Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361153A/80C7DFF806B211ED9B0617E9F1222468/F9XbYUvL122qn_GpMVkVxH-Je_M.mft
File:                     F9XbYUvL122qn_GpMVkVxH-Je_M.mft (raw, json)
Hash identifier:          Yin7gIJOIbt+L8Zh+2OledQo2j955cq7mYk14KQU1jE=
Subject key identifier:   7B:01:5B:90:C1:07:8F:BD:F7:9F:EF:95:D9:C6:70:56:3B:DF:65:DA
Authority key identifier: 17:D5:DB:61:4B:CB:D7:6D:AA:9F:F1:A9:31:59:15:C4:7F:89:7B:F3
Certificate issuer:       /CN=F361153AAF/serialNumber=17D5DB614BCBD76DAA9FF1A9315915C47F897BF3
Certificate serial:       058E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/F9XbYUvL122qn_GpMVkVxH-Je_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361153A/80C7DFF806B211ED9B0617E9F1222468/F9XbYUvL122qn_GpMVkVxH-Je_M.mft
Manifest number:          0587
Signing time:             Fri 17 Apr 2026 02:50:33 +0000
Manifest this update:     Fri 17 Apr 2026 02:50:33 +0000
Manifest next update:     Sun 19 Apr 2026 02:50:33 +0000
Files and hashes:         1: F9XbYUvL122qn_GpMVkVxH-Je_M.crl (hash: HcKaL8oCTCfEhHFIX/Fald9mYJRx8+nF3elnWZ6/JvQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361153A/80C7DFF806B211ED9B0617E9F1222468/F9XbYUvL122qn_GpMVkVxH-Je_M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361153A/80C7DFF806B211ED9B0617E9F1222468/F9XbYUvL122qn_GpMVkVxH-Je_M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/F9XbYUvL122qn_GpMVkVxH-Je_M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 02:50:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1422 (0x58e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361153AAF, serialNumber=17D5DB614BCBD76DAA9FF1A9315915C47F897BF3
        Validity
            Not Before: Apr 17 02:50:33 2026 GMT
            Not After : Apr 19 02:50:33 2026 GMT
        Subject: CN=69e19ff9-f42b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d7:e1:46:7f:4d:81:59:00:43:89:01:93:9b:
                    31:d9:64:4c:a5:ef:38:2c:5e:f6:f8:3e:af:ec:a3:
                    b9:72:8d:2f:30:1c:95:ff:ef:85:bc:a0:2b:fe:9f:
                    ac:08:68:da:e8:ef:fd:ca:0c:ab:61:c3:72:8a:06:
                    fc:05:e5:6d:f9:02:27:83:bf:04:e8:f6:15:5a:26:
                    1b:c7:1f:65:14:69:3f:4f:12:04:e9:b8:94:41:72:
                    4d:65:e0:71:1c:1d:a5:c4:aa:98:65:8a:a3:fc:8f:
                    9e:d1:06:9f:fa:b1:f4:48:a9:f4:e0:bc:a1:3c:e8:
                    e4:7f:66:0c:d4:c8:1c:d9:ab:a8:49:37:b6:73:62:
                    4c:10:13:c4:55:be:9c:a3:d1:71:ef:bf:b8:81:cf:
                    6e:80:a0:4f:51:ef:84:3c:2d:3c:06:0c:66:4c:4c:
                    df:ab:ec:ff:7e:d9:ae:3a:8a:c7:9e:fb:8f:0a:ba:
                    63:00:33:d9:76:13:62:84:b2:07:6d:b9:9e:6f:c2:
                    bb:3a:c6:46:04:f5:90:12:51:da:66:76:c8:d5:15:
                    3d:ed:96:02:83:2c:40:b8:74:fc:b2:ea:1a:9c:cf:
                    c9:86:a5:ae:ba:25:50:3c:54:32:8c:09:4e:fb:72:
                    68:70:04:44:9a:c8:32:09:91:2a:49:6a:fd:9c:32:
                    c3:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:01:5B:90:C1:07:8F:BD:F7:9F:EF:95:D9:C6:70:56:3B:DF:65:DA
            X509v3 Authority Key Identifier:
                keyid:17:D5:DB:61:4B:CB:D7:6D:AA:9F:F1:A9:31:59:15:C4:7F:89:7B:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361153A/80C7DFF806B211ED9B0617E9F1222468/F9XbYUvL122qn_GpMVkVxH-Je_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/F9XbYUvL122qn_GpMVkVxH-Je_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361153A/80C7DFF806B211ED9B0617E9F1222468/F9XbYUvL122qn_GpMVkVxH-Je_M.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:45:bf:2b:7f:cd:db:fe:8a:e4:90:98:4b:73:11:72:83:5e:
         05:e4:06:31:c2:4a:84:1c:78:66:b9:42:60:ec:54:16:55:92:
         24:3c:f5:44:d4:a6:c9:91:a4:47:98:75:bc:4b:c8:ae:fa:fc:
         6e:32:e9:3d:d7:5b:66:fd:6c:8f:dc:32:ad:c5:c2:9c:c2:59:
         40:9b:78:b7:50:37:29:cd:47:ab:23:8b:f7:99:ea:91:20:5a:
         23:a9:22:6b:6d:c4:2f:72:fc:3a:e7:3b:ad:b0:9f:cd:b2:24:
         b7:f8:06:70:3c:2c:ed:7f:27:d7:80:07:51:09:31:41:51:c9:
         d6:a5:0d:79:f2:24:e7:98:29:62:43:12:1b:40:31:34:03:ff:
         f0:8b:02:98:3a:69:32:e8:a8:bc:6c:f7:00:29:1d:f4:c1:31:
         59:d6:99:1b:15:17:48:e0:85:86:d5:7d:33:62:45:7d:b6:ef:
         08:58:c1:37:e3:8f:ab:e3:06:02:19:cb:3d:41:fd:19:77:83:
         e1:77:5a:28:91:d9:0e:dd:54:c2:ba:d0:db:c2:49:86:cc:86:
         9d:1a:b9:32:1d:a5:d8:bc:1a:1f:bf:45:97:4f:46:cf:07:ff:
         c1:d8:97:40:44:eb:25:6a:4b:c5:ac:1f:50:a9:4c:e8:fc:4d:
         db:3f:cf:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:57:29 2026 by rpki-client