33:80:
                    d7:70:40:79:a1:f3:11:fb:37:76:60:e5:17:ff:b8:
                    50:cc:47:a3:f0:83:cb:f8:a6:96:5c:c5:be:23:0c:
                    fb:a8:79:e6:43:0f:67:21:a7:0e:dd:e8:7b:ac:16:
                    3a:39:3a:b6:1d:28:34:e7:d6:e7:81:23:c5:db:94:
                    d6:49:53:11:0a:4a:a5:67:3d:a9:3a:7a:b1:f8:46:
                    40:a6:53:29:20:2c:6d:e5:b4:95:86:14:03:69:b2:
                    70:30:6f:78:b5:41:2a:56:7b:54:10:af:2f:32:cd:
                    49:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:8F:97:5E:D7:2E:D8:85:C3:55:6E:E1:ED:FA:B2:BC:34:8A:76:06
            X509v3 Authority Key Identifier:
                keyid:A4:22:98:24:04:FE:02:E9:A0:F3:EC:B9:85:35:7E:44:6F:88:20:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362FA5F/71124C3ED5C511F0944258ACDAE4EC9C/pCKYJAT-Aumg8-y5hTV-RG-IID0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/pCKYJAT-Aumg8-y5hTV-RG-IID0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FA5F/71124C3ED5C511F0944258ACDAE4EC9C/pCKYJAT-Aumg8-y5hTV-RG-IID0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:83:2f:fd:22:1a:a6:50:fa:fd:d9:f5:a8:64:de:d7:1e:56:
         09:e0:74:0e:a1:56:57:5f:02:fa:e3:a6:e5:1e:33:73:a0:ad:
         e7:9f:5f:96:6f:3c:08:a0:a0:83:fe:20:83:e4:29:d8:80:a4:
         a4:54:63:57:a5:1b:be:ee:f7:0d:87:66:42:97:13:0a:fb:4c:
         a2:bd:14:09:0a:9b:7d:e0:65:ef:c7:07:e6:dc:b6:fa:ed:fb:
         48:73:3e:2d:cc:b6:ad:54:27:02:4b:fc:ee:d1:7d:92:4f:75:
         9c:8a:c3:58:8a:52:d6:d1:21:b1:79:67:0f:d4:05:88:00:4c:
         1c:85:4d:45:ac:4c:eb:e9:e1:db:70:8c:35:18:62:8f:9a:ee:
         e9:66:96:b8:40:02:f8:2f:d4:e2:c8:f0:1a:d3:35:22:44:4f:
         26:a2:2b:32:4d:99:9b:0f:76:98:e3:dc:81:42:b2:62:45:8f:
         97:b4:52:38:52:ca:7f:33:f6:39:10:1c:31:8b:2f:eb:eb:8e:
         c8:47:14:54:38:26:f8:20:5d:b5:d6:82:35:07:d6:9c:84:6f:
         09:2b:27:55:ee:85:de:57:58:34:5d:9d:cd:a1:37:a7:92:1d:
         fe:40:3f:b6:28:a6:f0:40:06:7e:36:54:d1:2b:5b:f5:74:dd:
         75:af:57:60
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAMowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MkZBNUZBRjExMC8GA1UEBRMoQTQyMjk4MjQwNEZFMDJFOUEwRjNFQ0I5ODUzNTdF
NDQ2Rjg4MjAzRDAeFw0yNjA2MjEwNTE5NDdaFw0yNjA2MjMwNTE5NDdaMBgxFjAU
BgNVBAMTDTZhMzc3NDc0LTA5ZjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCucM94/K70u0Hb1aS1DNj83yyL00X9SWV53zF3fSVf4pcjpQeccbBRqXKF
+SPpIWWetg8I/x+G+FTQ3Erg4qTBn6filawhjhzF2dMNEzzHhefTWdQySW8vbsYf
JHXM9I9o0BYBMjGvNtVLVsIAXjYotJK4srgqWmLvHInNNUaO7EcpVeQIgA3xeMYl
OaVB3P1PscEzgNdwQHmh8xH7N3Zg5Rf/uFDMR6Pwg8v4ppZcxb4jDPuoeeZDD2ch
pw7d6HusFjo5OrYdKDTn1ueBI8XblNZJUxEKSqVnPak6erH4RkCmUykgLG3ltJWG
FANpsnAwb3i1QSpWe1QQry8yzUkhAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQULY+X
Xtcu2IXDVW7h7fqyvDSKdgYwHwYDVR0jBBgwFoAUpCKYJAT+Aumg8+y5hTV+RG+I
ID0wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjJGQTVGLzcxMTI0QzNFRDVDNTExRjA5NDQyNThBQ0RBRTRFQzlDL3BDS1lK
QVQtQXVtZzgteTVoVFYtUkctSUlEMC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3BDS1lKQVQtQXVtZzgteTVoVFYtUkctSUlEMC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MkZBNUYvNzExMjRDM0VENUM1MTFGMDk0NDI1OEFDREFF
NEVDOUMvcENLWUpBVC1BdW1nOC15NWhUVi1SRy1JSUQwLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA2gy/9IhqmUPr92fWoZN7XHlYJ4HQO
oVZXXwL646blHjNzoK3nn1+WbzwIoKCD/iCD5CnYgKSkVGNXpRu+7vcNh2ZClxMK
+0yivRQJCpt94GXvxwfm3Lb67ftIcz4tzLatVCcCS/zu0X2ST3WcisNYilLW0SGx
eWcP1AWIAEwchU1FrEzr6eHbcIw1GGKPmu7pZpa4QAL4L9TiyPAa0zUiRE8moisy
TZmbD3aY49yBQrJiRY+XtFI4Usp/M/Y5EBwxiy/r647IRxRUOCb4IF211oI1B9ac
hG8JKydV7oXeV1g0XZ3NoTenkh3+QD+2KKbwQAZ+NlTRK1v1dN11r1dg
-----END CERTIFICATE-----
Generated at Sun Jun 21 23:38:46 2026 by rpki-client