Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3678967/4AA442F478D911EA9A80955CF8AEA228/XKqYLAMXkyYzLWt3CljoeVy4RZ8.mft
File:                     XKqYLAMXkyYzLWt3CljoeVy4RZ8.mft (raw, json)
Hash identifier:          L/EGoJGFGI8946p7InKhiLkDoErcE0Kjz2Aks6jKNjc=
Subject key identifier:   30:54:71:C2:5B:2C:CF:EC:49:F6:5F:72:C9:DD:57:92:DD:F4:F9:AE
Authority key identifier: 5C:AA:98:2C:03:17:93:26:33:2D:6B:77:0A:58:E8:79:5C:B8:45:9F
Certificate issuer:       /CN=F3678967AF/serialNumber=5CAA982C03179326332D6B770A58E8795CB8459F
Certificate serial:       091F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/XKqYLAMXkyYzLWt3CljoeVy4RZ8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3678967/4AA442F478D911EA9A80955CF8AEA228/XKqYLAMXkyYzLWt3CljoeVy4RZ8.mft
Manifest number:          091A
Signing time:             Sun 21 Jun 2026 01:44:58 +0000
Manifest this update:     Sun 21 Jun 2026 01:44:57 +0000
Manifest next update:     Tue 23 Jun 2026 01:44:57 +0000
Files and hashes:         1: XKqYLAMXkyYzLWt3CljoeVy4RZ8.crl (hash: qhV4+QxAumNWDZUvVnqzV9Dwu3FFMSg98ENXhvYsdEY=)
                          2: 420B22A27D0111F0BA56A0A5DAE4EC9C.roa (hash: FgbgmTnolN1lRJKNhlZr9zZr69rYAV0zr0aJY9PwsCo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3678967/4AA442F478D911EA9A80955CF8AEA228/XKqYLAMXkyYzLWt3CljoeVy4RZ8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3678967/4AA442F478D911EA9A80955CF8AEA228/XKqYLAMXkyYzLWt3CljoeVy4RZ8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/XKqYLAMXkyYzLWt3CljoeVy4RZ8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Jun 2026 00:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2335 (0x91f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3678967AF, serialNumber=5CAA982C03179326332D6B770A58E8795CB8459F
        Validity
            Not Before: Jun 21 01:44:57 2026 GMT
            Not After : Jun 23 01:44:57 2026 GMT
        Subject: CN=6a37421a-16ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:99:7b:4e:68:ef:53:93:b5:63:a0:19:f5:53:
                    f0:d4:09:1a:15:00:89:ec:39:11:96:ce:83:3c:cf:
                    d4:1e:c6:05:07:5d:68:44:18:33:d8:b9:50:4d:a5:
                    c9:27:3c:f5:07:2e:41:06:d9:9c:91:51:07:a8:f3:
                    1b:f6:94:19:5f:aa:69:36:66:16:b2:10:28:6c:2a:
                    b3:1b:59:80:81:22:a3:a2:b4:5b:6f:ae:09:a9:f4:
                    67:06:a7:f9:bc:63:37:33:5b:e2:7c:54:fc:bd:9d:
                    9a:0a:a7:ea:32:b5:60:b6:1b:d7:ca:4d:30:99:59:
                    cd:27:28:7b:2e:95:68:64:08:ab:90:a6:79:3a:4e:
                    d6:51:03:c0:4d:67:f5:ec:01:77:4e:5b:c9:f8:cd:
                    5f:c8:9a:ce:61:36:fd:19:b6:eb:d6:6d:8e:c9:f9:
                    ce:cf:bb:ae:da:7d:98:b2:7e:39:93:ee:8b:7d:39:
                    38:de:06:e7:d6:05:2a:31:5d:49:85:cd:e2:fa:a0:
                    a6:96:8e:96:9c:29:d9:5e:c6:31:d8:35:12:9e:51:
                    12:ff:28:c0:57:24:25:3e:d6:a0:0b:96:4b:c5:66:
                    34:a7:62:4c:1d:5f:cb:0a:e2:9b:72:1b:98:48:64:
                    13:20:d4:9f:6a:6f:94:d9:43:67:31:98:d2:0b:4c:
                    73:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:54:71:C2:5B:2C:CF:EC:49:F6:5F:72:C9:DD:57:92:DD:F4:F9:AE
            X509v3 Authority Key Identifier:
                keyid:5C:AA:98:2C:03:17:93:26:33:2D:6B:77:0A:58:E8:79:5C:B8:45:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3678967/4AA442F478D911EA9A80955CF8AEA228/XKqYLAMXkyYzLWt3CljoeVy4RZ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XKqYLAMXkyYzLWt3CljoeVy4RZ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3678967/4AA442F478D911EA9A80955CF8AEA228/XKqYLAMXkyYzLWt3CljoeVy4RZ8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:e4:21:9d:0e:78:c2:f9:02:b6:e8:a5:55:27:56:5a:7e:64:
         b2:6d:04:da:3e:05:49:63:24:d3:a4:2c:a1:9f:6e:44:e0:5c:
         0e:58:8b:24:ce:f5:79:cb:a6:5b:44:9b:fd:c4:62:a4:6e:9c:
         0a:7f:ed:a6:42:f5:11:82:6c:af:cc:fd:7c:78:c9:97:71:ad:
         13:91:b1:95:04:1a:5f:de:cc:a1:49:05:6c:6d:2c:e4:fc:36:
         a6:b3:f0:17:4e:f0:54:5f:3d:b9:65:8d:83:8c:45:4c:51:fd:
         a3:10:84:6d:ff:d4:0a:f6:9e:a4:04:0a:8a:24:eb:f4:a9:cf:
         eb:6d:1f:f4:2c:a9:2e:18:f8:66:21:e7:d4:23:d2:d2:1c:22:
         c0:cf:b8:48:e6:9f:07:42:6f:d9:37:41:58:b0:92:70:95:fc:
         d2:46:0f:f5:2e:d4:a2:d3:3b:54:d1:1a:65:a5:e5:68:b3:3f:
         f4:a1:76:aa:f4:e8:61:b7:f2:9e:e3:ef:07:df:7e:76:7c:fa:
         7f:84:68:f4:11:98:03:4f:15:65:de:d7:91:45:8c:df:1c:8c:
         5e:f8:9f:e2:24:7a:f6:b6:bf:70:88:1f:9c:21:a1:7b:6b:fe:
         79:3f:3a:02:1c:89:ac:c7:16:2e:d6:3b:15:8b:73:1f:48:1d:
         00:1f:43:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 23:45:59 2026 by rpki-client