Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365972A/2EA31FD677E411EE96312D884AD9E6FC/MCQ1DTQJIIK5C1PqPZv9uOdFHVo.mft
File:                     MCQ1DTQJIIK5C1PqPZv9uOdFHVo.mft (raw, json)
Hash identifier:          Ov6yaFl1S3v5x4+aJUtTZEPiirmnamGMTgMnSccUxMM=
Subject key identifier:   AD:5B:B8:8D:14:3B:53:1F:F7:AE:A0:49:3D:EF:06:25:87:8A:14:3F
Authority key identifier: 30:24:35:0D:34:09:20:82:B9:0B:53:EA:3D:9B:FD:B8:E7:45:1D:5A
Certificate issuer:       /CN=F365972AAF/serialNumber=3024350D34092082B90B53EA3D9BFDB8E7451D5A
Certificate serial:       03D7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/MCQ1DTQJIIK5C1PqPZv9uOdFHVo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365972A/2EA31FD677E411EE96312D884AD9E6FC/MCQ1DTQJIIK5C1PqPZv9uOdFHVo.mft
Manifest number:          03D5
Signing time:             Fri 12 Jun 2026 03:47:40 +0000
Manifest this update:     Fri 12 Jun 2026 03:47:39 +0000
Manifest next update:     Sun 14 Jun 2026 03:47:39 +0000
Files and hashes:         1: MCQ1DTQJIIK5C1PqPZv9uOdFHVo.crl (hash: gNnK7GSCOggyfGRZF6PE1NqB7IOECnLJM0cPqeJEjb0=)
                          2: 92399C0CCFB511F0886853A2DAE4EC9C.roa (hash: 8B6wU1xY38cYhzr9lZGnTjsUMM95hSXAG9bGNEVmCPI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365972A/2EA31FD677E411EE96312D884AD9E6FC/MCQ1DTQJIIK5C1PqPZv9uOdFHVo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365972A/2EA31FD677E411EE96312D884AD9E6FC/MCQ1DTQJIIK5C1PqPZv9uOdFHVo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/MCQ1DTQJIIK5C1PqPZv9uOdFHVo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 14 Jun 2026 03:47:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 983 (0x3d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365972AAF, serialNumber=3024350D34092082B90B53EA3D9BFDB8E7451D5A
        Validity
            Not Before: Jun 12 03:47:39 2026 GMT
            Not After : Jun 14 03:47:39 2026 GMT
        Subject: CN=6a2b815c-e268
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:8c:0f:6d:81:27:26:a8:41:6c:77:1b:94:6b:
                    ba:c8:fb:7e:55:d4:a3:b9:a8:5f:cb:0d:58:68:fb:
                    6d:dc:ea:91:43:9b:ca:47:16:b1:08:a9:e7:38:e4:
                    d3:cb:6e:08:5d:8d:c6:36:f0:79:46:a6:00:22:cd:
                    34:99:71:57:d8:55:9e:fa:f8:76:20:89:1e:c5:28:
                    ef:80:23:6c:07:60:c2:d4:96:e9:c4:cd:f5:3c:ab:
                    fc:97:10:1f:df:1d:cf:e6:d4:a3:7c:ee:ab:56:d2:
                    bf:76:e9:57:b4:4f:16:05:0b:d9:09:3a:d7:8f:cf:
                    51:ab:72:08:73:40:98:83:98:8d:83:84:c9:ef:d9:
                    be:d5:80:cf:d0:c7:32:f7:e2:57:4f:9b:99:6f:ab:
                    4d:4f:f9:b5:28:68:ed:e8:04:55:7c:c4:e6:c0:36:
                    8d:14:ef:f0:1c:23:8a:de:02:b2:33:92:15:f0:7f:
                    b4:88:d2:0c:ca:b9:21:25:ae:19:e7:60:14:96:0b:
                    6d:4f:6c:b5:96:4c:ee:0f:0d:0e:1d:9f:91:33:ac:
                    a7:3f:4f:7e:79:0c:77:9a:2f:44:49:6c:ae:46:c4:
                    99:a7:1d:4d:b8:11:f7:51:c2:9f:3b:a4:04:51:e6:
                    57:0c:7e:be:ca:45:0a:d1:50:c5:09:8c:da:02:c2:
                    8d:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:5B:B8:8D:14:3B:53:1F:F7:AE:A0:49:3D:EF:06:25:87:8A:14:3F
            X509v3 Authority Key Identifier:
                keyid:30:24:35:0D:34:09:20:82:B9:0B:53:EA:3D:9B:FD:B8:E7:45:1D:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365972A/2EA31FD677E411EE96312D884AD9E6FC/MCQ1DTQJIIK5C1PqPZv9uOdFHVo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/MCQ1DTQJIIK5C1PqPZv9uOdFHVo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365972A/2EA31FD677E411EE96312D884AD9E6FC/MCQ1DTQJIIK5C1PqPZv9uOdFHVo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:3e:11:69:7b:93:81:e1:9a:99:23:df:8c:8c:61:db:c6:b0:
         7c:d8:66:c1:6b:13:c4:5c:e1:49:57:ea:b7:45:0f:1c:01:37:
         ef:48:12:d4:32:53:cf:74:30:86:37:e7:a1:75:9c:87:c8:24:
         4e:9f:fc:86:25:67:94:51:01:b1:8e:4f:1c:7f:e5:ac:f4:68:
         3a:28:61:1c:b7:57:5f:3a:ea:c8:40:be:88:66:88:39:56:1b:
         f4:1b:fa:c3:48:59:f7:04:93:b0:93:9a:61:7a:8f:fe:0e:4e:
         14:e2:fa:15:2a:3c:d6:c7:fe:98:b2:98:27:2f:55:3a:3b:8b:
         de:fc:2c:f3:62:ab:56:f8:18:85:ca:d9:ef:2d:38:a6:a1:b8:
         39:31:5d:2e:a8:93:53:c5:23:c6:ae:6b:9f:42:e7:84:65:20:
         ec:06:e7:14:4f:60:e8:30:6f:8e:3b:3d:cc:7e:4f:e0:66:2c:
         46:fe:0d:5c:36:32:6f:e2:a6:4b:69:c4:0c:e6:37:56:2e:fa:
         ee:ab:90:6e:d0:c7:f5:85:3d:29:98:32:d9:0d:6f:8e:48:9c:
         2f:a8:e3:90:5e:45:5a:7e:4e:d3:ff:c6:a0:5d:51:ad:c0:b4:
         f2:d5:bb:fd:cf:01:44:82:ff:de:bc:06:8f:32:74:aa:3f:aa:
         6a:15:0a:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 04:31:26 2026 by rpki-client