Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.mft
File:                     QS0Z-aThegTQm63JAqsLCQgk6tc.mft (raw, json)
Hash identifier:          Awq/vpxb+X73yVdlKszqWlNp6S5SDno2XHbEl+5YeKc=
Subject key identifier:   69:49:D7:70:F5:22:4A:AB:CF:D1:9A:60:C8:5A:BF:95:DD:9B:AC:C1
Authority key identifier: 41:2D:19:F9:A4:E1:7A:04:D0:9B:AD:C9:02:AB:0B:09:08:24:EA:D7
Certificate issuer:       /CN=F36FFD1EAF/serialNumber=412D19F9A4E17A04D09BADC902AB0B090824EAD7
Certificate serial:       0FD9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QS0Z-aThegTQm63JAqsLCQgk6tc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.mft
Manifest number:          0FD7
Signing time:             Sat 13 Jun 2026 00:52:56 +0000
Manifest this update:     Sat 13 Jun 2026 00:52:56 +0000
Manifest next update:     Mon 15 Jun 2026 00:52:56 +0000
Files and hashes:         1: QS0Z-aThegTQm63JAqsLCQgk6tc.crl (hash: owLXMinhWpguci1EM0aS4Ds5JqpQHCTaIwcrKY3fRvk=)
                          2: 353655B83FCC11F1922821BFCE1D38B0.roa (hash: IRSZKYkm7LcuUToOhHCRKBS+q6X69O13ur9lhLNv9xs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/QS0Z-aThegTQm63JAqsLCQgk6tc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 15 Jun 2026 00:07:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4057 (0xfd9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FFD1EAF, serialNumber=412D19F9A4E17A04D09BADC902AB0B090824EAD7
        Validity
            Not Before: Jun 13 00:52:56 2026 GMT
            Not After : Jun 15 00:52:56 2026 GMT
        Subject: CN=6a2ca9e8-ba84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:5c:72:5d:44:31:6d:5c:a4:14:51:55:ca:34:
                    45:c2:ac:64:bf:d1:79:f8:90:42:5b:af:14:a2:9e:
                    7f:1b:78:cd:48:20:8d:81:52:b6:d2:da:ac:fa:71:
                    5f:af:8a:29:e0:c2:b7:9a:7d:74:37:3c:95:35:eb:
                    b6:bc:54:f0:62:1b:8c:81:7a:44:74:5c:c3:cf:19:
                    e2:bb:71:c7:87:0b:74:54:06:aa:94:0a:00:7d:96:
                    b3:06:b7:5d:bd:53:08:f9:53:a9:40:ec:4c:2e:25:
                    b4:b8:34:23:ba:ec:d2:a0:18:18:fc:ec:89:ac:43:
                    ec:56:90:c9:11:13:f3:8a:7c:a9:e1:d9:60:02:6e:
                    c7:a5:78:02:c1:8b:b4:6e:87:ee:97:b4:b9:5a:a8:
                    7f:eb:c1:17:03:14:eb:fa:d3:c2:0d:ac:98:32:a4:
                    65:ab:31:ed:25:00:1b:c3:0f:78:a3:54:93:80:1c:
                    d9:a1:72:bd:27:ec:5a:3c:a4:87:57:c8:50:02:2e:
                    ed:5d:a2:85:e0:7a:f3:1f:e6:e5:02:3e:09:f7:1c:
                    4a:08:17:65:9b:2f:9d:03:13:fa:03:06:32:ad:fd:
                    80:76:f5:16:75:c2:d8:11:e5:e7:ff:72:23:96:05:
                    c0:e8:cf:b2:a1:33:eb:2c:3f:42:d4:a3:dc:2b:f5:
                    c0:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:49:D7:70:F5:22:4A:AB:CF:D1:9A:60:C8:5A:BF:95:DD:9B:AC:C1
            X509v3 Authority Key Identifier:
                keyid:41:2D:19:F9:A4:E1:7A:04:D0:9B:AD:C9:02:AB:0B:09:08:24:EA:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QS0Z-aThegTQm63JAqsLCQgk6tc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:50:a0:cb:77:8d:15:9c:97:51:12:d4:96:f3:48:5b:6d:b1:
         13:39:6a:c8:e2:22:97:e9:ce:4b:8b:98:fd:9e:6c:18:66:94:
         54:8a:6e:a4:57:45:64:ea:74:6a:2c:7d:39:a0:b8:b3:2c:d3:
         94:a6:a5:ec:48:a6:8f:f8:c1:f3:15:3b:d2:0b:37:99:01:1b:
         33:8c:c5:c4:91:96:f9:05:3c:a9:77:e3:ad:ad:67:cc:5c:d3:
         66:4d:14:c1:41:6c:24:44:d2:58:dd:fb:20:2d:95:2c:37:d1:
         21:98:9b:78:3d:d5:32:b2:8a:1f:d0:64:70:65:c5:f4:5a:55:
         f2:d4:32:19:82:37:71:00:e9:35:5f:5c:2d:99:ef:25:7f:bd:
         d7:17:b8:45:13:c4:9d:09:58:db:df:dd:70:13:93:18:1e:ed:
         32:66:72:c2:99:1e:b6:65:34:82:d2:3d:9c:cd:dd:2f:e1:4a:
         b2:2d:c0:70:b9:e4:79:6b:f2:31:03:ab:db:50:35:17:1a:38:
         52:7e:8a:83:fd:20:8e:d6:cc:26:af:69:8d:1e:3c:ee:31:bb:
         22:33:24:dc:13:73:aa:3c:36:9e:84:35:19:14:1a:06:c0:99:
         25:32:74:5a:3f:18:96:55:ea:99:cb:2a:40:c8:3f:9e:aa:e3:
         3a:87:cd:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 04:33:59 2026 by rpki-client