Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3691DC2/A12171821A1E11EC8D345D34D8A014CE/fHr4YJtvvVa8wCRM0y1g_-hfnuQ.mft
File:                     fHr4YJtvvVa8wCRM0y1g_-hfnuQ.mft (raw, json)
Hash identifier:          IqRwWC5mxtITLkj/8CPWcuxtyUF/OvXKRbI+l1dHr+s=
Subject key identifier:   87:A6:80:47:6A:4B:2E:39:EF:36:54:32:39:2A:90:4A:78:B8:8B:E1
Authority key identifier: 7C:7A:F8:60:9B:6F:BD:56:BC:C0:24:4C:D3:2D:60:FF:E8:5F:9E:E4
Certificate issuer:       /CN=F3691DC2AF/serialNumber=7C7AF8609B6FBD56BCC0244CD32D60FFE85F9EE4
Certificate serial:       06C9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/fHr4YJtvvVa8wCRM0y1g_-hfnuQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3691DC2/A12171821A1E11EC8D345D34D8A014CE/fHr4YJtvvVa8wCRM0y1g_-hfnuQ.mft
Manifest number:          06C8
Signing time:             Sat 09 May 2026 02:24:03 +0000
Manifest this update:     Sat 09 May 2026 02:24:02 +0000
Manifest next update:     Mon 11 May 2026 02:24:02 +0000
Files and hashes:         1: fHr4YJtvvVa8wCRM0y1g_-hfnuQ.crl (hash: A21upoMw6/s2pla/rPVCdcidC/T/8CVwOh4hDTm+kh8=)
                          2: CA1FC8CC1A1E11ECBF7CA134D8A014CE.roa (hash: 89ZoBOyWvLwCDH6XINtqPI4XAUHBP8Wb3FK9Ykris/0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3691DC2/A12171821A1E11EC8D345D34D8A014CE/fHr4YJtvvVa8wCRM0y1g_-hfnuQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3691DC2/A12171821A1E11EC8D345D34D8A014CE/fHr4YJtvvVa8wCRM0y1g_-hfnuQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/fHr4YJtvvVa8wCRM0y1g_-hfnuQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 11 May 2026 00:07:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1737 (0x6c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3691DC2AF, serialNumber=7C7AF8609B6FBD56BCC0244CD32D60FFE85F9EE4
        Validity
            Not Before: May  9 02:24:02 2026 GMT
            Not After : May 11 02:24:02 2026 GMT
        Subject: CN=69fe9ac3-612f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a2:80:fd:5e:b5:48:1b:61:3e:fc:cc:7a:3c:
                    aa:75:23:0c:08:0e:d4:fc:20:38:24:f7:7d:56:78:
                    cc:dd:1b:73:bf:c8:f1:a4:15:e2:b1:65:34:8d:46:
                    80:3a:bb:f6:46:78:9b:fa:52:ca:60:be:a6:d6:4f:
                    46:eb:87:a8:92:f1:fc:fc:70:aa:0d:c8:08:59:17:
                    83:25:ba:1b:3e:e2:7d:e6:4e:46:2a:1a:19:6b:5e:
                    56:62:7c:4e:ea:86:02:16:a1:b2:b3:d4:f7:ea:e7:
                    79:c7:e7:c0:94:f0:cd:b3:7a:d2:78:41:e2:39:68:
                    f9:03:da:90:97:d2:17:38:e5:ec:0c:c0:bd:91:eb:
                    3d:3a:05:e7:c9:7e:53:06:91:83:12:66:c0:67:80:
                    fb:5f:69:d3:cd:94:e4:28:49:97:9d:b9:9a:cf:9c:
                    04:91:5d:36:99:1b:50:6e:07:73:78:3a:22:e9:68:
                    4a:0a:a8:61:49:ca:89:e8:27:c1:55:aa:e5:a7:c0:
                    69:a5:23:82:40:18:d1:29:f1:a1:72:2c:2c:66:2f:
                    fd:8f:dd:58:ef:62:34:41:68:58:4e:86:b1:ad:55:
                    94:29:00:60:82:b6:83:78:dc:55:86:9b:39:40:7f:
                    d1:04:19:95:0e:58:46:cf:8c:0d:7e:f1:5f:58:ff:
                    af:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:A6:80:47:6A:4B:2E:39:EF:36:54:32:39:2A:90:4A:78:B8:8B:E1
            X509v3 Authority Key Identifier:
                keyid:7C:7A:F8:60:9B:6F:BD:56:BC:C0:24:4C:D3:2D:60:FF:E8:5F:9E:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3691DC2/A12171821A1E11EC8D345D34D8A014CE/fHr4YJtvvVa8wCRM0y1g_-hfnuQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/fHr4YJtvvVa8wCRM0y1g_-hfnuQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3691DC2/A12171821A1E11EC8D345D34D8A014CE/fHr4YJtvvVa8wCRM0y1g_-hfnuQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:6a:f6:1e:d0:1f:b3:68:d9:41:78:91:46:f8:33:bd:6c:e7:
         8d:6f:e6:a7:93:3b:cd:5e:d7:5c:73:ae:f1:6b:75:85:b7:62:
         1e:98:38:22:16:f7:de:ed:88:e4:23:02:cb:9b:ea:11:e9:4e:
         a4:41:9b:2d:30:51:9c:de:72:aa:01:69:60:59:70:ce:54:08:
         ec:d8:21:e6:9c:ba:68:02:75:6e:85:ce:3d:ff:f7:45:9c:5d:
         66:e6:97:1e:0d:11:dc:b6:67:4f:2c:66:de:6d:b4:40:1d:ec:
         ce:64:9d:55:0d:dc:4e:1d:37:b4:d1:52:fd:00:7a:53:45:3a:
         0e:35:e7:8a:7a:18:bd:55:6b:83:f4:e4:bb:2b:98:23:5b:e5:
         4c:6c:7f:74:4e:ac:de:f0:04:33:90:36:b8:14:34:2f:91:64:
         2a:54:88:f0:02:9f:cc:8f:ce:da:aa:9c:42:18:2d:bc:57:45:
         51:6c:88:59:2c:33:22:30:ea:67:e0:02:88:09:9c:05:05:81:
         83:c6:83:33:1c:59:a9:14:20:fb:09:ad:e0:52:1c:47:6d:c7:
         af:91:40:04:d3:a1:fc:50:b4:e3:6e:77:07:77:32:c5:7b:62:
         72:65:95:e6:3e:df:eb:5c:3b:b8:6a:e2:e3:c1:d6:f3:e2:df:
         95:db:ac:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 13:25:33 2026 by rpki-client