Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3624E32/08D6A70AEE7311ED942F54164AD9E6FC/l9Y19-2_mFQOYSLJxsIL43gotSY.mft
File:                     l9Y19-2_mFQOYSLJxsIL43gotSY.mft (raw, json)
Hash identifier:          KeYGVaEu0tS3RCbnK/N6QuTOOq6HHXTsD4kY3wC+sVg=
Subject key identifier:   26:05:92:54:73:82:9F:55:72:18:79:E1:3B:2E:C4:C2:1C:67:8C:FC
Authority key identifier: 97:D6:35:F7:ED:BF:98:54:0E:61:22:C9:C6:C2:0B:E3:78:28:B5:26
Certificate issuer:       /CN=F3624E32AF/serialNumber=97D635F7EDBF98540E6122C9C6C20BE37828B526
Certificate serial:       0489
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/l9Y19-2_mFQOYSLJxsIL43gotSY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3624E32/08D6A70AEE7311ED942F54164AD9E6FC/l9Y19-2_mFQOYSLJxsIL43gotSY.mft
Manifest number:          0488
Signing time:             Fri 12 Jun 2026 03:25:08 +0000
Manifest this update:     Fri 12 Jun 2026 03:25:07 +0000
Manifest next update:     Sun 14 Jun 2026 03:25:07 +0000
Files and hashes:         1: l9Y19-2_mFQOYSLJxsIL43gotSY.crl (hash: /0SNqIK2OMX/JDxf+wG+l8ci82reGKSfMCV3vgfJfZ8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3624E32/08D6A70AEE7311ED942F54164AD9E6FC/l9Y19-2_mFQOYSLJxsIL43gotSY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3624E32/08D6A70AEE7311ED942F54164AD9E6FC/l9Y19-2_mFQOYSLJxsIL43gotSY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/l9Y19-2_mFQOYSLJxsIL43gotSY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 14 Jun 2026 03:25:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1161 (0x489)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3624E32AF, serialNumber=97D635F7EDBF98540E6122C9C6C20BE37828B526
        Validity
            Not Before: Jun 12 03:25:07 2026 GMT
            Not After : Jun 14 03:25:07 2026 GMT
        Subject: CN=6a2b7c14-7781
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c5:f7:71:bf:92:21:04:20:d1:a8:d5:e7:91:
                    e9:7e:6a:53:28:ce:4b:94:cc:88:f5:07:21:3a:0a:
                    de:ad:64:2f:01:3b:2a:db:02:8b:91:e9:39:1c:13:
                    f9:ab:79:34:c5:3a:98:d2:c6:81:1c:c0:01:c2:00:
                    e4:2c:4f:dd:af:16:e0:e1:74:b2:a8:80:4c:95:34:
                    56:a1:c1:d1:43:25:c4:7f:c8:66:0e:9e:06:e8:fb:
                    65:70:42:13:6f:c6:b7:f0:d3:7a:99:35:c0:2a:4b:
                    5b:28:44:c9:f5:a4:21:39:a2:6e:34:36:ee:b6:d8:
                    42:6e:94:5e:f9:c5:34:e4:9e:4b:1e:ab:b1:50:32:
                    e2:a1:07:f4:ea:ef:ce:7a:6c:c5:42:6d:33:67:f1:
                    c5:b1:73:6e:45:67:86:8a:7a:0b:2f:a3:02:c5:cd:
                    10:a7:f8:9b:df:41:eb:09:a3:3c:3b:4e:e6:db:58:
                    dc:b5:10:f5:82:95:04:a5:6c:26:03:35:98:96:13:
                    7e:a9:e6:5a:6c:96:39:c8:35:b0:fb:9a:45:32:a8:
                    a5:eb:ee:ee:01:03:a2:18:ff:1e:61:fc:35:e2:93:
                    b4:1b:d8:11:70:0e:1b:fe:4c:06:98:51:7a:9a:5b:
                    4b:0c:93:9a:4c:2f:d2:0c:21:75:22:d3:1a:d7:fa:
                    e7:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:05:92:54:73:82:9F:55:72:18:79:E1:3B:2E:C4:C2:1C:67:8C:FC
            X509v3 Authority Key Identifier:
                keyid:97:D6:35:F7:ED:BF:98:54:0E:61:22:C9:C6:C2:0B:E3:78:28:B5:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3624E32/08D6A70AEE7311ED942F54164AD9E6FC/l9Y19-2_mFQOYSLJxsIL43gotSY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l9Y19-2_mFQOYSLJxsIL43gotSY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3624E32/08D6A70AEE7311ED942F54164AD9E6FC/l9Y19-2_mFQOYSLJxsIL43gotSY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:83:36:9c:6c:2b:bc:4c:ef:d3:8b:7a:38:47:12:e3:75:58:
         01:43:9c:f9:50:62:a6:fb:94:9a:54:43:7e:9c:78:17:74:32:
         21:0e:0d:e7:df:cf:c8:3b:f2:66:50:f2:7b:e6:02:b3:02:10:
         15:bb:89:30:3c:91:a5:1c:7c:b6:b4:c4:1a:e7:57:74:ed:61:
         3e:a0:7d:1a:87:73:11:ce:bd:9b:a2:47:2f:11:f3:00:b0:88:
         35:47:e1:c8:db:44:cb:7f:5d:6c:03:30:b1:4f:4b:b7:fd:15:
         6b:71:67:86:49:ae:e0:c5:40:be:df:8c:91:42:c9:42:30:3e:
         b8:62:ad:60:7f:85:dc:cf:7d:f3:1d:bf:49:37:28:c9:c5:53:
         23:16:12:a8:72:dd:5d:ca:fc:4e:35:d5:ce:ee:aa:b7:29:3d:
         ed:67:09:54:ba:40:c3:8d:cf:44:4a:c2:2e:95:4f:fc:62:17:
         08:5d:a2:7a:57:e1:e8:9c:c4:6f:e3:66:40:07:1c:5b:8a:66:
         58:f9:83:c6:51:c5:92:39:06:07:2c:84:85:a2:d2:a4:3d:97:
         7e:81:42:68:d0:53:82:66:28:45:0c:b1:1e:93:e2:eb:70:76:
         a9:7d:f2:c0:e8:8c:e4:40:c1:10:45:89:95:cc:1b:34:36:08:
         49:0c:eb:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 04:32:20 2026 by rpki-client