Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36162E8/785C504AFB4311EB8A8ABF3CD8A014CE/3YPIwAXNcQS4JubaokvJUXkImqM.mft
File:                     3YPIwAXNcQS4JubaokvJUXkImqM.mft (raw, json)
Hash identifier:          EyLvf9Yf5rkhZrLtBqrszyzuQJmD8ro/Q4CxzfOvZmw=
Subject key identifier:   A8:49:96:6A:9B:16:93:31:53:77:D3:8B:45:56:4C:43:69:21:58:EE
Authority key identifier: DD:83:C8:C0:05:CD:71:04:B8:26:E6:DA:A2:4B:C9:51:79:08:9A:A3
Certificate issuer:       /CN=F36162E8AF/serialNumber=DD83C8C005CD7104B826E6DAA24BC95179089AA3
Certificate serial:       073F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/3YPIwAXNcQS4JubaokvJUXkImqM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36162E8/785C504AFB4311EB8A8ABF3CD8A014CE/3YPIwAXNcQS4JubaokvJUXkImqM.mft
Manifest number:          073D
Signing time:             Fri 24 Jul 2026 02:20:08 +0000
Manifest this update:     Fri 24 Jul 2026 02:20:08 +0000
Manifest next update:     Sun 26 Jul 2026 02:20:08 +0000
Files and hashes:         1: 3YPIwAXNcQS4JubaokvJUXkImqM.crl (hash: SrmY94HUwZ1GkRDuR66KyPm/l/E4vFZcUukg5V/z15k=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36162E8/785C504AFB4311EB8A8ABF3CD8A014CE/3YPIwAXNcQS4JubaokvJUXkImqM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36162E8/785C504AFB4311EB8A8ABF3CD8A014CE/3YPIwAXNcQS4JubaokvJUXkImqM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/3YPIwAXNcQS4JubaokvJUXkImqM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 26 Jul 2026 00:07:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1855 (0x73f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36162E8AF, serialNumber=DD83C8C005CD7104B826E6DAA24BC95179089AA3
        Validity
            Not Before: Jul 24 02:20:08 2026 GMT
            Not After : Jul 26 02:20:08 2026 GMT
        Subject: CN=6a62cbd8-1cc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:9e:b4:67:f3:ea:c3:e9:51:ac:0b:29:72:c7:
                    6c:1f:e6:f4:a9:ae:b9:b0:4a:51:e2:ac:dc:f0:0a:
                    dc:2e:62:dd:9d:6b:ee:8d:88:c6:34:65:72:21:38:
                    d2:d9:99:ce:63:73:1d:d7:5d:55:2b:c1:30:a5:f2:
                    43:fb:e2:3e:2f:4c:13:87:88:6c:9b:7a:3f:fb:55:
                    a1:aa:eb:bd:c6:1d:52:f2:e7:9a:aa:3b:9b:59:4f:
                    3a:22:74:2a:c9:91:e0:11:a4:88:5d:16:99:8e:43:
                    7e:ff:6c:b0:bd:3f:5b:35:fe:88:87:f3:85:a3:82:
                    dc:59:64:32:be:d7:05:4d:82:03:9d:de:35:52:45:
                    55:64:e9:a3:2d:e0:20:8f:7e:0f:96:3f:9f:13:13:
                    bc:6a:73:f5:06:b1:a3:d3:a1:0a:c7:87:bc:73:b4:
                    a6:dd:a4:77:2f:60:04:f6:cd:ee:e2:f5:7f:9d:89:
                    59:82:e5:71:1a:fc:25:5e:51:1e:2b:a3:05:3a:27:
                    84:7b:c4:f3:6d:af:c9:5c:9a:f5:f6:60:cc:40:eb:
                    cf:29:fc:13:19:52:17:f5:53:30:dc:43:14:7b:5d:
                    dc:27:d5:e5:cd:f9:da:6b:04:09:21:a9:09:69:a6:
                    b1:ed:1e:99:86:ce:7b:7c:5c:a2:70:6c:57:c5:66:
                    c2:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:49:96:6A:9B:16:93:31:53:77:D3:8B:45:56:4C:43:69:21:58:EE
            X509v3 Authority Key Identifier:
                keyid:DD:83:C8:C0:05:CD:71:04:B8:26:E6:DA:A2:4B:C9:51:79:08:9A:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36162E8/785C504AFB4311EB8A8ABF3CD8A014CE/3YPIwAXNcQS4JubaokvJUXkImqM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3YPIwAXNcQS4JubaokvJUXkImqM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36162E8/785C504AFB4311EB8A8ABF3CD8A014CE/3YPIwAXNcQS4JubaokvJUXkImqM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:e3:d8:8e:8f:c7:fe:85:c0:73:c2:aa:a4:67:0e:7f:51:a6:
         30:99:0a:3d:34:43:90:66:3b:f7:4a:4f:e0:4a:c8:7a:66:f7:
         eb:fd:51:06:bc:f1:1b:2d:db:c2:0f:a0:e1:79:5f:90:68:0a:
         19:6d:b7:7d:1e:04:fc:e4:f9:8d:cc:e6:8d:ce:b8:05:f1:98:
         f6:e7:ee:05:40:b9:13:b7:56:ff:85:ab:79:56:84:eb:2a:c0:
         36:db:1e:c1:92:d6:08:c6:1b:92:fb:bb:3c:08:85:fe:ee:3a:
         1f:60:5e:80:e3:da:44:d5:75:ae:e0:71:e7:ae:76:98:41:9e:
         dc:80:68:94:a6:1c:92:e8:6b:83:f0:d4:58:5b:9d:c9:da:78:
         8f:c9:13:a3:f1:23:6c:f4:2e:da:48:c2:bd:6e:a2:a4:81:04:
         f1:77:84:f1:a6:b4:a5:16:3c:0e:67:58:6a:56:7e:a8:a0:dc:
         2b:e6:25:2c:6b:a0:18:74:17:e9:58:3d:8f:6a:72:f4:f7:7c:
         2e:f2:ec:d9:b5:34:b7:f4:3c:54:c0:1c:41:47:a0:bf:6f:d4:
         89:1e:8a:ae:23:0a:dc:ad:cf:19:bf:7f:37:4c:37:98:ef:ba:
         64:5e:36:fb:30:cf:7e:d9:01:9d:80:20:38:9f:15:02:71:74:
         bc:84:c1:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:56:30 2026 by rpki-client