Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F5D39/2624B8A482E011EEB87E50264AD9E6FC/9quAr34JmFsP46OzgjMPLIk1jNg.mft
File:                     9quAr34JmFsP46OzgjMPLIk1jNg.mft (raw, json)
Hash identifier:          pS/STCFu0DE3NgjWCIcmWteNY4N/+4TTnb476SuzWFM=
Subject key identifier:   1E:90:15:63:D7:87:41:81:50:70:53:BD:9F:4E:CF:67:85:2B:F2:97
Authority key identifier: F6:AB:80:AF:7E:09:98:5B:0F:E3:A3:B3:82:33:0F:2C:89:35:8C:D8
Certificate issuer:       /CN=F36F5D39AF/serialNumber=F6AB80AF7E09985B0FE3A3B382330F2C89358CD8
Certificate serial:       038B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/9quAr34JmFsP46OzgjMPLIk1jNg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F5D39/2624B8A482E011EEB87E50264AD9E6FC/9quAr34JmFsP46OzgjMPLIk1jNg.mft
Manifest number:          038B
Signing time:             Fri 17 Apr 2026 03:48:26 +0000
Manifest this update:     Fri 17 Apr 2026 03:48:26 +0000
Manifest next update:     Sun 19 Apr 2026 03:48:26 +0000
Files and hashes:         1: 9quAr34JmFsP46OzgjMPLIk1jNg.crl (hash: za8QVRFtagJqOnNrWWxwoSJQQifbhRqoAGfhUQ73VEI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F5D39/2624B8A482E011EEB87E50264AD9E6FC/9quAr34JmFsP46OzgjMPLIk1jNg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F5D39/2624B8A482E011EEB87E50264AD9E6FC/9quAr34JmFsP46OzgjMPLIk1jNg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/9quAr34JmFsP46OzgjMPLIk1jNg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 907 (0x38b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F5D39AF, serialNumber=F6AB80AF7E09985B0FE3A3B382330F2C89358CD8
        Validity
            Not Before: Apr 17 03:48:26 2026 GMT
            Not After : Apr 19 03:48:26 2026 GMT
        Subject: CN=69e1ad8a-af20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:3c:48:d1:4a:a6:18:f5:3b:a6:b5:a2:99:a0:
                    dd:20:13:57:79:de:df:de:b8:d4:b6:68:ac:9b:2d:
                    28:8b:11:ca:24:f9:54:79:a6:62:a1:53:86:f4:55:
                    73:63:79:b5:fb:0a:f3:ae:c7:03:21:5a:eb:7d:8f:
                    6b:06:92:0e:1f:4c:33:9f:2c:2a:5f:57:30:fc:ba:
                    b8:31:f8:a3:87:5d:b2:89:f2:d1:09:e7:f6:9a:4b:
                    7f:7b:69:3f:50:1e:1c:ac:46:61:a3:39:07:37:3f:
                    8f:b1:f4:04:d2:e5:99:64:4a:57:31:cb:bf:f3:d3:
                    af:c5:4d:f8:93:d6:3e:0d:45:74:46:a9:e5:40:c6:
                    bc:57:3e:e5:66:f5:45:1a:a1:4b:00:7d:2e:b4:28:
                    8d:8b:da:cc:14:87:3e:e9:fb:c1:70:be:55:80:a3:
                    e4:46:7e:24:c3:d0:f2:2f:63:24:f8:87:44:08:b3:
                    6e:4c:ac:f5:2d:11:d4:43:37:86:0b:44:ba:e8:00:
                    93:f5:a8:27:34:fb:b2:c1:be:11:06:0e:e7:8e:b4:
                    ee:7d:18:5c:57:30:7e:f2:6e:92:5b:1f:64:d1:ff:
                    23:f6:6d:7d:d0:a7:9b:6b:42:a4:3e:00:5a:79:5b:
                    34:4c:d5:d4:0e:6a:b7:4c:d9:e7:3e:ae:8b:37:94:
                    4f:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:90:15:63:D7:87:41:81:50:70:53:BD:9F:4E:CF:67:85:2B:F2:97
            X509v3 Authority Key Identifier:
                keyid:F6:AB:80:AF:7E:09:98:5B:0F:E3:A3:B3:82:33:0F:2C:89:35:8C:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F5D39/2624B8A482E011EEB87E50264AD9E6FC/9quAr34JmFsP46OzgjMPLIk1jNg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9quAr34JmFsP46OzgjMPLIk1jNg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F5D39/2624B8A482E011EEB87E50264AD9E6FC/9quAr34JmFsP46OzgjMPLIk1jNg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:64:b3:d4:71:d2:73:f8:95:92:8d:cc:d3:c1:96:85:18:3f:
         42:df:d1:da:fd:97:0e:39:ac:5d:2c:39:c3:36:e6:95:47:c4:
         5d:20:fb:53:c3:56:44:3a:7e:d3:ff:2d:0b:01:dc:f5:4b:2f:
         f4:6a:f8:6f:95:af:61:58:82:ae:e3:75:01:64:6c:62:7b:6c:
         ce:09:f3:f7:a4:af:6c:e4:cb:39:2f:30:cf:6c:8d:84:94:c9:
         96:da:51:f5:d5:bd:a2:0f:69:b1:81:17:1f:ad:37:a5:f6:6c:
         2f:51:22:5b:30:a4:19:6d:2d:b4:fc:fd:cb:c8:f6:02:5d:e2:
         38:c3:4e:e5:3c:1a:26:43:9f:41:06:63:97:7b:58:9c:b9:18:
         1f:34:df:e5:69:37:3b:a3:f6:33:07:7c:f1:f2:a6:df:15:d6:
         31:f7:38:d3:92:47:d2:00:eb:77:a0:a1:63:2a:73:43:bb:5c:
         1e:23:a7:88:21:fb:86:a9:58:9a:c9:ea:ed:68:a0:ac:81:62:
         4f:67:a3:71:cc:9d:8b:7a:9f:01:8a:9d:41:21:bb:b5:fe:bd:
         a1:da:3b:75:92:10:d4:20:ab:99:cb:bd:af:59:4b:28:a1:1d:
         94:b9:d3:8f:a8:6e:e0:96:ba:21:f1:cc:33:d4:1b:3a:ee:14:
         b5:64:40:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:24:10 2026 by rpki-client