Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3647DDF/D0E04692863F11EA8AA7334AF8AEA228/af-Z7GUV26O7-Wo36yGeJJT-wYU.mft
File:                     af-Z7GUV26O7-Wo36yGeJJT-wYU.mft (raw, json)
Hash identifier:          rUXr1TtQkDwTXyxgEWmSRrTzFEQwKpWayN02C967JCk=
Subject key identifier:   D1:20:E0:6D:48:87:C8:96:E4:C6:AF:94:FC:8B:44:EB:6D:1A:2E:C4
Authority key identifier: 69:FF:99:EC:65:15:DB:A3:BB:F9:6A:37:EB:21:9E:24:94:FE:C1:85
Certificate issuer:       /CN=F3647DDFAF/serialNumber=69FF99EC6515DBA3BBF96A37EB219E2494FEC185
Certificate serial:       0900
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/af-Z7GUV26O7-Wo36yGeJJT-wYU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3647DDF/D0E04692863F11EA8AA7334AF8AEA228/af-Z7GUV26O7-Wo36yGeJJT-wYU.mft
Manifest number:          08FE
Signing time:             Sun 21 Jun 2026 01:47:10 +0000
Manifest this update:     Sun 21 Jun 2026 01:47:09 +0000
Manifest next update:     Tue 23 Jun 2026 01:47:09 +0000
Files and hashes:         1: af-Z7GUV26O7-Wo36yGeJJT-wYU.crl (hash: Jesyl+paGcbXBkB5arStSra+90CuGC/Lick5STJoGmg=)
                          2: D3FB7C1E86F511EA872C9285F8AEA228.roa (hash: TI9Oy29MRy8vT+vPx3tD5wZgwJvEGhK9WAGNOqgD+2Q=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3647DDF/D0E04692863F11EA8AA7334AF8AEA228/af-Z7GUV26O7-Wo36yGeJJT-wYU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3647DDF/D0E04692863F11EA8AA7334AF8AEA228/af-Z7GUV26O7-Wo36yGeJJT-wYU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/af-Z7GUV26O7-Wo36yGeJJT-wYU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Jun 2026 00:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2304 (0x900)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3647DDFAF, serialNumber=69FF99EC6515DBA3BBF96A37EB219E2494FEC185
        Validity
            Not Before: Jun 21 01:47:09 2026 GMT
            Not After : Jun 23 01:47:09 2026 GMT
        Subject: CN=6a37429e-31e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:2b:e1:5f:43:33:b8:f2:06:ae:39:f1:fa:50:
                    ce:83:13:23:e8:ce:39:c5:b9:94:97:d7:c8:0f:6b:
                    0e:e2:80:3c:45:8f:d6:05:f9:64:a0:7b:90:83:d6:
                    26:93:00:8a:4a:07:81:40:56:92:fb:00:bf:38:9c:
                    96:67:64:7c:f8:3a:eb:0b:4e:e8:44:84:46:8e:cf:
                    ea:66:f3:16:1a:3b:36:99:23:8f:a4:4e:20:96:a6:
                    ba:c0:95:de:59:cc:4a:f2:75:b8:05:fe:37:02:27:
                    5f:1d:1a:e9:0f:51:62:2a:3e:a2:24:02:2e:6a:bf:
                    22:ae:ba:54:66:35:c9:cc:f8:dd:d4:65:3c:8c:76:
                    b9:91:49:b6:39:a3:de:e4:3a:f3:ba:f3:96:3d:e8:
                    e0:13:07:47:a4:c3:37:9b:18:43:ca:cc:b7:6b:87:
                    55:eb:ea:e0:04:5b:2a:1f:95:a3:48:17:4d:1c:ff:
                    97:0f:62:c4:66:7a:90:bf:d0:f9:02:b2:91:81:a0:
                    fb:f2:a0:eb:0d:a0:c6:06:ce:84:d3:e8:d2:ff:30:
                    71:93:aa:df:19:a2:ae:44:16:33:2d:cc:5c:b6:e6:
                    54:b3:4f:39:85:c9:33:b2:eb:c3:35:b3:75:25:56:
                    0d:68:e3:ae:4a:f4:d3:91:01:40:12:06:7b:ea:51:
                    1d:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:20:E0:6D:48:87:C8:96:E4:C6:AF:94:FC:8B:44:EB:6D:1A:2E:C4
            X509v3 Authority Key Identifier:
                keyid:69:FF:99:EC:65:15:DB:A3:BB:F9:6A:37:EB:21:9E:24:94:FE:C1:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3647DDF/D0E04692863F11EA8AA7334AF8AEA228/af-Z7GUV26O7-Wo36yGeJJT-wYU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/af-Z7GUV26O7-Wo36yGeJJT-wYU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3647DDF/D0E04692863F11EA8AA7334AF8AEA228/af-Z7GUV26O7-Wo36yGeJJT-wYU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:9d:c1:a2:66:95:a8:62:53:34:2a:58:ae:33:a8:71:2c:8f:
         45:9d:ed:e1:c9:60:64:c9:c4:e8:d1:94:42:84:62:1d:50:cd:
         e4:45:91:6b:4e:0a:eb:ba:f7:54:4a:16:d2:c0:a6:37:73:60:
         3e:fe:f8:ab:e1:52:e0:60:7c:6a:64:0a:c5:a6:12:35:81:9e:
         b0:c0:68:04:24:db:1f:ca:66:4f:3b:95:8c:ad:cd:fc:89:6a:
         e5:97:e4:47:8e:98:c9:82:28:12:03:b4:29:c8:0f:77:93:a5:
         25:1c:2d:10:75:e3:ca:25:88:86:36:cb:bc:80:2a:fd:cc:e9:
         b3:c2:f2:71:06:bf:44:28:43:8d:2d:4b:f0:2a:f1:41:d4:1b:
         ac:de:9b:96:c9:12:2c:1d:f8:38:f5:e0:82:36:ef:38:e0:4f:
         ab:b1:b7:13:00:36:0e:8d:23:b2:cc:ae:ae:91:ff:8d:dd:00:
         52:67:81:f2:35:4b:a2:cf:99:9f:18:26:1a:c7:b5:47:66:49:
         28:ee:8e:0f:da:15:9a:69:54:4d:f3:4a:44:2a:31:d7:ad:7d:
         bb:5b:2c:3b:c3:e9:a9:14:13:16:18:8f:cd:cd:bf:b5:ab:a3:
         77:34:35:dd:0c:af:5a:3c:28:2f:08:2a:f1:5c:7c:37:5d:c8:
         3f:59:e8:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 23:42:48 2026 by rpki-client