Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3656387/C78EEF9090CD11EC8B7B29A05A40D577/0cZXgBrfziVpTfuxqVxs2kR-O7o.mft
File:                     0cZXgBrfziVpTfuxqVxs2kR-O7o.mft (raw, json)
Hash identifier:          sCd5ns6bKO8yB8emDlgCk9hUd8xHkLHc29e4J6hIbmQ=
Subject key identifier:   3B:57:8E:02:74:92:53:42:37:DE:67:92:29:5E:48:0B:A0:06:A1:E9
Authority key identifier: D1:C6:57:80:1A:DF:CE:25:69:4D:FB:B1:A9:5C:6C:DA:44:7E:3B:BA
Certificate issuer:       /CN=F3656387AF/serialNumber=D1C657801ADFCE25694DFBB1A95C6CDA447E3BBA
Certificate serial:       0686
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/0cZXgBrfziVpTfuxqVxs2kR-O7o.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3656387/C78EEF9090CD11EC8B7B29A05A40D577/0cZXgBrfziVpTfuxqVxs2kR-O7o.mft
Manifest number:          0683
Signing time:             Tue 28 Jul 2026 02:38:20 +0000
Manifest this update:     Tue 28 Jul 2026 02:38:20 +0000
Manifest next update:     Thu 30 Jul 2026 02:38:20 +0000
Files and hashes:         1: 0cZXgBrfziVpTfuxqVxs2kR-O7o.crl (hash: kfow3c7jb9vh7IASzaR1IIUjcx/61gEgtx39bv2H7+I=)
                          2: EA307FBE63EB11F18E3DA008CF1D38B0.roa (hash: v4tLM2S2DA7XUjp27QjHacJ0S+xJTwAqqoIJCWavsrs=)
                          3: 5929BAD6881811EF9F8726B0762E951A.roa (hash: gqseLBT3raRF8qI8a39+TId/5s+ZYprcLYdDUSRWjC4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3656387/C78EEF9090CD11EC8B7B29A05A40D577/0cZXgBrfziVpTfuxqVxs2kR-O7o.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3656387/C78EEF9090CD11EC8B7B29A05A40D577/0cZXgBrfziVpTfuxqVxs2kR-O7o.mft
                          rsync://rpki.afrinic.net/repository/afrinic/0cZXgBrfziVpTfuxqVxs2kR-O7o.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 30 Jul 2026 02:38:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1670 (0x686)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3656387AF, serialNumber=D1C657801ADFCE25694DFBB1A95C6CDA447E3BBA
        Validity
            Not Before: Jul 28 02:38:20 2026 GMT
            Not After : Jul 30 02:38:20 2026 GMT
        Subject: CN=6a68161c-fb85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:11:26:f3:ea:49:58:1b:dd:eb:6c:64:5e:e3:
                    91:1c:0f:84:78:6a:67:0c:4d:5c:6d:10:7d:5e:e6:
                    05:27:ac:cd:13:c1:b0:91:48:12:3d:65:2e:48:4a:
                    40:0d:68:97:c6:f9:6d:70:6a:3a:9f:1a:b6:06:44:
                    77:a4:bd:db:ae:fe:74:00:df:14:1c:90:3f:cd:e1:
                    54:eb:50:bc:65:70:6e:ae:04:51:f4:ef:22:b8:c6:
                    5f:ab:65:b8:f7:38:39:32:c0:78:61:d2:d8:13:47:
                    4d:a0:83:88:a9:dc:38:03:86:df:52:4a:1d:bc:2d:
                    c3:0b:b3:9a:75:b2:a4:29:98:49:4f:c2:48:e2:59:
                    d9:70:14:12:04:35:96:9e:52:16:ab:49:ec:45:f5:
                    93:1c:06:0a:64:8c:d5:6d:a3:4f:cb:d5:b5:86:fc:
                    48:b5:ef:77:43:4b:d8:0c:0e:48:ce:3a:05:76:ef:
                    e8:02:f2:d3:30:e7:14:a9:ee:a0:16:2e:41:3a:00:
                    98:38:a3:e5:1b:87:81:64:1d:82:c2:01:14:2f:af:
                    e4:3b:c4:42:0f:90:3f:17:01:2e:99:0a:0c:dc:30:
                    1c:5d:1a:2d:03:20:52:24:82:f2:96:35:f3:36:9d:
                    78:f2:be:5c:9c:36:56:dc:22:78:c4:30:8f:83:8a:
                    fd:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:57:8E:02:74:92:53:42:37:DE:67:92:29:5E:48:0B:A0:06:A1:E9
            X509v3 Authority Key Identifier:
                keyid:D1:C6:57:80:1A:DF:CE:25:69:4D:FB:B1:A9:5C:6C:DA:44:7E:3B:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3656387/C78EEF9090CD11EC8B7B29A05A40D577/0cZXgBrfziVpTfuxqVxs2kR-O7o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0cZXgBrfziVpTfuxqVxs2kR-O7o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3656387/C78EEF9090CD11EC8B7B29A05A40D577/0cZXgBrfziVpTfuxqVxs2kR-O7o.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:7b:65:81:02:4a:21:83:d2:47:c4:ee:ea:12:fa:0e:89:63:
         ef:83:d8:7c:3a:28:15:fa:04:7e:09:72:d3:23:dc:64:8a:c7:
         e2:27:fb:ce:5a:e1:b5:84:64:c3:30:c4:9e:1e:49:10:5a:76:
         16:29:20:cd:fe:b1:2b:69:d8:af:af:20:ca:25:43:86:82:87:
         97:ff:28:a0:2e:62:19:0c:d1:26:65:ae:36:8f:7b:45:55:89:
         33:f5:6a:9e:7b:62:11:96:be:37:5d:bc:cd:28:a1:b3:46:49:
         ee:50:b0:9a:4f:1e:3e:06:54:94:d1:1e:d2:3e:6e:ad:ee:63:
         ee:fc:13:83:e4:b2:a0:b6:86:09:46:22:b2:d7:fd:1f:34:27:
         9b:ee:7b:49:5f:e3:72:06:c4:89:f2:4f:27:d5:74:3a:4f:87:
         a6:6b:e4:17:56:91:a7:69:e0:c5:97:f7:13:9c:55:f6:c3:37:
         05:81:1f:d8:4c:67:9b:19:af:97:90:5b:4a:2c:4c:b6:b8:9c:
         9b:79:e6:10:d9:a0:d8:b2:01:d4:8a:00:06:0c:77:22:43:2b:
         8d:e4:9a:74:fe:10:e1:8e:82:d3:2d:db:c2:d3:ae:a4:7b:9b:
         17:5e:07:6b:ac:c3:aa:09:3a:bb:cb:f7:16:a4:59:2e:3a:12:
         01:69:ee:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:29:43 2026 by rpki-client