Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365FF1A/B6DD6526334B11F1B4EC4DD8CE1D38B0/kp7No4BWDKPskIVIcnhYFN9ixFA.mft
File:                     kp7No4BWDKPskIVIcnhYFN9ixFA.mft (raw, json)
Hash identifier:          Sb6xnrBj0PVbKD5NpynJIXI6RE2N+10cQxZ2mdbyHAU=
Subject key identifier:   BA:ED:14:72:80:66:35:9E:5F:FF:6F:51:B3:5C:7F:59:44:38:1D:71
Authority key identifier: 92:9E:CD:A3:80:56:0C:A3:EC:90:85:48:72:78:58:14:DF:62:C4:50
Certificate issuer:       /CN=F365FF1AAF/serialNumber=929ECDA380560CA3EC90854872785814DF62C450
Certificate serial:       4E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/kp7No4BWDKPskIVIcnhYFN9ixFA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365FF1A/B6DD6526334B11F1B4EC4DD8CE1D38B0/kp7No4BWDKPskIVIcnhYFN9ixFA.mft
Manifest number:          4D
Signing time:             Sun 21 Jun 2026 05:33:41 +0000
Manifest this update:     Sun 21 Jun 2026 05:33:40 +0000
Manifest next update:     Tue 23 Jun 2026 05:33:40 +0000
Files and hashes:         1: kp7No4BWDKPskIVIcnhYFN9ixFA.crl (hash: YQJdjpID1K6ck+yCIL0ub/fsDnBcZDPL0yVOltz49Do=)
                          2: 4A1C51D0334C11F198B79CDACE1D38B0.roa (hash: MiCYmqOMJcOwUww3a0BQZWIqVrker46l5C67Rj9rwqs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365FF1A/B6DD6526334B11F1B4EC4DD8CE1D38B0/kp7No4BWDKPskIVIcnhYFN9ixFA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365FF1A/B6DD6526334B11F1B4EC4DD8CE1D38B0/kp7No4BWDKPskIVIcnhYFN9ixFA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/kp7No4BWDKPskIVIcnhYFN9ixFA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Jun 2026 00:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 78 (0x4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365FF1AAF, serialNumber=929ECDA380560CA3EC90854872785814DF62C450
        Validity
            Not Before: Jun 21 05:33:40 2026 GMT
            Not After : Jun 23 05:33:40 2026 GMT
        Subject: CN=6a3777b4-3fc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:db:e8:5f:64:c2:46:a9:1d:ce:6c:be:53:ab:
                    f3:4b:14:9a:65:75:51:73:b1:98:14:bd:af:19:d0:
                    ad:08:86:41:ec:d1:42:3f:f8:01:86:79:99:92:54:
                    e0:8f:d3:26:84:c5:8d:93:f3:03:b6:3a:27:e2:86:
                    56:98:ef:a5:92:92:d5:6d:93:4e:7a:74:b5:1d:d6:
                    2a:2d:cb:29:21:4f:64:a0:0b:0f:18:c7:c4:7f:38:
                    31:dc:47:2a:a9:b6:e6:ff:27:2b:2f:14:ff:ff:7b:
                    87:b5:f8:a6:91:11:be:3e:98:56:23:e7:39:85:af:
                    43:d8:18:a7:ea:28:44:4d:bf:33:2b:94:5d:8f:d4:
                    6d:a0:8f:8c:37:26:39:42:f7:79:c1:ae:36:25:76:
                    7f:71:e2:a4:d3:3f:51:9e:d8:01:8a:d2:9f:10:0d:
                    44:06:66:c4:e6:aa:e1:8c:ee:bd:f0:44:99:91:8d:
                    bb:a7:18:6a:5c:8a:8d:bb:fb:01:3f:12:5a:17:04:
                    8d:fe:b8:13:b3:58:e1:4b:7b:ef:91:ba:2c:63:6d:
                    b6:46:6e:3a:55:02:ec:47:6a:7f:bd:5f:b8:1d:bd:
                    16:0f:38:09:79:e0:48:6e:f5:9a:31:5d:f8:dd:03:
                    54:33:7c:16:9b:ea:49:f5:f4:03:ff:22:10:14:b0:
                    a1:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:ED:14:72:80:66:35:9E:5F:FF:6F:51:B3:5C:7F:59:44:38:1D:71
            X509v3 Authority Key Identifier:
                keyid:92:9E:CD:A3:80:56:0C:A3:EC:90:85:48:72:78:58:14:DF:62:C4:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365FF1A/B6DD6526334B11F1B4EC4DD8CE1D38B0/kp7No4BWDKPskIVIcnhYFN9ixFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kp7No4BWDKPskIVIcnhYFN9ixFA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365FF1A/B6DD6526334B11F1B4EC4DD8CE1D38B0/kp7No4BWDKPskIVIcnhYFN9ixFA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:0e:f1:0b:d4:e6:e8:13:09:f5:ff:0d:0a:4b:00:44:b9:40:
         bd:db:4b:ab:21:05:a7:61:35:12:b3:33:4f:27:4e:a7:5f:e3:
         2b:5b:b5:a0:e7:6f:29:43:46:3e:0c:46:69:e0:fe:f4:49:5d:
         bc:de:62:65:b6:9c:0f:c3:6f:eb:f8:aa:3a:05:8b:65:b9:7a:
         68:6c:01:83:4c:ce:4f:81:07:4f:d3:c8:38:18:c3:c6:b9:43:
         46:67:15:72:2a:7c:6d:f5:77:be:66:0a:a1:b5:2f:e3:e2:1b:
         25:92:64:a7:f6:f8:84:a3:c4:d7:06:41:c8:96:58:7c:de:5e:
         9e:c2:c9:22:ed:00:d3:d2:e5:06:2a:3d:59:3d:99:5a:30:3a:
         1e:bb:7e:64:93:00:88:77:0f:97:3e:d3:88:59:57:57:43:78:
         3a:bd:cd:7d:5d:24:4d:01:04:2c:42:56:f8:ef:bf:60:bc:17:
         26:18:5a:ec:a5:81:c3:9a:47:3b:d5:9a:38:f3:24:84:1c:c5:
         ce:b3:84:df:1e:ed:f6:dc:a1:c6:6d:11:06:71:3d:09:d9:16:
         88:ee:0f:6c:63:9b:31:be:0a:ac:9a:5a:c7:34:7b:35:22:8c:
         cd:91:af:7a:84:3e:f6:a9:04:fb:a0:55:2b:6c:47:8c:ec:2f:
         99:2c:35:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 23:38:16 2026 by rpki-client