Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3690C51/AE080A8CA67F11EF97375182762E951A/M9k2dXxyMpyzVJDsNDXRPytwToI.mft
File:                     M9k2dXxyMpyzVJDsNDXRPytwToI.mft (raw, json)
Hash identifier:          K3Zi5h7idOYjGyY4XTmiRLGqh//BDjsH9D6oMq5/BGM=
Subject key identifier:   C3:36:CE:84:94:F9:25:28:5C:57:9B:ED:E1:83:1E:52:D6:5A:E1:DB
Authority key identifier: 33:D9:36:75:7C:72:32:9C:B3:54:90:EC:34:35:D1:3F:2B:70:4E:82
Certificate issuer:       /CN=F3690C51AF/serialNumber=33D936757C72329CB35490EC3435D13F2B704E82
Certificate serial:       0263
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/M9k2dXxyMpyzVJDsNDXRPytwToI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3690C51/AE080A8CA67F11EF97375182762E951A/M9k2dXxyMpyzVJDsNDXRPytwToI.mft
Manifest number:          0262
Signing time:             Fri 10 Jul 2026 04:40:55 +0000
Manifest this update:     Fri 10 Jul 2026 04:40:55 +0000
Manifest next update:     Sun 12 Jul 2026 04:40:55 +0000
Files and hashes:         1: M9k2dXxyMpyzVJDsNDXRPytwToI.crl (hash: l293EZKcz8Gl8uilLmNvK22PSpCSIjOKQePs4f7QUgs=)
                          2: 2E2B725AEEF411EFBCFA6F43762E951A.roa (hash: pbm0HU0V1QcdM+FCx6QyJP3O4fULzd1SgmZHd7KGnyo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3690C51/AE080A8CA67F11EF97375182762E951A/M9k2dXxyMpyzVJDsNDXRPytwToI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3690C51/AE080A8CA67F11EF97375182762E951A/M9k2dXxyMpyzVJDsNDXRPytwToI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/M9k2dXxyMpyzVJDsNDXRPytwToI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 12 Jul 2026 00:07:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 611 (0x263)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3690C51AF, serialNumber=33D936757C72329CB35490EC3435D13F2B704E82
        Validity
            Not Before: Jul 10 04:40:55 2026 GMT
            Not After : Jul 12 04:40:55 2026 GMT
        Subject: CN=6a5077d7-1b76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:da:e0:ea:94:8c:d5:4e:91:dc:c0:83:3e:79:
                    50:b1:0e:f3:d0:38:18:ce:a9:89:62:85:9d:e0:cc:
                    52:86:4d:e9:40:f5:85:f5:99:38:ad:4a:24:e2:c7:
                    39:7d:e0:8e:b0:7c:37:ab:70:a0:41:f7:1c:54:f6:
                    7f:31:a1:59:28:0d:a4:ac:fd:33:83:11:2b:f4:ee:
                    e7:c1:23:ca:b7:d2:fc:a9:3f:94:41:2f:95:0a:58:
                    13:ea:74:95:7d:6b:e6:2e:26:f6:60:a8:30:1f:d8:
                    57:92:f3:2c:20:b4:79:70:88:c3:33:4a:0c:88:39:
                    b4:c3:dd:e5:54:97:ac:f6:8c:2c:f7:c0:64:6c:93:
                    aa:d3:0a:b6:d5:58:db:56:07:fb:84:33:04:c5:20:
                    16:0f:0e:33:95:25:f6:53:e9:59:d2:e7:c5:fa:f5:
                    d6:c0:5a:16:73:74:ad:d0:c4:d7:56:98:13:30:df:
                    39:4f:1b:79:e2:9b:c2:e7:44:5e:2b:a4:24:b2:90:
                    da:32:41:6a:8f:70:a6:b7:e3:bd:3b:70:df:96:82:
                    26:4b:46:25:c8:c7:98:fc:25:21:c7:a4:ea:01:39:
                    81:d8:08:a8:2c:e9:78:f1:28:df:5b:44:24:0f:87:
                    c5:93:cb:bc:47:03:65:e7:ac:95:ff:77:2b:f5:50:
                    8c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:36:CE:84:94:F9:25:28:5C:57:9B:ED:E1:83:1E:52:D6:5A:E1:DB
            X509v3 Authority Key Identifier:
                keyid:33:D9:36:75:7C:72:32:9C:B3:54:90:EC:34:35:D1:3F:2B:70:4E:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3690C51/AE080A8CA67F11EF97375182762E951A/M9k2dXxyMpyzVJDsNDXRPytwToI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/M9k2dXxyMpyzVJDsNDXRPytwToI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3690C51/AE080A8CA67F11EF97375182762E951A/M9k2dXxyMpyzVJDsNDXRPytwToI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:46:51:40:3f:14:5f:4f:f2:54:a7:3e:d8:88:d3:86:09:f5:
         36:27:04:c2:65:f7:6e:7c:23:4c:57:03:b3:3a:23:9b:01:f7:
         96:6e:74:7d:f4:e2:a7:6c:d0:a2:80:db:07:c7:ca:0c:ad:6a:
         6f:86:73:f2:8b:b4:70:92:84:81:db:5f:71:de:61:8a:53:c7:
         45:d0:2d:3f:80:be:ed:35:c9:ad:38:95:8e:45:8c:f3:e8:33:
         62:f1:e6:b0:a7:ba:e3:a2:1a:b2:29:27:62:91:b5:fb:0e:4e:
         0a:87:c2:f4:26:70:86:e4:11:7e:ff:0c:ba:2c:e1:f6:04:43:
         c2:d4:6b:a6:3d:16:c0:cd:cf:32:d8:72:f3:ab:66:d5:ed:15:
         02:9b:e0:e2:05:23:0e:24:c9:6d:3a:58:b7:5d:42:0e:d2:54:
         db:f9:d0:ab:3d:57:cd:04:d2:47:b3:41:14:89:a9:c3:0e:b5:
         ee:52:c6:ee:63:fc:34:94:ed:d1:8e:c5:34:81:1f:3d:8e:37:
         90:b4:1d:f4:7a:1d:4f:6d:7a:e7:51:e5:67:57:6f:1c:37:56:
         4d:c2:a3:c0:68:25:4f:c6:af:a5:43:6c:b1:61:22:03:d7:ae:
         40:b6:89:4e:89:e6:8c:82:2b:46:23:df:79:0f:8c:e7:81:98:
         a0:76:02:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 19:58:22 2026 by rpki-client