Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A45F8/95187B187C1E11F0AB87CEE0DAE4EC9C/KFr00NNaAfToZi1wYXSTEwgbBW8.mft
File:                     KFr00NNaAfToZi1wYXSTEwgbBW8.mft (raw, json)
Hash identifier:          MEzJhDR0cBC40eiPD+vh2DmAFIqsUz5rJZOMkCG+bE4=
Subject key identifier:   1D:41:10:19:A2:07:DB:90:3B:49:20:24:4E:99:2C:89:4A:83:14:7A
Authority key identifier: 28:5A:F4:D0:D3:5A:01:F4:E8:66:2D:70:61:74:93:13:08:1B:05:6F
Certificate issuer:       /CN=F36A45F8AF/serialNumber=285AF4D0D35A01F4E8662D7061749313081B056F
Certificate serial:       0132
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/KFr00NNaAfToZi1wYXSTEwgbBW8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A45F8/95187B187C1E11F0AB87CEE0DAE4EC9C/KFr00NNaAfToZi1wYXSTEwgbBW8.mft
Manifest number:          0131
Signing time:             Fri 12 Jun 2026 05:05:24 +0000
Manifest this update:     Fri 12 Jun 2026 05:05:24 +0000
Manifest next update:     Sun 14 Jun 2026 05:05:24 +0000
Files and hashes:         1: KFr00NNaAfToZi1wYXSTEwgbBW8.crl (hash: 65oghWev8bZQeI3yHYJ8LYAkoU2yogrp/IpgKYJqiMI=)
                          2: C8DBFA287C1F11F0A46A9BE9DAE4EC9C.roa (hash: MEidKfzt+zEnon2K4l4j1oz0vKLVkgQvpvIBenvS0UU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A45F8/95187B187C1E11F0AB87CEE0DAE4EC9C/KFr00NNaAfToZi1wYXSTEwgbBW8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A45F8/95187B187C1E11F0AB87CEE0DAE4EC9C/KFr00NNaAfToZi1wYXSTEwgbBW8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/KFr00NNaAfToZi1wYXSTEwgbBW8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 14 Jun 2026 05:05:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 306 (0x132)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A45F8AF, serialNumber=285AF4D0D35A01F4E8662D7061749313081B056F
        Validity
            Not Before: Jun 12 05:05:24 2026 GMT
            Not After : Jun 14 05:05:24 2026 GMT
        Subject: CN=6a2b9394-4691
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:86:01:09:72:ea:67:a2:7a:e8:a5:f0:b3:d1:
                    5d:d9:92:f2:4b:8c:c6:35:a7:67:93:07:4a:60:9c:
                    34:f4:44:66:39:64:ed:54:4d:9f:0d:cc:d0:4f:2d:
                    7d:2e:5f:a8:b6:9d:7d:ce:61:69:46:9d:85:8b:e1:
                    f2:1d:be:04:38:03:41:af:f0:75:08:34:42:c6:f5:
                    a8:e7:6e:ce:cb:b9:a3:e0:c3:9b:b4:8c:59:0b:a3:
                    93:5e:f6:13:e3:23:be:7b:43:7b:92:29:dc:bf:84:
                    53:00:e4:3c:8f:41:37:3c:6a:65:d5:f0:a5:71:56:
                    16:70:63:32:44:e0:45:9c:24:43:a3:a2:62:52:48:
                    d8:8a:cd:b5:2e:ee:0c:ee:01:6d:3d:bb:84:1b:4a:
                    8e:58:55:cc:1c:48:2e:d6:cb:91:3e:df:e2:7a:b2:
                    06:12:90:25:f0:8c:0a:e3:dd:f9:92:76:48:4a:f8:
                    f0:a7:8e:49:79:68:05:65:00:c2:1a:de:63:7a:d1:
                    18:e5:ba:48:b3:af:6f:44:e1:26:ba:89:95:70:a3:
                    66:7d:79:0e:e8:e7:0e:e5:4c:77:f7:99:22:b6:4f:
                    c3:de:e5:47:11:10:ed:25:b2:06:22:ff:3f:c4:bb:
                    9c:b3:cf:5e:45:b9:6d:e1:cf:e1:53:d2:4f:a8:09:
                    3d:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:41:10:19:A2:07:DB:90:3B:49:20:24:4E:99:2C:89:4A:83:14:7A
            X509v3 Authority Key Identifier:
                keyid:28:5A:F4:D0:D3:5A:01:F4:E8:66:2D:70:61:74:93:13:08:1B:05:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A45F8/95187B187C1E11F0AB87CEE0DAE4EC9C/KFr00NNaAfToZi1wYXSTEwgbBW8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KFr00NNaAfToZi1wYXSTEwgbBW8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A45F8/95187B187C1E11F0AB87CEE0DAE4EC9C/KFr00NNaAfToZi1wYXSTEwgbBW8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:2d:e4:7e:8a:47:2c:32:2e:6f:ca:58:42:d1:66:89:bb:80:
         5a:fa:54:7b:68:c8:c8:c3:db:d6:5b:09:8f:a4:33:d9:91:fd:
         d1:60:99:8d:2b:50:4c:67:07:71:e6:0b:a6:4b:1a:a0:fe:ef:
         aa:93:e7:8c:3c:ac:d3:1e:37:0e:c6:1e:b5:bc:98:e0:c0:7f:
         48:2e:9e:7b:ef:61:89:e0:69:61:10:ae:87:45:e8:9b:08:87:
         e6:b5:83:33:d8:eb:ca:fa:23:23:6d:19:1e:5b:06:9c:e5:e8:
         a3:ab:83:98:25:ce:96:a1:06:24:d4:f5:a1:30:04:49:6b:12:
         d3:e7:76:01:70:24:e1:3c:f6:9e:57:19:1f:d2:ff:fb:f8:90:
         4c:8b:19:70:0a:a1:3b:21:06:d1:c2:73:7c:d8:58:7c:40:4c:
         ff:24:8a:59:e8:3e:47:ee:15:2c:80:ff:c8:7f:ef:92:36:f3:
         c5:f3:ee:b1:9e:ae:17:99:9c:b6:f7:82:93:6a:86:a4:1d:ee:
         1b:e9:ea:78:08:f2:c2:f2:60:ac:ca:53:83:b6:0e:27:14:74:
         08:5b:82:18:b4:ef:bb:2f:0b:ab:35:2b:45:c0:8a:3c:91:55:
         3e:77:b9:d8:26:e1:ad:28:f0:e9:c4:d9:83:ac:ea:fd:1e:98:
         f2:ec:0a:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 04:31:21 2026 by rpki-client