Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368B126/3678BC0660EA11F1865AE3BCCE1D38B0/4EPMcRQm3hmg1hRMvrKT3nmzgnk.mft
File:                     4EPMcRQm3hmg1hRMvrKT3nmzgnk.mft (raw, json)
Hash identifier:          xyQTuDEh/bHMfxcEvJo375YHGtNyMCELj4dh1TasuW4=
Subject key identifier:   C9:E2:57:DC:99:05:F1:D7:27:F0:53:58:B1:77:0B:C2:44:BC:C6:4A
Authority key identifier: E0:43:CC:71:14:26:DE:19:A0:D6:14:4C:BE:B2:93:DE:79:B3:82:79
Certificate issuer:       /CN=F368B126AF/serialNumber=E043CC711426DE19A0D6144CBEB293DE79B38279
Certificate serial:       13
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/4EPMcRQm3hmg1hRMvrKT3nmzgnk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368B126/3678BC0660EA11F1865AE3BCCE1D38B0/4EPMcRQm3hmg1hRMvrKT3nmzgnk.mft
Manifest number:          12
Signing time:             Sun 21 Jun 2026 05:41:23 +0000
Manifest this update:     Sun 21 Jun 2026 05:41:23 +0000
Manifest next update:     Tue 23 Jun 2026 05:41:23 +0000
Files and hashes:         1: 4EPMcRQm3hmg1hRMvrKT3nmzgnk.crl (hash: tyjMYVseBB2tluclY9Y2JBYBiaF5EITLIbmRBNck16k=)
                          2: BFDD710260EB11F1BC4C59C5CE1D38B0.roa (hash: nzHijC1btPOPq+rhPk1w9tV6+iAigyizeq9RqiGh1EI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368B126/3678BC0660EA11F1865AE3BCCE1D38B0/4EPMcRQm3hmg1hRMvrKT3nmzgnk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368B126/3678BC0660EA11F1865AE3BCCE1D38B0/4EPMcRQm3hmg1hRMvrKT3nmzgnk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/4EPMcRQm3hmg1hRMvrKT3nmzgnk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Jun 2026 00:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19 (0x13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368B126AF, serialNumber=E043CC711426DE19A0D6144CBEB293DE79B38279
        Validity
            Not Before: Jun 21 05:41:23 2026 GMT
            Not After : Jun 23 05:41:23 2026 GMT
        Subject: CN=6a377983-ccbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ed:a7:8d:60:a7:0b:0f:d6:9e:91:e0:36:fd:
                    18:f5:84:9a:6a:76:07:0f:15:1b:df:8b:96:f7:d1:
                    47:3e:32:0b:0f:af:4a:65:4c:12:10:dc:6d:d7:7d:
                    6c:6e:fa:d9:cf:94:21:c8:a3:16:da:49:58:aa:9e:
                    7c:cf:2d:45:42:79:c9:99:2f:03:42:d1:aa:c8:64:
                    90:00:31:de:e3:a0:71:60:ea:ca:51:12:b6:ca:85:
                    2a:fb:30:d1:fc:ad:a7:20:8b:bc:7a:b1:ed:fd:34:
                    8e:ad:11:32:b3:1c:51:d2:e9:90:73:b2:01:c6:5f:
                    c2:31:02:7a:80:a4:18:0f:c7:bb:c4:3e:bc:ae:ca:
                    cb:db:39:1b:26:8a:cb:b2:17:ec:6b:2f:72:a7:c4:
                    df:48:24:52:90:be:f4:25:aa:83:2b:b5:6b:2b:ea:
                    45:77:73:5a:29:6a:6c:0c:9e:4b:59:00:90:ee:76:
                    f2:be:4f:0f:d7:51:ab:c1:c8:90:34:04:85:57:e3:
                    97:5d:d6:c4:81:69:d5:4f:c5:29:ec:16:e7:01:15:
                    f2:16:36:c4:86:a2:52:7b:99:14:9b:64:2d:f6:5b:
                    2c:bf:ef:10:26:92:f8:1c:ae:31:a9:6d:61:25:cf:
                    d2:10:84:8c:e0:65:78:1f:c3:11:03:fe:a6:33:23:
                    a9:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:E2:57:DC:99:05:F1:D7:27:F0:53:58:B1:77:0B:C2:44:BC:C6:4A
            X509v3 Authority Key Identifier:
                keyid:E0:43:CC:71:14:26:DE:19:A0:D6:14:4C:BE:B2:93:DE:79:B3:82:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368B126/3678BC0660EA11F1865AE3BCCE1D38B0/4EPMcRQm3hmg1hRMvrKT3nmzgnk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4EPMcRQm3hmg1hRMvrKT3nmzgnk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368B126/3678BC0660EA11F1865AE3BCCE1D38B0/4EPMcRQm3hmg1hRMvrKT3nmzgnk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:a2:f4:9b:7b:f1:34:9a:f8:84:f2:c6:1d:ca:ca:44:de:f4:
         3e:f7:aa:83:a4:32:c0:b2:4c:7d:e5:33:fd:c0:c3:7a:6f:08:
         11:09:a1:df:f6:9c:d2:29:1a:80:f1:8b:16:a6:34:12:17:5f:
         8d:af:72:05:72:86:ec:09:20:a2:f3:23:2a:97:51:f1:6a:30:
         76:1d:46:ae:d8:1f:fb:3e:76:97:93:81:ff:82:42:e5:ea:70:
         1d:2f:c5:56:1d:4c:31:a3:21:0e:0e:7a:8a:e7:75:14:a3:a5:
         7f:90:af:0a:18:d3:3d:b2:6d:b6:52:b0:17:0c:24:71:26:ce:
         1a:82:eb:ec:41:32:83:87:cf:1e:29:33:ee:bf:a2:c7:10:99:
         c0:64:87:c9:e1:61:37:af:66:7d:34:27:11:2a:19:87:35:13:
         4f:30:bf:b4:15:a5:21:f9:0a:b6:36:c5:2a:e3:d3:48:92:bb:
         52:a2:eb:bd:79:2c:54:6f:ac:cb:09:02:5c:d0:14:8e:d7:98:
         2f:a8:b1:93:ee:bf:1b:ff:b7:fd:a4:cd:29:82:f2:38:b1:5a:
         f9:6b:bc:47:c3:32:8c:cf:f0:4e:b3:20:c4:63:b4:da:9f:d0:
         03:2d:31:6b:ba:43:50:74:02:85:7c:88:2c:dd:2c:92:25:0d:
         15:33:6a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 23:34:57 2026 by rpki-client