Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3642C0F/608E7226C07911EC96A968D55A40D577/ogtTm8eSX3rsKacM9qGEeJGpsxI.mft
File:                     ogtTm8eSX3rsKacM9qGEeJGpsxI.mft (raw, json)
Hash identifier:          JE3U1clyG/VcqeVk1Ur7VssORmeDvAsNAmgvk8xbv+s=
Subject key identifier:   53:79:A4:9F:45:84:46:55:F4:91:FB:4F:4C:B7:E1:CA:01:43:1A:30
Authority key identifier: A2:0B:53:9B:C7:92:5F:7A:EC:29:A7:0C:F6:A1:84:78:91:A9:B3:12
Certificate issuer:       /CN=F3642C0FAR/serialNumber=A20B539BC7925F7AEC29A70CF6A1847891A9B312
Certificate serial:       05DB
Authority info access:    rsync://rpki.afrinic.net/repository/arin/ogtTm8eSX3rsKacM9qGEeJGpsxI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3642C0F/608E7226C07911EC96A968D55A40D577/ogtTm8eSX3rsKacM9qGEeJGpsxI.mft
Manifest number:          05DA
Signing time:             Fri 17 Apr 2026 02:39:43 +0000
Manifest this update:     Fri 17 Apr 2026 02:39:42 +0000
Manifest next update:     Sun 19 Apr 2026 02:39:42 +0000
Files and hashes:         1: ogtTm8eSX3rsKacM9qGEeJGpsxI.crl (hash: d2oBjIL8GUD0oSnNAewW/it9nFzZvWfYnd05HWJjrf8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3642C0F/608E7226C07911EC96A968D55A40D577/ogtTm8eSX3rsKacM9qGEeJGpsxI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3642C0F/608E7226C07911EC96A968D55A40D577/ogtTm8eSX3rsKacM9qGEeJGpsxI.mft
                          rsync://rpki.afrinic.net/repository/arin/ogtTm8eSX3rsKacM9qGEeJGpsxI.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 00:26:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1499 (0x5db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3642C0FAR, serialNumber=A20B539BC7925F7AEC29A70CF6A1847891A9B312
        Validity
            Not Before: Apr 17 02:39:42 2026 GMT
            Not After : Apr 19 02:39:42 2026 GMT
        Subject: CN=69e19d6f-b9f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:be:2e:cb:5f:c8:e7:dd:88:63:79:e4:91:c1:
                    0c:c3:64:52:da:8e:af:1a:db:ce:05:6f:83:13:d2:
                    b8:ae:03:45:2c:f3:22:a2:8a:2b:89:59:94:e6:d0:
                    50:93:48:22:b4:2c:04:4e:ad:42:c2:1f:59:98:56:
                    fd:f3:06:3a:a5:86:67:99:ed:fa:24:03:84:ba:c2:
                    60:9d:cd:f7:a9:fd:0c:04:c9:c4:28:4d:05:09:91:
                    0f:28:0c:98:7a:04:d0:f7:53:70:1e:d9:c0:c5:b8:
                    fb:3e:70:c9:5e:b3:85:59:50:33:03:4f:d2:2b:83:
                    8e:26:82:e6:4f:2c:cc:04:c2:9a:0c:cb:4f:7a:1a:
                    65:8d:64:14:55:71:5c:b3:b9:3e:0a:da:b1:6f:d9:
                    56:f0:09:92:b8:c6:3e:05:eb:44:19:8d:48:ef:15:
                    95:91:ce:2b:e8:5c:4e:7b:e3:9c:20:18:7e:45:f7:
                    29:43:ee:f8:e2:d0:0e:b6:64:a4:dd:1b:d9:35:ce:
                    92:9c:df:dc:31:b3:5c:8f:4d:6a:9f:55:fa:ac:43:
                    1c:ef:12:f9:eb:d4:4d:bb:ca:68:fd:24:2e:fe:8d:
                    a9:52:77:2d:2d:09:ba:67:36:d8:87:b8:3a:ac:33:
                    26:38:79:dc:89:93:ea:c9:81:4d:37:2e:73:8f:d7:
                    4d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:79:A4:9F:45:84:46:55:F4:91:FB:4F:4C:B7:E1:CA:01:43:1A:30
            X509v3 Authority Key Identifier:
                keyid:A2:0B:53:9B:C7:92:5F:7A:EC:29:A7:0C:F6:A1:84:78:91:A9:B3:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3642C0F/608E7226C07911EC96A968D55A40D577/ogtTm8eSX3rsKacM9qGEeJGpsxI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/ogtTm8eSX3rsKacM9qGEeJGpsxI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3642C0F/608E7226C07911EC96A968D55A40D577/ogtTm8eSX3rsKacM9qGEeJGpsxI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:81:84:a8:6c:f1:6a:10:8c:93:e1:07:8a:be:9c:c8:9c:06:
         82:c0:cc:1a:9f:d8:40:e8:95:34:16:a3:d9:7b:ab:54:28:25:
         45:9d:79:0f:23:e9:17:c3:67:7d:a2:fe:07:39:28:44:df:93:
         ed:1f:a8:fd:b4:18:bb:c3:67:e0:1c:28:63:35:35:3c:89:86:
         ec:81:77:85:4e:bd:4b:f0:f5:39:65:6c:9b:42:5c:2b:6c:18:
         16:9a:cf:fa:55:7d:9b:3d:bc:7e:60:2d:80:97:28:e5:0d:32:
         a5:34:3a:d5:6f:8d:74:e5:0d:9b:28:87:eb:92:6c:58:df:53:
         45:0a:3a:db:fd:06:36:3b:ba:30:cd:48:93:48:6c:06:36:a1:
         69:5a:71:ca:2c:bc:9d:c1:44:69:0c:cf:c0:6e:fa:6e:ef:40:
         62:a6:ce:ce:bf:94:e1:53:3a:07:15:b3:fc:e4:2c:83:84:93:
         b6:dd:48:e3:ba:4b:ac:70:f7:14:7d:5f:12:dd:36:3a:19:5c:
         c9:a6:f8:1d:3c:f4:ac:b0:80:b7:92:85:b2:fa:0c:86:11:ee:
         cc:e3:88:f8:44:9d:e2:af:53:67:4d:73:30:66:29:24:9f:cc:
         7f:67:c7:4e:a0:8b:4e:17:75:45:be:f1:c0:46:76:92:97:fa:
         1d:86:08:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:07:49 2026 by rpki-client