Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368BE0B/C1B00036750011EF8664A683762E951A/TwSz--IMFQm6-aos_oN2Xy6WnK4.mft
File:                     TwSz--IMFQm6-aos_oN2Xy6WnK4.mft (raw, json)
Hash identifier:          qMrerysGhh5l3ccv+4iSxgdMoinf3NIXhFmNoEZGQPE=
Subject key identifier:   1D:ED:0E:4F:F3:D0:E9:70:EA:79:55:09:25:7B:CF:90:C1:C4:02:CB
Authority key identifier: 4F:04:B3:FB:E2:0C:15:09:BA:F9:AA:2C:FE:83:76:5F:2E:96:9C:AE
Certificate issuer:       /CN=F368BE0BAF/serialNumber=4F04B3FBE20C1509BAF9AA2CFE83765F2E969CAE
Certificate serial:       0291
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/TwSz--IMFQm6-aos_oN2Xy6WnK4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368BE0B/C1B00036750011EF8664A683762E951A/TwSz--IMFQm6-aos_oN2Xy6WnK4.mft
Manifest number:          0290
Signing time:             Sun 21 Jun 2026 04:31:35 +0000
Manifest this update:     Sun 21 Jun 2026 04:31:35 +0000
Manifest next update:     Tue 23 Jun 2026 04:31:35 +0000
Files and hashes:         1: TwSz--IMFQm6-aos_oN2Xy6WnK4.crl (hash: CmICXdzwhREWcf4wohx/ZltTlmvz/5U18MVLDDsF8zs=)
                          2: 60B3D914750111EFA5E0E087762E951A.roa (hash: UtfppmUEN5RqKXCtw1VeKzrsyq6Tj8yeIDmUGAHWijE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368BE0B/C1B00036750011EF8664A683762E951A/TwSz--IMFQm6-aos_oN2Xy6WnK4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368BE0B/C1B00036750011EF8664A683762E951A/TwSz--IMFQm6-aos_oN2Xy6WnK4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/TwSz--IMFQm6-aos_oN2Xy6WnK4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Jun 2026 00:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 657 (0x291)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368BE0BAF, serialNumber=4F04B3FBE20C1509BAF9AA2CFE83765F2E969CAE
        Validity
            Not Before: Jun 21 04:31:35 2026 GMT
            Not After : Jun 23 04:31:35 2026 GMT
        Subject: CN=6a376927-23ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:3b:8e:69:cc:34:61:46:3b:fe:62:5b:f7:7f:
                    cc:b1:9b:db:d9:a1:1f:4c:d1:b7:8f:5f:d6:12:fb:
                    30:4c:e8:57:a1:36:76:8e:9e:57:f4:0b:c5:1b:81:
                    3d:7c:f3:5f:ad:f8:f5:34:d6:01:7d:8c:a4:74:9c:
                    fd:0e:6d:43:f5:cb:3f:1b:bc:93:46:ee:b9:5d:2c:
                    67:d5:1f:b4:a8:0b:0a:21:43:24:00:e8:4b:8e:e7:
                    da:c4:c1:ca:5d:5b:a9:1a:73:7a:c8:90:21:7c:30:
                    4c:25:15:96:a2:7d:9e:6f:bd:51:8e:b2:b6:be:79:
                    60:70:f1:2b:75:09:b8:4c:60:18:0c:47:a7:6c:8f:
                    4c:2f:ad:db:53:d5:5f:b7:17:61:a7:b3:2f:f1:cb:
                    ff:b5:ef:60:92:26:81:6c:b1:14:8e:85:45:5a:1a:
                    24:f6:4d:6e:d2:fd:68:e1:69:c8:23:ba:6f:73:db:
                    cb:1e:1c:60:d7:8c:0d:5c:5c:b6:59:ff:4f:3d:40:
                    33:20:f7:5e:e7:17:27:fc:16:1a:ec:70:d3:f7:ec:
                    3f:bc:e1:74:9f:cd:b0:bb:1a:bb:ef:fe:f8:8c:c7:
                    4d:fa:a6:35:18:f1:1c:d5:29:1a:c3:0f:ee:e5:ed:
                    a6:89:34:88:14:e0:78:1a:d6:72:8d:08:bf:d6:05:
                    42:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:ED:0E:4F:F3:D0:E9:70:EA:79:55:09:25:7B:CF:90:C1:C4:02:CB
            X509v3 Authority Key Identifier:
                keyid:4F:04:B3:FB:E2:0C:15:09:BA:F9:AA:2C:FE:83:76:5F:2E:96:9C:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368BE0B/C1B00036750011EF8664A683762E951A/TwSz--IMFQm6-aos_oN2Xy6WnK4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/TwSz--IMFQm6-aos_oN2Xy6WnK4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368BE0B/C1B00036750011EF8664A683762E951A/TwSz--IMFQm6-aos_oN2Xy6WnK4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:b4:ab:11:0d:bc:3a:2f:af:8e:df:5f:d2:01:40:a2:61:67:
         06:32:6c:c2:0c:29:18:33:55:b8:e6:71:83:94:a9:bb:bf:ef:
         46:d1:3d:6d:14:72:3b:11:04:78:4a:b6:f0:6c:55:1d:10:7d:
         c4:aa:60:a8:6a:0a:80:41:6a:b0:92:22:09:1c:3c:92:2d:1b:
         e3:5d:a3:a6:5f:dc:18:eb:9a:21:c0:14:80:8a:d7:f7:9d:d9:
         4c:97:be:0c:e3:95:b0:68:38:f2:81:0d:ec:31:85:5a:1d:22:
         da:c2:c2:cd:71:5e:b9:71:fc:c4:3d:c7:39:48:da:cf:27:bc:
         b4:38:b4:1d:ae:68:56:e2:5a:48:03:97:1e:2a:89:3d:34:81:
         dc:6c:ba:10:0f:d1:db:d5:1a:65:aa:c9:06:cd:32:ad:2f:26:
         46:0d:d6:8a:3f:de:68:e2:49:d6:7a:51:ea:f5:2f:57:09:82:
         2c:d4:cc:5f:76:97:71:eb:f4:2e:4f:6f:a3:8f:e5:e6:1b:0e:
         e7:52:a8:34:b3:54:0d:75:cb:5d:88:bc:d4:1b:d2:4f:2f:64:
         b7:25:7f:94:c6:ff:db:a0:66:57:e6:c5:8d:57:91:21:5e:0e:
         69:f4:0b:4a:1f:ce:5d:f9:72:69:fa:aa:43:b2:3a:12:ef:43:
         67:31:f5:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 23:45:45 2026 by rpki-client