Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DE42D/CC9AA0E641DA11EEB03EBE374AD9E6FC/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.mft
File:                     nYXa0C_Bd6QOm5BwI3BvP5d0TaA.mft (raw, json)
Hash identifier:          GpRzUtmvLSt5N9Not6mWSnHvsqzmC7uuSLGBzjE5Lak=
Subject key identifier:   59:34:99:35:D0:7B:F0:16:08:4E:84:C5:06:3C:3B:56:F3:A3:43:DA
Authority key identifier: 9D:85:DA:D0:2F:C1:77:A4:0E:9B:90:70:23:70:6F:3F:97:74:4D:A0
Certificate issuer:       /CN=F36DE42DRI/serialNumber=9D85DAD02FC177A40E9B907023706F3F97744DA0
Certificate serial:       03EE
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DE42D/CC9AA0E641DA11EEB03EBE374AD9E6FC/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.mft
Manifest number:          03ED
Signing time:             Mon 27 Apr 2026 03:42:00 +0000
Manifest this update:     Mon 27 Apr 2026 03:41:59 +0000
Manifest next update:     Wed 29 Apr 2026 03:41:59 +0000
Files and hashes:         1: nYXa0C_Bd6QOm5BwI3BvP5d0TaA.crl (hash: +Fr/wunqu9lE+WdOYH63Xrwp7QtmK2W6vlJYXTl8doY=)
                          2: CC9C343441E311EEA3DA33544AD9E6FC.roa (hash: O2w06Y8bPWrlQlM0KiCR/CDJJh42Y1TIJDGWDlX/VL0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DE42D/CC9AA0E641DA11EEB03EBE374AD9E6FC/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DE42D/CC9AA0E641DA11EEB03EBE374AD9E6FC/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.mft
                          rsync://rpki.afrinic.net/repository/ripe/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 29 Apr 2026 00:45:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1006 (0x3ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DE42DRI, serialNumber=9D85DAD02FC177A40E9B907023706F3F97744DA0
        Validity
            Not Before: Apr 27 03:41:59 2026 GMT
            Not After : Apr 29 03:41:59 2026 GMT
        Subject: CN=69eedb08-4061
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:cb:9e:57:0b:d6:a6:96:53:0a:9d:30:5b:70:
                    3e:97:40:b3:fa:74:3d:e1:3a:78:87:f5:c2:bd:54:
                    5f:4b:ca:90:af:ce:5c:95:dd:cd:d1:a0:1a:5d:82:
                    ea:bc:c3:80:34:49:bd:fd:4d:f3:8a:c1:ef:ad:00:
                    9b:52:0a:da:00:d4:76:34:5f:07:3f:3c:bf:f9:78:
                    cd:2d:aa:77:8c:06:f0:d2:86:b9:c6:e9:55:be:c3:
                    33:78:8f:a9:47:fb:3a:14:38:8f:a3:53:3c:e6:34:
                    26:5a:f0:a7:a4:fc:ba:22:21:fa:22:8b:7f:98:d7:
                    5a:07:d8:03:32:2f:1a:6e:94:1f:7b:27:2c:89:65:
                    58:68:84:4e:0d:e8:5b:b4:fe:c6:72:00:92:51:06:
                    1d:05:a8:c2:67:16:5d:c9:27:60:9a:14:d8:87:b6:
                    9b:73:a2:ef:e4:05:ff:cc:1d:11:97:ab:b6:ae:53:
                    88:d9:36:4b:da:b8:5f:f3:47:6b:c0:ca:e5:48:e2:
                    a1:39:57:00:02:f1:5c:78:99:41:c5:58:96:21:20:
                    ac:9e:3c:99:f8:ad:47:d4:d3:41:bc:af:a5:2a:13:
                    00:99:b0:29:c8:c9:fe:60:3a:a6:c3:83:26:1d:1b:
                    73:a2:14:79:6a:9d:61:c0:77:bc:db:3e:79:1e:da:
                    8e:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:34:99:35:D0:7B:F0:16:08:4E:84:C5:06:3C:3B:56:F3:A3:43:DA
            X509v3 Authority Key Identifier:
                keyid:9D:85:DA:D0:2F:C1:77:A4:0E:9B:90:70:23:70:6F:3F:97:74:4D:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DE42D/CC9AA0E641DA11EEB03EBE374AD9E6FC/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DE42D/CC9AA0E641DA11EEB03EBE374AD9E6FC/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:3a:0c:16:bf:2d:7a:06:6c:4e:d8:e7:57:0d:61:b7:a3:8d:
         35:e3:3e:4a:7c:1e:63:cc:b8:ac:0c:49:c7:6b:75:25:88:fc:
         3e:88:36:70:e9:06:02:b4:94:c8:2f:45:dd:24:ce:11:6a:3a:
         e3:58:b2:bf:16:26:6b:50:db:b3:8b:9a:4e:eb:ee:23:78:e7:
         7a:d5:87:88:8f:5f:30:58:1a:99:26:0e:37:68:e4:8a:0d:c0:
         60:be:27:67:f6:31:30:f9:5c:14:f2:70:76:37:8c:3e:0e:f0:
         fd:c9:6a:08:eb:e7:4b:05:92:4c:eb:9f:fd:76:a8:b5:2f:b3:
         80:94:79:3f:83:5e:fe:56:53:93:3b:25:46:83:26:79:8f:f5:
         69:41:eb:fc:23:46:c0:20:72:b8:d1:7f:05:e1:84:ed:a8:28:
         0d:aa:10:cf:7c:bb:18:33:d9:75:b0:0d:71:d4:46:4d:54:08:
         e7:f1:39:7c:c2:47:ee:0f:6b:70:db:81:a7:78:bc:99:3b:c4:
         0e:31:67:03:4c:1b:b3:65:3f:2f:e6:64:b0:4f:37:f2:d0:58:
         89:30:46:b8:c0:cc:cd:07:6b:fc:3d:5c:9a:a3:9f:8c:00:62:
         11:0e:80:2a:7c:05:58:1d:2a:e4:40:d7:b1:27:3f:98:53:5c:
         91:5f:11:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 11:59:35 2026 by rpki-client