Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FC4AA/43A969D46DFC11F08A39DCC1DAE4EC9C/dUkJrgeKY-ifABHj0kq7f951hnc.mft
File:                     dUkJrgeKY-ifABHj0kq7f951hnc.mft (raw, json)
Hash identifier:          Metfs3ljxLV398vRBvvNXUi0iUwpbhWpGDr39BFqHl4=
Subject key identifier:   9D:C9:26:45:1C:55:83:06:1B:A8:E1:A4:48:9E:0F:B4:7F:B7:A3:49
Authority key identifier: 75:49:09:AE:07:8A:63:E8:9F:00:11:E3:D2:4A:BB:7F:DE:75:86:77
Certificate issuer:       /CN=F36FC4AAAF/serialNumber=754909AE078A63E89F0011E3D24ABB7FDE758677
Certificate serial:       0171
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/dUkJrgeKY-ifABHj0kq7f951hnc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FC4AA/43A969D46DFC11F08A39DCC1DAE4EC9C/dUkJrgeKY-ifABHj0kq7f951hnc.mft
Manifest number:          0170
Signing time:             Tue 28 Jul 2026 05:03:33 +0000
Manifest this update:     Tue 28 Jul 2026 05:03:33 +0000
Manifest next update:     Thu 30 Jul 2026 05:03:33 +0000
Files and hashes:         1: dUkJrgeKY-ifABHj0kq7f951hnc.crl (hash: JB7Hd4B/GpgZG3PotmcgF3RhhkSdkA4Xw2RJRLMt0hs=)
                          2: 433EBDCA6DFF11F0AA2AADD3DAE4EC9C.roa (hash: A3nkp4rPy53u0Z5Ms+sfzKlD65yMF9PSrDUFPQ1Fzco=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FC4AA/43A969D46DFC11F08A39DCC1DAE4EC9C/dUkJrgeKY-ifABHj0kq7f951hnc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FC4AA/43A969D46DFC11F08A39DCC1DAE4EC9C/dUkJrgeKY-ifABHj0kq7f951hnc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/dUkJrgeKY-ifABHj0kq7f951hnc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 30 Jul 2026 05:03:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 369 (0x171)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FC4AAAF, serialNumber=754909AE078A63E89F0011E3D24ABB7FDE758677
        Validity
            Not Before: Jul 28 05:03:33 2026 GMT
            Not After : Jul 30 05:03:33 2026 GMT
        Subject: CN=6a683825-0b75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:15:39:ab:b8:36:d5:7f:b4:23:ff:b9:94:7f:
                    1b:04:8d:cd:1a:58:46:5f:b7:42:e5:cf:3c:b2:43:
                    d7:d0:ab:30:7f:82:3f:39:d5:3e:46:ba:21:53:d7:
                    06:bd:5a:02:74:08:3b:de:b6:f9:c8:7a:e6:19:1f:
                    9a:2e:99:ab:47:5f:e8:34:62:f6:86:c7:25:91:41:
                    ad:c9:07:ce:49:cc:7a:c8:98:0f:ae:a4:f4:c2:7e:
                    25:fa:de:64:d0:6e:1a:c3:40:17:20:09:49:23:09:
                    0f:cc:0f:a9:91:42:7a:e1:e7:be:30:9b:ca:27:6b:
                    f3:4a:a1:55:19:41:c2:87:74:48:d3:ba:f7:7f:10:
                    e1:a6:28:38:f2:a5:86:ec:54:69:88:cc:3b:2e:99:
                    5e:b9:09:9a:89:72:de:65:6c:14:e7:f8:62:6d:f2:
                    87:8e:b3:87:70:85:51:96:4b:7b:69:40:9d:5a:14:
                    bb:3e:04:82:90:b0:d1:dc:27:ec:3c:f1:50:d9:99:
                    90:6c:9a:21:5e:5d:e2:18:dd:5a:22:18:f1:5a:33:
                    2f:8c:88:52:32:8a:39:b4:51:1b:63:dd:54:6f:03:
                    e8:20:ed:38:52:92:90:ef:51:30:81:ec:f7:65:34:
                    6f:87:37:68:7e:ee:79:1d:9c:9a:af:c5:1a:97:69:
                    89:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:C9:26:45:1C:55:83:06:1B:A8:E1:A4:48:9E:0F:B4:7F:B7:A3:49
            X509v3 Authority Key Identifier:
                keyid:75:49:09:AE:07:8A:63:E8:9F:00:11:E3:D2:4A:BB:7F:DE:75:86:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FC4AA/43A969D46DFC11F08A39DCC1DAE4EC9C/dUkJrgeKY-ifABHj0kq7f951hnc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/dUkJrgeKY-ifABHj0kq7f951hnc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FC4AA/43A969D46DFC11F08A39DCC1DAE4EC9C/dUkJrgeKY-ifABHj0kq7f951hnc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:99:4a:eb:f0:cf:8d:aa:ed:21:1f:8d:09:62:ee:1b:4d:d4:
         60:c5:4d:11:ec:4c:7a:b4:b4:02:c7:1a:0d:60:f8:06:44:aa:
         ad:5a:fc:7b:09:b5:5e:98:2b:f1:9a:47:03:79:56:f9:d6:0f:
         d2:0e:17:b7:d9:c4:c7:59:d6:ad:0e:82:88:18:5a:8d:3e:97:
         22:69:1b:6c:c1:c1:75:f5:ba:36:00:42:e4:ee:c1:9c:66:7f:
         9c:d5:8d:73:5e:2a:ad:30:f4:ca:5a:e4:9f:33:4f:4e:da:bb:
         12:8f:d3:28:ac:19:1f:73:ff:25:9a:b1:74:16:b8:66:45:5a:
         24:36:b1:42:59:3d:b6:ed:cd:e6:33:dd:ce:53:cd:8e:d8:3e:
         f4:76:c7:9a:16:51:b5:04:07:55:df:d9:e1:a7:f4:06:87:f2:
         59:e1:a6:ca:31:3c:f5:35:a5:cf:6f:71:e5:c1:bd:65:0d:9c:
         f4:86:5b:9d:5f:cd:30:8c:7c:d4:f9:6b:b3:f6:44:a5:cd:71:
         2a:f2:f7:ce:af:6a:4b:eb:3e:4a:82:c2:0f:6e:cc:a8:ad:d4:
         9c:e2:d4:34:10:4f:b0:28:9d:1a:e5:5c:35:5c:5f:0f:8e:c3:
         43:9d:cb:a1:fe:b1:bb:60:16:2f:b8:47:bf:43:a6:bf:ba:dd:
         21:66:1a:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:05:48 2026 by rpki-client