Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3652A25/E90D653E8E6B11F1A03034F2CE1D38B0/XzgIgB6hYgLrL2fOP2WA29PCwuI.mft
File:                     XzgIgB6hYgLrL2fOP2WA29PCwuI.mft (raw, json)
Hash identifier:          sORzDIHS7OOtfyYSSBVQAtVXxKxNMv6DE/dRcA0WE1Q=
Subject key identifier:   A8:A1:9A:0B:88:81:34:8D:99:82:AC:23:4E:1F:EF:03:54:58:DD:99
Authority key identifier: 5F:38:08:80:1E:A1:62:02:EB:2F:67:CE:3F:65:80:DB:D3:C2:C2:E2
Certificate issuer:       /CN=F3652A25AF/serialNumber=5F3808801EA16202EB2F67CE3F6580DBD3C2C2E2
Certificate serial:       07
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/XzgIgB6hYgLrL2fOP2WA29PCwuI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3652A25/E90D653E8E6B11F1A03034F2CE1D38B0/XzgIgB6hYgLrL2fOP2WA29PCwuI.mft
Manifest number:          06
Signing time:             Thu 06 Aug 2026 05:49:28 +0000
Manifest this update:     Thu 06 Aug 2026 05:49:27 +0000
Manifest next update:     Sat 08 Aug 2026 05:49:27 +0000
Files and hashes:         1: XzgIgB6hYgLrL2fOP2WA29PCwuI.crl (hash: IQHQlkzhfGwZXdh/KZWZk72Pd6bBw3ZnYmUO30KjNRc=)
                          2: B910CB028E6E11F1845A6602CF1D38B0.roa (hash: w0divEnGeKhPaNpp5pSAeh2v6YZz+bPKKZA6O6oQeAo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3652A25/E90D653E8E6B11F1A03034F2CE1D38B0/XzgIgB6hYgLrL2fOP2WA29PCwuI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3652A25/E90D653E8E6B11F1A03034F2CE1D38B0/XzgIgB6hYgLrL2fOP2WA29PCwuI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/XzgIgB6hYgLrL2fOP2WA29PCwuI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 08 Aug 2026 00:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3652A25AF, serialNumber=5F3808801EA16202EB2F67CE3F6580DBD3C2C2E2
        Validity
            Not Before: Aug  6 05:49:27 2026 GMT
            Not After : Aug  8 05:49:27 2026 GMT
        Subject: CN=6a742067-1f9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:2a:4c:3b:72:fa:de:e2:ea:6a:23:79:5d:3e:
                    ea:32:5c:a1:9f:c6:c1:44:a8:fd:3e:8b:62:96:3b:
                    33:bc:b9:86:4f:06:99:26:10:21:62:d7:0c:28:c6:
                    94:26:33:30:14:34:6d:be:3a:08:90:9f:c0:3a:c3:
                    33:98:97:ec:d4:1e:9d:d5:3f:f0:45:29:6e:27:30:
                    0c:da:91:d2:ea:db:f1:9b:04:78:b3:06:5d:13:2c:
                    e4:a9:38:b0:24:32:66:58:ba:37:cc:64:5c:d3:ee:
                    40:fe:cf:1c:23:df:a0:40:42:8e:6c:7a:ba:7a:e6:
                    19:62:a5:5d:15:a5:8a:be:0a:93:51:6b:4d:50:19:
                    df:a4:81:ec:43:f9:4b:d7:47:a8:a8:f8:3f:ad:6a:
                    97:80:78:f7:d0:47:13:eb:d9:31:d7:a9:db:d4:6e:
                    05:70:22:89:6d:f4:04:29:70:a6:9b:0d:6c:cb:c3:
                    91:c1:8a:11:42:e1:c1:bd:8f:ae:59:6e:3e:f7:32:
                    64:b1:3f:97:c0:b2:98:57:c7:d4:d7:ba:db:d7:cd:
                    33:69:0d:73:63:dc:bf:b4:66:97:99:bd:12:31:68:
                    c3:ff:d1:ac:5f:2b:e2:b4:d9:54:9f:56:e6:eb:67:
                    7d:79:94:c7:d3:47:cf:7b:46:b8:3c:49:b7:7e:f8:
                    a1:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:A1:9A:0B:88:81:34:8D:99:82:AC:23:4E:1F:EF:03:54:58:DD:99
            X509v3 Authority Key Identifier:
                keyid:5F:38:08:80:1E:A1:62:02:EB:2F:67:CE:3F:65:80:DB:D3:C2:C2:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3652A25/E90D653E8E6B11F1A03034F2CE1D38B0/XzgIgB6hYgLrL2fOP2WA29PCwuI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XzgIgB6hYgLrL2fOP2WA29PCwuI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3652A25/E90D653E8E6B11F1A03034F2CE1D38B0/XzgIgB6hYgLrL2fOP2WA29PCwuI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:17:69:95:e3:ea:4c:3e:9a:50:7a:b6:11:3c:df:e5:2c:75:
         ad:c5:52:54:c9:e3:ee:6a:c3:89:20:0e:da:28:d7:59:2b:06:
         6f:0c:44:e6:cc:9d:42:54:31:86:59:27:31:84:9a:6b:57:5f:
         ae:3c:3f:04:a8:c2:62:72:49:17:06:ae:4d:7d:45:ad:ea:6f:
         13:e3:43:58:1b:c0:5d:e6:e0:96:c8:8c:c4:cf:80:1d:53:98:
         86:60:94:82:54:6e:d7:8d:c4:c9:7b:a3:29:83:f7:93:e5:a6:
         bc:58:33:52:0f:d9:eb:da:3f:0b:af:2d:86:24:87:25:8e:0a:
         5b:b1:ab:95:ce:60:8f:d4:10:17:01:86:9a:4c:13:9c:f1:3d:
         62:25:81:a0:92:10:a8:93:60:d4:6e:de:f6:85:f4:f6:8b:96:
         47:82:b0:fc:17:99:ff:c3:f1:b2:9a:0f:8f:54:d2:be:4e:be:
         ec:f4:2a:cb:46:36:97:3d:a6:dd:e5:7f:0c:c4:32:1a:df:57:
         f4:b6:d1:0e:d3:b0:c1:21:bc:70:3b:b7:13:f2:dc:da:48:f9:
         5a:ed:a6:a5:59:50:3c:08:55:50:42:5b:73:a5:e0:7d:1f:3d:
         04:01:bc:e8:79:4c:a1:7f:17:02:95:e8:c9:aa:a2:bb:a3:16:
         91:1e:c8:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 11:36:54 2026 by rpki-client