Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3626FA1/38CD12E87CB311F0A60F6AABDAE4EC9C/X6EtceluL4GPuSSQs3lvC3cBZW0.mft
File:                     X6EtceluL4GPuSSQs3lvC3cBZW0.mft (raw, json)
Hash identifier:          7wA1GnshPXnZJkBgBuf3kWOaTSxjUQ5Y7+MxTwKGlAk=
Subject key identifier:   23:52:BB:F2:94:B8:23:42:89:FE:F1:F6:D4:35:AF:76:43:42:CB:46
Authority key identifier: 5F:A1:2D:71:E9:6E:2F:81:8F:B9:24:90:B3:79:6F:0B:77:01:65:6D
Certificate issuer:       /CN=F3626FA1AF/serialNumber=5FA12D71E96E2F818FB92490B3796F0B7701656D
Certificate serial:       CC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/X6EtceluL4GPuSSQs3lvC3cBZW0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3626FA1/38CD12E87CB311F0A60F6AABDAE4EC9C/X6EtceluL4GPuSSQs3lvC3cBZW0.mft
Manifest number:          CA
Signing time:             Mon 02 Mar 2026 03:27:54 +0000
Manifest this update:     Mon 02 Mar 2026 03:27:53 +0000
Manifest next update:     Wed 04 Mar 2026 03:27:53 +0000
Files and hashes:         1: X6EtceluL4GPuSSQs3lvC3cBZW0.crl (hash: 1zkkNxpwayHODJnxov+3pBaUjdWDzsgVkGBkr9Kx564=)
                          2: 261607DC0E5C11F1BFDCA9D8DAE4EC9C.roa (hash: RDOBBGsvJhE0OkAO2/KgMOs6/gp2HdgBOnY1YQ2CAy4=)
                          3: 23AA3F847CB411F08F9595B0DAE4EC9C.roa (hash: 3MSrx7uq5AEGHOWAFB7THkIOfn/SgWoN7PEmoZN2Nzo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3626FA1/38CD12E87CB311F0A60F6AABDAE4EC9C/X6EtceluL4GPuSSQs3lvC3cBZW0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3626FA1/38CD12E87CB311F0A60F6AABDAE4EC9C/X6EtceluL4GPuSSQs3lvC3cBZW0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/X6EtceluL4GPuSSQs3lvC3cBZW0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 204 (0xcc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3626FA1AF, serialNumber=5FA12D71E96E2F818FB92490B3796F0B7701656D
        Validity
            Not Before: Mar  2 03:27:53 2026 GMT
            Not After : Mar  4 03:27:53 2026 GMT
        Subject: CN=69a503ba-ee56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:79:68:a0:22:4e:19:d3:54:15:d2:50:6c:d2:
                    98:a5:da:0c:66:c4:2b:51:64:c6:27:d2:9b:6f:45:
                    19:0a:50:c6:96:e8:40:21:cb:68:6f:ec:a4:03:f2:
                    ce:fb:a4:a8:99:88:04:f9:e5:0f:11:1a:4a:19:2a:
                    b2:36:16:38:41:26:44:a3:1d:be:50:08:5f:99:b0:
                    2c:58:35:4e:37:03:4a:f1:48:94:41:dd:8b:29:0d:
                    4d:25:b8:00:ca:f9:61:65:7c:f7:81:93:a3:a9:4e:
                    f7:f4:67:91:d7:5d:d3:ca:5c:b6:de:10:92:a8:c9:
                    d2:f0:e6:a4:c7:87:cf:5f:fc:dd:93:d4:87:ef:54:
                    e0:20:d5:53:7a:c7:11:49:f3:10:0e:7c:a2:1d:6a:
                    a0:ef:cf:2d:87:6d:15:82:4c:09:14:49:10:cb:ac:
                    af:ce:7a:e5:99:f5:5a:9a:8c:db:3b:d8:13:4e:46:
                    d9:6e:61:f1:d2:59:7d:5d:e5:5b:51:96:6d:d2:a7:
                    fd:a4:e3:ce:50:18:a4:96:59:0f:e2:f8:7b:02:62:
                    17:69:92:c9:94:d3:28:a8:55:ff:a0:5c:2f:70:70:
                    ee:61:a2:82:50:4c:f6:0e:2d:0a:d8:2b:25:45:87:
                    d4:b1:db:f8:87:ac:11:d0:51:e7:d5:0f:fe:9b:d5:
                    85:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:52:BB:F2:94:B8:23:42:89:FE:F1:F6:D4:35:AF:76:43:42:CB:46
            X509v3 Authority Key Identifier:
                keyid:5F:A1:2D:71:E9:6E:2F:81:8F:B9:24:90:B3:79:6F:0B:77:01:65:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3626FA1/38CD12E87CB311F0A60F6AABDAE4EC9C/X6EtceluL4GPuSSQs3lvC3cBZW0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/X6EtceluL4GPuSSQs3lvC3cBZW0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3626FA1/38CD12E87CB311F0A60F6AABDAE4EC9C/X6EtceluL4GPuSSQs3lvC3cBZW0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:54:87:74:15:32:58:5d:2d:00:64:2d:5a:f0:fe:70:9b:19:
         a1:f1:6f:d4:ba:b4:e2:cf:fc:33:54:8b:48:e8:ae:30:e0:d5:
         89:fd:a2:8a:f4:6a:02:1d:48:bb:d2:2d:4c:70:d6:87:fe:f9:
         f4:c3:81:3a:57:b9:23:1b:ed:17:36:e1:86:2c:ad:00:d3:92:
         81:62:49:b2:62:65:ee:de:24:d3:84:af:b3:f7:1e:47:88:f0:
         cb:07:51:23:f6:0f:a6:dd:8b:18:12:61:75:b8:80:ee:1f:3b:
         6d:cf:f5:bc:75:86:56:e2:08:11:c1:ad:b4:cd:77:92:2f:f4:
         ff:df:ba:75:53:26:08:e3:ab:53:cb:55:e6:d0:cb:39:ed:d5:
         12:0b:c7:f2:8f:a8:90:cc:21:2c:4a:c5:2e:de:82:ec:63:91:
         cf:ce:99:ff:b5:23:49:6a:45:c7:e7:71:98:44:d5:e9:3d:45:
         4d:1f:15:65:2a:7a:b4:4d:19:3d:47:e3:5b:cc:56:3a:2c:54:
         0b:e5:e7:49:21:a7:6c:94:1e:ed:2b:26:6a:a9:82:70:42:8b:
         6e:4a:e5:43:80:09:bc:fb:17:16:e3:27:7a:25:4d:a6:b7:11:
         24:a4:58:7a:e2:97:39:d0:13:49:db:5f:2f:40:ff:bf:34:04:
         6f:85:a2:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:01:12 2026 by rpki-client