Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368B126/3678BC0660EA11F1865AE3BCCE1D38B0/4EPMcRQm3hmg1hRMvrKT3nmzgnk.mft
File:                     4EPMcRQm3hmg1hRMvrKT3nmzgnk.mft (raw, json)
Hash identifier:          +MIhYbxptFaH+pPHtr4vb3Fs2kacWFVpgOzDTfUAZRo=
Subject key identifier:   D0:15:6F:02:C7:19:8A:38:E7:2F:5D:F6:D3:55:DC:54:6A:EA:87:A7
Authority key identifier: E0:43:CC:71:14:26:DE:19:A0:D6:14:4C:BE:B2:93:DE:79:B3:82:79
Certificate issuer:       /CN=F368B126AF/serialNumber=E043CC711426DE19A0D6144CBEB293DE79B38279
Certificate serial:       41
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/4EPMcRQm3hmg1hRMvrKT3nmzgnk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368B126/3678BC0660EA11F1865AE3BCCE1D38B0/4EPMcRQm3hmg1hRMvrKT3nmzgnk.mft
Manifest number:          40
Signing time:             Thu 06 Aug 2026 05:41:29 +0000
Manifest this update:     Thu 06 Aug 2026 05:41:28 +0000
Manifest next update:     Sat 08 Aug 2026 05:41:28 +0000
Files and hashes:         1: 4EPMcRQm3hmg1hRMvrKT3nmzgnk.crl (hash: SZwFyxE0dzzz5gc8N+/9BGvcje1Rn7mWVksnXB/Xles=)
                          2: BFDD710260EB11F1BC4C59C5CE1D38B0.roa (hash: nzHijC1btPOPq+rhPk1w9tV6+iAigyizeq9RqiGh1EI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368B126/3678BC0660EA11F1865AE3BCCE1D38B0/4EPMcRQm3hmg1hRMvrKT3nmzgnk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368B126/3678BC0660EA11F1865AE3BCCE1D38B0/4EPMcRQm3hmg1hRMvrKT3nmzgnk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/4EPMcRQm3hmg1hRMvrKT3nmzgnk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 08 Aug 2026 00:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 65 (0x41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368B126AF, serialNumber=E043CC711426DE19A0D6144CBEB293DE79B38279
        Validity
            Not Before: Aug  6 05:41:28 2026 GMT
            Not After : Aug  8 05:41:28 2026 GMT
        Subject: CN=6a741e88-415d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:c6:c6:0e:1c:df:9d:38:b8:82:75:36:ab:3e:
                    bc:73:ab:98:15:18:70:cf:2b:f1:f8:1e:d2:20:73:
                    1e:96:3f:1c:85:fa:8f:4e:16:0f:0a:b7:c1:ca:d3:
                    dd:4c:8a:42:18:61:fb:ea:32:6d:91:1e:2d:66:a7:
                    46:1e:ac:73:fc:65:6f:f4:c8:40:8f:59:c7:69:3c:
                    0e:aa:5c:68:c2:a4:59:b1:84:4f:1d:50:c2:61:43:
                    74:c7:9d:90:d2:87:26:89:56:41:83:33:74:16:e9:
                    00:0b:56:60:18:f1:5d:08:93:79:fe:8e:ea:74:f7:
                    90:31:0f:79:56:82:34:50:b7:68:96:e3:d2:10:65:
                    ad:5b:ba:29:f2:5b:24:80:15:59:7a:df:7e:64:b0:
                    10:68:7c:f6:aa:9b:d4:f3:aa:a6:d7:95:71:e0:8a:
                    49:08:7d:51:19:24:75:48:12:7a:a5:c9:99:aa:08:
                    ed:b3:66:71:fe:2d:82:f8:01:d9:ac:2a:6d:24:35:
                    84:04:13:19:e1:76:45:1d:5c:ac:ab:b9:79:70:03:
                    dc:44:1f:c0:91:87:9b:5e:db:15:6d:87:7f:92:f8:
                    a8:b5:8a:0c:c8:c5:d3:60:f3:f0:bd:f7:03:83:de:
                    f4:50:9f:1a:b9:a1:ba:a0:75:8a:0d:fd:31:bd:b5:
                    ff:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:15:6F:02:C7:19:8A:38:E7:2F:5D:F6:D3:55:DC:54:6A:EA:87:A7
            X509v3 Authority Key Identifier:
                keyid:E0:43:CC:71:14:26:DE:19:A0:D6:14:4C:BE:B2:93:DE:79:B3:82:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368B126/3678BC0660EA11F1865AE3BCCE1D38B0/4EPMcRQm3hmg1hRMvrKT3nmzgnk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4EPMcRQm3hmg1hRMvrKT3nmzgnk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368B126/3678BC0660EA11F1865AE3BCCE1D38B0/4EPMcRQm3hmg1hRMvrKT3nmzgnk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:bc:26:be:d0:16:bc:19:53:ac:65:24:dd:02:49:40:b5:d6:
         c0:ca:6f:79:26:36:e5:7d:24:a9:52:ad:e1:96:fe:93:e1:eb:
         48:79:d5:12:78:f5:b8:fc:e6:57:1f:ff:ce:dc:06:f4:ee:a4:
         08:7b:32:76:a9:5f:48:da:3f:1a:f8:89:e7:ce:b3:78:36:3b:
         d8:34:b8:72:19:62:f7:68:9f:d9:1c:6f:f3:30:2c:61:5b:0f:
         81:56:84:7c:8e:76:e8:8b:9b:9e:63:90:84:4e:d7:14:f4:42:
         68:55:06:a4:13:3d:7e:8b:6d:9a:9d:ff:0d:1b:3e:5c:98:09:
         78:10:12:38:cc:1f:42:50:97:48:24:94:50:26:05:b2:6f:75:
         19:90:f0:fe:07:ac:3b:61:a4:2b:de:b0:6c:68:8f:23:66:01:
         4a:96:71:e4:14:81:d7:73:9a:29:5c:a9:b8:cb:4e:de:ea:4d:
         98:37:7c:a0:34:30:03:5e:24:f5:74:d0:99:c7:c9:2f:be:4e:
         a5:32:a9:04:07:f9:b3:cd:33:92:d1:68:df:aa:5f:a6:ce:f3:
         34:99:fe:af:0e:57:f9:69:49:ee:7b:5c:a5:ea:c5:08:a4:3f:
         55:3d:0c:45:f2:eb:e9:57:c7:a3:d6:e8:2c:f1:38:54:3e:f6:
         f8:79:0a:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 11:41:21 2026 by rpki-client