Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3670369/691565D27E7811ECB77461CB5A40D577/yLuITQS6vBYFq333lYeWBZySwmo.mft
File:                     yLuITQS6vBYFq333lYeWBZySwmo.mft (raw, json)
Hash identifier:          Z+WRl45X87Eao0Zl9nh0HuIRmmVC7oTiX9KOxT/s+mI=
Subject key identifier:   72:B8:99:11:7F:D0:DC:CB:C5:F0:7D:76:CB:4A:3E:5E:50:08:5E:24
Authority key identifier: C8:BB:88:4D:04:BA:BC:16:05:AB:7D:F7:95:87:96:05:9C:92:C2:6A
Certificate issuer:       /CN=F3670369AF/serialNumber=C8BB884D04BABC1605AB7DF7958796059C92C26A
Certificate serial:       0604
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/yLuITQS6vBYFq333lYeWBZySwmo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3670369/691565D27E7811ECB77461CB5A40D577/yLuITQS6vBYFq333lYeWBZySwmo.mft
Manifest number:          0603
Signing time:             Mon 02 Mar 2026 01:56:00 +0000
Manifest this update:     Mon 02 Mar 2026 01:55:59 +0000
Manifest next update:     Wed 04 Mar 2026 01:55:59 +0000
Files and hashes:         1: yLuITQS6vBYFq333lYeWBZySwmo.crl (hash: cZaH3MMr1HtregrqLvTHqlxAKtLE9kjNj0dMKtxFL3E=)
                          2: DBE0F6EE7E8C11EC9A551E885A40D577.roa (hash: e+LkqN78DWuhBsqL8FFr5mWtusQpgR9pzmjfGcJQ5/w=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3670369/691565D27E7811ECB77461CB5A40D577/yLuITQS6vBYFq333lYeWBZySwmo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3670369/691565D27E7811ECB77461CB5A40D577/yLuITQS6vBYFq333lYeWBZySwmo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/yLuITQS6vBYFq333lYeWBZySwmo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1540 (0x604)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3670369AF, serialNumber=C8BB884D04BABC1605AB7DF7958796059C92C26A
        Validity
            Not Before: Mar  2 01:55:59 2026 GMT
            Not After : Mar  4 01:55:59 2026 GMT
        Subject: CN=69a4ee30-1501
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a8:a0:18:d0:88:53:8d:75:06:96:40:9f:f9:
                    18:5f:8c:db:91:72:32:0d:81:e1:01:e0:01:ec:3b:
                    2a:74:49:7e:d5:ca:82:60:be:96:a5:42:bb:09:aa:
                    98:2c:83:f4:a7:62:69:19:21:52:dd:8d:f8:e6:7b:
                    7d:f6:cb:cc:21:c2:a6:a0:2d:b5:34:ae:cf:f6:6f:
                    98:03:ca:62:5a:46:ce:55:e1:55:85:88:fa:0d:2a:
                    ec:e0:cc:68:5d:1f:c0:de:e4:77:ee:f9:f1:65:a9:
                    8f:f1:2c:db:b1:b9:34:82:76:29:3a:a1:a9:cf:53:
                    57:43:06:db:25:c4:17:5a:20:07:81:d8:80:86:f1:
                    ab:8a:5d:5a:79:12:df:62:e7:71:7c:d3:cd:1e:f1:
                    89:75:d7:bc:2e:0c:fb:df:91:5f:9f:19:67:15:bd:
                    9f:de:d7:61:ec:a0:dd:b1:c3:4a:1a:99:97:c5:11:
                    7c:54:ff:43:56:43:55:07:26:57:7a:d9:d7:09:01:
                    fa:93:ac:fa:17:37:e1:bb:f4:09:c9:5b:cd:78:4a:
                    f2:5c:c2:f5:1f:8f:ad:c1:f8:3b:06:53:ba:0f:7e:
                    f9:86:e1:b2:07:54:83:f4:4b:e5:dd:0a:a9:a6:99:
                    b0:70:a1:38:60:42:1e:ed:e6:9b:59:46:0e:df:33:
                    c5:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:B8:99:11:7F:D0:DC:CB:C5:F0:7D:76:CB:4A:3E:5E:50:08:5E:24
            X509v3 Authority Key Identifier:
                keyid:C8:BB:88:4D:04:BA:BC:16:05:AB:7D:F7:95:87:96:05:9C:92:C2:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3670369/691565D27E7811ECB77461CB5A40D577/yLuITQS6vBYFq333lYeWBZySwmo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/yLuITQS6vBYFq333lYeWBZySwmo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3670369/691565D27E7811ECB77461CB5A40D577/yLuITQS6vBYFq333lYeWBZySwmo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:c2:bb:09:70:cd:a7:21:79:0a:c5:8d:ea:c5:c8:bd:f6:92:
         5f:33:3f:82:4c:1e:58:3e:8e:e0:6e:9e:9f:86:a1:11:cf:c7:
         11:2d:34:07:d6:d9:bc:27:f7:5d:73:61:39:db:ea:97:d4:e3:
         3f:54:69:7a:4e:46:de:7e:34:fc:29:34:78:1c:21:12:24:6d:
         7a:6b:d7:6e:fa:f1:3c:e7:44:8f:a8:25:c9:c1:14:25:0f:f4:
         ee:2c:e4:dc:31:c8:65:b1:20:5f:11:93:3e:13:21:d1:61:50:
         bc:c7:f8:17:53:c0:83:31:7d:17:1d:d5:c9:1b:87:8c:17:63:
         e0:19:23:e2:92:a8:e8:4a:16:04:8c:e7:5b:11:ec:8c:46:66:
         da:9e:3c:7f:bf:1b:b8:42:be:a7:34:dc:5c:14:b7:36:d0:ea:
         6d:aa:33:04:9d:82:8a:b0:32:89:18:2b:e7:0d:60:35:46:b2:
         f1:64:56:87:df:83:2d:9c:e7:61:62:77:61:02:16:bc:22:6b:
         c3:f8:d9:fd:3f:82:e6:ea:2d:51:e0:60:ee:72:bd:51:9b:f2:
         d2:b7:d4:a5:9f:55:54:b0:33:c9:dc:ba:b6:36:2d:1f:5b:a8:
         85:bc:d7:45:a3:4e:d2:34:10:b7:6a:88:ad:51:64:84:cd:a6:
         ea:74:90:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:15:57 2026 by rpki-client