Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3675292/264D17FEBDDC11EEB41E414D775412E6/hXm8J-c9eykQjr_zl_ts_VxrAkc.mft
File:                     hXm8J-c9eykQjr_zl_ts_VxrAkc.mft (raw, json)
Hash identifier:          wLRS812v0XVjeiDSTs8v7wc7LW21Y2tPU93YVh4JXnY=
Subject key identifier:   1C:77:FE:54:6E:9C:80:17:FF:57:3D:88:9A:47:86:8A:E3:9E:58:EC
Authority key identifier: 85:79:BC:27:E7:3D:7B:29:10:8E:BF:F3:97:FB:6C:FD:5C:6B:02:47
Certificate issuer:       /CN=F3675292AF/serialNumber=8579BC27E73D7B29108EBFF397FB6CFD5C6B0247
Certificate serial:       0344
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/hXm8J-c9eykQjr_zl_ts_VxrAkc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3675292/264D17FEBDDC11EEB41E414D775412E6/hXm8J-c9eykQjr_zl_ts_VxrAkc.mft
Manifest number:          033F
Signing time:             Fri 17 Apr 2026 03:56:51 +0000
Manifest this update:     Fri 17 Apr 2026 03:56:50 +0000
Manifest next update:     Sun 19 Apr 2026 03:56:50 +0000
Files and hashes:         1: hXm8J-c9eykQjr_zl_ts_VxrAkc.crl (hash: B0RomUnERRwxO3VfCVugkp/xKvl5mg+qO82RsaPAyLc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3675292/264D17FEBDDC11EEB41E414D775412E6/hXm8J-c9eykQjr_zl_ts_VxrAkc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3675292/264D17FEBDDC11EEB41E414D775412E6/hXm8J-c9eykQjr_zl_ts_VxrAkc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/hXm8J-c9eykQjr_zl_ts_VxrAkc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 03:56:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 836 (0x344)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3675292AF, serialNumber=8579BC27E73D7B29108EBFF397FB6CFD5C6B0247
        Validity
            Not Before: Apr 17 03:56:50 2026 GMT
            Not After : Apr 19 03:56:50 2026 GMT
        Subject: CN=69e1af83-4f77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:56:6e:34:d8:c9:29:5c:f5:08:98:4e:e7:58:
                    f4:6a:ad:fa:97:6b:fa:21:ca:75:c3:75:94:96:54:
                    72:44:80:e2:3e:93:7e:9f:91:a5:bd:12:30:85:95:
                    c0:cc:90:da:b5:be:11:22:82:e7:77:cb:df:f8:e5:
                    1a:95:8e:81:ad:30:60:73:f1:66:23:4c:8c:4d:0e:
                    95:1a:f6:4d:42:e7:e0:b1:60:6b:12:de:c2:0d:04:
                    f6:65:45:34:2b:ca:71:69:6f:23:85:c1:a0:93:4e:
                    2b:86:da:29:7e:c5:90:ea:20:6b:bd:df:9b:be:0b:
                    6c:18:df:11:c2:53:82:c2:31:a2:81:e0:7c:c4:6c:
                    b4:54:e6:c8:1e:42:0b:9d:2d:7e:e7:df:ef:d5:a4:
                    1a:59:ee:24:28:0a:b0:f6:30:40:98:52:92:b3:76:
                    a5:ce:6f:f9:f3:80:cd:82:6c:21:19:38:3c:df:26:
                    88:b6:bc:57:38:31:7b:d6:7f:42:c7:d9:fe:55:46:
                    f4:83:7b:25:40:9f:8f:3d:79:5f:bc:11:34:69:91:
                    cb:fc:f5:fa:ed:87:fa:7a:63:ef:15:7f:82:69:a6:
                    53:ca:b8:50:89:d0:16:13:df:f8:9b:93:e6:0d:fd:
                    f7:4a:0c:b9:87:c1:da:97:7a:21:e5:5b:c2:1e:89:
                    7d:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:77:FE:54:6E:9C:80:17:FF:57:3D:88:9A:47:86:8A:E3:9E:58:EC
            X509v3 Authority Key Identifier:
                keyid:85:79:BC:27:E7:3D:7B:29:10:8E:BF:F3:97:FB:6C:FD:5C:6B:02:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3675292/264D17FEBDDC11EEB41E414D775412E6/hXm8J-c9eykQjr_zl_ts_VxrAkc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hXm8J-c9eykQjr_zl_ts_VxrAkc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3675292/264D17FEBDDC11EEB41E414D775412E6/hXm8J-c9eykQjr_zl_ts_VxrAkc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:ec:11:c6:c9:a9:4f:b6:77:76:2a:f4:28:23:aa:9f:54:4f:
         51:8e:09:24:2e:a4:64:9b:85:a1:5a:07:79:66:6f:c6:c9:1c:
         43:c9:7c:1d:aa:52:79:7b:75:27:ef:e6:85:fb:11:f2:22:9c:
         93:44:e3:9e:9f:95:c0:f2:92:d2:d8:e1:b9:ea:09:f7:5b:78:
         c7:8c:7b:6e:6c:b0:a8:77:cc:d7:07:3a:65:f4:b1:8e:20:19:
         27:51:88:b4:d7:1f:77:1e:a2:97:e2:3e:2a:28:e3:1a:71:75:
         0b:ce:f8:da:1c:89:01:92:eb:1c:0a:a3:66:b3:3b:c8:14:c1:
         06:3a:96:76:7c:80:bc:e7:98:26:5c:cd:d0:b9:70:53:4b:72:
         a5:7a:07:50:a4:8b:51:4d:f9:bf:09:aa:bf:ed:1a:fd:70:e4:
         5a:fe:69:4d:ac:54:95:ed:ec:eb:a5:fd:c1:b1:67:67:61:89:
         c5:c2:b6:02:aa:97:96:6f:9a:dc:09:5d:8f:08:fe:a7:00:05:
         47:22:86:86:c0:a2:3c:c6:16:0d:10:d4:a5:36:fb:91:4e:41:
         8b:8e:85:48:7a:ce:71:75:b4:90:bd:37:3d:52:a1:28:e4:54:
         aa:f3:65:2c:e9:ec:5d:64:17:74:8a:bb:b4:89:ad:66:de:f2:
         b8:0f:2e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:31:46 2026 by rpki-client