Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36280C9/892916D0895911F0B0F640C1DAE4EC9C/Vznp0pMq2FvMIkCBO_OrOUKEMCA.mft
File:                     Vznp0pMq2FvMIkCBO_OrOUKEMCA.mft (raw, json)
Hash identifier:          geUEKWIz+94PHYlDSjNHXXFgLRbrZp9TKxhn+GHWke8=
Subject key identifier:   C5:13:CB:80:0D:F0:08:8F:97:78:34:62:2C:F8:BD:04:CA:7C:76:CE
Authority key identifier: 57:39:E9:D2:93:2A:D8:5B:CC:22:40:81:3B:F3:AB:39:42:84:30:20
Certificate issuer:       /CN=F36280C9AF/serialNumber=5739E9D2932AD85BCC2240813BF3AB3942843020
Certificate serial:       0121
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Vznp0pMq2FvMIkCBO_OrOUKEMCA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36280C9/892916D0895911F0B0F640C1DAE4EC9C/Vznp0pMq2FvMIkCBO_OrOUKEMCA.mft
Manifest number:          0120
Signing time:             Fri 12 Jun 2026 05:08:01 +0000
Manifest this update:     Fri 12 Jun 2026 05:08:01 +0000
Manifest next update:     Sun 14 Jun 2026 05:08:00 +0000
Files and hashes:         1: Vznp0pMq2FvMIkCBO_OrOUKEMCA.crl (hash: fuo9G8aJrAZLDIa7ASZWly+nEBnxaXgkb3bhbwLRFyQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36280C9/892916D0895911F0B0F640C1DAE4EC9C/Vznp0pMq2FvMIkCBO_OrOUKEMCA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36280C9/892916D0895911F0B0F640C1DAE4EC9C/Vznp0pMq2FvMIkCBO_OrOUKEMCA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Vznp0pMq2FvMIkCBO_OrOUKEMCA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 14 Jun 2026 05:07:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 289 (0x121)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36280C9AF, serialNumber=5739E9D2932AD85BCC2240813BF3AB3942843020
        Validity
            Not Before: Jun 12 05:08:01 2026 GMT
            Not After : Jun 14 05:08:00 2026 GMT
        Subject: CN=6a2b9431-93e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6d:fd:d4:cf:b1:79:70:28:6a:52:74:dd:0c:
                    ba:47:87:5a:98:3d:09:9d:93:83:0a:34:54:5d:17:
                    4d:07:fd:a2:e2:3d:26:43:c1:49:a4:c6:0b:c2:e9:
                    2e:87:d4:4f:b6:42:36:63:4c:f4:be:97:28:4b:b6:
                    81:9d:49:86:ed:02:48:d8:ad:2f:94:2b:3a:49:98:
                    4f:23:58:22:5a:66:94:75:95:6d:a5:fc:90:fc:73:
                    e5:41:f3:d8:69:61:45:89:30:c3:db:8f:cc:c2:7e:
                    09:b7:51:dd:41:1a:c9:7b:f6:6e:1e:88:f4:74:f5:
                    5b:e8:68:f9:00:c5:46:55:60:af:4c:ba:e8:27:fc:
                    b4:83:89:80:84:59:b7:c0:90:1f:44:eb:0e:65:ec:
                    8c:66:cb:bd:14:84:96:85:1c:4b:9b:ee:37:93:8c:
                    87:f3:44:ab:f5:5c:c0:10:fd:07:a0:be:8a:d1:40:
                    6a:bb:bd:81:98:94:0a:e9:6d:72:6e:35:f5:6b:68:
                    46:ea:a7:a1:e9:1c:4b:43:76:7a:30:98:d6:99:c2:
                    8f:39:59:58:bc:29:0c:ba:b1:e0:71:21:ac:4f:b1:
                    8f:64:1e:28:73:42:7d:1e:06:9c:ea:42:d7:cc:c7:
                    38:9e:9e:42:b6:9d:8a:a4:4d:db:38:58:f4:00:20:
                    74:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:13:CB:80:0D:F0:08:8F:97:78:34:62:2C:F8:BD:04:CA:7C:76:CE
            X509v3 Authority Key Identifier:
                keyid:57:39:E9:D2:93:2A:D8:5B:CC:22:40:81:3B:F3:AB:39:42:84:30:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36280C9/892916D0895911F0B0F640C1DAE4EC9C/Vznp0pMq2FvMIkCBO_OrOUKEMCA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Vznp0pMq2FvMIkCBO_OrOUKEMCA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36280C9/892916D0895911F0B0F640C1DAE4EC9C/Vznp0pMq2FvMIkCBO_OrOUKEMCA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:35:15:fa:5b:5c:8d:0b:48:98:cd:ff:d0:61:4e:f5:47:03:
         bf:8d:de:06:b2:6b:98:02:26:18:c9:c5:75:1e:f6:33:c7:8f:
         87:2d:f8:30:11:2c:3c:ae:bb:7b:4d:6e:af:58:4f:e0:a3:53:
         3b:b8:21:52:f7:b7:82:9b:5b:6e:bf:0f:13:24:c9:d4:23:05:
         25:41:f3:0f:1f:4c:b8:fb:fa:ad:af:e8:fc:9d:44:3e:a0:11:
         cf:e4:d6:bf:a5:ed:80:e1:61:d1:58:0b:64:62:90:e7:bd:3f:
         2a:0d:e2:6f:94:19:db:f1:92:54:92:d6:c3:88:ec:79:12:eb:
         43:ac:c6:9d:cb:6d:b1:01:1d:62:11:58:79:2c:54:e4:77:61:
         0c:9b:b0:83:ac:02:86:22:0a:1d:dc:6f:6f:31:67:c9:4c:0e:
         fd:ba:05:18:44:15:51:d5:d1:c0:ec:fa:54:bd:41:ed:66:8b:
         eb:83:e3:51:a5:7c:39:3b:25:97:8e:40:a9:1b:4c:6f:96:fc:
         72:7f:13:4c:63:31:43:49:e5:23:20:17:60:19:96:77:c4:e8:
         0c:9e:58:fd:d3:fd:f6:62:9f:39:ad:6f:d5:62:96:69:40:92:
         a0:36:ae:47:9a:03:93:92:85:86:80:23:94:7c:99:99:7d:60:
         0b:61:f8:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 04:28:53 2026 by rpki-client