Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FA5F/71124C3ED5C511F0944258ACDAE4EC9C/pCKYJAT-Aumg8-y5hTV-RG-IID0.mft
File:                     pCKYJAT-Aumg8-y5hTV-RG-IID0.mft (raw, json)
Hash identifier:          YnAU++YU8X8ak6Vj4TIO+DLPWDC73ZdR7A6IgreiaII=
Subject key identifier:   A8:BE:64:1E:1B:D7:24:BC:E2:7D:0E:CE:93:54:5F:AA:F5:56:0E:26
Authority key identifier: A4:22:98:24:04:FE:02:E9:A0:F3:EC:B9:85:35:7E:44:6F:88:20:3D
Certificate issuer:       /CN=F362FA5FAF/serialNumber=A422982404FE02E9A0F3ECB985357E446F88203D
Certificate serial:       59
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/pCKYJAT-Aumg8-y5hTV-RG-IID0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362FA5F/71124C3ED5C511F0944258ACDAE4EC9C/pCKYJAT-Aumg8-y5hTV-RG-IID0.mft
Manifest number:          57
Signing time:             Sun 01 Mar 2026 03:36:21 +0000
Manifest this update:     Sun 01 Mar 2026 03:36:21 +0000
Manifest next update:     Tue 03 Mar 2026 03:36:21 +0000
Files and hashes:         1: pCKYJAT-Aumg8-y5hTV-RG-IID0.crl (hash: NYXSK9D8bQjCK7KB52Xlf9akseh7a0H8yuxznl4useM=)
                          2: 02DBFF9AD5C911F0BEEFA9C1DAE4EC9C.roa (hash: 6Mw6IJOKCFiOFJKPzw6NDpNLOWvwX8+ywwAHH8ia5xU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362FA5F/71124C3ED5C511F0944258ACDAE4EC9C/pCKYJAT-Aumg8-y5hTV-RG-IID0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362FA5F/71124C3ED5C511F0944258ACDAE4EC9C/pCKYJAT-Aumg8-y5hTV-RG-IID0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/pCKYJAT-Aumg8-y5hTV-RG-IID0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 03 Mar 2026 00:07:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 89 (0x59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362FA5FAF, serialNumber=A422982404FE02E9A0F3ECB985357E446F88203D
        Validity
            Not Before: Mar  1 03:36:21 2026 GMT
            Not After : Mar  3 03:36:21 2026 GMT
        Subject: CN=69a3b435-19d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:da:8f:62:bc:0f:45:59:13:ed:34:24:be:0c:
                    1e:4a:79:34:47:21:be:6b:fd:5b:58:a0:f1:b3:44:
                    51:6b:4e:91:e2:03:ac:59:1b:61:9d:06:22:65:35:
                    4c:aa:d4:fd:1c:56:e6:fd:f8:45:4e:d9:0d:a5:85:
                    11:03:ff:99:1c:0f:be:1a:ae:d0:ba:0f:66:37:53:
                    e6:41:ce:fe:de:3f:8d:90:81:df:fc:94:70:f7:ef:
                    0f:81:03:38:82:d5:54:6a:0a:c1:37:70:cb:3f:b8:
                    50:d6:62:0d:c3:98:5b:3f:f3:9d:40:d2:12:74:b2:
                    c3:08:90:a8:89:2f:4e:b7:52:ee:06:76:5f:fc:81:
                    8e:16:04:95:65:18:b3:5b:55:06:80:36:2a:67:74:
                    ff:be:ec:62:be:15:9b:74:20:82:9a:18:eb:11:a4:
                    36:d8:8c:4b:24:c6:f0:7d:3a:6f:16:d6:a8:6c:c0:
                    02:87:7a:58:f0:c0:15:63:b8:8e:f0:56:6c:d7:de:
                    00:16:10:dd:41:2e:cb:76:48:90:69:b1:9e:04:1d:
                    be:07:dc:70:a1:93:f6:0a:fe:c1:e5:e3:4b:4e:49:
                    10:82:e1:21:35:ff:df:e1:60:c9:13:c3:d2:a3:8d:
                    b3:c5:bf:61:62:b3:9a:81:68:55:7d:40:4e:85:43:
                    20:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:BE:64:1E:1B:D7:24:BC:E2:7D:0E:CE:93:54:5F:AA:F5:56:0E:26
            X509v3 Authority Key Identifier:
                keyid:A4:22:98:24:04:FE:02:E9:A0:F3:EC:B9:85:35:7E:44:6F:88:20:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362FA5F/71124C3ED5C511F0944258ACDAE4EC9C/pCKYJAT-Aumg8-y5hTV-RG-IID0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/pCKYJAT-Aumg8-y5hTV-RG-IID0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FA5F/71124C3ED5C511F0944258ACDAE4EC9C/pCKYJAT-Aumg8-y5hTV-RG-IID0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:52:0f:9c:3c:e7:9e:f8:b3:91:18:dc:aa:3b:7c:b5:95:58:
         1d:2e:92:0d:38:3c:fd:8f:7d:1d:a6:fe:9b:0b:78:85:da:a3:
         30:05:54:42:84:1d:51:39:93:42:d8:d0:d6:75:87:41:a0:dd:
         9b:22:d5:22:91:f3:dd:cc:fc:5a:1d:e6:b2:68:a7:e6:42:70:
         22:ef:73:70:b8:24:7c:c6:4b:69:cd:2b:06:b3:a0:8b:70:1a:
         3d:a2:77:bc:ea:a7:b8:e1:bd:e8:94:ce:bb:bf:4c:cf:de:e5:
         14:e0:c7:76:c0:fb:2d:e7:34:fe:a7:3c:4c:fa:64:e6:b6:86:
         31:ff:b7:f8:ea:66:3f:cc:81:11:bc:66:1d:26:3e:e8:32:81:
         4b:de:44:f0:cd:da:8c:a8:32:5f:76:78:ca:af:95:74:f5:c7:
         ba:47:84:9e:55:a9:b0:03:8f:ea:c5:fd:65:ba:2c:69:09:ff:
         8a:0d:f2:7f:20:25:9e:26:37:21:a5:fc:de:cb:73:48:ee:18:
         a9:b1:a3:5d:a8:a2:5f:c1:b7:4f:ca:e0:47:37:2b:5f:ae:10:
         8e:fa:97:16:c9:76:36:59:ef:cb:cc:fd:b4:ba:4d:8e:9f:1f:
         56:f3:23:c1:08:de:f6:98:05:2e:81:45:f2:cd:b5:a4:9a:83:
         b2:d2:04:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:30:36 2026 by rpki-client