Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364A0C9/B897144AA66A11EE8A82CE8C775412E6/ZkH2tmBUTtFQG8wJWqB_nLD7XE0.mft
File:                     ZkH2tmBUTtFQG8wJWqB_nLD7XE0.mft (raw, json)
Hash identifier:          Ril8+lZNp0SmOs5Z/X3BLh3XTUhvGt5q0BPtZqYJclk=
Subject key identifier:   C3:A8:7F:3B:96:70:18:F5:64:6B:11:23:23:4B:FA:53:86:65:DD:34
Authority key identifier: 66:41:F6:B6:60:54:4E:D1:50:1B:CC:09:5A:A0:7F:9C:B0:FB:5C:4D
Certificate issuer:       /CN=F364A0C9AF/serialNumber=6641F6B660544ED1501BCC095AA07F9CB0FB5C4D
Certificate serial:       03AB
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ZkH2tmBUTtFQG8wJWqB_nLD7XE0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364A0C9/B897144AA66A11EE8A82CE8C775412E6/ZkH2tmBUTtFQG8wJWqB_nLD7XE0.mft
Manifest number:          03A7
Signing time:             Sun 21 Jun 2026 03:55:11 +0000
Manifest this update:     Sun 21 Jun 2026 03:55:10 +0000
Manifest next update:     Tue 23 Jun 2026 03:55:10 +0000
Files and hashes:         1: ZkH2tmBUTtFQG8wJWqB_nLD7XE0.crl (hash: XM256mUJNR8Xys+pK+cxMlgbAzz6wagOzBTbfgk06II=)
                          2: 9C225EFAE57E11F0ACCF11ADDAE4EC9C.roa (hash: 52/RrDD53hRvIOj4m0Ki2aPwgfD+p2vQH2NitGDAjtw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364A0C9/B897144AA66A11EE8A82CE8C775412E6/ZkH2tmBUTtFQG8wJWqB_nLD7XE0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364A0C9/B897144AA66A11EE8A82CE8C775412E6/ZkH2tmBUTtFQG8wJWqB_nLD7XE0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ZkH2tmBUTtFQG8wJWqB_nLD7XE0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Jun 2026 00:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 939 (0x3ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364A0C9AF, serialNumber=6641F6B660544ED1501BCC095AA07F9CB0FB5C4D
        Validity
            Not Before: Jun 21 03:55:10 2026 GMT
            Not After : Jun 23 03:55:10 2026 GMT
        Subject: CN=6a37609f-a5e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:0a:1b:c2:de:89:22:c3:8d:0e:02:27:82:f2:
                    d9:10:b9:9f:9c:86:b9:03:f0:63:85:3e:3c:5c:1c:
                    0e:e9:da:85:52:0c:11:cb:7d:7b:78:4d:a1:00:ac:
                    12:9d:9c:5b:a7:85:26:84:7a:a9:c0:ad:be:df:03:
                    75:1f:b7:90:c0:6f:24:34:c0:20:82:49:96:60:06:
                    c9:d0:a2:be:fe:24:96:6e:ac:e7:4b:90:bc:ec:7f:
                    fb:89:16:52:3d:6e:4c:6c:05:e2:63:6b:f0:f1:00:
                    6e:e7:e3:28:a0:34:53:7f:f6:0b:5a:94:a1:f0:4b:
                    5e:9d:47:66:6d:cb:cd:d8:cf:60:11:65:0e:fc:bc:
                    2e:23:47:ed:88:bc:46:7d:3d:c5:96:4f:c6:0c:8b:
                    0a:c0:a2:f0:f3:5c:4e:0e:5b:a9:01:0f:42:7f:05:
                    45:a3:9a:32:81:d0:5d:0c:82:57:93:cf:42:50:ca:
                    57:b1:ed:75:b5:66:2f:ba:40:a5:c6:ff:ec:fd:d8:
                    c1:71:93:42:4a:49:05:c4:dd:ff:4c:c7:0a:1e:db:
                    13:4b:e1:74:42:74:14:19:cb:ed:98:cc:2b:41:1c:
                    cc:09:29:bf:34:41:c0:93:d2:a1:a5:4e:26:36:ab:
                    51:56:ed:68:bc:e8:b9:81:25:38:ea:19:71:1d:de:
                    5b:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:A8:7F:3B:96:70:18:F5:64:6B:11:23:23:4B:FA:53:86:65:DD:34
            X509v3 Authority Key Identifier:
                keyid:66:41:F6:B6:60:54:4E:D1:50:1B:CC:09:5A:A0:7F:9C:B0:FB:5C:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364A0C9/B897144AA66A11EE8A82CE8C775412E6/ZkH2tmBUTtFQG8wJWqB_nLD7XE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ZkH2tmBUTtFQG8wJWqB_nLD7XE0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364A0C9/B897144AA66A11EE8A82CE8C775412E6/ZkH2tmBUTtFQG8wJWqB_nLD7XE0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:4c:29:22:4d:b1:84:16:4b:d9:82:5d:71:0b:5c:91:7f:50:
         7a:e3:7e:79:c7:63:39:a6:36:28:a5:c5:b9:bb:e6:61:28:c8:
         61:c4:c7:0f:93:86:74:ae:09:00:1a:28:f1:42:82:f1:06:e9:
         25:49:60:1c:12:8b:38:7e:2b:6b:56:67:a1:b3:ba:da:06:e8:
         dc:46:2b:56:d3:75:b5:8e:15:5c:54:5a:25:4f:7b:ba:a2:f3:
         2a:06:47:60:30:e8:aa:60:d3:0f:8c:2e:86:0f:18:97:49:d3:
         76:6c:84:84:7a:2d:e3:6f:aa:fe:5d:3f:0e:9a:f5:6a:f2:b1:
         30:03:a3:9a:cd:68:7a:e0:92:6f:e1:04:fb:c0:18:f5:7c:9e:
         37:d8:e4:03:2c:d0:8e:fb:2d:0a:cd:86:40:a7:00:ef:6e:d8:
         a2:07:c9:42:13:74:d8:0e:5a:54:c7:5b:80:2e:cb:d7:70:57:
         e4:19:0f:e0:38:70:14:ca:c6:02:3f:71:50:97:dc:dd:f7:5c:
         18:2b:23:8d:2b:cd:28:5b:38:b5:a2:fc:18:b3:58:30:7f:d7:
         21:ec:a5:92:6e:45:be:92:64:98:07:60:90:5a:0e:9b:04:21:
         fe:f1:48:0e:9b:72:b4:5e:a5:89:6a:91:0e:1e:3b:88:44:cf:
         cf:34:90:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 23:43:35 2026 by rpki-client