Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366E62B/B91D9518BE9011EEA70F3393775412E6/kp-MtyJC3APxF2jH_xZcaDK3U7U.mft
File:                     kp-MtyJC3APxF2jH_xZcaDK3U7U.mft (raw, json)
Hash identifier:          EaQO3WVFlOAKxw1jO2XJYQBuS3y+UlqBbuTCZk+7oA0=
Subject key identifier:   29:26:6C:EA:ED:21:A2:90:B4:AA:4B:AA:04:EA:94:F9:0F:37:03:C2
Authority key identifier: 92:9F:8C:B7:22:42:DC:03:F1:17:68:C7:FF:16:5C:68:32:B7:53:B5
Certificate issuer:       /CN=F366E62BAF/serialNumber=929F8CB72242DC03F11768C7FF165C6832B753B5
Certificate serial:       033D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/kp-MtyJC3APxF2jH_xZcaDK3U7U.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366E62B/B91D9518BE9011EEA70F3393775412E6/kp-MtyJC3APxF2jH_xZcaDK3U7U.mft
Manifest number:          033C
Signing time:             Fri 17 Apr 2026 03:57:27 +0000
Manifest this update:     Fri 17 Apr 2026 03:57:26 +0000
Manifest next update:     Sun 19 Apr 2026 03:57:26 +0000
Files and hashes:         1: kp-MtyJC3APxF2jH_xZcaDK3U7U.crl (hash: /ZKzO65C1RBG6wEwU4v5V4QaOZ7GAaRRMDCKlkPYByc=)
                          2: A864F076BE9611EE998D299D775412E6.roa (hash: 1SOFM20prFpQpyBQ79yS3b8vfUM/+4DhWbKvJj39ado=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366E62B/B91D9518BE9011EEA70F3393775412E6/kp-MtyJC3APxF2jH_xZcaDK3U7U.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366E62B/B91D9518BE9011EEA70F3393775412E6/kp-MtyJC3APxF2jH_xZcaDK3U7U.mft
                          rsync://rpki.afrinic.net/repository/afrinic/kp-MtyJC3APxF2jH_xZcaDK3U7U.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 829 (0x33d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366E62BAF, serialNumber=929F8CB72242DC03F11768C7FF165C6832B753B5
        Validity
            Not Before: Apr 17 03:57:26 2026 GMT
            Not After : Apr 19 03:57:26 2026 GMT
        Subject: CN=69e1afa7-ca24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:fc:b3:9c:5e:86:ba:47:f5:7d:46:0a:94:5b:
                    1b:71:ad:6b:b3:03:d9:cb:01:97:75:79:d9:42:01:
                    ae:2c:a8:d4:c0:19:f8:68:f5:21:4a:c8:4a:34:4f:
                    3c:d7:83:e0:8a:14:da:46:69:57:c7:49:69:9e:66:
                    c8:3c:08:c9:b8:d7:1f:aa:78:59:ab:9e:45:32:39:
                    06:be:1e:f2:46:3a:9f:60:08:9e:04:39:f1:72:f9:
                    74:2e:a3:49:65:96:93:69:7a:a7:92:29:0d:d8:13:
                    55:45:97:bb:6f:b1:54:ce:5b:8d:44:f0:d9:fd:c9:
                    c8:18:03:3e:0f:21:86:b0:68:60:b8:25:f1:a1:23:
                    be:a5:34:46:b1:8d:f2:7a:56:5f:3c:18:76:20:c5:
                    31:ad:d5:f0:78:21:0b:aa:58:5c:2f:c1:fe:27:31:
                    b2:89:0b:f4:a4:7c:78:17:d8:33:15:57:da:e1:23:
                    ca:27:93:a9:b5:5f:98:48:08:3c:39:c8:48:01:81:
                    38:4c:85:14:ae:56:62:ff:1d:6d:f9:f2:5e:bb:37:
                    fc:f2:b2:3e:11:70:de:ee:6a:d2:c9:a7:a1:e2:85:
                    e9:f9:1e:80:06:e4:5c:2b:bb:1f:22:70:a3:9a:07:
                    22:f8:73:66:b4:47:48:ae:4e:bb:c7:89:07:b9:14:
                    dc:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:26:6C:EA:ED:21:A2:90:B4:AA:4B:AA:04:EA:94:F9:0F:37:03:C2
            X509v3 Authority Key Identifier:
                keyid:92:9F:8C:B7:22:42:DC:03:F1:17:68:C7:FF:16:5C:68:32:B7:53:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366E62B/B91D9518BE9011EEA70F3393775412E6/kp-MtyJC3APxF2jH_xZcaDK3U7U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kp-MtyJC3APxF2jH_xZcaDK3U7U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366E62B/B91D9518BE9011EEA70F3393775412E6/kp-MtyJC3APxF2jH_xZcaDK3U7U.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         e3:81:29:dd:c4:f2:73:00:c1:6a:e1:17:14:53:4f:60:43:26:
         31:c2:f5:67:eb:81:31:71:f0:4c:55:7b:7c:92:04:61:67:33:
         23:6f:1c:35:55:a2:35:0b:3f:3a:de:46:f0:ec:c3:a0:bb:6c:
         f6:70:74:1c:5b:c0:35:99:a7:14:b6:56:ed:9a:2c:28:9d:39:
         53:dd:dc:dc:67:1f:5e:9e:e1:e9:d8:75:f1:d0:30:e7:08:ba:
         f9:61:3a:26:6d:ab:3a:38:c2:ad:23:7a:68:58:7e:07:56:ee:
         dd:81:12:03:21:fb:69:86:ef:85:e7:c6:a1:4f:33:48:19:b2:
         09:32:c7:ae:07:be:c0:3a:3b:cb:28:6e:f2:24:7b:4b:4b:98:
         d5:da:8d:e8:66:69:6d:2e:82:47:fb:8f:36:fe:01:19:43:d8:
         13:b1:d3:d7:39:84:57:ac:ad:36:25:a5:95:d7:a9:c0:27:54:
         dc:a6:23:fe:80:e5:44:50:ad:fd:37:d2:57:ed:f8:9f:8b:a4:
         c4:c6:76:51:b5:19:02:dd:09:35:51:24:fd:37:51:e0:fc:ce:
         08:a7:df:95:bf:c5:fc:06:a4:73:cb:80:99:5f:6e:45:24:7b:
         2d:20:fa:dd:b1:ba:12:5c:d7:0f:2a:c0:bf:ed:7c:a0:03:32:
         3f:08:4d:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:04:35 2026 by rpki-client