Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365972A/2EA31FD677E411EE96312D884AD9E6FC/MCQ1DTQJIIK5C1PqPZv9uOdFHVo.mft
File:                     MCQ1DTQJIIK5C1PqPZv9uOdFHVo.mft (raw, json)
Hash identifier:          tE+P0h2/fc6F8mjBd6Rv5NQVHwhvYcwNEnlge/SA2Yw=
Subject key identifier:   CB:42:4A:43:68:BD:28:0F:C2:B3:FD:D6:B7:F9:EA:B9:63:40:8C:F8
Authority key identifier: 30:24:35:0D:34:09:20:82:B9:0B:53:EA:3D:9B:FD:B8:E7:45:1D:5A
Certificate issuer:       /CN=F365972AAF/serialNumber=3024350D34092082B90B53EA3D9BFDB8E7451D5A
Certificate serial:       0405
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/MCQ1DTQJIIK5C1PqPZv9uOdFHVo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365972A/2EA31FD677E411EE96312D884AD9E6FC/MCQ1DTQJIIK5C1PqPZv9uOdFHVo.mft
Manifest number:          0403
Signing time:             Tue 28 Jul 2026 03:48:59 +0000
Manifest this update:     Tue 28 Jul 2026 03:48:58 +0000
Manifest next update:     Thu 30 Jul 2026 03:48:58 +0000
Files and hashes:         1: MCQ1DTQJIIK5C1PqPZv9uOdFHVo.crl (hash: tfp2odBF3mI9xmC10cWrbRXlSF3p533mbRr/227ixjo=)
                          2: 92399C0CCFB511F0886853A2DAE4EC9C.roa (hash: 8B6wU1xY38cYhzr9lZGnTjsUMM95hSXAG9bGNEVmCPI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365972A/2EA31FD677E411EE96312D884AD9E6FC/MCQ1DTQJIIK5C1PqPZv9uOdFHVo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365972A/2EA31FD677E411EE96312D884AD9E6FC/MCQ1DTQJIIK5C1PqPZv9uOdFHVo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/MCQ1DTQJIIK5C1PqPZv9uOdFHVo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 30 Jul 2026 03:48:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1029 (0x405)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365972AAF, serialNumber=3024350D34092082B90B53EA3D9BFDB8E7451D5A
        Validity
            Not Before: Jul 28 03:48:58 2026 GMT
            Not After : Jul 30 03:48:58 2026 GMT
        Subject: CN=6a6826aa-7d84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f4:23:b6:95:ba:c7:6e:8d:0b:6e:d5:92:f7:
                    84:0f:70:20:76:f1:90:fc:ce:e4:19:ab:f0:48:15:
                    71:c0:3e:7b:57:58:76:f2:5f:9b:59:fb:67:a0:cd:
                    e7:67:e7:27:ee:d3:6c:e1:e2:93:c2:84:08:18:1a:
                    b5:5d:a9:5b:bd:ed:b0:66:12:52:44:b1:de:66:b3:
                    70:c4:93:cd:aa:79:60:6e:33:0d:20:6a:57:cd:67:
                    4f:7e:07:20:c6:bb:a3:1c:ac:51:b2:64:57:94:df:
                    48:4a:4c:0e:82:bf:4f:24:70:e3:f8:c0:6d:3f:77:
                    61:93:b4:17:a5:5e:57:25:88:82:24:63:90:52:77:
                    3e:2a:71:f5:30:5a:0c:24:3b:77:24:f2:0a:8a:55:
                    8a:7d:04:64:1a:40:1c:7a:ec:50:4c:cf:39:04:c4:
                    85:2d:00:dd:25:0d:46:da:39:ea:d0:d4:4b:36:d7:
                    84:32:d0:8c:ae:f9:ee:da:39:d8:5b:c8:c6:3d:dc:
                    22:1f:f8:72:a4:69:80:52:ba:a7:7d:4b:3f:77:cd:
                    28:f4:48:3b:2b:75:b1:a3:e6:7e:c6:73:8f:04:c0:
                    75:2f:b3:f8:ff:8b:b3:9f:34:6a:71:a1:67:e7:78:
                    3a:c7:90:0c:91:d1:e9:66:c2:0a:61:a4:d4:24:b6:
                    c3:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:42:4A:43:68:BD:28:0F:C2:B3:FD:D6:B7:F9:EA:B9:63:40:8C:F8
            X509v3 Authority Key Identifier:
                keyid:30:24:35:0D:34:09:20:82:B9:0B:53:EA:3D:9B:FD:B8:E7:45:1D:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365972A/2EA31FD677E411EE96312D884AD9E6FC/MCQ1DTQJIIK5C1PqPZv9uOdFHVo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/MCQ1DTQJIIK5C1PqPZv9uOdFHVo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365972A/2EA31FD677E411EE96312D884AD9E6FC/MCQ1DTQJIIK5C1PqPZv9uOdFHVo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:ad:3e:9c:cf:63:da:24:53:bf:41:d9:60:83:2a:73:dc:3c:
         51:3a:8b:a6:f5:ce:89:1e:06:39:4d:c2:54:82:40:b5:8d:9d:
         aa:a4:8e:c2:d6:b4:6e:52:8a:2f:6e:d1:b3:86:ee:a2:ab:68:
         1b:f1:5b:73:8e:c1:c8:b1:29:d7:d6:88:63:41:93:dc:95:d6:
         23:23:07:fa:3a:e9:42:f2:83:d2:71:c1:7a:dd:aa:70:8c:ae:
         71:0f:7f:5b:99:ea:7d:9e:b2:59:d8:df:9a:d1:88:c9:37:4e:
         ef:bb:f5:37:3c:ca:e5:62:df:f1:52:3b:a2:7e:0c:14:00:a1:
         ca:b6:a2:f7:ee:8a:68:ff:d2:05:49:97:1b:fc:20:76:ff:50:
         5f:fb:54:11:fb:74:81:aa:77:5c:32:83:7a:ed:9e:31:7d:f7:
         1a:4f:f5:69:f7:bb:23:48:0c:65:b8:ab:1b:48:2f:74:a8:6e:
         03:8b:b9:12:a3:0a:8f:78:bc:84:c0:16:ee:9e:ce:8a:af:35:
         96:dc:e3:76:4c:af:59:ee:e0:4b:7d:74:8f:92:cd:9c:09:40:
         ae:83:bc:73:32:08:4f:96:c9:3d:71:43:87:1d:29:42:d5:cc:
         46:77:63:08:b3:28:fd:62:87:e8:61:9e:d1:e4:bb:f6:d8:8d:
         67:59:32:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:28:41 2026 by rpki-client