Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3688596/59EF2C686E6311E585534430F8AEA228/0qqhpeGuF8P2b2b6cdmmEWGVp4w.mft
File:                     0qqhpeGuF8P2b2b6cdmmEWGVp4w.mft (raw, json)
Hash identifier:          yZoRu1yekJhQpUds6cG7XA6KXKYkNtdndgkkwxsCgY4=
Subject key identifier:   03:97:F0:96:36:49:0E:28:75:17:96:A8:01:D6:F3:6F:A0:4E:D8:EA
Authority key identifier: D2:AA:A1:A5:E1:AE:17:C3:F6:6F:66:FA:71:D9:A6:11:61:95:A7:8C
Certificate issuer:       /CN=F3688596AF/serialNumber=D2AAA1A5E1AE17C3F66F66FA71D9A6116195A78C
Certificate serial:       0F8D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/0qqhpeGuF8P2b2b6cdmmEWGVp4w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3688596/59EF2C686E6311E585534430F8AEA228/0qqhpeGuF8P2b2b6cdmmEWGVp4w.mft
Manifest number:          0F8D
Signing time:             Sun 21 Jun 2026 00:57:57 +0000
Manifest this update:     Sun 21 Jun 2026 00:57:56 +0000
Manifest next update:     Tue 23 Jun 2026 00:57:56 +0000
Files and hashes:         1: 0qqhpeGuF8P2b2b6cdmmEWGVp4w.crl (hash: gmDsuxuHzDWoQLAkXcVZCykmNyI/eTpjCraL90u2RAk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3688596/59EF2C686E6311E585534430F8AEA228/0qqhpeGuF8P2b2b6cdmmEWGVp4w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3688596/59EF2C686E6311E585534430F8AEA228/0qqhpeGuF8P2b2b6cdmmEWGVp4w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/0qqhpeGuF8P2b2b6cdmmEWGVp4w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Jun 2026 00:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3981 (0xf8d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3688596AF, serialNumber=D2AAA1A5E1AE17C3F66F66FA71D9A6116195A78C
        Validity
            Not Before: Jun 21 00:57:56 2026 GMT
            Not After : Jun 23 00:57:56 2026 GMT
        Subject: CN=6a373715-1aba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:7f:8d:15:aa:6d:2d:51:4e:90:22:3c:a2:68:
                    27:aa:8e:7d:8a:43:a4:45:d9:74:d4:d0:eb:2e:d5:
                    95:2b:4f:b7:48:bc:7a:6f:4c:1b:5e:45:cc:22:11:
                    4a:12:b2:23:d0:22:e3:a8:68:d5:b4:06:0d:d5:9c:
                    24:e0:25:80:ad:03:03:64:52:de:f5:ac:4a:6c:c1:
                    bc:02:c8:48:c2:54:36:4d:a9:77:90:ae:7b:20:dc:
                    15:97:de:d5:13:18:ac:cd:e3:93:d6:65:69:14:17:
                    64:61:44:44:f7:df:26:33:28:73:7f:b0:5a:fe:2e:
                    9a:6e:e0:d1:47:ef:7b:31:50:a7:77:0d:12:a9:a2:
                    3c:ee:bd:22:e7:60:71:11:97:76:41:b9:3b:f6:48:
                    e4:94:be:58:c3:ac:0e:a2:f3:8e:bc:07:06:36:d2:
                    40:41:fe:62:ec:ee:55:4d:13:7a:63:99:13:51:9d:
                    b5:05:be:8d:72:1c:1e:b8:d6:e7:9a:fd:dd:32:64:
                    a6:c4:e2:28:06:a7:e0:77:25:d8:f0:96:17:1d:40:
                    d7:be:60:51:be:23:8f:47:f1:e1:0c:db:e6:79:a1:
                    17:3b:e2:f6:70:06:7b:41:3f:02:aa:1d:dc:b3:06:
                    b1:e1:ab:6e:8e:af:82:09:0e:63:d7:da:a8:b9:7c:
                    20:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:97:F0:96:36:49:0E:28:75:17:96:A8:01:D6:F3:6F:A0:4E:D8:EA
            X509v3 Authority Key Identifier:
                keyid:D2:AA:A1:A5:E1:AE:17:C3:F6:6F:66:FA:71:D9:A6:11:61:95:A7:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3688596/59EF2C686E6311E585534430F8AEA228/0qqhpeGuF8P2b2b6cdmmEWGVp4w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0qqhpeGuF8P2b2b6cdmmEWGVp4w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3688596/59EF2C686E6311E585534430F8AEA228/0qqhpeGuF8P2b2b6cdmmEWGVp4w.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:19:d8:bb:db:f3:cb:00:6a:8a:8e:9f:5d:82:e9:99:c2:f3:
         41:86:44:3a:cc:d6:1a:70:30:b5:30:1c:ee:08:65:56:ed:66:
         cb:1a:ee:1d:7a:b8:44:d8:98:17:bc:03:87:fb:d0:6a:29:34:
         d2:06:6d:1f:ea:7c:61:a5:17:e6:ca:49:6e:8a:ba:fc:ab:31:
         c6:1e:3a:6e:26:5f:52:8b:4f:2e:e1:ec:61:33:78:15:d8:63:
         29:8c:dd:f1:c1:98:b1:af:3b:13:57:e4:e6:b4:93:3a:15:31:
         35:9c:1b:63:2d:a0:11:83:d1:e9:8a:b3:de:f4:61:44:bb:ff:
         c5:af:60:6d:aa:20:ab:65:6b:e6:e3:de:85:c8:95:19:2e:66:
         fb:11:90:18:e1:d8:72:cb:16:dd:fa:7f:b1:6b:fd:9c:6d:64:
         a6:fc:d5:c4:3e:61:8c:98:c9:81:95:3e:dc:2d:ac:44:b3:98:
         cc:94:fc:98:0f:79:18:5d:78:3c:43:b2:10:a5:64:ef:92:e3:
         2e:66:fa:75:32:d5:c3:c9:65:f8:6f:d8:39:a5:c1:a0:9e:4a:
         d3:b8:ca:4a:e4:22:a1:06:56:90:0e:6d:04:23:97:74:ff:88:
         93:fd:5e:fc:b7:ae:89:8c:4d:b1:29:93:e5:61:75:95:8d:d0:
         57:ce:61:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 23:35:51 2026 by rpki-client