Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36858D5/CE72EFB840B311EEB99A38154AD9E6FC/0uDwPq7oAqkBwlcRKP55pj80aSw.mft
File:                     0uDwPq7oAqkBwlcRKP55pj80aSw.mft (raw, json)
Hash identifier:          DrrfAsSNbrBffPnJyju3sCfrBQoqZeJeDamvVmTvZpM=
Subject key identifier:   0B:0B:22:4A:CF:B1:50:75:E2:81:23:0A:CF:76:CB:A2:7C:F3:0E:E8
Authority key identifier: D2:E0:F0:3E:AE:E8:02:A9:01:C2:57:11:28:FE:79:A6:3F:34:69:2C
Certificate issuer:       /CN=F36858D5AF/serialNumber=D2E0F03EAEE802A901C2571128FE79A63F34692C
Certificate serial:       03F9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/0uDwPq7oAqkBwlcRKP55pj80aSw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36858D5/CE72EFB840B311EEB99A38154AD9E6FC/0uDwPq7oAqkBwlcRKP55pj80aSw.mft
Manifest number:          03F8
Signing time:             Thu 07 May 2026 03:39:16 +0000
Manifest this update:     Thu 07 May 2026 03:39:15 +0000
Manifest next update:     Sat 09 May 2026 03:39:15 +0000
Files and hashes:         1: 0uDwPq7oAqkBwlcRKP55pj80aSw.crl (hash: 8S8nf/dCMTlIgTZ766r1RfbyOBJcjhvAN+POuUlq1oA=)
                          2: 6C083968730911EEB676D5174AD9E6FC.roa (hash: GPazHsxOeA8iw549I//PnsuiDjidxxug1DVogvWrQ6I=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36858D5/CE72EFB840B311EEB99A38154AD9E6FC/0uDwPq7oAqkBwlcRKP55pj80aSw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36858D5/CE72EFB840B311EEB99A38154AD9E6FC/0uDwPq7oAqkBwlcRKP55pj80aSw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/0uDwPq7oAqkBwlcRKP55pj80aSw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 09 May 2026 00:07:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1017 (0x3f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36858D5AF, serialNumber=D2E0F03EAEE802A901C2571128FE79A63F34692C
        Validity
            Not Before: May  7 03:39:15 2026 GMT
            Not After : May  9 03:39:15 2026 GMT
        Subject: CN=69fc0964-a427
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:28:49:a3:14:e8:1c:88:ec:f9:61:0e:fe:e4:
                    c2:d6:d1:5e:d4:31:27:db:fa:67:b9:aa:6a:22:ba:
                    17:4b:a0:b3:4f:69:3e:d8:3b:c6:0e:c2:c4:a3:9a:
                    38:6b:95:62:37:c3:09:7e:6a:87:0b:26:da:e7:a1:
                    57:38:0a:3a:27:b1:81:46:1b:54:95:e6:f1:eb:83:
                    db:d6:b8:2f:61:74:d8:2a:78:14:4e:bd:5c:4c:5e:
                    b3:b2:14:49:fc:8e:d5:d9:f1:d3:dd:f0:d3:7f:ce:
                    d7:9c:c2:ef:aa:0c:3e:9d:28:f2:f2:fb:b8:49:60:
                    37:96:0a:d0:99:49:3d:2d:15:1c:42:53:bb:d0:14:
                    aa:24:94:86:80:04:e6:c2:fc:d6:c8:ce:64:1f:f7:
                    d3:44:87:59:bc:c2:22:4a:d8:23:cb:cd:54:be:41:
                    66:92:eb:7d:bb:9c:d7:54:24:cc:d6:cc:f0:87:2e:
                    7e:c2:25:f8:db:f8:54:1c:1e:8f:0c:11:af:8d:96:
                    92:02:f1:0b:7b:76:db:86:db:2e:62:0b:46:41:0f:
                    10:22:73:e6:8f:12:d8:a9:03:7f:02:b3:3b:8f:4b:
                    91:a7:a7:89:22:db:4e:55:7f:4c:05:a4:61:70:b2:
                    db:2c:3c:1f:86:10:6a:45:89:9d:f6:1f:24:35:4c:
                    eb:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:0B:22:4A:CF:B1:50:75:E2:81:23:0A:CF:76:CB:A2:7C:F3:0E:E8
            X509v3 Authority Key Identifier:
                keyid:D2:E0:F0:3E:AE:E8:02:A9:01:C2:57:11:28:FE:79:A6:3F:34:69:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36858D5/CE72EFB840B311EEB99A38154AD9E6FC/0uDwPq7oAqkBwlcRKP55pj80aSw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0uDwPq7oAqkBwlcRKP55pj80aSw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36858D5/CE72EFB840B311EEB99A38154AD9E6FC/0uDwPq7oAqkBwlcRKP55pj80aSw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:42:a9:21:ab:d3:cb:b4:50:6b:cf:ce:a4:7e:09:a2:6b:50:
         9f:65:23:46:77:da:15:92:e2:b9:e9:df:da:8c:ae:9f:3b:6f:
         d0:86:0a:2d:29:09:5d:30:c5:5f:4d:3b:12:38:42:77:a4:fb:
         49:f4:f8:09:f1:b6:9a:29:6a:5c:c9:97:49:eb:76:1c:6e:18:
         78:48:d7:64:43:35:23:94:1f:dd:05:8b:60:69:fa:8f:e7:73:
         17:67:8c:e6:eb:2a:fa:4a:44:84:43:9a:0a:83:df:6e:bb:44:
         e5:90:16:1c:8d:56:ea:56:5d:24:19:2d:cb:3b:6a:fc:c5:25:
         ea:d6:47:01:cc:dd:e6:2c:5a:a8:13:b3:4d:58:64:4c:84:fb:
         eb:5b:92:43:8e:9e:3d:60:4b:75:b8:0d:78:ed:01:87:7d:d5:
         43:12:05:ee:70:d4:18:33:04:68:1c:4f:4c:54:cc:f8:c2:be:
         13:f8:8d:9c:b8:5b:77:ab:b4:0d:7e:87:cb:f1:9d:ba:02:71:
         22:40:c0:88:b5:76:8f:00:36:ea:af:83:26:31:b7:ad:a6:3a:
         b9:96:07:e4:d8:fa:0f:ed:bb:2d:13:93:07:77:1b:08:bb:3b:
         06:b5:8a:4d:0f:d9:66:35:42:67:9c:72:bc:4b:45:2b:05:66:
         a7:10:70:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 21:37:53 2026 by rpki-client