Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D03D3/3A3857B2B05111EEAFF4F09B775412E6/ffDZZHEjlpmcF8_uBLpMLB39GqE.mft
File:                     ffDZZHEjlpmcF8_uBLpMLB39GqE.mft (raw, json)
Hash identifier:          PfbeilO+4u0nF2S+G+JJMWPbUIKuaY84bZe3GdH9hZE=
Subject key identifier:   6E:A5:1E:A9:BC:9B:21:A9:A4:CE:E9:59:0E:B2:09:28:F8:E6:28:F9
Authority key identifier: 7D:F0:D9:64:71:23:96:99:9C:17:CF:EE:04:BA:4C:2C:1D:FD:1A:A1
Certificate issuer:       /CN=F36D03D3AF/serialNumber=7DF0D964712396999C17CFEE04BA4C2C1DFD1AA1
Certificate serial:       0392
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ffDZZHEjlpmcF8_uBLpMLB39GqE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D03D3/3A3857B2B05111EEAFF4F09B775412E6/ffDZZHEjlpmcF8_uBLpMLB39GqE.mft
Manifest number:          0391
Signing time:             Sun 21 Jun 2026 03:56:22 +0000
Manifest this update:     Sun 21 Jun 2026 03:56:22 +0000
Manifest next update:     Tue 23 Jun 2026 03:56:21 +0000
Files and hashes:         1: ffDZZHEjlpmcF8_uBLpMLB39GqE.crl (hash: nWDhR4Tc8nBzgoRLRm4Pwq8GUXR1DShys2TF48EFBbI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D03D3/3A3857B2B05111EEAFF4F09B775412E6/ffDZZHEjlpmcF8_uBLpMLB39GqE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D03D3/3A3857B2B05111EEAFF4F09B775412E6/ffDZZHEjlpmcF8_uBLpMLB39GqE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ffDZZHEjlpmcF8_uBLpMLB39GqE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Jun 2026 00:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 914 (0x392)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D03D3AF, serialNumber=7DF0D964712396999C17CFEE04BA4C2C1DFD1AA1
        Validity
            Not Before: Jun 21 03:56:22 2026 GMT
            Not After : Jun 23 03:56:21 2026 GMT
        Subject: CN=6a3760e6-1b5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b7:9b:2d:99:01:5a:f9:25:12:33:a5:f0:8e:
                    57:22:38:97:a6:55:7e:fe:84:2a:18:37:3e:bc:30:
                    7a:d5:ba:c2:0d:e7:3d:9f:6e:93:1c:a3:03:d8:34:
                    08:65:cd:f8:ad:2a:21:09:ea:37:73:1e:2d:38:4e:
                    26:31:2b:25:6b:eb:aa:00:c7:6b:8c:02:1b:41:5a:
                    9c:09:50:2e:19:f7:85:8a:60:f9:f6:23:e7:6b:3f:
                    d0:cd:b2:d5:09:a6:d9:f9:a9:a4:6b:2c:86:aa:e0:
                    bd:95:fa:c0:2f:c6:4b:14:62:ea:88:7a:3a:97:1b:
                    4d:5d:fd:d5:80:29:71:0a:eb:97:3c:e5:3a:f0:37:
                    4a:2d:1b:ea:2c:d6:5b:af:4c:a2:04:e4:b4:0c:c2:
                    40:4e:cd:15:87:50:e6:cb:45:c2:21:63:2c:62:1f:
                    e9:3d:e9:36:a8:fa:61:78:96:ea:42:e4:f9:9c:b1:
                    ba:eb:d5:11:b1:34:c2:10:e7:11:e2:58:fc:f5:4c:
                    59:07:fc:81:ef:02:7a:e7:dd:70:a3:18:b7:d5:f8:
                    8f:05:e6:16:2a:3d:35:6b:33:97:a3:6a:93:cd:51:
                    b5:07:a3:52:76:ef:f1:1d:8c:48:50:ee:c4:17:8e:
                    b9:08:ff:5c:92:84:e7:45:32:58:41:eb:65:09:e2:
                    f9:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:A5:1E:A9:BC:9B:21:A9:A4:CE:E9:59:0E:B2:09:28:F8:E6:28:F9
