Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DF2C0/D50D7F0E5A0311EFABD2477A762E951A/ksDdANVwLjkO0njypv3Heeq3uoo.mft
File:                     ksDdANVwLjkO0njypv3Heeq3uoo.mft (raw, json)
Hash identifier:          q0z2PTHKevN5n3wx9YlOItuaebhvfnMyhcAoTA7JymU=
Subject key identifier:   EA:F5:BE:B6:1D:57:25:E9:40:7D:B5:EE:B2:C9:2A:D3:CC:E5:4B:16
Authority key identifier: 92:C0:DD:00:D5:70:2E:39:0E:D2:78:F2:A6:FD:C7:79:EA:B7:BA:8A
Certificate issuer:       /CN=F36DF2C0AF/serialNumber=92C0DD00D5702E390ED278F2A6FDC779EAB7BA8A
Certificate serial:       02AB
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ksDdANVwLjkO0njypv3Heeq3uoo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DF2C0/D50D7F0E5A0311EFABD2477A762E951A/ksDdANVwLjkO0njypv3Heeq3uoo.mft
Manifest number:          02AA
Signing time:             Fri 12 Jun 2026 04:23:19 +0000
Manifest this update:     Fri 12 Jun 2026 04:23:18 +0000
Manifest next update:     Sun 14 Jun 2026 04:23:18 +0000
Files and hashes:         1: ksDdANVwLjkO0njypv3Heeq3uoo.crl (hash: 9juMWsKmjY7Q23ec7l1l1uBPXe2AmF3ZfeIEfYf+zro=)
                          2: 66FDD6885A0A11EFBC9CDBA8762E951A.roa (hash: aVnUgk3NY8yjcG/DFLWQpoxsTPLV3bCNwJvFvS9FExw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DF2C0/D50D7F0E5A0311EFABD2477A762E951A/ksDdANVwLjkO0njypv3Heeq3uoo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DF2C0/D50D7F0E5A0311EFABD2477A762E951A/ksDdANVwLjkO0njypv3Heeq3uoo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ksDdANVwLjkO0njypv3Heeq3uoo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 14 Jun 2026 04:23:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 683 (0x2ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DF2C0AF, serialNumber=92C0DD00D5702E390ED278F2A6FDC779EAB7BA8A
        Validity
            Not Before: Jun 12 04:23:18 2026 GMT
            Not After : Jun 14 04:23:18 2026 GMT
        Subject: CN=6a2b89b7-f5eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:11:9a:af:36:5c:8a:1d:18:65:6d:33:fd:9d:
                    43:06:14:69:cb:46:a4:6f:7e:d3:88:36:2d:2f:0f:
                    a4:20:2c:bb:98:4f:40:59:e8:58:b7:0e:02:35:ad:
                    53:b1:27:17:3b:a3:20:9f:92:99:b9:5d:f1:a9:24:
                    db:21:00:00:45:6d:6f:0d:c1:be:cc:98:71:e2:a9:
                    37:f6:44:70:1f:7b:10:fb:35:d0:dd:45:5f:1a:65:
                    fc:0f:43:a1:64:37:d3:c3:3b:c2:11:ad:30:53:fd:
                    75:1c:f2:94:3d:94:5b:85:0b:ab:69:aa:67:99:56:
                    b1:1f:21:67:88:f6:01:67:c9:91:93:3f:3c:61:85:
                    75:b8:c2:6b:6c:61:f0:55:a9:e2:5f:71:df:a7:59:
                    44:13:57:40:c2:92:3d:41:a8:b1:c8:69:b8:19:01:
                    6c:0f:1d:a3:9f:a9:79:21:ae:cf:79:85:69:6c:55:
                    29:f0:c8:77:62:3a:70:85:7e:11:64:f2:bd:38:35:
                    5d:88:ae:58:e5:01:91:03:41:ca:6a:ae:b3:6e:f3:
                    c0:61:4b:98:51:50:ce:0d:9d:4b:4a:2d:dd:48:90:
                    93:55:74:d1:f3:dd:b7:6d:78:48:62:06:b0:75:20:
                    21:b3:bb:de:5e:f8:aa:d8:2c:14:72:9b:d7:05:9a:
                    22:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:F5:BE:B6:1D:57:25:E9:40:7D:B5:EE:B2:C9:2A:D3:CC:E5:4B:16
            X509v3 Authority Key Identifier:
                keyid:92:C0:DD:00:D5:70:2E:39:0E:D2:78:F2:A6:FD:C7:79:EA:B7:BA:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DF2C0/D50D7F0E5A0311EFABD2477A762E951A/ksDdANVwLjkO0njypv3Heeq3uoo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ksDdANVwLjkO0njypv3Heeq3uoo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DF2C0/D50D7F0E5A0311EFABD2477A762E951A/ksDdANVwLjkO0njypv3Heeq3uoo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:ba:35:32:6c:b5:fd:14:a4:72:8f:07:e0:39:fe:3a:86:d6:
         f7:8c:2a:e2:77:dd:bc:d3:fb:1e:35:73:f1:50:68:ba:8b:47:
         7c:14:10:b2:44:de:b8:32:d0:92:b8:15:a5:4f:96:ad:5f:7c:
         66:70:6e:74:74:92:50:22:96:73:e0:76:4a:aa:9e:3e:02:7f:
         be:ca:d5:6f:07:d9:49:3f:c5:26:cf:31:56:fa:4d:c3:bf:0c:
         e6:19:a2:66:78:79:4d:27:1c:57:7d:27:be:7b:45:72:c3:3e:
         cf:72:66:d2:3c:03:9a:b7:7e:a5:39:ec:c3:0f:49:50:03:98:
         cc:e6:fd:96:eb:04:b1:d5:03:32:d2:a8:74:6d:07:cc:ff:01:
         f7:c9:5b:ad:17:37:da:cf:92:95:7b:50:19:79:c3:4e:05:09:
         da:f7:83:8d:db:af:cc:bf:55:c7:bc:66:e6:e0:9c:69:a1:28:
         88:40:25:cb:40:eb:63:e8:8c:03:a7:14:57:e9:7a:dc:b6:08:
         c3:0d:8a:c4:ec:7a:4e:f1:82:5f:40:ea:27:44:4f:3d:5f:af:
         ce:9d:be:66:0f:8d:d5:98:e4:71:36:22:31:5a:de:a0:8c:c7:
         19:8a:8e:7f:f2:fd:1e:f0:23:8e:69:eb:ad:cd:41:41:75:1d:
         2d:49:66:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 04:33:49 2026 by rpki-client