Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3647FF0/A28AC10A32A911EDA4E5C9DCF1222468/kgRBKh8SvNXSs845kazvaXbIhl4.mft
File:                     kgRBKh8SvNXSs845kazvaXbIhl4.mft (raw, json)
Hash identifier:          8Q7E3jssZziKEyUeS2Y+GHwnKZ4FWayzkNNxJQsoTLk=
Subject key identifier:   86:CC:3B:1C:78:47:10:D7:CF:94:12:BC:51:4B:19:90:5A:64:E7:85
Authority key identifier: 92:04:41:2A:1F:12:BC:D5:D2:B3:CE:39:91:AC:EF:69:76:C8:86:5E
Certificate issuer:       /CN=F3647FF0AF/serialNumber=9204412A1F12BCD5D2B3CE3991ACEF6976C8865E
Certificate serial:       0584
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/kgRBKh8SvNXSs845kazvaXbIhl4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3647FF0/A28AC10A32A911EDA4E5C9DCF1222468/kgRBKh8SvNXSs845kazvaXbIhl4.mft
Manifest number:          0580
Signing time:             Thu 04 Jun 2026 02:58:14 +0000
Manifest this update:     Thu 04 Jun 2026 02:58:13 +0000
Manifest next update:     Sat 06 Jun 2026 02:58:13 +0000
Files and hashes:         1: kgRBKh8SvNXSs845kazvaXbIhl4.crl (hash: CvTBRINGmfEx94UwGRsJVtKb8M9b0EAMqcmJQgBs290=)
                          2: C1B630EE8D6B11F08834F6ACDAE4EC9C.roa (hash: dgSYZC5D+KjnOh21ksdGPfjeg//i1eX1fXXuJxMe2OM=)
                          3: 401D27E081C711F0830BC9C9DAE4EC9C.roa (hash: nJPUmahtOqiPFAxwPDfnodDi2p2b719GESj2IRhzuSA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3647FF0/A28AC10A32A911EDA4E5C9DCF1222468/kgRBKh8SvNXSs845kazvaXbIhl4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3647FF0/A28AC10A32A911EDA4E5C9DCF1222468/kgRBKh8SvNXSs845kazvaXbIhl4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/kgRBKh8SvNXSs845kazvaXbIhl4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 06 Jun 2026 02:58:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1412 (0x584)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3647FF0AF, serialNumber=9204412A1F12BCD5D2B3CE3991ACEF6976C8865E
        Validity
            Not Before: Jun  4 02:58:13 2026 GMT
            Not After : Jun  6 02:58:13 2026 GMT
        Subject: CN=6a20e9c6-e200
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:9c:e7:11:88:06:74:21:e7:00:85:4d:19:00:
                    a4:2e:7f:dd:21:5b:a3:fa:62:1e:c4:23:98:55:55:
                    55:58:1a:25:ea:be:e1:85:e7:25:b7:8c:6c:eb:cf:
                    33:61:2a:8a:60:27:09:92:5a:32:f0:db:19:46:56:
                    2a:38:e2:20:3f:ec:1d:61:9c:12:e3:3c:bf:68:80:
                    8e:fd:51:d2:7c:16:31:4b:1b:fa:9d:7a:59:c7:cf:
                    49:8e:18:5d:1f:74:1b:53:c2:ab:2a:f5:e6:06:ab:
                    b5:ef:a3:89:e6:04:1a:80:d5:2b:28:33:3b:1c:0c:
                    3d:96:69:d3:91:5f:73:3a:17:c2:da:8a:18:f1:19:
                    cd:9f:3c:3a:6c:35:11:2d:51:3e:22:1b:11:29:af:
                    df:a5:0e:4a:cb:9c:65:ad:6c:89:3b:96:e6:f3:b1:
                    9e:2a:78:96:e9:f6:66:33:32:5d:6b:65:0c:2d:70:
                    49:16:ad:78:34:d7:ae:22:d6:74:c3:68:71:ef:1b:
                    38:2f:45:28:36:25:96:4c:5d:5f:df:55:7b:fe:4f:
                    a2:1d:d3:66:07:21:db:ad:33:bc:38:16:fa:c4:d8:
                    0c:45:14:ce:e0:d0:91:05:e0:41:e4:38:78:78:8d:
                    c9:2e:a1:40:ca:d5:a3:36:6b:c8:c4:ea:72:aa:61:
                    a5:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:CC:3B:1C:78:47:10:D7:CF:94:12:BC:51:4B:19:90:5A:64:E7:85
            X509v3 Authority Key Identifier:
                keyid:92:04:41:2A:1F:12:BC:D5:D2:B3:CE:39:91:AC:EF:69:76:C8:86:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3647FF0/A28AC10A32A911EDA4E5C9DCF1222468/kgRBKh8SvNXSs845kazvaXbIhl4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kgRBKh8SvNXSs845kazvaXbIhl4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3647FF0/A28AC10A32A911EDA4E5C9DCF1222468/kgRBKh8SvNXSs845kazvaXbIhl4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:9b:86:4c:d7:e9:bc:31:b4:05:dc:f5:f7:4c:91:5c:d1:b8:
         8a:72:63:39:48:07:e9:17:2a:ee:b8:4f:29:bf:d0:2c:77:d2:
         6d:8f:5a:f6:41:ca:e5:98:f6:0d:5e:01:39:2e:97:a4:28:02:
         98:71:a7:8e:68:12:13:32:38:d1:1a:79:92:ae:4c:0c:46:0a:
         9b:a6:69:40:df:b1:1f:92:78:51:00:25:2d:84:09:b0:1f:98:
         2a:79:fb:20:77:af:ac:80:35:0b:c5:fa:5d:65:50:33:e2:35:
         c4:18:4e:a7:c0:a6:0a:c4:15:eb:42:ec:f7:80:f5:44:47:88:
         e6:81:97:79:8e:8f:12:18:d8:3c:bc:c0:90:46:52:98:47:d7:
         a0:c6:ec:7d:ca:74:95:28:a0:c2:93:fe:83:ab:0f:3c:aa:f4:
         c1:40:1e:13:a1:03:61:91:ff:73:66:f8:b2:9d:e8:cb:86:47:
         4a:0c:43:23:8e:c7:e7:12:7f:d1:6d:4d:a9:3d:c2:8e:a3:4c:
         ca:c6:33:c7:38:97:b3:28:3f:28:7a:eb:3d:da:ae:3f:40:b7:
         d9:56:50:1f:be:7b:da:2a:b9:47:7c:4a:2c:53:ed:1e:5a:a2:
         1a:c0:42:24:ea:22:a3:ed:47:26:71:f6:9b:5e:7b:59:1c:f7:
         47:67:4f:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 13:22:53 2026 by rpki-client