Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368948B/57871110B09A11EFBA5BE8A0762E951A/wrcqDttgGOuk7XzTA12xMvRJwB0.mft
File:                     wrcqDttgGOuk7XzTA12xMvRJwB0.mft (raw, json)
Hash identifier:          FCpCxiVMcLM5L58TfTescv3RajqVFmH17diWd2XB+gI=
Subject key identifier:   0A:0A:7A:AB:A2:3C:4F:A6:B1:E9:5D:30:47:81:F1:D1:65:AE:D3:F9
Authority key identifier: C2:B7:2A:0E:DB:60:18:EB:A4:ED:7C:D3:03:5D:B1:32:F4:49:C0:1D
Certificate issuer:       /CN=F368948BAF/serialNumber=C2B72A0EDB6018EBA4ED7CD3035DB132F449C01D
Certificate serial:       0248
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/wrcqDttgGOuk7XzTA12xMvRJwB0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368948B/57871110B09A11EFBA5BE8A0762E951A/wrcqDttgGOuk7XzTA12xMvRJwB0.mft
Manifest number:          0245
Signing time:             Sun 21 Jun 2026 04:40:56 +0000
Manifest this update:     Sun 21 Jun 2026 04:40:55 +0000
Manifest next update:     Tue 23 Jun 2026 04:40:55 +0000
Files and hashes:         1: wrcqDttgGOuk7XzTA12xMvRJwB0.crl (hash: sKoo3RHyyYd2pCAFdsv0i7ZeaBjZFgbTUMkScbgnXc8=)
                          2: 2B39C894B3A811EFB417EA70762E951A.roa (hash: JbNHPWtSF1vQZDwXPX2JIdA3ze8jlLo9getuU4tbAN4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368948B/57871110B09A11EFBA5BE8A0762E951A/wrcqDttgGOuk7XzTA12xMvRJwB0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368948B/57871110B09A11EFBA5BE8A0762E951A/wrcqDttgGOuk7XzTA12xMvRJwB0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/wrcqDttgGOuk7XzTA12xMvRJwB0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Jun 2026 00:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 584 (0x248)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368948BAF, serialNumber=C2B72A0EDB6018EBA4ED7CD3035DB132F449C01D
        Validity
            Not Before: Jun 21 04:40:55 2026 GMT
            Not After : Jun 23 04:40:55 2026 GMT
        Subject: CN=6a376b58-5f39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:55:18:14:a6:e7:84:a1:1f:20:b6:f1:6c:a8:
                    23:56:0c:d3:a1:98:45:6f:5a:b6:c9:ee:91:93:4a:
                    d7:14:a8:07:5e:3b:06:dd:40:6f:ec:fd:6c:37:26:
                    ce:2f:33:a6:16:0b:4a:f3:af:02:de:3e:7e:7c:4e:
                    ed:a6:87:64:46:a0:97:84:de:24:1e:9d:e6:6d:88:
                    d6:74:e5:c0:7d:84:29:e3:66:46:e3:59:86:25:53:
                    20:cf:6b:75:e8:12:67:c2:83:69:cf:7f:81:f1:01:
                    ee:1d:55:99:3b:5b:37:48:b9:c9:50:45:0a:8e:0d:
                    75:42:16:59:e6:3a:a4:98:7d:a4:2d:6e:bc:fa:8d:
                    15:84:f5:af:ef:b3:d9:87:e9:95:a1:37:78:af:43:
                    72:05:e1:3a:e6:61:d5:be:2c:e6:d5:0d:5c:a6:fb:
                    22:b4:7d:17:6d:4c:da:8f:bc:86:cc:5b:9e:78:f3:
                    50:f9:f1:2c:9a:03:04:c4:a5:fa:fb:70:41:f1:8f:
                    14:05:4c:7f:7f:86:97:92:44:52:9f:6e:a5:8e:4f:
                    97:8d:87:51:7d:ad:d6:f4:37:f0:09:1e:ed:a9:0b:
                    10:a2:d8:9f:e4:16:1d:7f:84:84:44:d5:a3:7f:a5:
                    25:9b:35:34:a5:d8:f4:b0:06:38:4c:eb:8e:87:c2:
                    1e:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:0A:7A:AB:A2:3C:4F:A6:B1:E9:5D:30:47:81:F1:D1:65:AE:D3:F9
            X509v3 Authority Key Identifier:
                keyid:C2:B7:2A:0E:DB:60:18:EB:A4:ED:7C:D3:03:5D:B1:32:F4:49:C0:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368948B/57871110B09A11EFBA5BE8A0762E951A/wrcqDttgGOuk7XzTA12xMvRJwB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wrcqDttgGOuk7XzTA12xMvRJwB0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368948B/57871110B09A11EFBA5BE8A0762E951A/wrcqDttgGOuk7XzTA12xMvRJwB0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:33:34:b3:08:8e:4a:f7:ac:04:55:6f:9a:7b:1d:7d:62:52:
         79:e1:c8:27:95:a4:45:d1:bf:91:56:9f:85:f7:e4:3a:70:e8:
         9c:9e:87:9e:00:5e:45:c4:ac:c7:a7:e6:b7:de:2b:92:88:96:
         ca:1b:71:e6:6a:bf:33:5f:20:14:b6:79:df:50:f9:83:48:b5:
         40:9b:d5:07:7c:79:e2:a6:7b:22:4c:8a:e8:8b:b2:98:74:eb:
         53:57:bb:d0:55:58:fc:1b:d6:15:4a:22:ae:6e:f8:2f:dd:7b:
         e0:ec:22:5c:51:ad:ec:77:eb:db:5b:2f:c1:c8:08:36:ba:25:
         57:a2:7b:5d:bd:13:96:58:81:4e:b9:4e:a0:e1:5d:e1:e5:33:
         30:84:7f:3d:3a:59:8d:0b:75:85:11:b7:49:7a:7a:c3:38:8e:
         0b:16:00:d1:b9:e1:bb:8c:10:68:07:50:2e:0f:7f:93:a1:c0:
         69:63:65:6b:5a:f2:1a:b0:ed:48:2a:71:d6:74:37:cf:f8:d9:
         b7:00:31:17:5f:05:4e:ad:e6:00:9f:0b:90:10:b3:95:b7:d6:
         db:c5:c9:b1:48:59:c1:b8:f1:fc:37:1a:1e:ba:b4:ff:19:d6:
         57:04:01:2e:3f:d0:96:6e:9e:d5:6e:c1:56:f7:80:be:9d:66:
         a4:e0:c6:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 23:45:47 2026 by rpki-client