Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363A48B/103FED46574711F0BA585979DAE4EC9C/4-0KKxQeZZxFITmco8yPgYx19x0.mft
File:                     4-0KKxQeZZxFITmco8yPgYx19x0.mft (raw, json)
Hash identifier:          ek9Xx07axJNaAy6XxcVsKQm5Hz6XXaY1eP7XO+Tojgc=
Subject key identifier:   BC:E4:89:A5:48:2B:F7:B5:5A:2D:E3:68:A6:BA:80:EE:7A:B4:39:A0
Authority key identifier: E3:ED:0A:2B:14:1E:65:9C:45:21:39:9C:A3:CC:8F:81:8C:75:F7:1D
Certificate issuer:       /CN=F363A48BAF/serialNumber=E3ED0A2B141E659C4521399CA3CC8F818C75F71D
Certificate serial:       0127
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/4-0KKxQeZZxFITmco8yPgYx19x0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363A48B/103FED46574711F0BA585979DAE4EC9C/4-0KKxQeZZxFITmco8yPgYx19x0.mft
Manifest number:          0126
Signing time:             Fri 17 Apr 2026 04:57:10 +0000
Manifest this update:     Fri 17 Apr 2026 04:57:09 +0000
Manifest next update:     Sun 19 Apr 2026 04:57:09 +0000
Files and hashes:         1: 4-0KKxQeZZxFITmco8yPgYx19x0.crl (hash: lhGYONv1EhSwpHufjW9LkA9q4uQqaiqysBkULV2O3As=)
                          2: 075271E4574811F0A7DC6D7EDAE4EC9C.roa (hash: zOGSgi/1KJ9xQcEdBGnV40++jUsJYV1/+BcJ8fXP1w8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363A48B/103FED46574711F0BA585979DAE4EC9C/4-0KKxQeZZxFITmco8yPgYx19x0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363A48B/103FED46574711F0BA585979DAE4EC9C/4-0KKxQeZZxFITmco8yPgYx19x0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/4-0KKxQeZZxFITmco8yPgYx19x0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 295 (0x127)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363A48BAF, serialNumber=E3ED0A2B141E659C4521399CA3CC8F818C75F71D
        Validity
            Not Before: Apr 17 04:57:09 2026 GMT
            Not After : Apr 19 04:57:09 2026 GMT
        Subject: CN=69e1bda6-848e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:bd:49:23:d2:6e:ac:f9:55:5d:26:93:a4:28:
                    e7:48:70:74:3b:51:4e:24:7b:1c:02:f4:71:b8:1e:
                    0d:76:a4:5b:d4:44:79:79:3e:3f:e2:b5:86:d1:3a:
                    77:a6:cc:df:37:d5:f5:e5:42:1b:c4:b9:3c:86:c9:
                    53:d8:48:9e:b2:db:4e:c9:c7:17:2f:56:20:09:bd:
                    06:d0:55:78:91:7b:be:9d:14:09:47:b4:75:92:0e:
                    3f:e7:7b:90:37:82:f4:b5:a9:3a:ce:ed:d9:0c:3b:
                    b2:d0:0e:39:6d:4e:81:a2:eb:63:6e:86:40:06:0f:
                    25:b9:9e:2c:e2:3b:56:27:1e:58:d6:c3:b0:17:36:
                    5a:ef:7b:0f:9a:fc:f5:95:e8:6f:bc:1d:4c:1a:10:
                    99:f5:54:77:45:51:9b:80:db:41:6d:1d:a2:cb:4e:
                    85:63:f8:a0:77:be:62:39:0b:97:9f:b6:7a:65:a7:
                    c0:a3:a3:03:fa:ea:e1:4d:cf:21:6f:ef:f3:0f:b2:
                    a5:c8:bb:0d:96:ce:e6:9c:98:d4:74:10:e7:5a:65:
                    50:c6:92:fa:c4:e9:0f:a6:ca:e4:19:23:52:82:95:
                    ad:9a:47:11:1c:02:92:d8:dc:ad:ba:7e:b7:16:9b:
                    c0:98:aa:1f:55:7a:68:5a:ad:5e:11:97:be:e2:c7:
                    ce:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:E4:89:A5:48:2B:F7:B5:5A:2D:E3:68:A6:BA:80:EE:7A:B4:39:A0
            X509v3 Authority Key Identifier:
                keyid:E3:ED:0A:2B:14:1E:65:9C:45:21:39:9C:A3:CC:8F:81:8C:75:F7:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363A48B/103FED46574711F0BA585979DAE4EC9C/4-0KKxQeZZxFITmco8yPgYx19x0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4-0KKxQeZZxFITmco8yPgYx19x0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363A48B/103FED46574711F0BA585979DAE4EC9C/4-0KKxQeZZxFITmco8yPgYx19x0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:26:1b:29:d4:fd:97:1b:cf:4b:7d:62:5c:0a:e7:c4:8b:fa:
         09:21:a0:51:60:a9:50:47:97:4a:e7:41:eb:e8:3c:ce:37:63:
         cb:42:ea:c6:b6:53:3b:96:53:26:86:c3:96:04:26:7c:5c:52:
         ae:f4:9d:35:0d:93:ed:17:91:38:e6:5e:94:9b:f4:4a:53:4c:
         30:87:5c:df:72:c4:e7:1a:30:ef:43:d7:f6:d3:a3:cd:6c:d7:
         9c:c6:89:bd:4b:52:85:f5:0d:2e:03:a1:51:19:cd:67:0c:fc:
         b4:86:2c:61:8e:bc:6b:6f:a9:d5:06:b6:7a:eb:04:eb:36:0e:
         7a:29:96:79:e7:5a:17:ed:bd:ff:13:2a:b5:df:b2:fb:59:af:
         33:88:41:ae:4b:e2:12:a1:e4:f7:8b:8c:2f:0c:b2:3c:b1:e8:
         7f:00:b3:b2:6d:12:f0:17:7e:52:f4:07:03:68:5e:90:8b:d4:
         80:8d:41:2b:15:a5:03:75:cb:d3:e1:ca:51:6d:f0:31:f5:5d:
         6f:90:2b:27:98:c4:84:1b:05:b9:63:7c:fb:a3:95:88:a4:64:
         b7:c4:49:5e:67:f3:d5:f4:e9:93:a7:d8:08:b7:d2:1c:79:3b:
         d6:f1:bb:aa:5b:cf:1f:6c:07:f4:c6:93:1c:8c:81:5e:29:09:
         f2:3d:09:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:28:30 2026 by rpki-client