Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3642818/9224B30A49FD11ED86901991F1222468/jq1LkUtvfJKOEv440cRAvFMJwTM.mft
File:                     jq1LkUtvfJKOEv440cRAvFMJwTM.mft (raw, json)
Hash identifier:          NpxJQsrIQz0L0keLRs51fUegRBeACmcrG2kAqdE5k98=
Subject key identifier:   A8:F5:57:7A:C7:75:76:40:5D:D4:93:BA:2A:45:0F:0F:91:49:9C:8A
Authority key identifier: 8E:AD:4B:91:4B:6F:7C:92:8E:12:FE:38:D1:C4:40:BC:53:09:C1:33
Certificate issuer:       /CN=F3642818AF/serialNumber=8EAD4B914B6F7C928E12FE38D1C440BC5309C133
Certificate serial:       0576
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/jq1LkUtvfJKOEv440cRAvFMJwTM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3642818/9224B30A49FD11ED86901991F1222468/jq1LkUtvfJKOEv440cRAvFMJwTM.mft
Manifest number:          0571
Signing time:             Sun 21 Jun 2026 03:01:46 +0000
Manifest this update:     Sun 21 Jun 2026 03:01:46 +0000
Manifest next update:     Tue 23 Jun 2026 03:01:46 +0000
Files and hashes:         1: jq1LkUtvfJKOEv440cRAvFMJwTM.crl (hash: OxZLGI9lNQcsIiak22v0zf+kq2rhNsjo42eNj0Kj31c=)
                          2: 45D1D714068B11F1B2B0DFC5DAE4EC9C.roa (hash: k+Zzix2q4ja3ETayVUtqKJofOjoyeVoddBz/cw7MwUo=)
                          3: 7318CAFC068B11F1B3ADE4C5DAE4EC9C.roa (hash: n40nUjLwRlCqHskgafPlAGCOiGivJPI1YmSXzTyPafc=)
                          4: 01C2346A068B11F1BC83A6C5DAE4EC9C.roa (hash: 4GrU3dea3pBBteCk+wcUG3w5UC1FXBPW1sooz5OsDs0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3642818/9224B30A49FD11ED86901991F1222468/jq1LkUtvfJKOEv440cRAvFMJwTM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3642818/9224B30A49FD11ED86901991F1222468/jq1LkUtvfJKOEv440cRAvFMJwTM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/jq1LkUtvfJKOEv440cRAvFMJwTM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Jun 2026 00:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1398 (0x576)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3642818AF, serialNumber=8EAD4B914B6F7C928E12FE38D1C440BC5309C133
        Validity
            Not Before: Jun 21 03:01:46 2026 GMT
            Not After : Jun 23 03:01:46 2026 GMT
        Subject: CN=6a37541a-7a57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:fe:e5:a0:a2:79:df:55:8a:f4:31:9f:69:c7:
                    07:75:0c:1f:87:88:50:f0:55:59:21:ac:fa:1a:62:
                    0f:ea:c2:27:bf:16:1d:7d:21:22:46:e7:80:c5:b8:
                    e5:e2:a8:cd:ce:33:91:7d:08:1b:5d:f2:47:ba:3a:
                    23:58:61:91:a1:80:db:ab:e9:9c:39:49:db:55:67:
                    d1:29:50:ef:ae:08:66:a3:d3:4b:3c:be:df:79:01:
                    34:67:67:31:ce:4b:e5:fe:41:44:fe:b4:50:27:53:
                    bd:e6:ca:3e:16:b7:54:af:1c:5b:43:4a:b0:c3:e5:
                    06:e7:f5:81:bf:86:55:a4:31:3a:45:4e:1d:17:55:
                    41:f8:25:7d:9f:47:63:5d:8a:9a:fd:5e:2f:a9:eb:
                    76:e4:bc:1b:43:a9:fc:fe:1c:4a:dc:08:71:9d:34:
                    ff:66:f6:63:18:f6:59:bb:88:ee:ee:3d:54:5e:37:
                    70:35:1b:8e:20:31:d1:e2:57:6a:c3:8c:9b:e5:92:
                    ec:8f:e2:a1:6e:73:d3:93:d9:2a:75:24:f5:9e:12:
                    f2:df:b6:f0:06:3a:09:14:5b:3c:c1:55:53:c4:48:
                    b9:36:8b:1c:6b:be:f9:a6:f9:14:22:80:65:88:3b:
                    8b:6c:8c:2f:44:b8:ee:4b:d0:66:70:de:6d:14:c7:
                    c9:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:F5:57:7A:C7:75:76:40:5D:D4:93:BA:2A:45:0F:0F:91:49:9C:8A
            X509v3 Authority Key Identifier:
                keyid:8E:AD:4B:91:4B:6F:7C:92:8E:12:FE:38:D1:C4:40:BC:53:09:C1:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3642818/9224B30A49FD11ED86901991F1222468/jq1LkUtvfJKOEv440cRAvFMJwTM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/jq1LkUtvfJKOEv440cRAvFMJwTM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3642818/9224B30A49FD11ED86901991F1222468/jq1LkUtvfJKOEv440cRAvFMJwTM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:2a:89:02:aa:47:29:1d:6d:9d:83:59:a2:30:f5:aa:14:38:
         d1:20:5b:b7:4d:22:f2:b0:fe:34:da:cd:94:16:33:96:b9:de:
         7d:0a:41:d8:e9:ab:1e:7d:d9:71:9d:00:50:81:61:07:f8:57:
         a3:60:4d:6e:b6:5f:f2:0b:f3:12:05:92:68:b6:d2:ae:de:45:
         0c:84:19:4a:41:3c:be:43:9a:a3:80:89:14:e0:08:ea:dd:e4:
         47:7f:4e:5d:fd:6d:21:c3:65:ee:eb:7f:84:89:07:8a:0c:72:
         1b:6e:64:b1:f3:83:6a:19:26:39:55:d5:39:bd:2a:19:1f:c3:
         23:76:7a:b2:60:b9:82:f8:c8:e9:4f:12:8e:d1:b3:7c:4d:39:
         82:1d:16:c4:63:79:a0:2d:90:62:90:a4:8f:10:d7:d8:71:e6:
         59:0f:cc:e1:54:ec:ba:33:b4:d7:1d:9e:22:b6:ef:60:fc:41:
         e2:66:f5:75:50:67:e0:de:46:20:8c:9c:3c:af:84:29:51:ff:
         8d:63:54:60:70:fd:77:01:89:d7:81:94:8a:dd:f7:0b:4f:dd:
         59:ac:a2:68:5b:b5:28:eb:99:d7:9c:37:09:49:98:3d:81:9b:
         54:02:ca:6d:e9:aa:46:56:0d:ca:b3:fd:1e:17:91:92:6d:71:
         e7:ac:0a:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 23:43:35 2026 by rpki-client