Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FB1A3/3C789C6ED12611ECB70663DDF1222468/xfjkPM0fcvciuyN0u3q9C4iwVz8.mft
File:                     xfjkPM0fcvciuyN0u3q9C4iwVz8.mft (raw, json)
Hash identifier:          6tsZlSSLYy+1djmrysA31MuPsOMFQwFfOAoqsf7KOVs=
Subject key identifier:   62:E2:43:4E:E2:E0:70:56:58:2B:5F:83:04:C7:BF:E4:62:68:21:53
Authority key identifier: C5:F8:E4:3C:CD:1F:72:F7:22:BB:23:74:BB:7A:BD:0B:88:B0:57:3F
Certificate issuer:       /CN=F36FB1A3AF/serialNumber=C5F8E43CCD1F72F722BB2374BB7ABD0B88B0573F
Certificate serial:       062B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/xfjkPM0fcvciuyN0u3q9C4iwVz8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FB1A3/3C789C6ED12611ECB70663DDF1222468/xfjkPM0fcvciuyN0u3q9C4iwVz8.mft
Manifest number:          062B
Signing time:             Tue 28 Jul 2026 02:44:10 +0000
Manifest this update:     Tue 28 Jul 2026 02:44:09 +0000
Manifest next update:     Thu 30 Jul 2026 02:44:09 +0000
Files and hashes:         1: xfjkPM0fcvciuyN0u3q9C4iwVz8.crl (hash: aEXJJjnmGLSOjcKgHdfPC3LSHvJbucywG60lc7eA5Oc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FB1A3/3C789C6ED12611ECB70663DDF1222468/xfjkPM0fcvciuyN0u3q9C4iwVz8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FB1A3/3C789C6ED12611ECB70663DDF1222468/xfjkPM0fcvciuyN0u3q9C4iwVz8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/xfjkPM0fcvciuyN0u3q9C4iwVz8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 30 Jul 2026 02:44:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1579 (0x62b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FB1A3AF, serialNumber=C5F8E43CCD1F72F722BB2374BB7ABD0B88B0573F
        Validity
            Not Before: Jul 28 02:44:09 2026 GMT
            Not After : Jul 30 02:44:09 2026 GMT
        Subject: CN=6a68177a-b4f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c3:9e:61:46:21:d7:2c:de:85:cf:73:fe:86:
                    62:36:af:47:43:ba:d2:dd:78:5b:d4:51:0d:da:00:
                    46:b3:64:28:c6:48:6a:0b:01:dd:56:f6:6a:8c:a2:
                    28:84:12:76:1d:d3:5e:93:6e:1a:28:d6:cd:9c:1d:
                    b0:05:e4:c6:b9:f4:fc:bb:3e:ea:89:fe:2d:f8:bf:
                    cc:c7:5d:42:2c:d9:14:67:df:3e:b6:d3:ac:62:00:
                    79:b6:5b:a0:6c:73:dc:38:28:3d:48:b7:6e:82:0e:
                    75:e5:f8:f8:d0:a8:6d:47:7f:63:33:ae:c1:18:b4:
                    e0:a9:f2:0d:48:96:b1:3a:3c:65:7c:b5:11:b8:ea:
                    37:3c:f2:f8:66:ea:b8:32:18:6e:35:d9:6a:4b:86:
                    7f:a0:90:51:88:47:c3:71:b5:69:c1:cc:7f:77:8f:
                    2c:3a:0a:d6:05:4b:8b:d5:69:af:49:2c:d5:e5:10:
                    b0:83:e9:fb:b2:61:72:69:7a:03:ee:e4:7b:63:86:
                    af:24:8d:cc:5e:65:9c:28:3a:ee:62:9b:0d:23:fd:
                    a8:5b:07:96:5f:11:83:80:7e:1d:a4:25:e9:83:94:
                    6c:c5:15:dd:c9:91:c1:29:18:22:74:32:29:ce:9f:
                    88:58:03:10:04:4f:c9:ba:bc:75:2a:ec:01:cb:ad:
                    a5:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:E2:43:4E:E2:E0:70:56:58:2B:5F:83:04:C7:BF:E4:62:68:21:53
            X509v3 Authority Key Identifier:
                keyid:C5:F8:E4:3C:CD:1F:72:F7:22:BB:23:74:BB:7A:BD:0B:88:B0:57:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FB1A3/3C789C6ED12611ECB70663DDF1222468/xfjkPM0fcvciuyN0u3q9C4iwVz8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xfjkPM0fcvciuyN0u3q9C4iwVz8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FB1A3/3C789C6ED12611ECB70663DDF1222468/xfjkPM0fcvciuyN0u3q9C4iwVz8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:fc:56:b6:4d:44:fc:69:b9:6a:dd:28:c8:9c:b3:d4:50:fc:
         00:0e:8d:3f:35:57:3a:42:d6:5e:cf:d8:8a:38:70:09:11:59:
         c2:d4:c6:9e:f6:13:73:e4:a5:4a:de:e8:84:9f:09:76:8c:81:
         7b:a2:86:87:5d:10:b9:3c:cd:f3:18:2a:16:8c:c8:bc:06:ed:
         0a:54:94:ca:80:82:05:61:5e:a9:af:43:23:60:de:b2:c4:09:
         93:f0:f1:8e:b3:7e:1a:d9:66:6c:20:42:5e:3a:b2:8d:38:5b:
         d0:a8:53:26:ee:51:69:9c:07:21:b3:b0:84:80:2f:30:ce:41:
         57:f9:0f:f1:42:0d:7b:a1:06:6e:82:67:76:5f:ba:d8:bb:fe:
         43:4c:6d:4c:7a:6a:d9:5f:53:b6:61:36:29:ed:ae:36:fc:52:
         1c:e2:c6:e0:a9:7f:87:29:63:77:3b:98:13:70:65:25:bf:ae:
         df:9c:e5:5e:c3:9c:bb:25:ff:21:3e:e3:68:12:e1:db:04:8a:
         f5:40:4e:42:d6:92:97:ed:04:92:4a:7c:07:52:b7:67:9f:eb:
         84:a8:e2:ff:7b:20:aa:89:dc:98:93:d0:10:db:2d:b0:d4:d3:
         78:a2:4f:81:d6:c2:0e:9a:a2:2c:44:52:4e:95:24:db:ab:4c:
         d1:1b:ef:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:41:52 2026 by rpki-client