Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367FC4F/442A9E2080BF11E6AB3BA07EF8AEA228/4XMtl9E2FxNisFGPaiFEVFy_Ok8.mft
File:                     4XMtl9E2FxNisFGPaiFEVFy_Ok8.mft (raw, json)
Hash identifier:          blKlv7aT5iFpS6WPuMHEeg32ms/kCPaYzOT1LtIM0C4=
Subject key identifier:   EE:5B:BE:1A:6B:32:3A:51:08:5B:D5:67:E4:2F:F5:0F:48:64:59:3B
Authority key identifier: E1:73:2D:97:D1:36:17:13:62:B0:51:8F:6A:21:44:54:5C:BF:3A:4F
Certificate issuer:       /CN=F367FC4FAF/serialNumber=E1732D97D136171362B0518F6A2144545CBF3A4F
Certificate serial:       0DF4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/4XMtl9E2FxNisFGPaiFEVFy_Ok8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367FC4F/442A9E2080BF11E6AB3BA07EF8AEA228/4XMtl9E2FxNisFGPaiFEVFy_Ok8.mft
Manifest number:          0DF3
Signing time:             Fri 17 Apr 2026 01:04:51 +0000
Manifest this update:     Fri 17 Apr 2026 01:04:50 +0000
Manifest next update:     Sun 19 Apr 2026 01:04:50 +0000
Files and hashes:         1: 4XMtl9E2FxNisFGPaiFEVFy_Ok8.crl (hash: A9KUPfKliN3eSP2QUZtc674vfbqF43gzmuH3dmPfH3k=)
                          2: 0DE9F16080D011E6B7882016F8AEA228.roa (hash: lapNENqbec9IiREVadsxyCzDqZnzkWBnbMRTRH0mwYI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367FC4F/442A9E2080BF11E6AB3BA07EF8AEA228/4XMtl9E2FxNisFGPaiFEVFy_Ok8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367FC4F/442A9E2080BF11E6AB3BA07EF8AEA228/4XMtl9E2FxNisFGPaiFEVFy_Ok8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/4XMtl9E2FxNisFGPaiFEVFy_Ok8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3572 (0xdf4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367FC4FAF, serialNumber=E1732D97D136171362B0518F6A2144545CBF3A4F
        Validity
            Not Before: Apr 17 01:04:50 2026 GMT
            Not After : Apr 19 01:04:50 2026 GMT
        Subject: CN=69e18733-88dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:ba:62:ce:65:ac:46:fb:9a:0f:4b:1f:03:56:
                    13:92:14:85:9a:fa:aa:79:3e:59:9d:59:a5:63:fa:
                    15:98:bf:0c:ef:c7:c3:1e:14:c5:51:f0:ae:a2:fe:
                    7f:d3:77:99:90:70:24:33:b9:10:52:47:49:31:3d:
                    83:66:8b:f9:37:21:b9:2e:5c:4a:b1:b4:61:2e:25:
                    ee:3a:67:6f:fc:aa:9d:9f:e8:15:f3:c1:22:a6:7a:
                    df:05:32:5c:b1:ec:6f:3a:22:2e:55:29:e7:d4:c8:
                    79:26:bc:85:81:3b:e7:f7:a5:78:3a:13:04:26:19:
                    21:a6:ae:d8:31:c5:f4:b6:da:55:d4:98:3a:92:3e:
                    3e:fc:e6:94:33:4b:c6:88:47:a7:c1:f9:79:a1:d1:
                    65:29:ed:4c:b3:17:cb:fc:e7:c8:12:7d:cc:fe:ee:
                    6e:2f:88:2e:d9:19:65:b8:78:7f:65:e8:91:83:76:
                    ef:0c:7d:52:2e:fe:8b:62:f4:a4:3e:65:02:e0:e8:
                    05:5d:7f:c0:4e:e7:1c:89:29:7c:97:66:37:ad:31:
                    c5:c7:84:41:3d:6e:86:08:4a:b4:4c:17:98:30:c0:
                    d1:45:36:cc:21:77:94:57:64:4e:a7:99:35:45:b2:
                    15:08:ba:15:3a:85:36:54:01:d4:2f:57:2f:21:ad:
                    8f:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:5B:BE:1A:6B:32:3A:51:08:5B:D5:67:E4:2F:F5:0F:48:64:59:3B
            X509v3 Authority Key Identifier:
                keyid:E1:73:2D:97:D1:36:17:13:62:B0:51:8F:6A:21:44:54:5C:BF:3A:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367FC4F/442A9E2080BF11E6AB3BA07EF8AEA228/4XMtl9E2FxNisFGPaiFEVFy_Ok8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4XMtl9E2FxNisFGPaiFEVFy_Ok8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367FC4F/442A9E2080BF11E6AB3BA07EF8AEA228/4XMtl9E2FxNisFGPaiFEVFy_Ok8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:22:25:78:bf:f2:16:4e:31:be:29:16:bf:ec:f7:f0:e6:27:
         bb:4d:a1:f4:a3:ef:87:67:6a:61:8f:69:9a:d8:40:f7:88:2e:
         5e:da:b4:62:a8:79:37:76:45:30:dc:df:3a:e1:5f:59:80:66:
         83:b0:a2:6c:d8:d1:3b:1e:a4:95:30:a3:30:82:21:7b:19:2b:
         6c:02:26:ae:3a:d2:94:e8:2a:af:a4:89:ac:fb:2d:a0:7e:f8:
         98:8c:c2:71:7d:9c:8b:80:f8:1e:19:d3:56:e4:57:ba:48:d8:
         ce:74:eb:7e:fc:8d:f8:c1:18:06:7e:b4:df:0e:b9:45:64:a3:
         29:a2:1d:bd:5a:bb:fe:0f:18:c1:5c:71:6c:dd:03:e6:a4:87:
         fb:e9:53:75:c0:0b:76:46:db:e5:2c:d0:9a:09:6a:52:69:ff:
         8c:5b:7c:90:8d:a1:15:6c:35:f0:f9:4d:9a:3a:3c:86:7a:6e:
         73:53:b9:af:63:46:d1:13:17:43:3e:d9:43:d1:33:0f:5f:4e:
         f2:20:1d:77:2e:7c:2a:a9:91:1b:52:db:37:1f:55:05:a6:b3:
         03:cb:44:de:50:c9:31:bb:88:0a:5c:50:cc:1a:24:94:7d:4b:
         4f:f3:31:cf:dd:69:2b:8e:6c:80:27:59:e0:8e:d0:1a:fb:2a:
         6f:c3:62:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:37:08 2026 by rpki-client