Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3625046/9BC19E3079C811EF9E0A858F762E951A/XTIRwmpetGVqxFtni0_0vyQECa4.mft
File:                     XTIRwmpetGVqxFtni0_0vyQECa4.mft (raw, json)
Hash identifier:          1WpB884O206+WHKmSgPhr1jK4nK2TUD0pN0RbEMKdCc=
Subject key identifier:   0B:F4:AD:8A:9A:6A:B4:13:E8:52:FA:ED:EB:E1:41:AB:46:70:E4:FD
Authority key identifier: 5D:32:11:C2:6A:5E:B4:65:6A:C4:5B:67:8B:4F:F4:BF:24:04:09:AE
Certificate issuer:       /CN=F3625046AF/serialNumber=5D3211C26A5EB4656AC45B678B4FF4BF240409AE
Certificate serial:       02B2
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/XTIRwmpetGVqxFtni0_0vyQECa4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3625046/9BC19E3079C811EF9E0A858F762E951A/XTIRwmpetGVqxFtni0_0vyQECa4.mft
Manifest number:          02B0
Signing time:             Tue 28 Jul 2026 04:33:04 +0000
Manifest this update:     Tue 28 Jul 2026 04:33:03 +0000
Manifest next update:     Thu 30 Jul 2026 04:33:03 +0000
Files and hashes:         1: XTIRwmpetGVqxFtni0_0vyQECa4.crl (hash: XLqFsZwl+XURvPWNpALuutKISu9Xbn/UgZMLPoVYHUM=)
                          2: 9643C3ACBFEF11F085B1BFE1DAE4EC9C.roa (hash: 2uFOUkSFKVasJhOLfUiTVE3r4VWf4k4tupX7FNxvep4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3625046/9BC19E3079C811EF9E0A858F762E951A/XTIRwmpetGVqxFtni0_0vyQECa4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3625046/9BC19E3079C811EF9E0A858F762E951A/XTIRwmpetGVqxFtni0_0vyQECa4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/XTIRwmpetGVqxFtni0_0vyQECa4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 30 Jul 2026 04:33:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 690 (0x2b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3625046AF, serialNumber=5D3211C26A5EB4656AC45B678B4FF4BF240409AE
        Validity
            Not Before: Jul 28 04:33:03 2026 GMT
            Not After : Jul 30 04:33:03 2026 GMT
        Subject: CN=6a683100-66f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:e9:e0:06:2e:68:dd:ba:45:94:5c:20:e4:da:
                    5d:ff:a6:87:7d:be:4a:49:ec:16:d7:e4:a2:9f:55:
                    ea:97:24:de:7c:3c:e6:b7:66:3e:81:ee:b7:e0:66:
                    06:c5:3c:d6:48:7f:84:d5:a4:4f:a8:b9:44:60:0f:
                    f4:f0:02:4d:64:42:73:d8:e9:91:3e:0d:10:20:d5:
                    35:8c:0c:ea:5c:40:57:25:b1:42:3d:6d:b6:d9:01:
                    ae:65:84:aa:59:86:b2:67:49:4a:cd:b4:74:2d:ea:
                    fe:07:41:25:e9:6e:e3:b5:af:03:ec:3f:a1:42:27:
                    56:4b:9d:cf:db:49:73:7e:1e:8a:08:90:db:cf:98:
                    7c:34:6c:ae:c5:c8:3c:3e:4a:d0:a6:a7:8b:f6:08:
                    15:84:c1:f2:67:38:f8:b0:c0:93:69:58:94:7d:29:
                    7d:b6:49:36:e9:4f:ba:99:e9:93:6c:22:80:e9:42:
                    10:0a:0c:3f:16:cf:87:b9:f9:a5:06:23:6e:69:bf:
                    f3:1c:d7:b1:cc:7f:dc:70:70:ab:55:76:80:22:55:
                    96:2c:06:93:8c:b7:ae:b8:21:fe:2c:ab:60:aa:1f:
                    a0:dd:42:9e:e0:a8:b0:94:cb:4c:75:4d:23:c3:cd:
                    6f:f7:58:7c:1f:4c:d1:49:96:8c:69:77:00:47:c3:
                    ae:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:F4:AD:8A:9A:6A:B4:13:E8:52:FA:ED:EB:E1:41:AB:46:70:E4:FD
            X509v3 Authority Key Identifier:
                keyid:5D:32:11:C2:6A:5E:B4:65:6A:C4:5B:67:8B:4F:F4:BF:24:04:09:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3625046/9BC19E3079C811EF9E0A858F762E951A/XTIRwmpetGVqxFtni0_0vyQECa4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XTIRwmpetGVqxFtni0_0vyQECa4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3625046/9BC19E3079C811EF9E0A858F762E951A/XTIRwmpetGVqxFtni0_0vyQECa4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:11:55:08:f1:ca:7d:cf:67:4e:2e:07:68:e8:63:72:97:94:
         f0:74:b1:39:44:7f:64:44:24:78:1d:18:65:9a:ce:b6:f0:9f:
         5d:56:df:c8:4e:c8:b1:8d:10:c8:0d:2b:2b:34:e2:47:01:22:
         1f:a8:1a:17:39:fc:d8:2b:8b:ca:d2:2c:e9:e7:1a:09:84:dd:
         06:a5:57:88:98:5e:18:d3:bf:7f:0d:0e:da:da:45:a3:2a:a3:
         55:20:11:8a:ee:ec:8e:c1:73:31:fd:0b:da:e5:74:35:fd:a2:
         97:c3:2a:c6:dd:c9:e8:61:33:55:06:30:bd:89:d2:ce:1c:ec:
         3d:37:d5:cd:bb:b5:c7:52:76:98:03:50:97:f4:c4:9a:00:35:
         43:19:c9:7c:50:81:24:bd:dc:aa:1c:63:7f:4f:37:d2:2b:d0:
         a9:18:c1:12:9e:30:9a:9c:63:ac:ec:69:90:f0:50:53:4a:a5:
         cd:13:76:a8:31:f1:15:c3:0d:4c:7d:70:f6:22:23:9f:c6:97:
         bd:a8:d4:6c:db:4f:25:2d:45:63:74:88:f2:b1:97:28:4e:d9:
         27:ea:6c:fc:91:57:04:fd:c4:30:f8:74:07:8d:96:25:e4:2f:
         9f:90:43:86:31:85:13:51:41:e9:63:1b:45:3b:29:2b:a0:bb:
         4b:52:b6:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:32:34 2026 by rpki-client