Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368D59F/CF10B148324211F18586228DDAE4EC9C/B0Bo8Lwdf2xlr15SAuIhENaFelk.mft
File:                     B0Bo8Lwdf2xlr15SAuIhENaFelk.mft (raw, json)
Hash identifier:          GnK2uo2iP4WTx/uZZaH1QqNJ0t5dOKGz/tUhVMUXlgU=
Subject key identifier:   51:89:AE:B0:4B:3E:B2:65:44:C4:7E:10:D1:6D:99:39:DE:38:77:34
Authority key identifier: 07:40:68:F0:BC:1D:7F:6C:65:AF:5E:52:02:E2:21:10:D6:85:7A:59
Certificate issuer:       /CN=F368D59FAF/serialNumber=074068F0BC1D7F6C65AF5E5202E22110D6857A59
Certificate serial:       4F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/B0Bo8Lwdf2xlr15SAuIhENaFelk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368D59F/CF10B148324211F18586228DDAE4EC9C/B0Bo8Lwdf2xlr15SAuIhENaFelk.mft
Manifest number:          4E
Signing time:             Sun 21 Jun 2026 05:33:04 +0000
Manifest this update:     Sun 21 Jun 2026 05:33:03 +0000
Manifest next update:     Tue 23 Jun 2026 05:33:03 +0000
Files and hashes:         1: B0Bo8Lwdf2xlr15SAuIhENaFelk.crl (hash: ShpbBU1Eu33fDp0/AI4O9II2JxrY27IZs4YzPs9CJmE=)
                          2: CDA23108324A11F1B60EAEB9DAE4EC9C.roa (hash: cE1RonJWQjRj/5iPA//z9En6WXcsSeuTNBdrevPeLx8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368D59F/CF10B148324211F18586228DDAE4EC9C/B0Bo8Lwdf2xlr15SAuIhENaFelk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368D59F/CF10B148324211F18586228DDAE4EC9C/B0Bo8Lwdf2xlr15SAuIhENaFelk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/B0Bo8Lwdf2xlr15SAuIhENaFelk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Jun 2026 00:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 79 (0x4f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368D59FAF, serialNumber=074068F0BC1D7F6C65AF5E5202E22110D6857A59
        Validity
            Not Before: Jun 21 05:33:03 2026 GMT
            Not After : Jun 23 05:33:03 2026 GMT
        Subject: CN=6a377790-2c42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e0:6f:89:c0:45:4d:31:4c:f2:c3:f5:94:e4:
                    b3:3a:19:3f:30:0a:44:4f:bb:31:c3:4d:1a:f9:1e:
                    21:38:2c:8a:5d:8f:09:4f:2b:8b:79:77:64:ee:98:
                    1d:61:02:bc:af:a3:fe:25:ea:0d:89:78:31:e9:9b:
                    81:fd:db:dc:92:3a:58:43:bf:4b:1e:9f:83:30:38:
                    ca:14:9b:f6:0b:36:31:b4:f5:66:45:b3:8e:6b:75:
                    34:9c:12:8f:28:c2:b9:ed:71:d4:31:5b:a7:a6:7a:
                    7c:6e:40:b0:0e:d7:47:7f:c2:ac:df:e9:dc:a1:b2:
                    8d:11:05:29:4e:a3:a5:f4:bc:1e:9a:d1:50:0a:85:
                    f1:d9:ce:7f:dc:ff:41:57:04:4b:02:20:53:7a:5c:
                    fd:33:61:86:de:b7:fc:72:b7:75:2e:38:7f:75:45:
                    83:17:d8:21:bb:f2:cb:c1:21:8e:15:b3:e0:54:a9:
                    59:48:43:d2:88:29:f4:98:d2:89:9b:35:d8:9f:a1:
                    b9:32:04:df:85:60:f7:7c:03:6d:d5:5a:f6:a3:3f:
                    bf:81:31:97:33:b1:34:7d:ad:03:da:08:9a:bd:48:
                    e7:fb:8c:d3:81:9b:1f:07:c7:a5:42:1a:76:00:1e:
                    d1:f0:64:ee:bb:9a:19:de:2d:40:6d:59:61:d2:48:
                    8d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:89:AE:B0:4B:3E:B2:65:44:C4:7E:10:D1:6D:99:39:DE:38:77:34
            X509v3 Authority Key Identifier:
                keyid:07:40:68:F0:BC:1D:7F:6C:65:AF:5E:52:02:E2:21:10:D6:85:7A:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368D59F/CF10B148324211F18586228DDAE4EC9C/B0Bo8Lwdf2xlr15SAuIhENaFelk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/B0Bo8Lwdf2xlr15SAuIhENaFelk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368D59F/CF10B148324211F18586228DDAE4EC9C/B0Bo8Lwdf2xlr15SAuIhENaFelk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:0e:32:44:fa:ae:89:ce:3c:71:6d:ca:07:a1:08:a6:f5:3c:
         70:01:ff:70:1e:2a:61:49:a6:db:10:cb:3e:2d:60:04:4e:71:
         39:e3:4d:0e:09:7d:0a:43:69:73:a7:74:6d:01:be:de:89:53:
         8f:f2:e8:7a:64:f1:13:19:d0:18:8d:1a:60:19:cc:9b:97:e5:
         50:3d:81:26:00:99:c9:eb:37:d2:13:0b:93:f8:cd:a5:57:b1:
         df:a3:95:ce:25:b4:32:27:aa:7d:1d:bb:e8:2f:9c:a7:5a:77:
         7a:29:9e:fd:a6:67:a4:28:13:06:9f:e4:c3:ae:84:96:cc:02:
         9e:1a:5f:38:94:fa:4c:a2:07:44:74:f5:22:e2:34:8f:04:1a:
         73:2d:03:68:4d:7e:02:22:39:f1:6b:72:4e:de:3d:68:2b:d4:
         65:07:28:48:e4:e6:3e:70:a3:29:7b:8b:dd:07:1c:da:c5:5d:
         08:30:1e:fd:d1:3b:a4:18:ce:c4:af:3b:82:df:51:5d:f4:9f:
         f1:74:c2:80:bd:7b:d4:e4:fb:39:94:a4:c7:37:2e:b7:17:b2:
         97:7c:1d:71:19:77:84:42:62:f2:68:c5:98:9e:ca:f7:50:14:
         cd:86:7a:11:ac:7c:48:41:de:99:cf:3f:42:34:62:2e:4b:70:
         d3:57:01:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 23:40:48 2026 by rpki-client