Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361153A/80C7DFF806B211ED9B0617E9F1222468/F9XbYUvL122qn_GpMVkVxH-Je_M.mft
File:                     F9XbYUvL122qn_GpMVkVxH-Je_M.mft (raw, json)
Hash identifier:          yGVMIv+xrPGoaObHzleFNRiOowl9UP30Khc3eGIA2HA=
Subject key identifier:   0C:97:9D:2B:FA:2E:DF:4D:43:6E:E6:DA:6C:D0:3D:EE:5D:AB:F2:DD
Authority key identifier: 17:D5:DB:61:4B:CB:D7:6D:AA:9F:F1:A9:31:59:15:C4:7F:89:7B:F3
Certificate issuer:       /CN=F361153AAF/serialNumber=17D5DB614BCBD76DAA9FF1A9315915C47F897BF3
Certificate serial:       0560
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/F9XbYUvL122qn_GpMVkVxH-Je_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361153A/80C7DFF806B211ED9B0617E9F1222468/F9XbYUvL122qn_GpMVkVxH-Je_M.mft
Manifest number:          0559
Signing time:             Mon 02 Mar 2026 02:05:12 +0000
Manifest this update:     Mon 02 Mar 2026 02:05:11 +0000
Manifest next update:     Wed 04 Mar 2026 02:05:11 +0000
Files and hashes:         1: F9XbYUvL122qn_GpMVkVxH-Je_M.crl (hash: xVCI4mWfpGi7p/bBFoEcsBVg+/AsI6XhxEfSU81JNPQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361153A/80C7DFF806B211ED9B0617E9F1222468/F9XbYUvL122qn_GpMVkVxH-Je_M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361153A/80C7DFF806B211ED9B0617E9F1222468/F9XbYUvL122qn_GpMVkVxH-Je_M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/F9XbYUvL122qn_GpMVkVxH-Je_M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1376 (0x560)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361153AAF, serialNumber=17D5DB614BCBD76DAA9FF1A9315915C47F897BF3
        Validity
            Not Before: Mar  2 02:05:11 2026 GMT
            Not After : Mar  4 02:05:11 2026 GMT
        Subject: CN=69a4f058-7714
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:61:6c:39:3f:ae:73:1f:51:8a:d1:0c:5c:2f:
                    bf:40:b2:95:f3:dd:93:22:a4:aa:f4:30:97:76:b2:
                    b4:1a:38:a6:94:88:59:21:b8:9c:52:0b:8b:c4:92:
                    b5:1f:1f:39:cc:03:5a:05:92:06:f9:08:21:86:58:
                    ae:36:00:13:29:59:56:ef:46:f6:59:4c:06:09:75:
                    aa:93:d6:ab:f0:e5:26:16:da:3c:97:46:61:c9:2b:
                    60:03:65:02:4b:7e:46:7e:9c:b0:55:51:86:70:17:
                    90:fc:fb:05:3d:d5:6d:28:d9:b2:dd:53:aa:52:66:
                    54:76:9e:f7:ad:9f:30:a5:a7:18:9f:0b:c8:b1:f7:
                    62:4d:ec:e7:3f:65:85:d7:13:38:4a:bd:ca:84:6e:
                    81:41:11:18:9d:db:c2:73:79:10:6f:3d:74:51:0d:
                    76:15:10:f3:4a:b5:f2:d8:fc:5c:59:35:f4:b9:ed:
                    39:ab:f2:fa:99:47:4e:0f:62:96:c1:76:08:a6:c4:
                    0d:87:b0:75:a8:74:25:2c:ab:63:29:88:e8:6d:35:
                    8b:4a:5d:ff:62:cb:52:9f:af:42:9a:9f:73:4c:22:
                    cc:4e:96:d9:f6:f1:6b:dd:f1:61:70:d7:cd:2c:27:
                    f4:b2:da:8d:06:b8:cb:91:c9:51:d8:95:62:2e:90:
                    0a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:97:9D:2B:FA:2E:DF:4D:43:6E:E6:DA:6C:D0:3D:EE:5D:AB:F2:DD
            X509v3 Authority Key Identifier:
                keyid:17:D5:DB:61:4B:CB:D7:6D:AA:9F:F1:A9:31:59:15:C4:7F:89:7B:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361153A/80C7DFF806B211ED9B0617E9F1222468/F9XbYUvL122qn_GpMVkVxH-Je_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/F9XbYUvL122qn_GpMVkVxH-Je_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361153A/80C7DFF806B211ED9B0617E9F1222468/F9XbYUvL122qn_GpMVkVxH-Je_M.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:4a:6e:3c:7b:de:2e:46:ca:03:70:26:d7:f5:0c:d2:71:fb:
         a9:e2:6d:ce:77:17:0f:a6:e0:27:7a:37:f8:c5:cb:aa:94:e3:
         6f:52:a9:89:75:f2:83:f0:ad:35:e4:bf:ca:52:8d:40:a1:23:
         36:4e:12:b7:a6:f6:f3:4c:68:c4:52:71:8b:5d:0c:0d:f4:fc:
         46:73:30:fa:8d:2b:50:a3:0b:ec:b7:c4:c8:f2:6e:17:7a:af:
         ac:2f:53:09:6b:aa:37:e3:62:65:42:44:c7:a0:d8:98:e3:8b:
         c8:82:b1:6e:84:95:60:d5:bc:32:c2:59:83:51:45:5b:c4:c2:
         67:92:ad:2a:38:eb:23:c4:ec:d6:50:19:df:94:68:46:f9:9e:
         e1:1e:0e:a2:68:77:19:0f:5a:9e:cb:4b:1b:c0:f0:1e:61:9a:
         3c:d1:a7:3a:67:90:12:31:57:65:3b:b7:4e:5e:83:e5:85:a1:
         d4:d3:c6:78:bc:02:c3:66:50:e6:5b:01:09:0d:e2:42:10:87:
         00:13:cb:d1:07:63:44:88:8a:3b:b7:9b:8d:e7:8d:0f:16:16:
         1c:b6:96:dd:5e:31:9c:d1:29:ed:f0:28:b0:3c:df:05:4c:95:
         2c:b2:b1:dd:1f:08:3b:0d:c2:77:77:94:d1:8f:55:50:a0:bc:
         1e:5a:a1:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:35:15 2026 by rpki-client