Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3654A44/4A23DA369CA511ED8D0D4D9AF1222468/SmpmPntGkDU9Lfe5UMmAl8KA1Zg.mft
File:                     SmpmPntGkDU9Lfe5UMmAl8KA1Zg.mft (raw, json)
Hash identifier:          SMhfKTJojn245K+JD+CPEqzh4ETpQWvQ4rasyU6dBCY=
Subject key identifier:   D0:AC:50:67:5D:D0:61:C8:38:48:DD:DB:F7:94:B6:21:A7:BD:CC:3C
Authority key identifier: 4A:6A:66:3E:7B:46:90:35:3D:2D:F7:B9:50:C9:80:97:C2:80:D5:98
Certificate issuer:       /CN=F3654A44AF/serialNumber=4A6A663E7B4690353D2DF7B950C98097C280D598
Certificate serial:       04F5
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SmpmPntGkDU9Lfe5UMmAl8KA1Zg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3654A44/4A23DA369CA511ED8D0D4D9AF1222468/SmpmPntGkDU9Lfe5UMmAl8KA1Zg.mft
Manifest number:          04F5
Signing time:             Fri 12 Jun 2026 03:11:59 +0000
Manifest this update:     Fri 12 Jun 2026 03:11:58 +0000
Manifest next update:     Sun 14 Jun 2026 03:11:58 +0000
Files and hashes:         1: SmpmPntGkDU9Lfe5UMmAl8KA1Zg.crl (hash: bE+OKULO7NlvfS1s/hds5A8g5Eybc8sNzttVcg4dzEM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3654A44/4A23DA369CA511ED8D0D4D9AF1222468/SmpmPntGkDU9Lfe5UMmAl8KA1Zg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3654A44/4A23DA369CA511ED8D0D4D9AF1222468/SmpmPntGkDU9Lfe5UMmAl8KA1Zg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SmpmPntGkDU9Lfe5UMmAl8KA1Zg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 14 Jun 2026 03:11:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1269 (0x4f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3654A44AF, serialNumber=4A6A663E7B4690353D2DF7B950C98097C280D598
        Validity
            Not Before: Jun 12 03:11:58 2026 GMT
            Not After : Jun 14 03:11:58 2026 GMT
        Subject: CN=6a2b78ff-579e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:24:25:bd:b7:69:a0:20:7f:d4:09:58:27:9f:
                    22:5e:e0:ca:e3:ad:fe:0e:52:18:df:1f:0b:fd:fa:
                    5d:01:fb:19:02:a0:53:54:14:94:c5:cb:71:6e:79:
                    e5:5e:73:33:0e:75:83:81:bb:b0:b9:2e:75:24:10:
                    91:c2:61:cb:33:74:3c:4b:20:7d:52:b2:b0:30:8a:
                    d1:6d:77:31:eb:a6:c1:5d:d2:09:d7:a8:ee:11:2a:
                    85:cc:9d:d4:e9:b4:d0:05:5a:ac:71:75:ee:28:ae:
                    82:a5:c3:1a:06:04:7d:c8:89:6b:4d:9b:7d:44:ad:
                    0f:a6:39:f8:eb:92:3a:a2:f6:f0:87:2b:41:f5:c8:
                    24:b8:a7:26:86:95:b0:fb:1d:33:73:fd:58:f0:db:
                    d3:c8:ce:ee:31:06:e7:71:03:ab:b6:99:5f:cd:0c:
                    3f:23:81:31:eb:ab:2b:5e:e3:b3:30:ea:be:26:b3:
                    f7:e4:bb:13:c3:60:89:bc:bd:4a:f2:11:54:cc:3c:
                    f3:56:d6:71:08:af:a7:94:4b:02:6a:8b:34:17:12:
                    70:08:e4:d0:0f:ba:56:fa:f2:79:29:66:05:d3:ee:
                    2d:d9:e5:e8:6a:4d:21:f9:c0:7c:85:f4:be:05:d5:
                    79:48:df:9a:2d:e2:a1:c6:8b:a7:6b:f7:4a:cc:54:
                    a8:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:AC:50:67:5D:D0:61:C8:38:48:DD:DB:F7:94:B6:21:A7:BD:CC:3C
            X509v3 Authority Key Identifier:
                keyid:4A:6A:66:3E:7B:46:90:35:3D:2D:F7:B9:50:C9:80:97:C2:80:D5:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3654A44/4A23DA369CA511ED8D0D4D9AF1222468/SmpmPntGkDU9Lfe5UMmAl8KA1Zg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SmpmPntGkDU9Lfe5UMmAl8KA1Zg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3654A44/4A23DA369CA511ED8D0D4D9AF1222468/SmpmPntGkDU9Lfe5UMmAl8KA1Zg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:b8:dd:2b:bf:31:e9:b5:2e:ec:68:49:c3:ef:91:f0:d2:d2:
         f8:5b:b4:f5:09:ae:e3:c4:c4:a6:ec:9f:68:75:ab:9b:3c:ac:
         b1:e1:f4:d1:ae:8d:9e:57:90:2d:fe:80:ea:c5:f6:ba:4d:c3:
         e4:a5:ea:6d:b6:64:fc:8d:04:1c:1a:09:d6:52:9f:8d:36:60:
         99:af:38:a5:f0:0f:87:ed:18:43:e9:00:c2:7a:c3:0e:80:33:
         29:8d:c9:09:c8:15:36:04:82:ff:3c:20:7b:e7:d7:10:33:74:
         1a:9a:6e:13:77:da:28:05:67:69:42:03:1a:d9:0a:66:8a:8d:
         ed:69:1d:34:35:92:ec:0f:d3:21:6a:6f:a9:53:28:33:76:fa:
         eb:d4:04:aa:56:d8:f7:77:6a:86:0d:2c:1c:3e:f0:e3:65:7c:
         75:be:af:9b:e3:08:0e:97:3e:a7:ae:dd:76:a7:de:35:a1:a0:
         c2:4b:1e:9b:da:17:92:9c:01:ba:c0:58:b6:4d:07:1d:91:20:
         dd:0d:d1:6f:40:81:5b:88:66:43:f9:6d:25:14:65:c0:f3:bc:
         35:e7:a9:15:d0:7f:e2:83:dc:a4:d6:4f:31:5a:a7:34:fc:03:
         bf:35:95:c2:3b:e8:3a:3b:e7:4b:55:0f:00:a4:37:11:b1:7d:
         b6:29:fb:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 04:27:48 2026 by rpki-client