Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3692D54/29C7BAE6537211F19966B8C5CE1D38B0/mHDlywkkDsWdzHR_wANn6a86DM0.mft
File:                     mHDlywkkDsWdzHR_wANn6a86DM0.mft (raw, json)
Hash identifier:          UW2T0UGtEgCr18OGZKEX680KQNbD21Q18xt7SOO08Y8=
Subject key identifier:   18:12:4A:C5:D0:27:7A:06:1C:86:81:5A:52:CF:56:1A:39:D2:B6:6E
Authority key identifier: 98:70:E5:CB:09:24:0E:C5:9D:CC:74:7F:C0:03:67:E9:AF:3A:0C:CD
Certificate issuer:       /CN=F3692D54AF/serialNumber=9870E5CB09240EC59DCC747FC00367E9AF3A0CCD
Certificate serial:       1B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/mHDlywkkDsWdzHR_wANn6a86DM0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3692D54/29C7BAE6537211F19966B8C5CE1D38B0/mHDlywkkDsWdzHR_wANn6a86DM0.mft
Manifest number:          1A
Signing time:             Fri 12 Jun 2026 05:39:21 +0000
Manifest this update:     Fri 12 Jun 2026 05:39:20 +0000
Manifest next update:     Sun 14 Jun 2026 05:39:20 +0000
Files and hashes:         1: mHDlywkkDsWdzHR_wANn6a86DM0.crl (hash: ysNCJy9nfXNL8drMt9E5o/xf1+/9p0ZpkI5o9YLhKRo=)
                          2: 16CB630E537511F180D8AAD7CE1D38B0.roa (hash: JKBLviW+yQWqYEf8gUdXTrj2d3ebFwRg37GifKHB/Ok=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3692D54/29C7BAE6537211F19966B8C5CE1D38B0/mHDlywkkDsWdzHR_wANn6a86DM0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3692D54/29C7BAE6537211F19966B8C5CE1D38B0/mHDlywkkDsWdzHR_wANn6a86DM0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/mHDlywkkDsWdzHR_wANn6a86DM0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 14 Jun 2026 05:39:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27 (0x1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3692D54AF, serialNumber=9870E5CB09240EC59DCC747FC00367E9AF3A0CCD
        Validity
            Not Before: Jun 12 05:39:20 2026 GMT
            Not After : Jun 14 05:39:20 2026 GMT
        Subject: CN=6a2b9b89-24fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:8e:b4:e9:69:ed:a0:30:1a:0d:af:ac:ae:43:
                    84:cc:c8:00:d4:8d:56:f7:f6:62:bf:66:14:0d:99:
                    70:13:0a:2d:21:7d:df:20:89:9f:23:03:e3:be:8d:
                    79:51:6a:ed:c3:84:9d:54:53:e2:4e:e5:dc:90:08:
                    f0:2e:c4:8d:12:f3:f3:40:ca:89:1f:27:3b:68:3d:
                    db:9d:8b:fa:8f:db:91:a3:b0:0e:e1:29:ad:10:3b:
                    0e:53:fe:ac:3e:d6:c7:3b:36:16:18:62:f1:9f:7f:
                    d2:cc:07:ed:9f:98:87:69:09:ac:73:80:79:17:84:
                    45:7b:06:66:1f:96:45:30:bf:8f:7c:16:c2:0a:f7:
                    79:4d:9f:78:96:a3:7d:08:39:2f:1e:c5:b4:0e:36:
                    c5:48:8b:f3:85:ed:cc:3d:fe:5d:76:5c:29:cd:62:
                    82:57:f8:11:25:20:94:66:0c:1b:27:61:b7:de:d2:
                    5b:e8:a1:f1:1c:ee:9a:59:6e:4f:2e:02:a3:03:19:
                    45:e9:b6:01:ad:d8:ff:02:52:cf:f4:de:c1:41:da:
                    c1:dc:3a:be:f0:69:69:26:0d:0b:2c:06:a5:89:bb:
                    fc:f7:7e:fa:7b:2c:35:eb:81:22:7e:de:b9:cf:ed:
                    cc:5d:87:9f:52:99:79:91:51:3b:df:82:9e:eb:c1:
                    bd:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:12:4A:C5:D0:27:7A:06:1C:86:81:5A:52:CF:56:1A:39:D2:B6:6E
            X509v3 Authority Key Identifier:
                keyid:98:70:E5:CB:09:24:0E:C5:9D:CC:74:7F:C0:03:67:E9:AF:3A:0C:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3692D54/29C7BAE6537211F19966B8C5CE1D38B0/mHDlywkkDsWdzHR_wANn6a86DM0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/mHDlywkkDsWdzHR_wANn6a86DM0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3692D54/29C7BAE6537211F19966B8C5CE1D38B0/mHDlywkkDsWdzHR_wANn6a86DM0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:d2:46:b8:0f:99:3a:71:01:76:49:b0:5f:25:6d:03:7f:5a:
         6b:df:ae:ed:bb:61:e4:ad:27:53:b4:76:14:ff:61:af:df:d9:
         3e:7a:0c:e8:85:ba:13:0d:8d:46:00:35:36:32:d5:55:21:9f:
         61:eb:8e:b9:44:96:2c:bd:65:29:4e:fd:69:2c:19:8e:81:4e:
         12:cb:97:e3:f6:e1:76:1a:5e:7a:41:7f:a8:a7:11:3d:53:4c:
         d8:c1:74:01:63:b9:1f:b9:03:f6:e4:44:cc:63:df:c4:56:28:
         b1:4b:8b:03:c3:d3:87:34:60:d5:c9:be:ef:36:7b:79:27:39:
         25:08:c9:cd:eb:32:81:40:96:d7:c1:ea:c0:8c:da:fb:97:99:
         f3:46:50:d6:a3:28:dc:b0:3d:af:35:15:d1:b4:d0:45:ac:b9:
         58:f9:f1:69:ce:a9:e8:9e:28:fa:1f:88:d5:89:58:6c:28:51:
         9d:a6:e6:f8:9e:4b:10:cb:a8:d2:62:60:76:74:b5:d4:91:7f:
         95:84:f6:7d:76:cc:0e:3b:be:a4:ef:8c:7c:54:b6:c7:06:3a:
         28:ce:ba:2a:a4:45:96:61:4f:a0:12:07:d8:54:5a:9c:1e:5b:
         63:da:f3:9b:57:01:58:c3:01:9d:51:d0:79:ec:62:54:f1:8b:
         7a:22:63:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:45:15 2026 by rpki-client