Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3611484/E61E0996B9E311EE89052986775412E6/kjv5Ya2DU5g0UNOjPyjMz-CooQY.mft
File:                     kjv5Ya2DU5g0UNOjPyjMz-CooQY.mft (raw, json)
Hash identifier:          C2hFJ8E6qY9KkwqyHqPEYw26msdurv+wkHTbdRKABLY=
Subject key identifier:   A5:C3:EC:61:79:C7:4B:1E:F8:70:B8:FC:0B:26:CB:AD:E0:C4:F2:B9
Authority key identifier: 92:3B:F9:61:AD:83:53:98:34:50:D3:A3:3F:28:CC:CF:E0:A8:A1:06
Certificate issuer:       /CN=F3611484AF/serialNumber=923BF961AD8353983450D3A33F28CCCFE0A8A106
Certificate serial:       0345
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/kjv5Ya2DU5g0UNOjPyjMz-CooQY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3611484/E61E0996B9E311EE89052986775412E6/kjv5Ya2DU5g0UNOjPyjMz-CooQY.mft
Manifest number:          0343
Signing time:             Fri 17 Apr 2026 03:56:14 +0000
Manifest this update:     Fri 17 Apr 2026 03:56:14 +0000
Manifest next update:     Sun 19 Apr 2026 03:56:13 +0000
Files and hashes:         1: kjv5Ya2DU5g0UNOjPyjMz-CooQY.crl (hash: T4xj5MrMM0aCLQuAtZ3ZYZBXDfX2kMZclVRbBBXtYJo=)
                          2: 2908C1DCB9E511EEB9065888775412E6.roa (hash: zUZ7frdCVvRhVt6G1jP6YXP6H0Tz6Q6HJTbMKr0ueno=)
                          3: 60A31C9CB9E411EE910C0687775412E6.roa (hash: k8wj8VzEDiiwJJsRvgprQG7fLZ2kqSdbh1u+v7N4tmY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3611484/E61E0996B9E311EE89052986775412E6/kjv5Ya2DU5g0UNOjPyjMz-CooQY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3611484/E61E0996B9E311EE89052986775412E6/kjv5Ya2DU5g0UNOjPyjMz-CooQY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/kjv5Ya2DU5g0UNOjPyjMz-CooQY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 03:56:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 837 (0x345)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3611484AF, serialNumber=923BF961AD8353983450D3A33F28CCCFE0A8A106
        Validity
            Not Before: Apr 17 03:56:14 2026 GMT
            Not After : Apr 19 03:56:13 2026 GMT
        Subject: CN=69e1af5e-1ff0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f9:b7:7c:b1:b9:ff:29:78:d2:63:79:83:20:
                    7f:a9:bc:06:3c:35:3f:84:80:b2:47:28:86:c8:c1:
                    9f:1c:2f:17:d0:ce:11:1c:fe:fe:d0:75:91:2c:2a:
                    92:60:1d:ee:64:32:a2:84:79:3b:7a:b2:fd:ec:c2:
                    f5:51:4c:6f:52:5e:81:bf:2d:f3:e1:46:d3:d7:6c:
                    ba:52:e7:ec:11:98:1f:19:6e:0f:6c:6d:37:2c:70:
                    cb:96:af:a4:d7:65:99:60:b4:1b:2c:b2:8d:8f:b0:
                    56:3f:2c:4e:01:d7:71:73:bb:f1:40:29:a0:5e:22:
                    72:5c:56:aa:b5:b6:e1:6a:71:f1:81:da:56:ef:ed:
                    6a:82:67:23:e2:99:7a:3c:ab:3d:79:35:26:af:7a:
                    3e:96:8a:f6:1b:af:da:54:e7:d0:9c:38:4d:03:f4:
                    3a:74:0a:73:d1:fc:1b:9d:a1:4b:bd:e4:fb:3c:24:
                    ee:71:16:3e:73:52:a6:c9:17:41:bc:17:69:35:0b:
                    08:d5:0a:fb:b4:9c:28:5a:73:96:06:5e:80:b7:15:
                    57:cb:70:31:7a:e3:d9:b3:c8:10:89:cd:0f:8c:28:
                    a6:73:74:75:72:f8:05:1e:a4:f3:bd:49:bc:82:56:
                    b8:12:62:2b:57:17:d5:9a:8c:dd:76:0f:f3:90:72:
                    b5:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:C3:EC:61:79:C7:4B:1E:F8:70:B8:FC:0B:26:CB:AD:E0:C4:F2:B9
            X509v3 Authority Key Identifier:
                keyid:92:3B:F9:61:AD:83:53:98:34:50:D3:A3:3F:28:CC:CF:E0:A8:A1:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3611484/E61E0996B9E311EE89052986775412E6/kjv5Ya2DU5g0UNOjPyjMz-CooQY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kjv5Ya2DU5g0UNOjPyjMz-CooQY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3611484/E61E0996B9E311EE89052986775412E6/kjv5Ya2DU5g0UNOjPyjMz-CooQY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:5d:a2:60:10:3d:e2:cf:cb:79:89:13:2d:18:eb:95:36:8f:
         55:c3:34:63:18:3f:ea:66:08:13:bf:e2:b0:64:e9:ab:f6:d1:
         0b:3c:83:f2:f8:98:b7:a6:1a:0c:12:ba:e3:cf:da:59:1a:b1:
         01:00:2a:85:95:49:f9:19:e6:af:3b:8b:3f:be:ab:95:95:e2:
         61:04:fa:ad:71:40:3c:f2:77:36:62:c9:03:af:93:f2:e4:2b:
         72:2b:3a:3a:0e:f8:68:cf:d3:43:7a:fb:95:40:30:b4:93:85:
         cf:b8:f3:0e:a6:79:9a:51:01:41:c8:50:2f:54:fe:eb:24:1d:
         42:bb:bc:3d:67:51:b0:18:d6:ad:e2:67:15:48:2f:b5:ff:9e:
         cf:55:59:6a:25:ba:f8:df:f3:5f:88:e2:6c:23:dc:b2:77:b6:
         98:47:d9:75:e5:1e:d6:0e:4a:dc:26:20:ca:bb:6d:8a:8e:4a:
         1f:8e:0a:73:d8:fe:80:b9:23:67:7c:2c:3c:93:e2:1a:20:d9:
         bd:7e:14:7c:fd:fa:78:89:42:97:1a:ec:5a:c3:a1:39:72:9e:
         d5:b7:ee:b4:54:f0:d7:2d:7e:60:b6:fb:15:55:51:4b:54:a8:
         c7:0d:fb:34:65:e9:70:e1:a6:6d:87:14:bb:e5:50:95:d2:09:
         78:f3:41:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:34:19 2026 by rpki-client