Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3698401/FDAB9DBCD53211EDA1D50A99F1222468/J8yUlEs4mAyi4IYqXfxE2GQEF88.mft
File:                     J8yUlEs4mAyi4IYqXfxE2GQEF88.mft (raw, json)
Hash identifier:          VSUgvISHebNEBux7lp5H40rwmbfJnyUiFuvRv24BRDs=
Subject key identifier:   E0:D7:A1:39:A8:56:E3:8C:EB:8A:9F:5C:8B:99:E1:0D:2F:7D:C7:0E
Authority key identifier: 27:CC:94:94:4B:38:98:0C:A2:E0:86:2A:5D:FC:44:D8:64:04:17:CF
Certificate issuer:       /CN=F3698401AF/serialNumber=27CC94944B38980CA2E0862A5DFC44D8640417CF
Certificate serial:       0474
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/J8yUlEs4mAyi4IYqXfxE2GQEF88.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3698401/FDAB9DBCD53211EDA1D50A99F1222468/J8yUlEs4mAyi4IYqXfxE2GQEF88.mft
Manifest number:          0473
Signing time:             Fri 17 Apr 2026 03:21:08 +0000
Manifest this update:     Fri 17 Apr 2026 03:21:07 +0000
Manifest next update:     Sun 19 Apr 2026 03:21:07 +0000
Files and hashes:         1: J8yUlEs4mAyi4IYqXfxE2GQEF88.crl (hash: mhOlBdJnyYUp/IZFRsCD7cbAg34TVxOd2saXnb+N6ek=)
                          2: 35441182D53311ED963F8F99F1222468.roa (hash: gr96mVOMzkU8Q9PplUdoOUbnlh56hiVDAqPFQPickwU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3698401/FDAB9DBCD53211EDA1D50A99F1222468/J8yUlEs4mAyi4IYqXfxE2GQEF88.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3698401/FDAB9DBCD53211EDA1D50A99F1222468/J8yUlEs4mAyi4IYqXfxE2GQEF88.mft
                          rsync://rpki.afrinic.net/repository/afrinic/J8yUlEs4mAyi4IYqXfxE2GQEF88.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 03:21:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1140 (0x474)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3698401AF, serialNumber=27CC94944B38980CA2E0862A5DFC44D8640417CF
        Validity
            Not Before: Apr 17 03:21:07 2026 GMT
            Not After : Apr 19 03:21:07 2026 GMT
        Subject: CN=69e1a724-26e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9e:2e:ea:d5:98:2a:f8:71:30:ba:67:21:1c:
                    9a:19:b4:7d:66:e0:fc:97:5f:c8:93:26:04:8a:77:
                    5c:2a:89:60:06:9a:d2:b4:53:3f:d2:ea:04:e5:95:
                    d1:9d:8b:5c:57:c4:ca:a2:06:ac:70:23:90:32:f2:
                    8e:31:b8:2f:f0:32:a3:3a:de:49:05:2e:d3:ea:b4:
                    9d:3e:c9:dd:80:e7:8d:4e:e9:14:a6:6c:19:1c:17:
                    2e:63:b8:78:2a:b0:62:41:ab:4d:9c:07:ef:17:db:
                    b8:1e:49:42:f0:6c:e0:b4:f5:65:76:18:88:30:1b:
                    6f:f0:88:b0:d2:21:81:e5:f9:1f:0d:e7:25:31:e8:
                    52:1f:59:44:0a:68:cf:8f:34:fc:08:e6:d1:fb:08:
                    f5:5b:ad:28:69:73:fb:eb:1b:e1:cd:a5:73:d3:0b:
                    a8:9c:9b:6a:4c:82:bb:51:6e:fd:3d:03:26:fc:d4:
                    03:29:5f:00:fd:42:e2:15:ca:8d:71:b2:dc:b2:53:
                    1e:56:52:5c:9b:0e:54:35:d2:80:dc:b3:ce:0d:cc:
                    9c:c8:c3:54:6a:b1:3c:1b:d0:6a:13:45:5c:00:a6:
                    43:3b:04:92:bf:76:26:9d:0b:89:a2:13:ea:b5:16:
                    21:9c:d8:ba:6c:5d:ff:48:16:87:0e:61:42:6b:04:
                    6c:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:D7:A1:39:A8:56:E3:8C:EB:8A:9F:5C:8B:99:E1:0D:2F:7D:C7:0E
            X509v3 Authority Key Identifier:
                keyid:27:CC:94:94:4B:38:98:0C:A2:E0:86:2A:5D:FC:44:D8:64:04:17:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3698401/FDAB9DBCD53211EDA1D50A99F1222468/J8yUlEs4mAyi4IYqXfxE2GQEF88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/J8yUlEs4mAyi4IYqXfxE2GQEF88.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3698401/FDAB9DBCD53211EDA1D50A99F1222468/J8yUlEs4mAyi4IYqXfxE2GQEF88.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:86:b6:9a:6b:a6:43:87:af:28:61:30:52:25:3f:1b:83:28:
         dd:b3:aa:82:e4:22:0d:17:c0:c2:2a:bb:04:f9:56:e9:16:8b:
         84:bc:da:16:51:6c:0a:64:89:0d:42:52:da:f5:b2:0d:68:9c:
         27:84:1d:80:7c:06:78:4c:e9:62:b2:20:fb:30:4c:6f:08:7a:
         3d:40:1b:45:3c:1b:1a:1a:78:ba:9d:c1:dd:de:d7:5f:d8:6c:
         8a:f4:93:07:a5:ce:3b:e3:a6:81:55:e8:b0:f9:70:ba:4a:ba:
         36:c8:ba:cd:d7:6c:b6:c4:c4:aa:86:df:3a:46:79:7d:26:00:
         76:24:4f:26:f0:5c:38:60:d6:a1:a9:69:69:59:66:ed:42:a7:
         38:b6:6a:92:98:43:c7:6f:62:ac:a6:73:06:13:a8:44:40:b8:
         a9:ac:2e:8c:51:49:04:dd:79:18:ce:e0:09:47:80:8f:b4:ea:
         be:b2:8c:3c:5b:90:41:0e:54:65:42:fe:1e:48:b1:91:b9:bd:
         95:ce:68:7f:fa:91:b6:ea:97:82:86:1b:6b:ea:fd:a1:08:8b:
         19:fa:3c:1b:3a:ba:b9:ed:6c:21:55:52:f9:cd:ce:d6:1a:bd:
         94:1b:cf:3a:4a:8d:c8:3b:8a:8c:a0:cd:bb:84:13:7e:54:6f:
         cd:30:cc:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 05:00:25 2026 by rpki-client