Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366A8BF/DCA1C652A38D11EF92613781762E951A/27tnLt0H4F5FzAKFWwHIE75xXoE.mft
File:                     27tnLt0H4F5FzAKFWwHIE75xXoE.mft (raw, json)
Hash identifier:          423eBXwAtB+4RCf93DgD2Isn+ncFMoqy54AzzmSMSGY=
Subject key identifier:   F2:FD:0D:B7:74:58:85:1E:46:3F:53:FB:F6:33:D4:5F:6B:F7:BD:AD
Authority key identifier: DB:BB:67:2E:DD:07:E0:5E:45:CC:02:85:5B:01:C8:13:BE:71:5E:81
Certificate issuer:       /CN=F366A8BFAF/serialNumber=DBBB672EDD07E05E45CC02855B01C813BE715E81
Certificate serial:       0255
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/27tnLt0H4F5FzAKFWwHIE75xXoE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366A8BF/DCA1C652A38D11EF92613781762E951A/27tnLt0H4F5FzAKFWwHIE75xXoE.mft
Manifest number:          0254
Signing time:             Sun 21 Jun 2026 04:38:16 +0000
Manifest this update:     Sun 21 Jun 2026 04:38:15 +0000
Manifest next update:     Tue 23 Jun 2026 04:38:15 +0000
Files and hashes:         1: 27tnLt0H4F5FzAKFWwHIE75xXoE.crl (hash: DKOu3D7oi+6AQjObmC+8V2SNHX3CVHKX58sRBQNGyxY=)
                          2: 0C2C5B02A38F11EF9EE69A89762E951A.roa (hash: ECtKxH32G5BPQeuP9KuP/2ILf6so8Vog6XvAyzLxNpo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366A8BF/DCA1C652A38D11EF92613781762E951A/27tnLt0H4F5FzAKFWwHIE75xXoE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366A8BF/DCA1C652A38D11EF92613781762E951A/27tnLt0H4F5FzAKFWwHIE75xXoE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/27tnLt0H4F5FzAKFWwHIE75xXoE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Jun 2026 00:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 597 (0x255)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366A8BFAF, serialNumber=DBBB672EDD07E05E45CC02855B01C813BE715E81
        Validity
            Not Before: Jun 21 04:38:15 2026 GMT
            Not After : Jun 23 04:38:15 2026 GMT
        Subject: CN=6a376ab8-3e76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:7a:90:e6:09:a9:c6:37:d2:59:74:7a:12:c2:
                    09:c9:2a:ea:b0:52:b5:e3:09:29:05:2c:54:6f:b8:
                    11:fd:c4:86:cf:b0:c8:ee:4d:36:28:63:42:c0:9e:
                    a9:fe:16:95:76:78:c8:d7:e9:72:b0:e9:54:b1:76:
                    c2:32:92:52:ef:0a:a2:74:c9:6c:0b:15:ad:8f:17:
                    fa:a7:65:f8:ee:a2:81:c0:3e:38:3b:42:ea:b6:ba:
                    f8:15:ed:54:12:73:88:37:97:85:dd:63:3b:fd:ac:
                    cc:cd:31:d3:a0:45:6d:ca:6f:72:33:be:e0:90:a8:
                    67:d4:58:a4:f5:8c:99:f0:fe:f0:eb:e5:43:2b:85:
                    d1:00:83:b4:47:9b:93:a6:83:9e:20:4e:12:86:d5:
                    8c:f1:ad:26:b2:cb:e0:26:72:4c:c6:fe:23:16:ae:
                    a8:74:8f:fa:11:b0:85:c5:2f:06:0b:29:f6:2f:e7:
                    5d:65:7a:45:76:9a:96:52:f8:e7:42:51:12:2b:43:
                    8b:19:6d:5a:b1:da:6a:80:fd:5d:3f:3a:0b:59:33:
                    45:fb:73:ca:16:34:f4:3c:4f:7c:42:98:c4:85:6c:
                    32:e4:09:44:73:17:d8:1f:da:b0:80:e8:a2:e8:26:
                    ab:bb:c7:31:bf:20:db:ba:d4:5a:a2:e2:d2:96:f9:
                    aa:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:FD:0D:B7:74:58:85:1E:46:3F:53:FB:F6:33:D4:5F:6B:F7:BD:AD
            X509v3 Authority Key Identifier:
                keyid:DB:BB:67:2E:DD:07:E0:5E:45:CC:02:85:5B:01:C8:13:BE:71:5E:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366A8BF/DCA1C652A38D11EF92613781762E951A/27tnLt0H4F5FzAKFWwHIE75xXoE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/27tnLt0H4F5FzAKFWwHIE75xXoE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366A8BF/DCA1C652A38D11EF92613781762E951A/27tnLt0H4F5FzAKFWwHIE75xXoE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:ca:dd:d7:02:b2:71:fe:3a:a3:76:29:53:27:a3:0c:b7:1f:
         49:5d:8c:08:31:20:e9:11:c2:7e:b0:78:f1:dc:0e:58:e0:98:
         90:06:50:83:4c:9b:a3:05:60:68:26:94:ed:13:bf:b5:cd:45:
         fc:4a:05:fe:19:ba:e2:7c:3b:d1:1f:13:d0:3e:95:56:7a:25:
         6b:8f:0b:ae:20:0d:33:c1:ef:7a:38:9c:6a:81:54:25:c9:b7:
         1f:2b:35:41:d7:67:e2:aa:ec:69:6c:b5:11:68:01:82:f7:31:
         a1:b9:91:94:53:72:da:3c:09:52:3c:d8:15:f4:ab:e2:fe:59:
         a5:d4:b9:ff:ec:30:f7:cb:61:ce:0a:dc:16:5b:a6:96:f4:0b:
         0e:e0:80:88:c2:d2:2f:7d:ba:ea:c1:96:e2:d3:6e:1c:89:1c:
         24:de:88:18:20:bc:37:08:7c:11:4e:02:1e:0c:0b:9d:24:99:
         ef:46:4f:1d:d9:56:d4:81:c6:49:8e:12:7b:62:30:6a:77:ff:
         21:22:13:00:5e:3d:5f:7b:a8:77:c9:f5:b0:a6:32:7d:1a:68:
         64:12:34:af:cc:84:14:cd:15:20:fc:34:05:6b:14:3b:94:0e:
         fa:20:a6:82:1d:a0:6e:25:8e:cf:04:c2:d9:be:2e:6d:06:70:
         16:af:62:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 23:45:16 2026 by rpki-client