Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3630D7E/E06DA510797311EA82E97681F8AEA228/bssXAorVt9tcd32x3OCXh-SVstE.mft
File:                     bssXAorVt9tcd32x3OCXh-SVstE.mft (raw, json)
Hash identifier:          yKoNYicBWv+Kipd712gtiaLUp8jm1GZHMxJbwaPiL48=
Subject key identifier:   9F:4D:9A:A1:9E:11:EF:B8:E0:7C:8E:5C:09:F7:8E:7D:6B:35:A0:E9
Authority key identifier: 6E:CB:17:02:8A:D5:B7:DB:5C:77:7D:B1:DC:E0:97:87:E4:95:B2:D1
Certificate issuer:       /CN=F3630D7EAF/serialNumber=6ECB17028AD5B7DB5C777DB1DCE09787E495B2D1
Certificate serial:       091F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/bssXAorVt9tcd32x3OCXh-SVstE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3630D7E/E06DA510797311EA82E97681F8AEA228/bssXAorVt9tcd32x3OCXh-SVstE.mft
Manifest number:          091A
Signing time:             Sun 21 Jun 2026 01:45:10 +0000
Manifest this update:     Sun 21 Jun 2026 01:45:10 +0000
Manifest next update:     Tue 23 Jun 2026 01:45:10 +0000
Files and hashes:         1: bssXAorVt9tcd32x3OCXh-SVstE.crl (hash: 6Bqa1GiVWsqgvJ+QsERbzd1er18q0/mi/eWSqjLkJ5w=)
                          2: 4C93AD482A7111F1BFB9EECADAE4EC9C.roa (hash: 1Oc7qz+Lk94BWa35i9DuQ6Lqo6kBFCtOUZX3ruT365o=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3630D7E/E06DA510797311EA82E97681F8AEA228/bssXAorVt9tcd32x3OCXh-SVstE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3630D7E/E06DA510797311EA82E97681F8AEA228/bssXAorVt9tcd32x3OCXh-SVstE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/bssXAorVt9tcd32x3OCXh-SVstE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Jun 2026 00:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2335 (0x91f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3630D7EAF, serialNumber=6ECB17028AD5B7DB5C777DB1DCE09787E495B2D1
        Validity
            Not Before: Jun 21 01:45:10 2026 GMT
            Not After : Jun 23 01:45:10 2026 GMT
        Subject: CN=6a374226-61ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:19:f5:12:a9:da:57:ec:2f:16:09:01:52:a4:
                    a0:96:95:9d:a8:4b:7e:4c:db:6e:98:77:17:57:43:
                    5e:8c:f8:6e:fe:b1:ea:45:ad:2f:fc:34:41:b0:6b:
                    77:13:90:0b:ca:58:8c:4d:ca:73:68:0c:3c:94:30:
                    2c:32:34:4b:9a:45:6f:3e:3d:14:c3:73:f1:a0:f1:
                    83:a9:e1:8e:7e:d7:70:c6:51:2a:19:24:22:de:dc:
                    3b:14:a3:f7:31:35:13:21:11:22:4d:c3:5e:48:5f:
                    4f:76:4e:d8:e2:ed:37:1d:83:0d:fe:b7:37:b5:37:
                    28:67:72:03:10:a4:1d:c8:8a:e8:c3:c2:4f:ee:7c:
                    6e:40:fa:bb:f8:e2:9b:ee:24:92:1a:1d:2c:53:1b:
                    f8:e7:c5:03:63:20:10:54:20:ae:56:8a:44:64:8e:
                    a3:ac:a2:8d:59:8c:f1:b9:27:91:02:0b:c8:71:8b:
                    ce:f9:3f:77:fb:5f:7b:34:bd:46:7c:c5:8f:e2:a1:
                    d0:3f:ed:70:dd:ca:bb:b3:b5:d0:83:4e:ce:81:c1:
                    99:48:fa:3c:49:e7:a5:bc:a1:8f:52:f5:e9:65:40:
                    64:95:63:5d:ce:6d:b5:d0:4d:9d:29:d1:97:65:3a:
                    bd:7a:c6:52:1f:cd:68:b1:56:27:76:36:b5:00:9f:
                    87:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:4D:9A:A1:9E:11:EF:B8:E0:7C:8E:5C:09:F7:8E:7D:6B:35:A0:E9
            X509v3 Authority Key Identifier:
                keyid:6E:CB:17:02:8A:D5:B7:DB:5C:77:7D:B1:DC:E0:97:87:E4:95:B2:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3630D7E/E06DA510797311EA82E97681F8AEA228/bssXAorVt9tcd32x3OCXh-SVstE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/bssXAorVt9tcd32x3OCXh-SVstE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3630D7E/E06DA510797311EA82E97681F8AEA228/bssXAorVt9tcd32x3OCXh-SVstE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:15:3d:da:18:29:a8:7f:43:b1:c2:21:28:0d:12:bb:bf:bb:
         c8:53:0d:bb:49:7d:09:02:f1:5e:32:b0:a9:dc:5a:6c:e3:5a:
         e5:36:c0:4b:d8:7a:53:37:1f:2a:0a:35:e4:c7:60:77:38:7b:
         d5:db:7f:95:3b:ed:b0:8f:0b:89:5d:11:3c:8e:b1:d1:16:aa:
         af:6a:08:5c:aa:ec:11:1a:44:49:d1:f6:e1:1c:9d:a9:7b:9b:
         2e:c2:02:a8:2c:c6:d8:d6:d8:ba:f7:b2:95:58:c5:cf:ac:17:
         5d:3d:4c:d4:a5:ce:0c:21:3c:f0:e2:ae:90:76:96:c9:f9:16:
         11:71:19:03:f0:2a:ab:3e:7d:d3:e2:06:2d:a6:70:de:87:d3:
         cc:fc:df:29:c5:47:4c:72:2b:d6:2d:9e:cc:f2:f5:96:ae:32:
         78:9b:3e:e9:46:35:b3:43:ad:68:6a:c8:35:8f:3c:2e:7b:e9:
         f0:b1:f6:e3:d2:96:c0:5c:9a:af:02:98:3a:53:23:84:71:21:
         8e:81:13:c2:06:44:ba:33:de:1d:ab:38:51:b5:3d:86:39:d8:
         20:b9:3a:eb:6d:36:73:65:28:8c:93:2f:68:f7:5c:74:c9:7e:
         bd:97:36:01:3a:57:73:13:30:28:d6:fb:6c:14:d4:eb:45:79:
         07:2b:eb:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 23:42:06 2026 by rpki-client