Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36185D8/1C1348B45BD711EFAF2C3D5E762E951A/ZNS8Pq2RmuikZzKVELUgQYUzXFI.mft
File:                     ZNS8Pq2RmuikZzKVELUgQYUzXFI.mft (raw, json)
Hash identifier:          7nwB4JfS1X5kd5f2S9CI+UWJ5m54io5rg5oo0xndbdk=
Subject key identifier:   5A:A0:69:6D:89:15:49:32:34:38:2B:FD:9F:F0:35:53:21:15:5B:8D
Authority key identifier: 64:D4:BC:3E:AD:91:9A:E8:A4:67:32:95:10:B5:20:41:85:33:5C:52
Certificate issuer:       /CN=F36185D8AF/serialNumber=64D4BC3EAD919AE8A467329510B5204185335C52
Certificate serial:       02D9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ZNS8Pq2RmuikZzKVELUgQYUzXFI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36185D8/1C1348B45BD711EFAF2C3D5E762E951A/ZNS8Pq2RmuikZzKVELUgQYUzXFI.mft
Manifest number:          02D7
Signing time:             Fri 24 Jul 2026 04:24:27 +0000
Manifest this update:     Fri 24 Jul 2026 04:24:26 +0000
Manifest next update:     Sun 26 Jul 2026 04:24:26 +0000
Files and hashes:         1: ZNS8Pq2RmuikZzKVELUgQYUzXFI.crl (hash: b4BsmgYOZFsrbp3RL5ChlLSAQZPzFBod8Zfl0CAWcPc=)
                          2: 17AC05D05BD811EF91C62F65762E951A.roa (hash: pGO0PAidVvZBgK+RWqWHGbvgRG1IKwi6oTcbF8OQHYY=)
                          3: B721857E274011F1B7B4A1AADAE4EC9C.roa (hash: M0E9A+YM5acTInIiLhaKFro4wGaQNKUlchNWtwILkCU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36185D8/1C1348B45BD711EFAF2C3D5E762E951A/ZNS8Pq2RmuikZzKVELUgQYUzXFI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36185D8/1C1348B45BD711EFAF2C3D5E762E951A/ZNS8Pq2RmuikZzKVELUgQYUzXFI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ZNS8Pq2RmuikZzKVELUgQYUzXFI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 26 Jul 2026 00:07:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 729 (0x2d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36185D8AF, serialNumber=64D4BC3EAD919AE8A467329510B5204185335C52
        Validity
            Not Before: Jul 24 04:24:26 2026 GMT
            Not After : Jul 26 04:24:26 2026 GMT
        Subject: CN=6a62e8fa-9a51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:7e:2d:98:3f:d0:d4:54:4b:57:28:2a:06:76:
                    1b:22:c7:3f:ec:f9:81:de:fd:95:cb:94:e3:bf:10:
                    40:77:b3:54:71:d2:4b:74:a9:fd:d2:62:13:d0:ea:
                    94:42:b5:e4:07:bf:99:3a:54:d4:30:45:97:d3:d5:
                    1b:16:eb:47:a1:93:21:87:b0:8c:c8:f3:ca:a3:2b:
                    2d:85:0b:e9:2d:05:0d:d6:c9:44:bc:b4:01:e9:19:
                    b0:9c:85:90:2f:35:8c:31:29:71:5d:37:ac:b6:9b:
                    64:45:c0:2d:56:32:62:cf:48:a6:aa:fa:9b:7a:dd:
                    8e:a8:bb:7a:20:a9:8e:b7:17:2f:85:6f:fd:2d:13:
                    40:ef:e3:8f:35:38:7a:38:ff:3f:c7:b9:62:83:30:
                    9f:92:61:e0:b7:f2:21:16:11:60:8b:f5:49:5e:c6:
                    a9:c3:4e:57:06:17:bf:93:f6:cd:03:44:42:57:bd:
                    db:3b:d2:f6:a5:9c:75:2e:a5:6a:ed:07:12:22:29:
                    72:00:9e:c5:6f:c7:c1:6c:71:17:4a:a2:30:f9:45:
                    0f:da:6a:77:74:b8:eb:e5:0e:aa:cd:c7:41:78:66:
                    51:3a:f3:9f:69:14:70:c8:27:7d:7f:aa:93:90:9e:
                    79:71:d7:30:e5:47:32:5e:d9:f8:75:ca:58:87:c4:
                    b1:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:A0:69:6D:89:15:49:32:34:38:2B:FD:9F:F0:35:53:21:15:5B:8D
            X509v3 Authority Key Identifier:
                keyid:64:D4:BC:3E:AD:91:9A:E8:A4:67:32:95:10:B5:20:41:85:33:5C:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36185D8/1C1348B45BD711EFAF2C3D5E762E951A/ZNS8Pq2RmuikZzKVELUgQYUzXFI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ZNS8Pq2RmuikZzKVELUgQYUzXFI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36185D8/1C1348B45BD711EFAF2C3D5E762E951A/ZNS8Pq2RmuikZzKVELUgQYUzXFI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:5b:6e:19:1e:22:5a:a8:41:47:a1:5a:0c:db:cf:9e:2d:0b:
         38:20:6f:54:9b:1d:23:4d:f7:89:31:4e:08:21:0d:09:6c:cf:
         3a:64:3f:47:8d:c9:05:b4:26:05:d7:64:3b:77:b1:35:68:21:
         8d:52:a0:e6:5d:f8:52:6c:20:a3:84:34:99:47:d0:38:05:19:
         42:f1:1d:a9:63:10:89:14:25:08:ee:51:4e:6c:a2:b9:e3:74:
         7a:02:e9:37:45:26:f3:4d:24:02:dc:e2:e7:07:c5:fa:f6:f7:
         37:ee:f3:ef:31:a8:c9:0c:08:31:ae:87:bf:c2:67:32:11:d5:
         22:2f:28:79:02:d7:3b:91:7e:06:29:e7:c9:a8:66:a1:e8:8a:
         6e:cd:4a:9e:a9:5b:14:a4:aa:bc:12:3a:52:a9:c0:3c:88:72:
         3e:23:c5:5b:26:08:be:6a:d7:4e:0e:c7:85:3d:1c:40:5b:b7:
         f5:bc:e6:6e:68:4d:fb:11:b6:54:50:ec:7f:49:6f:43:9a:f0:
         05:3b:32:99:af:bb:a5:ed:c1:69:1f:f3:0b:76:a5:77:e3:e6:
         79:4a:54:54:1a:eb:d8:c2:fe:90:5c:02:d7:95:ad:43:e2:11:
         4c:57:2c:c5:98:d3:fb:b8:39:0a:79:cd:51:24:bf:f3:e9:e3:
         bf:ec:3f:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:42:45 2026 by rpki-client