Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DD00F/6CC833B2D66511ED8CA573B0F1222468/IMgTB9QVShV5wAQJACMAaCWVvTU.mft
File:                     IMgTB9QVShV5wAQJACMAaCWVvTU.mft (raw, json)
Hash identifier:          5XLusZPcmFM1PQdTlJB8vdrG2iC5jqy9wtmIWqzNFAY=
Subject key identifier:   C4:35:D9:0C:7D:2C:90:B6:1B:DA:C7:A1:AD:DE:E3:05:BB:43:A1:3E
Authority key identifier: 20:C8:13:07:D4:15:4A:15:79:C0:04:09:00:23:00:68:25:95:BD:35
Certificate issuer:       /CN=F36DD00FAF/serialNumber=20C81307D4154A1579C00409002300682595BD35
Certificate serial:       04B8
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/IMgTB9QVShV5wAQJACMAaCWVvTU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DD00F/6CC833B2D66511ED8CA573B0F1222468/IMgTB9QVShV5wAQJACMAaCWVvTU.mft
Manifest number:          04B6
Signing time:             Sun 21 Jun 2026 03:22:07 +0000
Manifest this update:     Sun 21 Jun 2026 03:22:06 +0000
Manifest next update:     Tue 23 Jun 2026 03:22:06 +0000
Files and hashes:         1: IMgTB9QVShV5wAQJACMAaCWVvTU.crl (hash: ML4uDj0onnqgXF9l4yHmoQ5yoeh93Ec9/zTAAuW43Qw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DD00F/6CC833B2D66511ED8CA573B0F1222468/IMgTB9QVShV5wAQJACMAaCWVvTU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DD00F/6CC833B2D66511ED8CA573B0F1222468/IMgTB9QVShV5wAQJACMAaCWVvTU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/IMgTB9QVShV5wAQJACMAaCWVvTU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Jun 2026 00:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1208 (0x4b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DD00FAF, serialNumber=20C81307D4154A1579C00409002300682595BD35
        Validity
            Not Before: Jun 21 03:22:06 2026 GMT
            Not After : Jun 23 03:22:06 2026 GMT
        Subject: CN=6a3758df-c958
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d2:ec:c9:b3:96:cc:6e:d5:53:ca:53:66:67:
                    0d:43:67:97:89:28:48:6d:9c:92:63:24:6f:40:19:
                    fe:e6:38:48:cb:14:b5:1f:41:6a:90:55:5a:a1:6d:
                    02:a2:1f:66:cd:32:b5:fd:6f:85:1b:b3:73:e3:bd:
                    c3:b7:f0:36:72:11:9e:92:ae:3f:5d:75:ae:6d:fe:
                    73:d9:f4:b8:56:da:ed:e5:5e:24:da:c3:71:8d:a3:
                    7a:6a:b1:19:aa:91:b2:36:7c:07:55:a5:4a:64:da:
                    3c:7b:fc:12:a8:c6:b5:41:d3:4f:98:97:a0:6a:ea:
                    c4:ad:44:b9:60:30:6c:20:00:6e:16:72:cc:15:da:
                    52:0a:6d:cf:93:26:5b:64:2f:77:5b:4d:fc:50:5e:
                    27:75:ed:a9:73:48:a6:e1:75:05:5b:1e:3a:aa:72:
                    e4:61:7c:2e:a5:13:53:75:5d:0a:6b:2c:f0:4b:e9:
                    4b:ad:1d:b5:7d:6e:59:28:da:f0:2b:8d:b4:9c:21:
                    d7:db:0a:92:9d:3b:45:8b:54:dc:da:b3:17:84:3f:
                    05:f7:94:d9:fe:5a:5d:b4:42:15:e2:7c:c4:8a:2d:
                    81:fb:19:c1:96:40:7a:45:5b:bc:ca:5f:d9:31:9d:
                    b9:7a:6d:d9:e8:93:3b:5d:f6:d1:49:3f:44:0f:83:
                    81:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:35:D9:0C:7D:2C:90:B6:1B:DA:C7:A1:AD:DE:E3:05:BB:43:A1:3E
            X509v3 Authority Key Identifier:
                keyid:20:C8:13:07:D4:15:4A:15:79:C0:04:09:00:23:00:68:25:95:BD:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DD00F/6CC833B2D66511ED8CA573B0F1222468/IMgTB9QVShV5wAQJACMAaCWVvTU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/IMgTB9QVShV5wAQJACMAaCWVvTU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DD00F/6CC833B2D66511ED8CA573B0F1222468/IMgTB9QVShV5wAQJACMAaCWVvTU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:70:28:31:5c:0c:4e:1f:8e:8c:90:d0:d5:81:fd:3f:8e:c5:
         cf:d0:45:8d:89:8b:90:f8:29:28:66:5f:53:32:4d:71:85:0d:
         ed:61:37:35:f7:f8:d4:47:2d:05:7a:8b:35:24:b6:c2:71:cf:
         61:c6:61:51:ba:4d:80:f8:c0:18:f1:7f:42:c4:e5:26:1c:51:
         86:dd:20:9f:7d:db:3a:5f:5c:84:7c:ad:7b:6c:0c:55:6f:a5:
         4e:7f:f1:d6:dc:6c:56:06:27:ca:d2:93:92:12:eb:60:46:54:
         27:3b:74:e8:45:43:03:de:9e:c5:1e:f6:03:0d:81:83:8d:88:
         46:16:52:13:4b:7f:59:4d:65:98:18:f8:eb:54:e8:88:19:3a:
         aa:d6:9d:7e:a8:17:cb:f3:60:73:ba:57:72:cd:1c:14:0a:64:
         ae:ad:78:89:cf:69:f1:c8:60:2a:1d:79:7d:00:cc:49:0d:24:
         4c:24:60:a2:0e:33:bd:90:93:f5:a5:f4:7a:b2:6c:36:39:5a:
         33:d3:75:93:31:8a:68:e9:94:5b:03:88:ae:46:fb:75:e7:58:
         8a:00:ae:ab:06:10:51:8d:5a:04:a0:5f:df:2c:34:b1:51:02:
         c6:94:c4:4c:4a:97:85:d5:9b:9f:54:f2:92:f1:13:f4:6b:cf:
         1b:59:f9:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 23:37:01 2026 by rpki-client