Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3691DC2/A12171821A1E11EC8D345D34D8A014CE/fHr4YJtvvVa8wCRM0y1g_-hfnuQ.mft
File:                     fHr4YJtvvVa8wCRM0y1g_-hfnuQ.mft (raw, json)
Hash identifier:          ym5T1h7zAs9pHIj13KrxM9pmMnSQ7YlYKh6+UqJknYI=
Subject key identifier:   26:B6:8A:F1:55:21:23:12:C7:F7:43:3B:71:ED:58:A4:AB:A0:2E:00
Authority key identifier: 7C:7A:F8:60:9B:6F:BD:56:BC:C0:24:4C:D3:2D:60:FF:E8:5F:9E:E4
Certificate issuer:       /CN=F3691DC2AF/serialNumber=7C7AF8609B6FBD56BCC0244CD32D60FFE85F9EE4
Certificate serial:       06B2
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/fHr4YJtvvVa8wCRM0y1g_-hfnuQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3691DC2/A12171821A1E11EC8D345D34D8A014CE/fHr4YJtvvVa8wCRM0y1g_-hfnuQ.mft
Manifest number:          06B1
Signing time:             Fri 17 Apr 2026 02:22:24 +0000
Manifest this update:     Fri 17 Apr 2026 02:22:23 +0000
Manifest next update:     Sun 19 Apr 2026 02:22:23 +0000
Files and hashes:         1: fHr4YJtvvVa8wCRM0y1g_-hfnuQ.crl (hash: lnG1dg8UVd4RKYVXBHmp0fFvyTizzTxHR5xi82nzH4o=)
                          2: CA1FC8CC1A1E11ECBF7CA134D8A014CE.roa (hash: 89ZoBOyWvLwCDH6XINtqPI4XAUHBP8Wb3FK9Ykris/0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3691DC2/A12171821A1E11EC8D345D34D8A014CE/fHr4YJtvvVa8wCRM0y1g_-hfnuQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3691DC2/A12171821A1E11EC8D345D34D8A014CE/fHr4YJtvvVa8wCRM0y1g_-hfnuQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/fHr4YJtvvVa8wCRM0y1g_-hfnuQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 02:22:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1714 (0x6b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3691DC2AF, serialNumber=7C7AF8609B6FBD56BCC0244CD32D60FFE85F9EE4
        Validity
            Not Before: Apr 17 02:22:23 2026 GMT
            Not After : Apr 19 02:22:23 2026 GMT
        Subject: CN=69e1995f-ff8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:72:e2:ed:1b:a0:15:6b:b3:66:85:71:5f:f9:
                    86:cd:11:da:55:a3:0f:10:08:df:c7:63:a8:35:99:
                    bf:70:d9:5b:71:90:e2:96:23:cb:7d:72:69:82:46:
                    30:18:e3:39:7a:f8:c8:93:2c:9b:db:be:a0:d9:3d:
                    b7:fe:ce:13:9d:56:1d:8c:f7:3b:45:4a:22:aa:12:
                    b8:c8:6b:aa:42:21:bb:ea:71:87:57:b9:7f:01:bb:
                    01:22:e1:b4:13:03:2a:4f:1c:d6:d7:06:cc:29:67:
                    93:d8:7e:ec:ad:b7:64:0c:04:6f:ee:c3:99:0b:ae:
                    bf:10:80:e9:54:ab:40:0f:d5:20:fc:82:3c:83:9f:
                    4d:ce:73:42:b2:9e:26:b9:51:60:57:d0:c7:e4:8b:
                    43:8e:da:37:57:b9:0d:65:f7:bb:c0:ab:20:64:fa:
                    d8:73:bb:9c:98:ff:9c:d5:9c:07:ea:63:22:58:3b:
                    64:a6:9d:ec:f7:68:81:ea:38:f4:20:00:3e:e2:27:
                    4a:68:e3:ea:0f:17:8d:cb:74:77:2c:db:01:45:4a:
                    1d:8c:7a:a8:7e:e6:4d:d4:8a:ff:c4:c4:0e:e3:59:
                    64:4d:45:c1:6f:53:35:d8:89:4f:96:6d:49:38:f9:
                    c2:3c:23:46:be:f3:b5:bc:7e:ee:aa:df:9a:c9:39:
