Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367278D/1D3860A0852A11EE9DCD1B734AD9E6FC/AZxXrzU6qN3Wrl0ZtVHuBF7w5Gk.mft
File:                     AZxXrzU6qN3Wrl0ZtVHuBF7w5Gk.mft (raw, json)
Hash identifier:          eylplBSqQA7OBqaIIoHF3TTqx+BVGcEemPtSoS1zkEs=
Subject key identifier:   1E:D0:AF:4E:C5:74:2B:95:61:C7:13:28:92:E2:E7:AC:29:A3:F6:86
Authority key identifier: 01:9C:57:AF:35:3A:A8:DD:D6:AE:5D:19:B5:51:EE:04:5E:F0:E4:69
Certificate issuer:       /CN=F367278DAF/serialNumber=019C57AF353AA8DDD6AE5D19B551EE045EF0E469
Certificate serial:       03CB
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/AZxXrzU6qN3Wrl0ZtVHuBF7w5Gk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367278D/1D3860A0852A11EE9DCD1B734AD9E6FC/AZxXrzU6qN3Wrl0ZtVHuBF7w5Gk.mft
Manifest number:          03CA
Signing time:             Sun 21 Jun 2026 03:50:45 +0000
Manifest this update:     Sun 21 Jun 2026 03:50:44 +0000
Manifest next update:     Tue 23 Jun 2026 03:50:44 +0000
Files and hashes:         1: AZxXrzU6qN3Wrl0ZtVHuBF7w5Gk.crl (hash: 3BG/wtC1WxxG+TZqDYO2Y/ZxFF6p0d67NEgJfTb2EmY=)
                          2: C450DAB0852B11EEA03755784AD9E6FC.roa (hash: +41zmHN4DGC6b99Vfy5ZDUkMkjOSaYpSIq26rSH1w4E=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367278D/1D3860A0852A11EE9DCD1B734AD9E6FC/AZxXrzU6qN3Wrl0ZtVHuBF7w5Gk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367278D/1D3860A0852A11EE9DCD1B734AD9E6FC/AZxXrzU6qN3Wrl0ZtVHuBF7w5Gk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/AZxXrzU6qN3Wrl0ZtVHuBF7w5Gk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Jun 2026 00:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 971 (0x3cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367278DAF, serialNumber=019C57AF353AA8DDD6AE5D19B551EE045EF0E469
        Validity
            Not Before: Jun 21 03:50:44 2026 GMT
            Not After : Jun 23 03:50:44 2026 GMT
        Subject: CN=6a375f95-91fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:4a:3e:cf:54:3d:ca:c3:e1:be:c3:8c:2b:95:
                    7a:bc:af:ad:52:e1:7f:70:47:15:df:b5:f1:c3:57:
                    55:5f:8a:d2:f0:00:82:4c:52:74:48:f7:93:b2:f8:
                    12:27:c7:3c:3a:cc:ac:3e:6b:a0:f4:53:9f:fb:06:
                    c6:74:dc:6d:73:de:75:79:d7:77:71:08:fc:24:a6:
                    53:ca:50:93:2e:65:33:9b:bd:b7:2a:5c:03:53:b4:
                    55:d5:9e:95:62:fd:1a:36:fa:00:39:a0:34:cc:6d:
                    82:83:b5:64:62:0a:20:60:6b:bd:ff:d5:8b:25:11:
                    40:08:71:0d:ce:2f:6e:58:08:19:77:dd:85:eb:76:
                    9c:1f:9b:a7:ce:92:93:33:9d:19:ed:41:6b:99:11:
                    2d:c2:e2:35:a2:24:f3:39:df:90:11:ff:27:a9:f0:
                    e7:8e:74:a9:c6:2d:15:c3:3f:86:c1:4d:62:ae:67:
                    aa:37:98:62:5b:24:f8:75:35:9e:d8:8c:33:1c:16:
                    68:9e:c3:95:51:20:92:7c:30:9a:3d:ab:f1:f0:f9:
                    5b:29:1a:b4:2c:4b:0f:b1:4a:c7:74:c5:68:73:bb:
                    de:e0:8a:a5:5f:07:f0:3e:cb:f9:be:dd:1b:7d:05:
                    9a:5c:f6:49:16:16:c0:e2:4c:9f:e1:f3:3e:12:a5:
                    cc:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:D0:AF:4E:C5:74:2B:95:61:C7:13:28:92:E2:E7:AC:29:A3:F6:86
            X509v3 Authority Key Identifier:
                keyid:01:9C:57:AF:35:3A:A8:DD:D6:AE:5D:19:B5:51:EE:04:5E:F0:E4:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367278D/1D3860A0852A11EE9DCD1B734AD9E6FC/AZxXrzU6qN3Wrl0ZtVHuBF7w5Gk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/AZxXrzU6qN3Wrl0ZtVHuBF7w5Gk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367278D/1D3860A0852A11EE9DCD1B734AD9E6FC/AZxXrzU6qN3Wrl0ZtVHuBF7w5Gk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:5b:8b:58:de:be:ea:5b:15:1a:79:54:a1:d1:ba:80:97:9c:
         38:21:5f:8c:89:2a:24:d9:85:01:48:c2:70:2c:f9:11:06:e6:
         fa:10:b9:e0:8f:cd:30:63:a9:f8:35:f6:e5:86:87:08:43:95:
         70:fd:de:e3:45:f5:42:b8:7f:9f:b1:4c:4c:21:35:69:ce:a7:
         8f:b1:a0:16:fd:d2:31:43:36:e2:f6:1d:ca:c9:98:e8:7b:19:
         fa:b9:c8:80:90:b9:9f:ff:4c:6d:93:30:29:98:52:92:4e:70:
         cd:1e:c6:72:b7:65:2c:67:61:f4:9b:3f:3d:da:7f:ae:e6:4c:
         5c:fe:52:18:2f:7b:7f:13:71:90:7f:58:eb:89:db:a1:85:39:
         8e:e6:3b:bc:46:43:28:5c:53:21:69:dc:a1:2d:54:27:f4:6a:
         42:5b:d1:4f:2c:68:06:7a:f6:8e:67:03:3c:dc:6a:3a:c3:ad:
         e1:89:eb:22:5c:03:59:e8:20:ec:44:84:56:11:d4:d6:6e:a6:
         f8:74:00:04:c7:09:bb:07:67:ae:c1:68:d8:f8:00:24:27:95:
         52:26:3f:c5:ab:78:05:d3:8d:f9:29:30:fd:2d:a2:18:9d:f2:
         d7:a2:d4:e3:81:f6:62:02:0f:46:b4:87:07:9f:36:06:4b:b6:
         1a:fc:9c:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 23:43:49 2026 by rpki-client