Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3623AE4/C4005E32B27011EF82361D42762E951A/nqwIPfzNKV1WFgVVs-q-bRV3CyA.mft
File:                     nqwIPfzNKV1WFgVVs-q-bRV3CyA.mft (raw, json)
Hash identifier:          7nkPRYpCAMgxcuTZ9wUT1jNdAa5BCsxn60p8RE9A8UM=
Subject key identifier:   87:35:F6:E9:B4:13:38:50:21:17:42:1D:87:03:C4:B3:54:ED:A0:2B
Authority key identifier: 9E:AC:08:3D:FC:CD:29:5D:56:16:05:55:B3:EA:BE:6D:15:77:0B:20
Certificate issuer:       /CN=F3623AE4AF/serialNumber=9EAC083DFCCD295D56160555B3EABE6D15770B20
Certificate serial:       0238
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/nqwIPfzNKV1WFgVVs-q-bRV3CyA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3623AE4/C4005E32B27011EF82361D42762E951A/nqwIPfzNKV1WFgVVs-q-bRV3CyA.mft
Manifest number:          0237
Signing time:             Fri 12 Jun 2026 04:40:45 +0000
Manifest this update:     Fri 12 Jun 2026 04:40:44 +0000
Manifest next update:     Sun 14 Jun 2026 04:40:44 +0000
Files and hashes:         1: nqwIPfzNKV1WFgVVs-q-bRV3CyA.crl (hash: VSvQn2ymYHsNBZ4v4oKcNOhytZ2N0T5d/2AcI1OD9O4=)
                          2: 0CBAC432B27111EF99B95144762E951A.roa (hash: gmMvunoj5KNwjAHQwXEB9NQDDcCeTBCj9SxbM2LLQYk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3623AE4/C4005E32B27011EF82361D42762E951A/nqwIPfzNKV1WFgVVs-q-bRV3CyA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3623AE4/C4005E32B27011EF82361D42762E951A/nqwIPfzNKV1WFgVVs-q-bRV3CyA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/nqwIPfzNKV1WFgVVs-q-bRV3CyA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 14 Jun 2026 04:40:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 568 (0x238)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3623AE4AF, serialNumber=9EAC083DFCCD295D56160555B3EABE6D15770B20
        Validity
            Not Before: Jun 12 04:40:44 2026 GMT
            Not After : Jun 14 04:40:44 2026 GMT
        Subject: CN=6a2b8dcd-06cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:05:fd:9e:99:e6:8a:e6:f0:64:19:4c:81:e2:
                    cc:db:5a:23:89:98:8e:3f:ec:0d:7c:bb:27:ce:85:
                    8a:d1:51:94:43:c8:11:c8:24:25:64:d4:77:a4:b1:
                    b9:c7:6f:3c:84:b4:98:ee:7d:74:d1:87:96:85:98:
                    1a:cd:f6:2a:49:0f:92:c6:06:d4:e9:0b:c5:f0:ab:
                    9e:6b:3d:02:5b:00:8b:c3:15:e7:6e:9e:2e:f0:3e:
                    fc:b9:3f:c3:e0:20:04:e5:11:54:b2:02:cf:68:81:
                    25:8d:9e:c8:96:15:5b:da:fc:58:67:80:42:dc:f5:
                    b0:42:e7:a2:5b:51:e1:01:6d:c1:1c:de:3c:bd:ae:
                    80:80:f9:fa:10:bc:e3:a8:59:4b:04:77:40:c9:dc:
                    37:39:f5:67:c3:d5:45:cd:03:01:ab:9c:49:f4:c2:
                    41:7a:06:0d:80:5c:d3:e0:88:26:d2:00:43:db:cb:
                    37:ac:e4:4a:c7:38:b2:ef:dc:03:2b:9f:8e:59:26:
                    86:20:c4:9f:c6:10:26:97:01:a2:f9:0b:3f:64:fd:
                    64:5f:1e:9f:38:51:03:f4:b4:95:79:f2:17:cc:d3:
                    9f:23:71:9f:f6:fe:d7:1c:9e:cc:7a:e7:ae:7c:80:
                    9f:2c:56:d1:a9:9d:29:ac:fe:32:f8:c2:b6:00:32:
                    56:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:35:F6:E9:B4:13:38:50:21:17:42:1D:87:03:C4:B3:54:ED:A0:2B
            X509v3 Authority Key Identifier:
                keyid:9E:AC:08:3D:FC:CD:29:5D:56:16:05:55:B3:EA:BE:6D:15:77:0B:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3623AE4/C4005E32B27011EF82361D42762E951A/nqwIPfzNKV1WFgVVs-q-bRV3CyA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/nqwIPfzNKV1WFgVVs-q-bRV3CyA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3623AE4/C4005E32B27011EF82361D42762E951A/nqwIPfzNKV1WFgVVs-q-bRV3CyA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:02:f6:cd:c8:e9:e4:f1:3e:3b:48:cc:9b:69:91:f9:7e:c6:
         c7:f9:d2:b2:80:90:3e:e2:ef:86:26:c1:02:58:ff:a7:44:06:
         b1:1f:7f:d7:02:ff:b5:bd:2d:78:30:af:18:4a:5e:c5:29:8a:
         0c:c2:ed:d7:f4:57:98:14:21:bb:62:32:64:fd:d6:d2:65:c8:
         32:0f:54:32:44:82:64:38:a0:2f:d1:4a:9f:07:e4:03:d9:b2:
         fb:0e:29:2d:3c:c5:26:a9:42:6f:bb:a6:09:db:72:94:04:33:
         44:be:3f:2e:e3:2c:c7:e1:2a:7f:96:57:c4:8d:03:44:df:c8:
         0e:ee:0c:a3:5b:93:ad:ad:4c:09:c8:45:fd:88:a4:a9:4d:37:
         77:4a:fc:b4:b9:85:31:7f:a3:57:c6:d3:70:45:46:0e:8d:2a:
         36:eb:bb:20:0d:7a:6b:3b:c2:b8:b0:4c:da:1e:22:a8:71:42:
         cd:d1:98:6c:35:67:a2:c8:3b:00:72:ef:60:43:d5:60:4d:c0:
         ce:2e:72:27:9e:a2:19:57:dd:f8:87:c3:cd:12:5d:32:db:50:
         6e:0b:0e:39:53:34:86:14:20:09:b5:5d:df:8d:ef:b8:de:f6:
         8b:40:c7:17:95:5a:14:d0:0d:6c:0e:d2:f1:47:94:98:ad:4e:
         cd:21:03:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 04:34:06 2026 by rpki-client