Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3641DDC/91BE992658CD11F086BF7CEADAE4EC9C/aaGydU0sb2tHJmd6cgRQI2vS7NE.mft
File:                     aaGydU0sb2tHJmd6cgRQI2vS7NE.mft (raw, json)
Hash identifier:          9nli5qk7DKaL8CeoLMY3VL/HMlL3ralrzwm8mreD5M0=
Subject key identifier:   7D:FD:2D:7F:0C:DE:64:DE:0F:96:47:03:89:BE:3F:46:40:67:21:45
Authority key identifier: 69:A1:B2:75:4D:2C:6F:6B:47:26:67:7A:72:04:50:23:6B:D2:EC:D1
Certificate issuer:       /CN=F3641DDCAF/serialNumber=69A1B2754D2C6F6B4726677A720450236BD2ECD1
Certificate serial:       0166
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/aaGydU0sb2tHJmd6cgRQI2vS7NE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3641DDC/91BE992658CD11F086BF7CEADAE4EC9C/aaGydU0sb2tHJmd6cgRQI2vS7NE.mft
Manifest number:          0165
Signing time:             Sun 21 Jun 2026 04:59:49 +0000
Manifest this update:     Sun 21 Jun 2026 04:59:48 +0000
Manifest next update:     Tue 23 Jun 2026 04:59:48 +0000
Files and hashes:         1: aaGydU0sb2tHJmd6cgRQI2vS7NE.crl (hash: 9zD2bme9/mj1rMMrkmm1+tfvXWr0CItO7P45LjO1za4=)
                          2: 73B4059658CE11F0B51042EFDAE4EC9C.roa (hash: LH5vIdf+4h9q3kvMURVZYnoRUhO4LGq7NT3aZO9J2wU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3641DDC/91BE992658CD11F086BF7CEADAE4EC9C/aaGydU0sb2tHJmd6cgRQI2vS7NE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3641DDC/91BE992658CD11F086BF7CEADAE4EC9C/aaGydU0sb2tHJmd6cgRQI2vS7NE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/aaGydU0sb2tHJmd6cgRQI2vS7NE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Jun 2026 00:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 358 (0x166)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3641DDCAF, serialNumber=69A1B2754D2C6F6B4726677A720450236BD2ECD1
        Validity
            Not Before: Jun 21 04:59:48 2026 GMT
            Not After : Jun 23 04:59:48 2026 GMT
        Subject: CN=6a376fc5-c8ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:79:37:97:10:81:ae:23:d2:16:27:87:b1:0d:
                    9f:ec:14:ef:56:05:92:f6:86:5d:dd:cc:82:7e:9e:
                    d4:32:58:4c:9a:96:a8:3d:b2:20:72:57:d5:1d:c6:
                    61:ae:36:56:49:7d:0a:01:ee:76:16:d0:ce:37:81:
                    cf:f4:d0:b7:d9:c0:5a:9c:d2:fa:03:fe:71:43:f2:
                    26:26:0b:03:88:cb:7d:1a:f6:04:4f:dc:c8:11:63:
                    74:90:66:67:13:16:cf:7a:aa:bb:66:40:bb:c9:16:
                    46:36:82:c6:95:9c:c8:f1:b1:9a:5a:0f:0d:a5:5b:
                    2e:fe:52:8d:d8:7d:53:ff:20:86:d3:1d:e0:02:eb:
                    73:10:20:6b:05:24:ea:0a:23:68:84:7d:77:a5:8e:
                    3e:72:04:4b:c2:e5:0c:9a:42:53:e9:cf:80:3c:ec:
                    50:8c:f0:0f:a9:f7:c5:4f:48:f4:78:26:74:a5:94:
                    f5:0f:dc:50:23:57:7a:02:4e:ec:53:c1:fa:72:bf:
                    93:62:67:0d:6f:99:ad:91:d7:6b:b7:df:6b:49:86:
                    3b:b8:f8:45:92:af:5e:b8:c4:ea:53:36:e6:f5:2c:
                    3d:4e:20:6d:cd:77:b4:ca:67:f1:93:4a:72:ae:0c:
                    f0:5c:88:f5:01:35:82:9a:53:ee:58:3e:ff:ba:67:
                    75:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:FD:2D:7F:0C:DE:64:DE:0F:96:47:03:89:BE:3F:46:40:67:21:45
            X509v3 Authority Key Identifier:
                keyid:69:A1:B2:75:4D:2C:6F:6B:47:26:67:7A:72:04:50:23:6B:D2:EC:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3641DDC/91BE992658CD11F086BF7CEADAE4EC9C/aaGydU0sb2tHJmd6cgRQI2vS7NE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/aaGydU0sb2tHJmd6cgRQI2vS7NE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3641DDC/91BE992658CD11F086BF7CEADAE4EC9C/aaGydU0sb2tHJmd6cgRQI2vS7NE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:e9:72:0b:a6:82:53:c7:d9:b6:0b:90:85:4f:99:16:93:9f:
         17:7f:51:eb:fa:31:1d:2a:f7:cd:da:61:f8:a1:fa:60:b5:c1:
         35:66:bf:6f:bf:8d:5d:ef:13:9e:f4:51:fe:2a:de:76:b2:0f:
         f3:3f:c9:b4:ee:39:8a:06:78:72:16:e1:d2:16:ff:be:eb:08:
         d5:a0:05:92:4f:83:df:8f:09:a1:cc:af:e4:88:8c:c7:d6:b4:
         73:8e:69:a4:0c:69:d0:b9:59:7f:60:26:69:03:bd:2f:ec:bf:
         dc:dd:b1:1c:48:4f:e2:a1:8e:ce:6a:09:12:9d:b4:89:95:18:
         7c:4d:f6:d5:5f:4f:0b:9f:43:9f:ac:70:40:1f:79:12:d3:f2:
         61:43:59:ff:f5:eb:ba:10:45:a9:f2:d0:32:5c:a8:8d:7a:3e:
         ad:d9:7e:26:15:ea:9b:21:1e:8d:83:e6:06:d3:24:71:01:22:
         af:c5:f1:49:d6:48:c1:a4:5a:ea:9c:81:14:42:1a:2c:14:47:
         61:fd:75:fb:56:ac:e2:92:61:c2:0b:a0:8d:5c:96:ce:da:04:
         2b:48:bc:a2:92:b9:55:6e:93:5c:15:8e:81:84:ef:75:0c:39:
         c8:72:5a:15:6b:66:4c:76:dc:dc:8c:00:a0:c9:fd:cb:bf:9f:
         4d:dd:fc:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 23:37:17 2026 by rpki-client