Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3658AE0/E551C3EC9A3011ECB563A0B45A40D577/RQb8pqpV74TTpMAErIOrtQvu07k.mft
File:                     RQb8pqpV74TTpMAErIOrtQvu07k.mft (raw, json)
Hash identifier:          ktKZij3RZDbB+8javGlfwiK0deyLfFFcmqE/Jpm63OA=
Subject key identifier:   C8:92:4F:1D:A7:6E:64:92:2B:E2:FF:E9:77:C2:45:1C:E5:38:4E:E8
Authority key identifier: 45:06:FC:A6:AA:55:EF:84:D3:A4:C0:04:AC:83:AB:B5:0B:EE:D3:B9
Certificate issuer:       /CN=F3658AE0AF/serialNumber=4506FCA6AA55EF84D3A4C004AC83ABB50BEED3B9
Certificate serial:       0650
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/RQb8pqpV74TTpMAErIOrtQvu07k.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3658AE0/E551C3EC9A3011ECB563A0B45A40D577/RQb8pqpV74TTpMAErIOrtQvu07k.mft
Manifest number:          064F
Signing time:             Sun 21 Jun 2026 02:38:33 +0000
Manifest this update:     Sun 21 Jun 2026 02:38:32 +0000
Manifest next update:     Tue 23 Jun 2026 02:38:32 +0000
Files and hashes:         1: RQb8pqpV74TTpMAErIOrtQvu07k.crl (hash: b8tR3xw+IHlaBpWsFLqof3E1zR8nd4RetPHjK8V/HDQ=)
                          2: 9DDD28FC9A3111EC8707D1B65A40D577.roa (hash: FZcB4QBBqx/jYH6PVYH2VRq/gBlCUQZrKAZfwhy/+S4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3658AE0/E551C3EC9A3011ECB563A0B45A40D577/RQb8pqpV74TTpMAErIOrtQvu07k.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3658AE0/E551C3EC9A3011ECB563A0B45A40D577/RQb8pqpV74TTpMAErIOrtQvu07k.mft
                          rsync://rpki.afrinic.net/repository/afrinic/RQb8pqpV74TTpMAErIOrtQvu07k.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Jun 2026 00:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1616 (0x650)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3658AE0AF, serialNumber=4506FCA6AA55EF84D3A4C004AC83ABB50BEED3B9
        Validity
            Not Before: Jun 21 02:38:32 2026 GMT
            Not After : Jun 23 02:38:32 2026 GMT
        Subject: CN=6a374ea9-6bc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7f:22:76:15:e4:75:47:8d:62:f8:8c:f9:6a:
                    b0:f4:03:cb:0a:4f:77:1d:a9:64:3f:e4:c1:9b:d3:
                    93:0f:83:6f:df:51:8c:de:4f:ff:9c:ce:42:5c:d2:
                    f8:23:99:0f:73:7e:12:1a:34:49:d8:0e:22:c4:79:
                    16:2f:5b:52:5b:16:3c:c0:3e:f0:55:46:9e:90:2c:
                    63:57:83:fb:e7:70:f2:bf:1b:06:91:f2:07:bb:48:
                    f8:c8:78:90:a0:24:60:43:06:d1:d3:cf:34:3c:49:
                    2d:49:ce:50:4f:c7:bf:b8:7d:5d:dd:82:fc:32:8d:
                    98:f6:a1:cf:28:5c:3c:e3:52:c4:1e:b3:d2:ce:83:
                    9a:de:00:23:f0:7c:f1:13:df:0a:24:54:df:34:85:
                    aa:22:e1:d9:44:54:6a:42:76:dd:a1:de:8e:ed:69:
                    ce:69:6c:7c:c9:ec:75:58:db:45:23:8b:6b:34:35:
                    cc:d6:93:54:d5:c8:2e:bd:a3:ce:0b:59:c0:20:4a:
                    10:a0:4d:f6:f3:14:08:55:31:18:49:50:c6:62:23:
                    79:db:e2:4d:96:96:b6:7e:c9:f8:36:da:37:c7:d9:
                    e1:52:f5:81:1e:d5:39:51:22:17:ab:c0:13:f2:5c:
                    e1:cf:47:b5:ef:79:71:2e:5d:46:a3:c5:e3:20:b0:
                    13:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:92:4F:1D:A7:6E:64:92:2B:E2:FF:E9:77:C2:45:1C:E5:38:4E:E8
            X509v3 Authority Key Identifier:
                keyid:45:06:FC:A6:AA:55:EF:84:D3:A4:C0:04:AC:83:AB:B5:0B:EE:D3:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3658AE0/E551C3EC9A3011ECB563A0B45A40D577/RQb8pqpV74TTpMAErIOrtQvu07k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/RQb8pqpV74TTpMAErIOrtQvu07k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3658AE0/E551C3EC9A3011ECB563A0B45A40D577/RQb8pqpV74TTpMAErIOrtQvu07k.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:d9:15:29:b1:1f:fb:85:6d:af:96:f8:b5:b7:36:20:93:c9:
         c6:c0:20:b3:c2:b6:af:57:df:07:2a:5d:b3:94:a6:7a:dd:c4:
         cc:83:ad:8f:f8:e8:f3:2f:41:8d:5a:57:be:12:ae:78:a5:75:
         e5:1d:95:7e:e0:4d:18:65:22:d4:85:72:7b:73:6b:6a:35:18:
         9e:89:7c:01:20:83:74:77:0f:d8:6c:0f:4c:79:4c:ef:90:8a:
         a2:34:56:fb:c2:d6:63:23:43:70:be:57:53:39:2e:4e:73:fd:
         5f:9b:89:63:66:fd:74:4d:ca:2a:2a:79:83:ff:c9:c3:f6:55:
         51:33:8c:1a:62:a6:82:1b:f5:ed:f3:70:f4:c4:4d:e2:52:f3:
         a1:ea:c1:88:f7:2b:b6:a0:12:09:cc:65:bd:01:8b:56:1a:95:
         54:c5:fb:cb:a2:84:d8:e6:85:70:99:56:63:32:fd:d9:cb:fb:
         f8:87:95:e0:82:ef:1f:e5:82:fa:88:63:5e:26:d3:67:29:fa:
         e1:c2:c6:9a:d8:18:d9:bf:4a:08:72:b0:fc:e0:cf:92:00:fa:
         30:36:a3:93:9b:8e:9c:95:ca:7d:77:3c:ad:c1:2a:8e:3e:18:
         1e:c4:c4:0a:f0:d7:fe:44:9d:fc:c1:4f:7f:80:91:0f:7f:e8:
         d7:09:81:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 23:43:49 2026 by rpki-client