Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3698401/FDAB9DBCD53211EDA1D50A99F1222468/J8yUlEs4mAyi4IYqXfxE2GQEF88.mft
File:                     J8yUlEs4mAyi4IYqXfxE2GQEF88.mft (raw, json)
Hash identifier:          2l+4PtlvyNMb+N6mSWcMUQP8epUKDhB7LID9BSxybgo=
Subject key identifier:   35:FB:F9:45:A1:A0:77:51:18:AB:A5:42:42:22:7A:0A:0A:7B:16:64
Authority key identifier: 27:CC:94:94:4B:38:98:0C:A2:E0:86:2A:5D:FC:44:D8:64:04:17:CF
Certificate issuer:       /CN=F3698401AF/serialNumber=27CC94944B38980CA2E0862A5DFC44D8640417CF
Certificate serial:       04DB
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/J8yUlEs4mAyi4IYqXfxE2GQEF88.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3698401/FDAB9DBCD53211EDA1D50A99F1222468/J8yUlEs4mAyi4IYqXfxE2GQEF88.mft
Manifest number:          04DA
Signing time:             Tue 28 Jul 2026 03:23:03 +0000
Manifest this update:     Tue 28 Jul 2026 03:23:02 +0000
Manifest next update:     Thu 30 Jul 2026 03:23:02 +0000
Files and hashes:         1: J8yUlEs4mAyi4IYqXfxE2GQEF88.crl (hash: 5E0/axEN5X5hPkVYTytdItK+jSctWnzKiLRQ/4sItwE=)
                          2: 35441182D53311ED963F8F99F1222468.roa (hash: gr96mVOMzkU8Q9PplUdoOUbnlh56hiVDAqPFQPickwU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3698401/FDAB9DBCD53211EDA1D50A99F1222468/J8yUlEs4mAyi4IYqXfxE2GQEF88.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3698401/FDAB9DBCD53211EDA1D50A99F1222468/J8yUlEs4mAyi4IYqXfxE2GQEF88.mft
                          rsync://rpki.afrinic.net/repository/afrinic/J8yUlEs4mAyi4IYqXfxE2GQEF88.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 30 Jul 2026 03:23:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1243 (0x4db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3698401AF, serialNumber=27CC94944B38980CA2E0862A5DFC44D8640417CF
        Validity
            Not Before: Jul 28 03:23:02 2026 GMT
            Not After : Jul 30 03:23:02 2026 GMT
        Subject: CN=6a682097-3b97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f4:ec:fa:8f:82:f1:88:cb:48:4a:da:36:bc:
                    99:44:bd:1b:84:47:ad:30:49:25:04:78:7a:22:e6:
                    b5:59:47:e8:87:31:ac:0a:5d:f2:00:5e:39:e8:26:
                    eb:93:5d:fd:29:22:78:28:c0:af:1b:09:55:2f:2c:
                    33:3e:dd:52:ac:ac:a4:41:04:90:56:09:ab:d3:e9:
                    0e:10:2f:53:3e:d7:44:f3:53:da:87:66:73:8d:5b:
                    85:8f:88:e3:61:81:ba:0d:22:41:91:ba:46:93:a7:
                    e2:5d:09:89:73:92:1b:a9:96:7b:2b:76:b7:a9:f6:
                    d3:6e:de:1b:e6:a0:ce:fd:0c:12:a5:4b:b0:46:02:
                    2d:f1:f7:6f:6a:6f:59:69:1b:d8:b2:91:ce:7e:70:
                    26:2e:0b:48:09:a9:27:4e:42:f9:7c:b0:25:80:e4:
                    fd:6d:a4:c9:e6:73:1d:a6:1d:cd:1e:23:6a:97:d0:
                    8d:ca:e3:93:76:c6:8f:f0:cc:32:b1:62:8a:e4:af:
                    15:99:2c:41:3d:0b:10:61:71:ab:6e:bf:d7:3d:81:
                    b7:87:f9:09:86:ec:f9:f3:7b:28:f5:5f:b2:e5:1c:
                    85:7d:10:69:17:15:07:a9:c3:2b:55:46:db:5d:f3:
                    d2:90:b9:5c:b8:02:18:1f:4a:28:f4:9b:b3:fa:23:
                    f6:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:FB:F9:45:A1:A0:77:51:18:AB:A5:42:42:22:7A:0A:0A:7B:16:64
            X509v3 Authority Key Identifier:
                keyid:27:CC:94:94:4B:38:98:0C:A2:E0:86:2A:5D:FC:44:D8:64:04:17:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3698401/FDAB9DBCD53211EDA1D50A99F1222468/J8yUlEs4mAyi4IYqXfxE2GQEF88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/J8yUlEs4mAyi4IYqXfxE2GQEF88.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3698401/FDAB9DBCD53211EDA1D50A99F1222468/J8yUlEs4mAyi4IYqXfxE2GQEF88.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:d6:40:9c:d9:b1:0a:d9:18:17:85:9f:60:15:20:7c:58:6c:
         e6:1c:52:ce:ef:4f:68:e7:5d:69:6f:dd:99:08:f9:68:d7:1e:
         9b:06:cc:4a:d5:26:0d:d7:85:e2:84:a1:2a:c1:67:be:34:46:
         5c:67:fc:ed:5c:0a:d3:ce:fb:56:3f:e8:ad:f6:c5:aa:76:2d:
         50:ed:d2:07:1c:10:cc:7a:9d:33:2b:14:10:8f:07:83:8e:0f:
         03:e2:da:bb:21:1b:12:ad:61:9e:e8:a7:36:67:e8:d7:6a:a6:
         b5:61:16:bb:2a:b4:7f:6e:d2:86:f7:f7:2f:4a:73:ff:5f:a1:
         bf:cd:e1:50:bc:09:ba:cc:08:d1:5a:4f:5f:58:0f:92:49:60:
         4b:14:5c:4d:1e:c7:80:e0:aa:38:45:4a:16:77:35:f3:fc:19:
         e2:15:ed:1b:67:f5:26:fa:f8:6a:44:32:cb:a1:ad:29:91:05:
         6d:e3:66:18:89:12:62:09:63:35:9e:47:4d:6d:3d:5e:5e:c7:
         4c:88:47:64:0b:84:b5:67:9d:08:cc:14:aa:c6:62:b4:13:9a:
         5a:64:f2:3f:f0:f1:89:58:ed:8a:c1:33:a5:25:5e:60:d6:2e:
         9b:80:f6:94:fa:12:dd:33:1f:27:58:2e:2c:77:82:c7:55:ac:
         04:32:bb:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:41:49 2026 by rpki-client