Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365CA10/430D8A1674A911EA96CC793EF8AEA228/LnFCh3b4tjGvSw1suVUM0cqUVlU.mft
File:                     LnFCh3b4tjGvSw1suVUM0cqUVlU.mft (raw, json)
Hash identifier:          vWv/0EKakQAdM5+HzqFNxh1i7n13A8Fb1Taj8Ol0lnE=
Subject key identifier:   86:4F:C5:8C:10:41:9D:02:0A:FF:FC:9B:A8:43:94:5E:38:09:66:E0
Authority key identifier: 2E:71:42:87:76:F8:B6:31:AF:4B:0D:6C:B9:55:0C:D1:CA:94:56:55
Certificate issuer:       /CN=F365CA10AF/serialNumber=2E71428776F8B631AF4B0D6CB9550CD1CA945655
Certificate serial:       08E8
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/LnFCh3b4tjGvSw1suVUM0cqUVlU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365CA10/430D8A1674A911EA96CC793EF8AEA228/LnFCh3b4tjGvSw1suVUM0cqUVlU.mft
Manifest number:          08E8
Signing time:             Thu 07 May 2026 01:44:57 +0000
Manifest this update:     Thu 07 May 2026 01:44:57 +0000
Manifest next update:     Sat 09 May 2026 01:44:57 +0000
Files and hashes:         1: LnFCh3b4tjGvSw1suVUM0cqUVlU.crl (hash: wO3beivE6LvY1wPgt/cmnYofiPFwxoLooZx85p9ljXc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365CA10/430D8A1674A911EA96CC793EF8AEA228/LnFCh3b4tjGvSw1suVUM0cqUVlU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365CA10/430D8A1674A911EA96CC793EF8AEA228/LnFCh3b4tjGvSw1suVUM0cqUVlU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/LnFCh3b4tjGvSw1suVUM0cqUVlU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 09 May 2026 00:07:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2280 (0x8e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365CA10AF, serialNumber=2E71428776F8B631AF4B0D6CB9550CD1CA945655
        Validity
            Not Before: May  7 01:44:57 2026 GMT
            Not After : May  9 01:44:57 2026 GMT
        Subject: CN=69fbee99-f179
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:86:23:c9:f9:33:53:2f:d1:39:fa:8f:db:18:
                    57:a6:de:26:af:df:35:8d:a8:88:59:03:fd:59:45:
                    3f:87:26:9b:58:e4:65:ff:86:09:6e:29:24:95:96:
                    11:9e:6b:74:fd:53:90:04:2d:c5:09:aa:09:ad:02:
                    e3:21:36:61:b1:e5:96:8c:a9:b3:61:09:9c:ae:0b:
                    dc:76:00:b9:99:e0:2e:35:02:a0:85:d7:30:7c:ed:
                    a4:bf:a5:d7:8c:4c:08:7e:18:d8:39:34:f4:dc:af:
                    ef:65:9b:33:0f:20:c3:de:fd:b2:09:28:a0:13:b6:
                    fa:63:66:c1:cc:ac:2c:a5:1c:f0:e4:58:00:7f:a0:
                    50:38:1b:d3:0d:07:f8:ff:a0:d7:34:74:93:4d:f0:
                    75:ca:dc:41:39:1b:b4:ec:f1:fe:96:69:70:4c:75:
                    7d:52:94:4c:ca:57:1a:42:25:09:1f:d4:fa:b6:fc:
                    97:3e:f0:52:a5:f6:8e:33:db:a8:19:a4:df:c1:ab:
                    79:c2:e2:fb:6c:78:ba:18:49:69:85:bd:6b:92:4e:
                    52:b6:4b:4a:9c:ad:4d:7a:df:8e:3e:42:fa:a6:3d:
                    98:5e:62:a0:56:5f:66:b4:7c:97:2a:5b:3f:a8:cb:
                    d4:78:01:70:c5:c1:8f:13:c9:1d:8d:27:48:64:d6:
                    3c:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:4F:C5:8C:10:41:9D:02:0A:FF:FC:9B:A8:43:94:5E:38:09:66:E0
            X509v3 Authority Key Identifier:
                keyid:2E:71:42:87:76:F8:B6:31:AF:4B:0D:6C:B9:55:0C:D1:CA:94:56:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365CA10/430D8A1674A911EA96CC793EF8AEA228/LnFCh3b4tjGvSw1suVUM0cqUVlU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LnFCh3b4tjGvSw1suVUM0cqUVlU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365CA10/430D8A1674A911EA96CC793EF8AEA228/LnFCh3b4tjGvSw1suVUM0cqUVlU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:07:34:b2:84:b1:30:14:27:b6:17:d7:5d:54:b7:bb:0b:ca:
         11:e9:d9:4d:93:97:67:e3:b9:a3:ed:90:16:64:ff:8a:4e:81:
         e9:44:c5:80:61:c4:66:23:66:a6:fb:dd:84:1f:7a:ae:14:46:
         d7:8a:f2:f2:bb:0c:71:70:f2:1c:c5:44:e7:7f:ed:1d:ca:77:
         97:21:27:e7:af:26:3f:41:f9:1c:3a:23:97:bd:55:36:89:fc:
         00:99:4d:47:40:81:b6:37:79:49:9b:bd:c5:d0:2e:56:8c:e6:
         14:3a:1c:9b:ec:5c:2d:ce:aa:3e:c2:ff:5d:3b:28:d3:96:3e:
         cf:12:42:91:62:dc:7e:62:7e:c2:6a:cf:75:f1:1d:c0:e2:27:
         6d:80:03:02:e2:e8:cc:95:0b:21:94:29:60:69:51:99:b3:aa:
         f9:1d:00:ca:bf:27:49:be:f8:60:67:88:0f:e9:07:aa:5b:26:
         d1:48:cf:e7:db:e5:77:dc:3d:06:f0:0f:3f:3c:74:cf:1c:d7:
         6b:c9:2c:df:57:65:f8:25:38:df:5e:69:62:6b:a8:f9:02:16:
         d5:65:b2:53:65:c6:b7:69:9d:8d:d3:eb:66:60:28:8d:6a:5c:
         8e:25:09:5d:90:82:e2:65:5b:58:64:23:d3:5e:70:1f:63:11:
         c7:77:a6:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 21:39:20 2026 by rpki-client