            X509v3 Authority Key Identifier:
                keyid:7D:F0:D9:64:71:23:96:99:9C:17:CF:EE:04:BA:4C:2C:1D:FD:1A:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D03D3/3A3857B2B05111EEAFF4F09B775412E6/ffDZZHEjlpmcF8_uBLpMLB39GqE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ffDZZHEjlpmcF8_uBLpMLB39GqE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D03D3/3A3857B2B05111EEAFF4F09B775412E6/ffDZZHEjlpmcF8_uBLpMLB39GqE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:ea:d0:38:8d:f2:e9:62:87:5a:40:ce:b8:ea:0b:07:94:e6:
         0f:b5:7c:72:a9:bc:fb:de:ff:79:5a:38:ef:e8:82:30:65:6c:
         c6:61:f3:2a:92:c8:56:0e:c6:91:64:1b:7d:30:a3:9c:6a:c7:
         4c:42:fe:1d:cd:61:b8:ea:9b:cf:83:54:08:20:9a:3e:bb:2b:
         eb:b2:da:4a:54:89:67:91:b3:e6:1e:5e:9e:c8:76:95:a7:55:
         79:0c:6e:93:4b:c3:41:dc:36:e9:2b:dc:c2:8e:c7:03:69:10:
         8d:19:b3:b8:a7:6d:40:af:04:0e:d9:1b:15:30:09:00:ff:bc:
         7e:95:60:1c:b3:70:2d:f4:e6:97:94:09:85:05:da:62:91:ba:
         d9:a5:16:8f:2d:f0:92:6d:d3:ff:4f:df:ff:79:55:06:d6:8d:
         8d:06:c9:a7:31:59:a2:a1:c6:65:42:18:10:16:88:fe:2f:5b:
         f3:d0:26:80:77:14:ef:c5:25:83:65:f0:bf:3e:e2:42:d6:81:
         c6:36:96:ee:ea:50:b4:62:b5:09:b4:31:98:d5:86:ad:d3:24:
         d6:7a:25:cb:08:81:ab:d8:a7:80:01:cc:ef:36:d5:4e:a5:56:
         ef:dc:fd:da:66:82:dc:5b:24:57:88:40:f1:31:e9:25:78:44:
         83:de:e6:cf
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICA5IwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RDAzRDNBRjExMC8GA1UEBRMoN0RGMEQ5NjQ3MTIzOTY5OTlDMTdDRkVFMDRCQTRD
MkMxREZEMUFBMTAeFw0yNjA2MjEwMzU2MjJaFw0yNjA2MjMwMzU2MjFaMBgxFjAU
BgNVBAMTDTZhMzc2MGU2LTFiNWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDFt5stmQFa+SUSM6XwjlciOJemVX7+hCoYNz68MHrVusIN5z2fbpMcowPY
NAhlzfitKiEJ6jdzHi04TiYxKyVr66oAx2uMAhtBWpwJUC4Z94WKYPn2I+drP9DN
stUJptn5qaRrLIaq4L2V+sAvxksUYuqIejqXG01d/dWAKXEK65c85TrwN0otG+os
1luvTKIE5LQMwkBOzRWHUObLRcIhYyxiH+k96Tao+mF4lupC5Pmcsbrr1RGxNMIQ
5xHiWPz1TFkH/IHvAnrn3XCjGLfV+I8F5hYqPTVrM5ejapPNUbUHo1J27/EdjEhQ
7sQXjrkI/1yShOdFMlhB62UJ4vl/AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUbqUe
qbybIamkzulZDrIJKPjmKPkwHwYDVR0jBBgwFoAUffDZZHEjlpmcF8/uBLpMLB39
GqEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkQwM0QzLzNBMzg1N0IyQjA1MTExRUVBRkY0RjA5Qjc3NTQxMkU2L2ZmRFpa
SEVqbHBtY0Y4X3VCTHBNTEIzOUdxRS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2ZmRFpaSEVqbHBtY0Y4X3VCTHBNTEIzOUdxRS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RDAzRDMvM0EzODU3QjJCMDUxMTFFRUFGRjRGMDlCNzc1
NDEyRTYvZmZEWlpIRWpscG1jRjhfdUJMcE1MQjM5R3FFLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAd6tA4jfLpYodaQM646gsHlOYPtXxy
qbz73v95Wjjv6IIwZWzGYfMqkshWDsaRZBt9MKOcasdMQv4dzWG46pvPg1QIIJo+
uyvrstpKVIlnkbPmHl6eyHaVp1V5DG6TS8NB3DbpK9zCjscDaRCNGbO4p21ArwQO
2RsVMAkA/7x+lWAcs3At9OaXlAmFBdpikbrZpRaPLfCSbdP/T9//eVUG1o2NBsmn
MVmiocZlQhgQFoj+L1vz0CaAdxTvxSWDZfC/PuJC1oHGNpbu6lC0YrUJtDGY1Yat
0yTWeiXLCIGr2KeAAczvNtVOpVbv3P3aZoLcWyRXiEDxMekleESD3ubP
-----END CERTIFICATE-----
Generated at Sun Jun 21 23:39:30 2026 by rpki-client