Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363FCC8/C2E12A8ACCF211EA8B7C4133F8AEA228/zES432VSaGhWOxfptlH5NdVgDNA.mft
File:                     zES432VSaGhWOxfptlH5NdVgDNA.mft (raw, json)
Hash identifier:          74BlpFRzn4sh/1L7ztOyK29UW0sZs10+Fhd1EI1lYUA=
Subject key identifier:   EA:F1:0B:5B:46:4B:70:AA:7C:05:E5:09:85:41:11:87:4E:CD:5B:DA
Authority key identifier: CC:44:B8:DF:65:52:68:68:56:3B:17:E9:B6:51:F9:35:D5:60:0C:D0
Certificate issuer:       /CN=F363FCC8AF/serialNumber=CC44B8DF65526868563B17E9B651F935D5600CD0
Certificate serial:       08AA
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/zES432VSaGhWOxfptlH5NdVgDNA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363FCC8/C2E12A8ACCF211EA8B7C4133F8AEA228/zES432VSaGhWOxfptlH5NdVgDNA.mft
Manifest number:          08A7
Signing time:             Sun 21 Jun 2026 01:53:03 +0000
Manifest this update:     Sun 21 Jun 2026 01:53:02 +0000
Manifest next update:     Tue 23 Jun 2026 01:53:02 +0000
Files and hashes:         1: zES432VSaGhWOxfptlH5NdVgDNA.crl (hash: UrFj22XyJ6koUhCFeximjk1WpHzzHW6kXpAZsy2ivAY=)
                          2: E27073C0F1C111EB9AE36071D8A014CE.roa (hash: y0Q3Frj55z+tecyGPqJPk0LP5+vSEULCrL6Cm5KqQeE=)
                          3: 6CB087F0CD7E11EA9E3A5845F8AEA228.roa (hash: rBsld+QOBW/CrzRT0eM+UJTuXYzPefxB5jKhtvGTg/I=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363FCC8/C2E12A8ACCF211EA8B7C4133F8AEA228/zES432VSaGhWOxfptlH5NdVgDNA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363FCC8/C2E12A8ACCF211EA8B7C4133F8AEA228/zES432VSaGhWOxfptlH5NdVgDNA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/zES432VSaGhWOxfptlH5NdVgDNA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Jun 2026 00:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2218 (0x8aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363FCC8AF, serialNumber=CC44B8DF65526868563B17E9B651F935D5600CD0
        Validity
            Not Before: Jun 21 01:53:02 2026 GMT
            Not After : Jun 23 01:53:02 2026 GMT
        Subject: CN=6a3743ff-0585
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:40:bd:8f:ea:90:47:00:d9:c0:49:6d:f4:a4:
                    76:7f:23:4e:0d:75:aa:34:4b:6c:0a:cb:c8:f0:3d:
                    89:da:08:77:76:7e:bb:cf:a2:c5:bc:da:9a:bd:83:
                    18:9a:2e:96:a0:bf:f9:45:77:a3:9e:d7:ec:97:d8:
                    69:31:3e:6c:fa:74:34:14:58:20:00:00:31:96:b8:
                    de:8b:a8:7d:ca:75:27:e7:35:23:ce:92:0e:96:86:
                    92:63:93:db:dd:eb:57:02:10:ae:3e:fd:94:89:75:
                    fc:ed:c6:95:d0:bb:12:30:05:d1:cf:ce:49:8e:e7:
                    07:5e:9b:de:0e:0e:76:be:4f:03:d6:71:98:e2:d9:
                    08:00:dd:31:f1:14:f7:11:98:e7:53:de:fe:42:04:
                    3f:60:4c:31:0d:28:ec:7b:14:da:47:b8:4b:e5:17:
                    36:07:0c:31:8c:06:86:b4:f8:97:eb:91:61:c6:6e:
                    bc:b8:67:b5:fa:32:0c:ba:1f:da:26:72:8f:a9:b8:
                    4d:9d:d0:a8:bc:76:f4:73:25:a6:70:01:ff:5e:9c:
                    e4:19:fc:5f:8e:d2:d4:4a:d5:0a:29:40:32:9f:e9:
                    4f:7f:10:55:c5:99:43:71:8f:07:d9:b5:00:87:a4:
                    0b:8d:5d:5c:0d:71:c4:29:ed:40:a3:df:5b:4d:c8:
                    01:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:F1:0B:5B:46:4B:70:AA:7C:05:E5:09:85:41:11:87:4E:CD:5B:DA
            X509v3 Authority Key Identifier:
                keyid:CC:44:B8:DF:65:52:68:68:56:3B:17:E9:B6:51:F9:35:D5:60:0C:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363FCC8/C2E12A8ACCF211EA8B7C4133F8AEA228/zES432VSaGhWOxfptlH5NdVgDNA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zES432VSaGhWOxfptlH5NdVgDNA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363FCC8/C2E12A8ACCF211EA8B7C4133F8AEA228/zES432VSaGhWOxfptlH5NdVgDNA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:80:cc:66:bc:98:83:a7:64:a8:ba:24:f3:17:bf:e9:3a:17:
         f4:96:f9:87:42:69:2f:e6:fd:e5:47:0c:dc:33:cf:aa:6f:ea:
         82:65:e4:06:81:14:5c:7f:7e:ff:2c:da:e5:52:67:10:e1:58:
         28:e5:5e:11:89:35:3b:a0:73:c8:28:4a:e2:1a:a6:85:0c:ce:
         31:b5:25:ea:7d:03:3c:71:c3:d8:6d:fc:59:60:65:14:47:83:
         ed:10:ea:a0:2d:14:7e:73:03:93:7c:0c:a0:77:e0:e7:1f:31:
         58:6f:ae:85:12:cf:18:aa:a8:b0:48:ea:a8:8f:9f:f4:aa:8a:
         9d:14:91:a5:7f:6d:34:ac:3f:75:af:1f:e3:aa:c2:56:77:1a:
         cb:8f:7e:b2:f4:bb:7d:af:d9:d1:08:c3:7b:26:fc:ac:42:99:
         59:3c:75:df:8f:88:a3:16:ba:bf:2b:b7:26:e8:92:8e:58:97:
         ea:02:bd:c9:cf:c6:e8:39:da:2f:bb:72:0d:18:7c:e2:58:f9:
         1a:c0:d0:a8:f5:7a:5e:e0:e5:7b:41:a7:36:c8:8c:87:43:6a:
         b7:4a:28:25:b0:d2:37:c4:1d:db:00:3f:c3:8a:84:7f:37:38:
         f4:ca:01:39:29:5e:a7:d2:b0:28:44:ce:b4:de:63:02:ef:7e:
         80:6f:f6:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 23:40:59 2026 by rpki-client