Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3644DAB/B511F7E4F24911ECA2791192F1222468/XVwqlrLjcrCsR_SNvcfX_R-9sTI.mft
File:                     XVwqlrLjcrCsR_SNvcfX_R-9sTI.mft (raw, json)
Hash identifier:          3QIJ6apvwIyl4e06GS7S8Meca6O1mZ2zDQ+XgKosDQA=
Subject key identifier:   FB:C1:31:DB:D6:36:82:61:12:F2:01:E5:3A:F8:72:C2:4D:F8:B4:7F
Authority key identifier: 5D:5C:2A:96:B2:E3:72:B0:AC:47:F4:8D:BD:C7:D7:FD:1F:BD:B1:32
Certificate issuer:       /CN=F3644DABAF/serialNumber=5D5C2A96B2E372B0AC47F48DBDC7D7FD1FBDB132
Certificate serial:       05A1
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/XVwqlrLjcrCsR_SNvcfX_R-9sTI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3644DAB/B511F7E4F24911ECA2791192F1222468/XVwqlrLjcrCsR_SNvcfX_R-9sTI.mft
Manifest number:          059F
Signing time:             Fri 17 Apr 2026 02:47:19 +0000
Manifest this update:     Fri 17 Apr 2026 02:47:18 +0000
Manifest next update:     Sun 19 Apr 2026 02:47:18 +0000
Files and hashes:         1: XVwqlrLjcrCsR_SNvcfX_R-9sTI.crl (hash: Ev0MfnQM7zZe5H5ZseM27U6vla1kllDWp6Cwyux6z6Q=)
                          2: 23D327BA3B9111EF8FF3E059762E951A.roa (hash: ZJ3xXOXKk7e28z2xIgECvNbu0qz58iXckPb6BX56yvQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3644DAB/B511F7E4F24911ECA2791192F1222468/XVwqlrLjcrCsR_SNvcfX_R-9sTI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3644DAB/B511F7E4F24911ECA2791192F1222468/XVwqlrLjcrCsR_SNvcfX_R-9sTI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/XVwqlrLjcrCsR_SNvcfX_R-9sTI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1441 (0x5a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3644DABAF, serialNumber=5D5C2A96B2E372B0AC47F48DBDC7D7FD1FBDB132
        Validity
            Not Before: Apr 17 02:47:18 2026 GMT
            Not After : Apr 19 02:47:18 2026 GMT
        Subject: CN=69e19f37-329e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:3e:af:df:44:d8:0f:06:97:cc:33:3d:5c:32:
                    55:7d:81:7a:37:06:e9:93:5d:b2:96:4b:86:a4:1d:
                    6c:38:79:07:cc:82:8b:be:9b:3d:7c:68:3a:b4:57:
                    28:7a:d9:5a:f1:57:4e:54:23:bd:9a:40:ea:f8:e1:
                    86:c5:75:e3:ce:87:e3:55:e0:bb:80:75:5c:46:a0:
                    1e:37:9e:f7:08:5a:46:81:1e:38:db:c5:37:cf:11:
                    7e:a9:9d:ff:5b:16:7a:21:3a:ce:ea:1b:88:8b:88:
                    ee:0a:87:49:29:a5:05:b2:2c:bf:e0:9e:c0:07:72:
                    ad:3e:6a:e3:8b:dd:75:29:c4:05:bb:0b:6f:82:1b:
                    ec:9d:02:a0:e0:87:78:31:2c:6f:3f:3b:7b:86:93:
                    18:d2:a0:24:3f:5e:7a:91:e1:ec:af:52:6b:77:3b:
                    45:c6:33:08:39:6c:9c:38:91:78:f7:6f:23:03:b6:
                    06:f5:f5:a3:46:71:88:84:b0:44:78:b4:6a:75:44:
                    05:69:54:4a:82:9f:7e:19:30:4e:a0:32:da:dd:39:
                    22:94:8e:49:84:40:22:04:59:2c:3b:69:5e:c0:03:
                    c4:ef:2b:a5:34:d7:88:c4:95:21:eb:38:c3:5b:e1:
                    4c:38:c3:8a:b6:6e:8d:2e:06:cd:0a:9f:f9:9e:7e:
                    cd:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:C1:31:DB:D6:36:82:61:12:F2:01:E5:3A:F8:72:C2:4D:F8:B4:7F
            X509v3 Authority Key Identifier:
                keyid:5D:5C:2A:96:B2:E3:72:B0:AC:47:F4:8D:BD:C7:D7:FD:1F:BD:B1:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3644DAB/B511F7E4F24911ECA2791192F1222468/XVwqlrLjcrCsR_SNvcfX_R-9sTI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XVwqlrLjcrCsR_SNvcfX_R-9sTI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3644DAB/B511F7E4F24911ECA2791192F1222468/XVwqlrLjcrCsR_SNvcfX_R-9sTI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:0e:4c:15:2f:c0:88:b6:2d:35:71:bb:28:ba:66:f4:b0:d7:
         a8:87:4c:d7:ab:fb:b9:89:35:fb:f5:3c:fd:bc:89:ab:cd:65:
         3f:8e:94:30:0c:d2:38:db:b5:9f:0d:95:49:12:66:f7:7b:76:
         98:fe:c9:31:12:d1:cd:2c:aa:96:eb:ee:46:8a:2f:66:a5:e9:
         15:88:6c:a4:f7:9f:90:8a:48:24:4b:6f:52:f6:9f:9d:52:7f:
         b2:57:84:b8:8a:d8:b7:b3:a5:fd:3a:e6:3d:55:2d:7d:42:f3:
         ca:d3:51:08:ff:8b:44:ae:48:81:1a:ca:79:31:d9:f0:80:4c:
         6b:b5:e6:40:d1:a6:00:0b:f1:d5:e9:c7:3b:ee:f5:e1:e4:28:
         48:c2:53:44:20:53:8d:b0:bb:b4:86:a8:59:66:60:3e:fe:49:
         c3:e3:34:53:9b:b6:fa:02:fe:a8:46:54:3e:a5:e7:46:5a:7d:
         4c:84:ad:da:eb:f5:47:c3:a5:d9:f2:f8:aa:0c:e5:23:45:0e:
         f4:f0:5d:b5:3d:6b:38:42:da:d0:ca:b3:c9:8a:15:39:7c:b7:
         e2:60:ee:b0:97:7a:79:27:fd:bd:bf:a2:93:85:4b:0f:89:3b:
         a4:00:00:a2:6b:a4:4f:a5:3d:68:8b:91:cf:b9:6b:43:59:d3:
         ac:77:60:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:33:30 2026 by rpki-client