                    61:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:B6:8A:F1:55:21:23:12:C7:F7:43:3B:71:ED:58:A4:AB:A0:2E:00
            X509v3 Authority Key Identifier:
                keyid:7C:7A:F8:60:9B:6F:BD:56:BC:C0:24:4C:D3:2D:60:FF:E8:5F:9E:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3691DC2/A12171821A1E11EC8D345D34D8A014CE/fHr4YJtvvVa8wCRM0y1g_-hfnuQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/fHr4YJtvvVa8wCRM0y1g_-hfnuQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3691DC2/A12171821A1E11EC8D345D34D8A014CE/fHr4YJtvvVa8wCRM0y1g_-hfnuQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:ca:31:ac:ab:f0:26:70:e5:68:28:16:f4:04:76:d8:a7:2c:
         87:5d:4b:3c:1d:95:10:c9:e0:9a:4b:2d:1e:d9:b2:46:da:28:
         25:76:04:19:8b:ca:0e:d3:ba:f8:3c:46:6e:a4:92:97:88:5f:
         2b:7b:37:1b:ea:1f:e6:48:00:80:7c:2b:84:68:a8:67:b8:3c:
         c6:96:c7:cd:61:6a:83:51:32:c9:94:4e:13:38:3c:a2:03:db:
         26:01:4d:49:7c:df:47:23:cb:12:ee:f7:55:76:42:2d:f0:b0:
         dd:45:a3:3c:96:33:60:69:4a:21:a4:31:43:7b:df:ec:19:6f:
         9b:1a:4d:31:f3:bd:7f:8c:72:b7:84:7a:e8:f0:38:40:ea:95:
         2b:a1:20:ef:6d:ca:b5:70:ce:28:e5:48:df:30:96:ca:39:40:
         e1:6a:fc:6f:3c:b5:4b:ff:75:f1:59:b4:1f:b7:d3:ee:bb:35:
         77:87:e3:ed:58:a2:ff:bc:94:36:c6:e1:32:5c:a7:63:05:61:
         4a:b3:e6:60:5a:da:5b:33:3d:e7:60:e7:3d:46:c3:05:e0:7e:
         c0:22:c3:03:d3:8d:28:12:e2:01:12:76:85:c0:d9:24:c1:7f:
         d7:e1:96:8a:b0:26:b7:bd:fe:43:1b:09:92:f9:58:11:f2:a1:
         24:7c:20:00
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBrIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OTFEQzJBRjExMC8GA1UEBRMoN0M3QUY4NjA5QjZGQkQ1NkJDQzAyNDRDRDMyRDYw
RkZFODVGOUVFNDAeFw0yNjA0MTcwMjIyMjNaFw0yNjA0MTkwMjIyMjNaMBgxFjAU
BgNVBAMTDTY5ZTE5OTVmLWZmOGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDDcuLtG6AVa7NmhXFf+YbNEdpVow8QCN/HY6g1mb9w2VtxkOKWI8t9cmmC
RjAY4zl6+MiTLJvbvqDZPbf+zhOdVh2M9ztFSiKqErjIa6pCIbvqcYdXuX8BuwEi
4bQTAypPHNbXBswpZ5PYfuytt2QMBG/uw5kLrr8QgOlUq0AP1SD8gjyDn03Oc0Ky
nia5UWBX0Mfki0OO2jdXuQ1l97vAqyBk+thzu5yY/5zVnAfqYyJYO2Smnez3aIHq
OPQgAD7iJ0po4+oPF43LdHcs2wFFSh2Meqh+5k3Uiv/ExA7jWWRNRcFvUzXYiU+W
bUk4+cI8I0a+87W8fu6q35rJOWF5AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUJraK
8VUhIxLH90M7ce1YpKugLgAwHwYDVR0jBBgwFoAUfHr4YJtvvVa8wCRM0y1g/+hf
nuQwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjkxREMyL0ExMjE3MTgyMUExRTExRUM4RDM0NUQzNEQ4QTAxNENFL2ZIcjRZ
SnR2dlZhOHdDUk0weTFnXy1oZm51US5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2ZIcjRZSnR2dlZhOHdDUk0weTFnXy1oZm51US5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OTFEQzIvQTEyMTcxODIxQTFFMTFFQzhEMzQ1RDM0RDhB
MDE0Q0UvZkhyNFlKdHZ2VmE4d0NSTTB5MWdfLWhmbnVRLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAoyjGsq/AmcOVoKBb0BHbYpyyHXUs8
HZUQyeCaSy0e2bJG2igldgQZi8oO07r4PEZupJKXiF8rezcb6h/mSACAfCuEaKhn
uDzGlsfNYWqDUTLJlE4TODyiA9smAU1JfN9HI8sS7vdVdkIt8LDdRaM8ljNgaUoh
pDFDe9/sGW+bGk0x871/jHK3hHro8DhA6pUroSDvbcq1cM4o5UjfMJbKOUDhavxv
PLVL/3XxWbQft9PuuzV3h+PtWKL/vJQ2xuEyXKdjBWFKs+ZgWtpbMz3nYOc9RsMF
4H7AIsMD040oEuIBEnaFwNkkwX/X4ZaKsCa3vf5DGwmS+VgR8qEkfCAA
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:45:49 2026 by rpki-client