Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3676F2F/53EB8D7C4BC211ED9C557CAAF1222468/bJsrNyrAnSupJEghWppeH0zsS-g.mft
File:                     bJsrNyrAnSupJEghWppeH0zsS-g.mft (raw, json)
Hash identifier:          QdMeOId216Oo4If7hznRw1ots1mplzfbSBzp+OIu1xo=
Subject key identifier:   E6:6A:10:9B:C1:49:20:8C:D6:0E:3E:E1:19:A6:6E:D7:4A:F0:5D:61
Authority key identifier: 6C:9B:2B:37:2A:C0:9D:2B:A9:24:48:21:5A:9A:5E:1F:4C:EC:4B:E8
Certificate issuer:       /CN=F3676F2FAF/serialNumber=6C9B2B372AC09D2BA92448215A9A5E1F4CEC4BE8
Certificate serial:       056B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/bJsrNyrAnSupJEghWppeH0zsS-g.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3676F2F/53EB8D7C4BC211ED9C557CAAF1222468/bJsrNyrAnSupJEghWppeH0zsS-g.mft
Manifest number:          056A
Signing time:             Sun 21 Jun 2026 03:03:11 +0000
Manifest this update:     Sun 21 Jun 2026 03:03:11 +0000
Manifest next update:     Tue 23 Jun 2026 03:03:11 +0000
Files and hashes:         1: bJsrNyrAnSupJEghWppeH0zsS-g.crl (hash: MH1oJnG7Y4FwxexKiU3th6CmlPr5Fs71RCX8M3FCX68=)
                          2: 3BBFB47A4BC311ED9F58BEACF1222468.roa (hash: Bo9mawZxkmKbqi5DFrR6q3VVhH05Go5EaTiUlVdrV5Y=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3676F2F/53EB8D7C4BC211ED9C557CAAF1222468/bJsrNyrAnSupJEghWppeH0zsS-g.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3676F2F/53EB8D7C4BC211ED9C557CAAF1222468/bJsrNyrAnSupJEghWppeH0zsS-g.mft
                          rsync://rpki.afrinic.net/repository/afrinic/bJsrNyrAnSupJEghWppeH0zsS-g.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Jun 2026 00:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1387 (0x56b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3676F2FAF, serialNumber=6C9B2B372AC09D2BA92448215A9A5E1F4CEC4BE8
        Validity
            Not Before: Jun 21 03:03:11 2026 GMT
            Not After : Jun 23 03:03:11 2026 GMT
        Subject: CN=6a37546f-1330
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d2:2d:3c:6e:e7:43:91:89:07:1a:d1:a7:c7:
                    3c:25:21:6e:40:a8:06:7d:c0:3d:d1:af:6d:4f:aa:
                    ee:83:8c:75:d7:24:bd:76:34:c1:95:bd:a2:1e:32:
                    17:3b:5d:c9:47:6d:1f:33:d3:55:f3:cb:06:85:7b:
                    ae:b2:9e:83:ef:2d:41:0a:fb:d2:40:1f:b7:0b:22:
                    b7:f5:f3:2a:26:93:78:6a:dc:f5:40:03:06:86:5c:
                    77:14:7c:ef:8b:b9:1b:2e:89:d2:37:f0:63:e4:3e:
                    b4:f6:0e:f9:0a:a4:fd:05:45:38:62:0a:68:5f:80:
                    98:a6:58:d1:17:8b:db:69:5e:b1:f6:24:ec:e1:3b:
                    f0:f0:80:b6:ca:65:c0:80:46:ce:7b:92:2d:b3:91:
                    86:93:ae:c6:ac:8e:41:5f:cb:eb:75:45:67:a3:f0:
                    61:ed:1d:ea:20:d6:1e:11:20:69:16:77:09:de:55:
                    86:5b:6b:7c:f5:2f:16:fb:fa:54:69:ca:4b:dd:1f:
                    22:1e:88:9f:3c:82:c0:a1:11:cc:c8:c9:d8:d6:07:
                    20:24:9b:59:4a:68:be:fc:f8:81:3f:de:5b:71:fb:
                    f6:a4:91:ca:99:bb:00:14:7f:e3:e7:dc:63:f7:73:
                    58:5e:dc:50:de:d6:16:dc:30:84:8c:a0:a6:25:6e:
                    ab:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:6A:10:9B:C1:49:20:8C:D6:0E:3E:E1:19:A6:6E:D7:4A:F0:5D:61
            X509v3 Authority Key Identifier:
                keyid:6C:9B:2B:37:2A:C0:9D:2B:A9:24:48:21:5A:9A:5E:1F:4C:EC:4B:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3676F2F/53EB8D7C4BC211ED9C557CAAF1222468/bJsrNyrAnSupJEghWppeH0zsS-g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/bJsrNyrAnSupJEghWppeH0zsS-g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3676F2F/53EB8D7C4BC211ED9C557CAAF1222468/bJsrNyrAnSupJEghWppeH0zsS-g.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:6d:d0:50:fa:c0:93:9b:de:74:e0:3b:6b:35:bc:95:60:4d:
         18:66:0d:9c:6e:42:72:dc:70:4e:b7:76:87:cb:5c:26:74:6e:
         61:36:61:8b:6d:e3:0f:26:9d:c1:03:cb:95:58:8d:7b:d2:85:
         7a:eb:b7:9a:3e:1d:bb:52:6c:d0:28:fb:d1:25:17:3d:67:07:
         f1:a0:16:db:9b:4e:07:fc:b2:8c:fc:d0:1d:1a:b5:99:1a:db:
         7c:7c:03:03:29:4d:64:70:9d:53:be:21:9d:7f:a7:15:84:76:
         3d:a0:2b:b6:3e:74:b3:c5:a7:78:0f:d8:51:cc:f5:55:c2:46:
         a6:dc:69:a2:15:e1:c2:a5:4c:29:dd:7c:18:df:b6:0c:bf:8b:
         8c:43:fd:95:41:11:33:d6:87:78:fa:5d:40:be:94:24:9e:c6:
         56:b2:a6:6f:98:b6:40:bb:7c:e2:90:48:ac:4e:e5:8b:a3:96:
         3e:84:d1:b1:44:bf:e1:f9:ea:a5:7e:29:27:e2:12:64:66:ca:
         d9:8c:bd:da:02:94:d9:a7:71:56:d9:6d:da:9a:4f:bb:d7:97:
         d3:62:75:f2:e6:a2:89:e3:f8:8c:54:d6:bf:57:c7:8b:ed:48:
         c0:b4:dd:25:f6:b2:81:2e:4a:b4:a6:33:02:a3:04:8d:dd:8f:
         a5:24:d5:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 23:35:49 2026 by rpki-client