Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B3F2/04BA50F009CE11EA8313CC5AF8AEA228/0CXaySkNvUCEbGSPrcyfxnGGtjI.mft
File:                     0CXaySkNvUCEbGSPrcyfxnGGtjI.mft (raw, json)
Hash identifier:          6MOfIAJZQ1fkVwVSW3IGfZjBlNEZzZOKTGGauDCPvhQ=
Subject key identifier:   E1:FD:FF:D2:14:FE:2B:91:FD:23:AF:C5:7B:87:85:F4:70:7C:39:9C
Authority key identifier: D0:25:DA:C9:29:0D:BD:40:84:6C:64:8F:AD:CC:9F:C6:71:86:B6:32
Certificate issuer:       /CN=F367B3F2AF/serialNumber=D025DAC9290DBD40846C648FADCC9FC67186B632
Certificate serial:       099B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/0CXaySkNvUCEbGSPrcyfxnGGtjI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367B3F2/04BA50F009CE11EA8313CC5AF8AEA228/0CXaySkNvUCEbGSPrcyfxnGGtjI.mft
Manifest number:          099A
Signing time:             Sat 13 Jun 2026 01:38:37 +0000
Manifest this update:     Sat 13 Jun 2026 01:38:36 +0000
Manifest next update:     Mon 15 Jun 2026 01:38:36 +0000
Files and hashes:         1: 0CXaySkNvUCEbGSPrcyfxnGGtjI.crl (hash: baSc0e351l0BqzszxPharzeJ2JTDrBq0epgt8X98r3c=)
                          2: C0B60E1809D611EA8CC3F860F8AEA228.roa (hash: 90ECyuBdPNmxRJAqpaW1o3jdvLDow9bMz084syJod/o=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367B3F2/04BA50F009CE11EA8313CC5AF8AEA228/0CXaySkNvUCEbGSPrcyfxnGGtjI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367B3F2/04BA50F009CE11EA8313CC5AF8AEA228/0CXaySkNvUCEbGSPrcyfxnGGtjI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/0CXaySkNvUCEbGSPrcyfxnGGtjI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 15 Jun 2026 00:07:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2459 (0x99b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367B3F2AF, serialNumber=D025DAC9290DBD40846C648FADCC9FC67186B632
        Validity
            Not Before: Jun 13 01:38:36 2026 GMT
            Not After : Jun 15 01:38:36 2026 GMT
        Subject: CN=6a2cb49d-5335
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:69:33:ba:2d:17:81:db:c9:6b:e4:8b:d3:7a:
                    60:d0:2f:5a:fb:3b:6c:28:55:33:49:35:4d:7c:bb:
                    7d:12:40:8b:5f:95:13:50:56:1d:96:8f:df:3e:ce:
                    f4:ba:10:e3:98:9b:32:e6:48:85:f7:0a:ae:5e:06:
                    4a:21:9c:33:99:0c:19:f8:b3:74:bf:c2:5c:ec:a9:
                    27:29:11:2f:57:ec:80:43:89:ed:cb:ba:c8:25:60:
                    55:5d:e9:a3:b8:5f:41:2d:ba:59:8d:7e:64:c6:fa:
                    a6:2b:da:f7:94:45:7f:f7:8f:ea:cc:c4:bd:c3:25:
                    e8:2b:d0:bf:47:62:5a:4d:32:05:8c:ec:2c:3c:a1:
                    c1:4e:aa:d7:6e:e8:71:48:f1:2f:ec:ea:2e:79:45:
                    e3:76:79:02:f0:35:89:03:78:c6:71:23:54:e2:3b:
                    10:6a:f2:8f:65:69:85:b2:84:67:16:67:3c:06:a2:
                    ec:ad:51:9f:44:79:8b:38:20:35:5c:20:27:bc:7d:
                    f7:82:cc:03:aa:e3:4a:cb:db:21:ff:52:5c:17:d5:
                    e4:09:ff:a2:d1:38:ca:45:36:56:8f:d3:55:e2:5b:
                    b2:37:1f:f5:45:6b:32:08:ff:53:4b:b6:27:97:f8:
                    4f:b8:84:98:d5:13:42:3d:0d:0d:73:b8:ee:27:db:
                    04:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:FD:FF:D2:14:FE:2B:91:FD:23:AF:C5:7B:87:85:F4:70:7C:39:9C
            X509v3 Authority Key Identifier:
                keyid:D0:25:DA:C9:29:0D:BD:40:84:6C:64:8F:AD:CC:9F:C6:71:86:B6:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367B3F2/04BA50F009CE11EA8313CC5AF8AEA228/0CXaySkNvUCEbGSPrcyfxnGGtjI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0CXaySkNvUCEbGSPrcyfxnGGtjI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B3F2/04BA50F009CE11EA8313CC5AF8AEA228/0CXaySkNvUCEbGSPrcyfxnGGtjI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:45:f0:10:28:a7:3a:44:e9:bc:29:85:89:32:3d:e0:c7:0e:
         48:b1:7a:b5:03:2a:93:8f:12:6e:5a:a9:57:82:c5:ce:63:8d:
         92:c8:96:0a:38:fd:76:89:f1:a2:d5:bd:9c:d8:11:07:27:4f:
         ff:69:34:db:f1:13:a3:cb:71:f7:7f:4b:f2:ca:89:65:01:5f:
         c5:72:25:2e:93:4a:3c:f1:39:cc:0c:e7:4f:09:f3:dc:5c:92:
         8c:0b:6b:6b:95:48:3b:df:ce:c8:95:71:e1:60:a0:c3:51:78:
         88:b2:31:3a:35:f5:a5:a0:98:1f:fd:6d:dd:19:24:9a:78:05:
         2c:ca:9b:be:d6:e5:68:46:75:2d:c4:92:ab:8e:61:54:4c:96:
         a3:8b:72:52:a4:49:5d:ca:ee:8c:ca:8e:e4:13:cf:bb:b3:1d:
         3b:a5:8e:84:c6:82:f8:83:01:ba:65:21:18:53:92:6d:17:7a:
         46:b0:45:f6:40:f0:42:d9:7c:e7:93:16:ba:54:ed:7f:6b:3f:
         2e:b4:4e:d5:ca:06:c7:13:8b:9c:05:ab:c3:a3:62:67:06:c6:
         db:c3:03:59:bc:98:99:c7:8c:bb:e8:a0:27:97:15:8c:26:09:
         41:77:ee:5d:97:f0:5f:1e:14:7a:24:4f:39:c8:01:5c:e6:52:
         f7:57:26:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 04:28:58 2026 by rpki-client