Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367FC4F/442A9E2080BF11E6AB3BA07EF8AEA228/4XMtl9E2FxNisFGPaiFEVFy_Ok8.mft
File:                     4XMtl9E2FxNisFGPaiFEVFy_Ok8.mft (raw, json)
Hash identifier:          GIOe2qSLy3977pvLY0Ljw/rXY2V0uN8m6gLxK2W0uOg=
Subject key identifier:   4B:51:27:33:8B:CB:26:C0:71:5D:3F:63:D9:1C:58:66:CE:D1:D9:29
Authority key identifier: E1:73:2D:97:D1:36:17:13:62:B0:51:8F:6A:21:44:54:5C:BF:3A:4F
Certificate issuer:       /CN=F367FC4FAF/serialNumber=E1732D97D136171362B0518F6A2144545CBF3A4F
Certificate serial:       0DC6
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/4XMtl9E2FxNisFGPaiFEVFy_Ok8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367FC4F/442A9E2080BF11E6AB3BA07EF8AEA228/4XMtl9E2FxNisFGPaiFEVFy_Ok8.mft
Manifest number:          0DC5
Signing time:             Mon 02 Mar 2026 00:59:00 +0000
Manifest this update:     Mon 02 Mar 2026 00:58:59 +0000
Manifest next update:     Wed 04 Mar 2026 00:58:59 +0000
Files and hashes:         1: 4XMtl9E2FxNisFGPaiFEVFy_Ok8.crl (hash: cZetnAcbtgYc4naIh+TBj83DRrc471r3ekKaiOSd6R8=)
                          2: 0DE9F16080D011E6B7882016F8AEA228.roa (hash: lapNENqbec9IiREVadsxyCzDqZnzkWBnbMRTRH0mwYI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367FC4F/442A9E2080BF11E6AB3BA07EF8AEA228/4XMtl9E2FxNisFGPaiFEVFy_Ok8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367FC4F/442A9E2080BF11E6AB3BA07EF8AEA228/4XMtl9E2FxNisFGPaiFEVFy_Ok8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/4XMtl9E2FxNisFGPaiFEVFy_Ok8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3526 (0xdc6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367FC4FAF, serialNumber=E1732D97D136171362B0518F6A2144545CBF3A4F
        Validity
            Not Before: Mar  2 00:58:59 2026 GMT
            Not After : Mar  4 00:58:59 2026 GMT
        Subject: CN=69a4e0d4-3e53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:20:d8:7f:ac:2b:35:ee:4c:70:c7:ab:32:67:
                    3e:db:72:eb:fe:c3:8e:b5:d2:f4:a2:20:81:4c:21:
                    2a:51:59:c8:16:1a:0d:94:a8:57:9a:33:cb:20:93:
                    41:f0:7d:95:ce:a4:d6:6b:21:73:29:64:cf:b2:56:
                    c2:b7:4e:1d:db:d6:5a:70:76:5d:3e:f8:5e:fd:b3:
                    36:bf:c0:04:c5:35:0f:05:96:bc:72:d2:a3:e3:7e:
                    f4:3e:37:56:78:9c:ff:cf:ce:fc:bc:d6:f6:6a:15:
                    0d:15:f6:61:cd:14:df:dc:37:f8:66:a7:ca:66:ab:
                    3f:12:68:65:ca:74:0b:c4:6e:bc:d6:ab:87:a1:69:
                    05:fb:60:2e:ba:1a:19:8a:a7:3b:09:24:49:5e:83:
                    d4:57:05:ac:ff:dc:41:80:5f:7e:c7:72:82:25:86:
                    73:16:81:9f:69:bd:f4:2a:0e:a5:12:96:43:8f:c6:
                    cb:97:87:4b:28:bd:b5:cb:71:07:32:35:23:cc:13:
                    d7:bf:23:3a:ec:95:82:57:b9:65:a9:c9:28:0d:1b:
                    69:d9:6d:29:d1:27:41:35:a4:9b:ab:5d:d3:b9:52:
                    7b:76:fd:c8:4f:a1:5f:32:5e:98:eb:33:37:ba:2f:
                    b1:77:d1:c8:cd:88:ee:34:89:cf:cd:4a:47:5f:4c:
                    2e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:51:27:33:8B:CB:26:C0:71:5D:3F:63:D9:1C:58:66:CE:D1:D9:29
            X509v3 Authority Key Identifier:
                keyid:E1:73:2D:97:D1:36:17:13:62:B0:51:8F:6A:21:44:54:5C:BF:3A:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367FC4F/442A9E2080BF11E6AB3BA07EF8AEA228/4XMtl9E2FxNisFGPaiFEVFy_Ok8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4XMtl9E2FxNisFGPaiFEVFy_Ok8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367FC4F/442A9E2080BF11E6AB3BA07EF8AEA228/4XMtl9E2FxNisFGPaiFEVFy_Ok8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:db:1f:ca:0f:d5:bd:da:8c:5e:ee:ed:fa:80:ec:72:46:ea:
         eb:17:d6:3c:cb:cc:3c:31:02:af:f4:43:0e:25:c1:f8:9b:33:
         8c:8b:4c:fa:cd:28:4c:bc:3e:bd:2d:d8:99:1d:96:ba:f3:4e:
         7a:45:92:13:e5:12:17:a7:e4:0b:b5:c6:21:12:70:20:4e:0c:
         a2:7d:c8:e9:55:85:99:07:a9:ac:5a:f7:22:f5:53:9b:91:46:
         b3:1d:13:93:3a:a3:68:54:54:57:32:aa:57:63:f0:a1:86:0b:
         94:ef:b8:17:a2:d3:0b:6b:8b:ff:42:18:d2:ae:19:8d:34:91:
         d0:e6:43:fc:95:c2:06:16:e5:7c:d1:9a:94:df:2b:65:28:e3:
         73:4d:df:06:ef:f5:4e:61:93:f6:7c:3a:da:6f:cc:2d:f8:8d:
         a9:1b:0a:0e:67:b8:4a:2b:08:2f:4f:ee:12:ac:9a:dd:5e:ed:
         65:29:4a:4f:f5:fa:84:fd:ea:56:ce:68:30:9e:7f:74:83:f7:
         38:5b:33:bf:1d:48:f5:49:f8:c7:56:1e:55:69:71:88:ef:ae:
         c1:45:0e:47:b0:8d:e2:15:d7:21:fb:88:e7:77:10:c8:0f:91:
         10:76:a8:16:fe:90:c7:e4:15:e8:a8:22:4b:95:bb:7f:6f:69:
         d7:e2:03:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:16:40 2026 by rpki-client