Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367D68C/B68F7ED8920611EBAB13BC7CF8AEA228/xlOxWlDuQwH_JY2KKnwYY4PFDro.mft
File:                     xlOxWlDuQwH_JY2KKnwYY4PFDro.mft (raw, json)
Hash identifier:          QwsxZZ9Uph/xSkNWsft4EVRYIEosVDgKCVv55gcID/A=
Subject key identifier:   50:0A:EA:B1:CE:11:96:80:E7:0A:34:F5:E0:52:AF:0D:46:2C:64:86
Authority key identifier: C6:53:B1:5A:50:EE:43:01:FF:25:8D:8A:2A:7C:18:63:83:C5:0E:BA
Certificate issuer:       /CN=F367D68CAF/serialNumber=C653B15A50EE4301FF258D8A2A7C186383C50EBA
Certificate serial:       07A6
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/xlOxWlDuQwH_JY2KKnwYY4PFDro.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367D68C/B68F7ED8920611EBAB13BC7CF8AEA228/xlOxWlDuQwH_JY2KKnwYY4PFDro.mft
Manifest number:          07A5
Signing time:             Sun 21 Jun 2026 02:04:12 +0000
Manifest this update:     Sun 21 Jun 2026 02:04:11 +0000
Manifest next update:     Tue 23 Jun 2026 02:04:11 +0000
Files and hashes:         1: xlOxWlDuQwH_JY2KKnwYY4PFDro.crl (hash: LYZzQ8PYn9s5TfP3z/wEaYwBBpUMuHE+i8OCkYTCz8s=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367D68C/B68F7ED8920611EBAB13BC7CF8AEA228/xlOxWlDuQwH_JY2KKnwYY4PFDro.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367D68C/B68F7ED8920611EBAB13BC7CF8AEA228/xlOxWlDuQwH_JY2KKnwYY4PFDro.mft
                          rsync://rpki.afrinic.net/repository/afrinic/xlOxWlDuQwH_JY2KKnwYY4PFDro.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Jun 2026 00:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1958 (0x7a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367D68CAF, serialNumber=C653B15A50EE4301FF258D8A2A7C186383C50EBA
        Validity
            Not Before: Jun 21 02:04:11 2026 GMT
            Not After : Jun 23 02:04:11 2026 GMT
        Subject: CN=6a37469c-8891
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e0:ea:94:9d:ef:d6:bc:08:17:6c:00:a7:85:
                    d5:ce:63:52:b0:8d:94:30:8a:5d:aa:35:a4:2b:aa:
                    ff:20:c6:a6:f6:f5:a9:78:52:ca:04:13:b8:e4:07:
                    29:65:bb:5f:1b:83:85:22:69:27:e3:28:fd:aa:12:
                    15:5e:68:e0:cf:5d:aa:f0:95:a5:f4:0a:cb:00:0f:
                    6d:f5:69:20:de:6d:b7:16:7e:ed:ea:f1:b6:ec:f7:
                    3b:14:4d:b6:8a:2e:30:9f:5d:f4:ba:aa:65:5d:ed:
                    1d:0d:1a:7e:1d:2c:b3:61:99:76:a8:80:8d:d5:f1:
                    2d:e3:8d:46:6d:24:2c:39:aa:18:68:a0:20:82:2e:
                    f4:a8:04:4f:bd:4b:a1:c4:52:62:44:8f:6a:f4:65:
                    a9:eb:2f:a7:11:62:8e:c1:f1:1b:32:ba:af:b8:cc:
                    13:fe:fd:02:eb:95:64:40:b0:f1:35:44:e2:9f:6c:
                    8f:d1:ff:00:61:ee:d8:69:da:bf:00:8a:78:65:cb:
                    be:9b:b5:c0:8a:78:69:25:9a:fe:5a:01:be:ae:d3:
                    45:f7:c8:d4:ee:42:d5:78:64:e4:02:a1:2d:e4:96:
                    80:8b:b1:f4:09:13:36:c3:5a:c3:c1:3f:b4:1c:a8:
                    32:95:3a:6d:f7:ed:e2:40:6a:9f:4d:d7:c0:30:61:
                    a4:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:0A:EA:B1:CE:11:96:80:E7:0A:34:F5:E0:52:AF:0D:46:2C:64:86
            X509v3 Authority Key Identifier:
                keyid:C6:53:B1:5A:50:EE:43:01:FF:25:8D:8A:2A:7C:18:63:83:C5:0E:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367D68C/B68F7ED8920611EBAB13BC7CF8AEA228/xlOxWlDuQwH_JY2KKnwYY4PFDro.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xlOxWlDuQwH_JY2KKnwYY4PFDro.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367D68C/B68F7ED8920611EBAB13BC7CF8AEA228/xlOxWlDuQwH_JY2KKnwYY4PFDro.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:f5:dd:6b:2b:80:f7:28:5b:6e:0f:9c:c0:1c:15:b5:17:96:
         4c:fc:cd:b2:16:fd:41:c1:b6:ea:3d:17:e0:3a:32:5b:78:4a:
         ba:df:fe:59:56:ba:38:21:7c:0c:4e:2b:04:ce:ff:7b:f2:c5:
         53:d1:c6:66:0f:2b:2f:b8:4e:c3:41:1e:9d:b0:30:d4:f5:48:
         b9:0d:25:14:18:04:b3:5d:9f:26:d5:4e:40:0a:c0:06:38:95:
         ad:82:2e:f9:41:f7:33:4f:4f:4b:90:9c:f7:cc:ec:f5:19:96:
         9f:46:ec:8d:d7:9b:be:bd:89:a8:3f:9d:cd:84:83:46:e5:61:
         df:71:95:5f:87:c8:d3:81:ce:94:20:1b:36:ca:21:5c:0f:7b:
         59:8e:b9:61:a5:d6:fe:d8:68:10:97:14:1d:8c:5b:d8:68:4a:
         54:65:8a:9f:95:77:86:b6:df:54:3f:46:03:36:7e:98:c2:09:
         7d:b5:23:ac:22:99:9f:06:a0:6f:18:fd:20:38:cf:a1:5c:fd:
         56:81:99:09:f0:48:da:eb:15:7b:d2:14:5d:8d:3a:fb:74:02:
         21:42:f2:cc:16:bd:1a:69:29:13:79:22:64:ee:40:10:a6:98:
         9c:10:a8:b7:c6:cf:5c:cc:17:24:9c:47:3b:78:00:80:26:d6:
         fa:f0:79:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 23:39:39 2026 by rpki-client