Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3613F08/BF472C78690511EEB09925884AD9E6FC/M-hGYU4VRCxoAFpeP85ct1bgSn8.mft
File:                     M-hGYU4VRCxoAFpeP85ct1bgSn8.mft (raw, json)
Hash identifier:          qZ1dB71MUmdASYmYW2WtQgwhMR1jtTdIzkVRt/YWufk=
Subject key identifier:   14:9A:E5:99:98:51:8C:9A:FC:45:73:AA:64:E9:B5:CD:19:08:40:D2
Authority key identifier: 33:E8:46:61:4E:15:44:2C:68:00:5A:5E:3F:CE:5C:B7:56:E0:4A:7F
Certificate issuer:       /CN=F3613F08AF/serialNumber=33E846614E15442C68005A5E3FCE5CB756E04A7F
Certificate serial:       0412
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/M-hGYU4VRCxoAFpeP85ct1bgSn8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3613F08/BF472C78690511EEB09925884AD9E6FC/M-hGYU4VRCxoAFpeP85ct1bgSn8.mft
Manifest number:          0411
Signing time:             Thu 23 Jul 2026 03:45:43 +0000
Manifest this update:     Thu 23 Jul 2026 03:45:42 +0000
Manifest next update:     Sat 25 Jul 2026 03:45:42 +0000
Files and hashes:         1: M-hGYU4VRCxoAFpeP85ct1bgSn8.crl (hash: eECSKn1AbS1s7N1VF9UTXspS72o/T5JJfKIFqA4iC7k=)
                          2: AC0A32D0690611EEB3384E8B4AD9E6FC.roa (hash: kErDXNR3ZNhWVzlb8Vo/Il2bfhwKojLKehJI3WdRMNI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3613F08/BF472C78690511EEB09925884AD9E6FC/M-hGYU4VRCxoAFpeP85ct1bgSn8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3613F08/BF472C78690511EEB09925884AD9E6FC/M-hGYU4VRCxoAFpeP85ct1bgSn8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/M-hGYU4VRCxoAFpeP85ct1bgSn8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 25 Jul 2026 03:45:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1042 (0x412)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3613F08AF, serialNumber=33E846614E15442C68005A5E3FCE5CB756E04A7F
        Validity
            Not Before: Jul 23 03:45:42 2026 GMT
            Not After : Jul 25 03:45:42 2026 GMT
        Subject: CN=6a618e67-9274
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:45:bf:a9:e4:38:ec:ce:74:d7:6b:15:db:04:
                    d8:71:75:1c:84:4e:ee:e6:f0:97:7c:f1:43:9e:2f:
                    a8:5c:b7:21:c5:e2:1b:1c:98:bf:a8:ba:33:af:fc:
                    c0:b4:3e:37:a4:c2:28:3a:cc:41:42:ba:2f:f6:00:
                    2b:6e:b3:03:a4:20:83:34:3a:c1:94:28:4f:a3:fb:
                    1b:ce:b0:75:b5:f5:fe:4e:8c:70:ff:27:00:a0:2a:
                    2e:bc:44:a0:a8:6c:ad:c8:59:0a:c9:4a:d1:fa:a6:
                    dc:d8:f8:d4:ee:44:8c:af:c0:0b:a3:4f:da:3f:f8:
                    e5:f1:46:83:c4:32:0e:85:90:46:08:18:4b:26:11:
                    5c:57:f6:2d:4c:8c:fb:dd:ee:1d:0b:2f:11:3a:8d:
                    84:c2:50:b0:d9:46:12:3c:9e:6e:66:f2:2c:33:7f:
                    89:d3:f0:85:e6:92:92:bb:e0:3a:4f:fc:54:7b:d5:
                    d8:02:fe:ed:d2:98:f1:42:75:57:cd:78:b1:bc:9b:
                    c3:17:3f:1e:24:c2:81:4b:8f:e5:7d:6f:b5:71:11:
                    37:c1:2b:92:08:dc:e8:72:a0:63:f0:b1:54:64:69:
                    a5:98:3b:bf:dd:e0:97:16:34:3a:fe:67:83:06:97:
                    c6:0c:c8:25:c8:1d:fe:c9:91:8d:09:d6:ba:d9:91:
                    f7:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:9A:E5:99:98:51:8C:9A:FC:45:73:AA:64:E9:B5:CD:19:08:40:D2
            X509v3 Authority Key Identifier:
                keyid:33:E8:46:61:4E:15:44:2C:68:00:5A:5E:3F:CE:5C:B7:56:E0:4A:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3613F08/BF472C78690511EEB09925884AD9E6FC/M-hGYU4VRCxoAFpeP85ct1bgSn8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/M-hGYU4VRCxoAFpeP85ct1bgSn8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3613F08/BF472C78690511EEB09925884AD9E6FC/M-hGYU4VRCxoAFpeP85ct1bgSn8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:17:22:ce:e9:e2:e6:e9:39:08:35:98:61:4c:c7:dc:1c:93:
         73:86:08:27:bb:f3:43:2a:de:99:60:c6:2a:e9:bf:9b:26:b9:
         3b:c9:7d:7e:4f:92:f6:17:22:80:61:c4:a6:22:43:4e:15:8c:
         55:6c:a5:a2:e2:4f:22:90:ce:e3:25:45:18:dc:fe:b3:f8:31:
         71:5a:c5:ad:59:a0:85:52:3d:2d:86:bf:99:10:61:32:70:be:
         87:12:fc:c7:c6:29:cf:27:8c:17:77:3d:3f:74:39:a8:28:1a:
         05:9c:07:85:1c:2d:8b:3b:1e:c4:05:d5:fa:d7:eb:9e:05:50:
         81:62:12:5c:4c:f4:6f:69:0c:03:fe:36:2c:4a:8c:f2:ff:e3:
         75:2c:63:0e:b2:08:f3:c4:26:06:5d:be:05:f1:df:a3:24:c7:
         41:79:c5:15:c9:0e:64:76:4a:e3:81:84:de:c1:07:46:83:94:
         06:35:f2:e0:76:da:42:4e:3a:51:d6:e9:ec:3c:84:09:45:b7:
         bb:bd:49:cd:58:85:4d:b9:27:1d:8e:2f:40:5b:4c:5d:55:5f:
         6a:0f:b5:e7:28:c8:6c:f7:e4:d0:45:3a:1b:51:f6:b8:60:25:
         dc:74:ff:2f:f8:e4:4a:12:c3:92:5b:27:7a:af:cb:2e:2b:f4:
         7e:06:a7:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:32:31 2026 by rpki-client