Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C2BF2/DABAB87E19EC11EFBCBF5E2C017001B1/-4Xgjl27Bclbe9Dafl_m_OOYJv8.mft
File:                     -4Xgjl27Bclbe9Dafl_m_OOYJv8.mft (raw, json)
Hash identifier:          146kmjjgVfNvTV5SHJwMcGNPJAc5VwBxGwC5A+8PJ2I=
Subject key identifier:   63:E8:8A:FA:7F:BF:26:B9:67:EE:69:15:59:49:AC:75:9D:04:04:EB
Authority key identifier: FB:85:E0:8E:5D:BB:05:C9:5B:7B:D0:DA:7E:5F:E6:FC:E3:98:26:FF
Certificate issuer:       /CN=F36C2BF2AF/serialNumber=FB85E08E5DBB05C95B7BD0DA7E5FE6FCE39826FF
Certificate serial:       0343
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/-4Xgjl27Bclbe9Dafl_m_OOYJv8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/DABAB87E19EC11EFBCBF5E2C017001B1/-4Xgjl27Bclbe9Dafl_m_OOYJv8.mft
Manifest number:          0337
Signing time:             Tue 28 Jul 2026 04:12:51 +0000
Manifest this update:     Tue 28 Jul 2026 04:12:51 +0000
Manifest next update:     Thu 30 Jul 2026 04:12:51 +0000
Files and hashes:         1: -4Xgjl27Bclbe9Dafl_m_OOYJv8.crl (hash: 4QGVsiMOGMMGiHhKJ+6ctLCMn6uf/YhAKNickRSQPg4=)
                          2: 440AE6387FC211EFACAB56B8762E951A.roa (hash: Rbkyo5rELKFe+Cn1UL0BmEWDgHbqtqW4Mc1h5Ma1xWM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/DABAB87E19EC11EFBCBF5E2C017001B1/-4Xgjl27Bclbe9Dafl_m_OOYJv8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/DABAB87E19EC11EFBCBF5E2C017001B1/-4Xgjl27Bclbe9Dafl_m_OOYJv8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/-4Xgjl27Bclbe9Dafl_m_OOYJv8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 30 Jul 2026 04:12:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 835 (0x343)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C2BF2AF, serialNumber=FB85E08E5DBB05C95B7BD0DA7E5FE6FCE39826FF
        Validity
            Not Before: Jul 28 04:12:51 2026 GMT
            Not After : Jul 30 04:12:51 2026 GMT
        Subject: CN=6a682c43-3a03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:fd:5f:7e:6d:0f:f3:25:d7:2d:3c:a8:90:21:
                    42:8f:66:3f:d7:6d:52:b6:b1:ab:e5:e9:5e:a4:dd:
                    43:a2:26:1b:c3:5f:52:83:86:eb:aa:85:40:ff:aa:
                    0c:3f:5d:cf:3d:04:2f:41:e2:69:ee:06:30:99:bd:
                    0e:b9:4a:c0:dd:b3:40:1d:fa:52:87:4c:90:cc:ab:
                    4f:bc:2c:8c:92:7c:3a:52:e1:4b:8c:66:f3:d5:00:
                    d3:a1:1a:60:af:dd:7f:3b:da:13:03:62:59:9b:69:
                    56:6c:94:b6:03:db:97:64:6f:b4:83:df:52:25:8c:
                    ed:48:d9:bf:98:36:88:55:8a:fa:ce:3a:c7:70:8e:
                    c7:34:ae:1c:f8:64:50:d1:5b:dc:ed:d5:5d:f7:74:
                    3a:77:43:f1:56:f4:ab:15:9f:0a:0e:6a:61:ba:f0:
                    83:4d:cd:45:28:45:f4:54:78:b0:83:60:d2:1c:22:
                    73:fa:67:43:b2:f1:47:3d:04:f8:3c:d2:29:8a:6a:
                    e9:70:a8:8c:47:75:10:1b:3f:71:09:5f:55:04:cb:
                    92:ca:c6:53:bf:a7:47:aa:c8:bb:86:e4:30:43:8c:
                    1c:e5:5f:f3:12:3f:e2:f4:be:3a:f3:bf:95:b1:a9:
                    5e:04:62:00:1c:3f:9c:c6:0b:59:fb:07:78:5d:85:
                    0a:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:E8:8A:FA:7F:BF:26:B9:67:EE:69:15:59:49:AC:75:9D:04:04:EB
            X509v3 Authority Key Identifier:
                keyid:FB:85:E0:8E:5D:BB:05:C9:5B:7B:D0:DA:7E:5F:E6:FC:E3:98:26:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/DABAB87E19EC11EFBCBF5E2C017001B1/-4Xgjl27Bclbe9Dafl_m_OOYJv8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-4Xgjl27Bclbe9Dafl_m_OOYJv8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/DABAB87E19EC11EFBCBF5E2C017001B1/-4Xgjl27Bclbe9Dafl_m_OOYJv8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:4f:10:3d:42:60:df:28:8c:6c:b4:25:3a:ba:d1:49:4e:a1:
         89:96:79:2b:35:4b:d2:3d:f5:2b:23:84:02:e6:10:31:94:93:
         72:82:28:6f:1b:29:e1:ae:59:d4:3a:a0:29:fe:8a:19:4a:38:
         79:0e:c1:2f:6c:ce:19:a0:37:3b:28:de:6d:bc:ed:d4:4c:32:
         a3:96:03:e4:0b:de:82:da:37:6e:ea:dc:37:0a:4d:59:91:63:
         79:e6:7b:5e:f9:ab:d4:73:08:32:94:98:db:36:79:b9:07:90:
         1f:ae:22:21:bd:42:59:ca:62:66:ed:1a:18:88:6e:8e:02:45:
         40:d4:62:95:bb:74:24:74:98:d6:75:fe:67:03:16:3d:d3:fa:
         be:83:7f:b2:3d:a5:8b:56:a2:46:db:bb:29:52:6e:69:9e:d1:
         d5:98:15:ed:44:57:63:97:ea:16:97:49:fe:a4:19:44:b4:03:
         df:de:66:30:9e:7a:75:e4:e3:3a:2d:c2:aa:39:71:b9:e6:a5:
         ac:75:72:a4:7d:0f:95:88:2b:2f:0f:07:b7:50:3d:57:bd:2b:
         bd:07:f7:8a:20:9a:c8:d2:cf:05:cf:3c:a3:5e:fc:45:8b:6a:
         4e:fd:43:e5:55:b0:34:a2:ab:5d:67:e0:eb:64:61:b1:aa:b8:
         18:33:45:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:44:20 2026 by rpki-client