Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/KyRChIF0qoiURpp3m5_X2klYxmk.mft
File:                     KyRChIF0qoiURpp3m5_X2klYxmk.mft (raw, json)
Hash identifier:          g1AiECAfdSzAeX33XWbmFzzwKkX1inzpyiwuHgESNaQ=
Subject key identifier:   E1:D7:7D:DA:72:39:9B:87:F1:72:DE:E7:7F:95:2D:21:9C:17:2F:97
Authority key identifier: 2B:24:42:84:81:74:AA:88:94:46:9A:77:9B:9F:D7:DA:49:58:C6:69
Certificate issuer:       /CN=F361D299AF/serialNumber=2B2442848174AA8894469A779B9FD7DA4958C669
Certificate serial:       0FF2
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/KyRChIF0qoiURpp3m5_X2klYxmk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/KyRChIF0qoiURpp3m5_X2klYxmk.mft
Manifest number:          0FE4
Signing time:             Fri 24 Jul 2026 00:55:55 +0000
Manifest this update:     Fri 24 Jul 2026 00:55:54 +0000
Manifest next update:     Sun 26 Jul 2026 00:55:54 +0000
Files and hashes:         1: KyRChIF0qoiURpp3m5_X2klYxmk.crl (hash: mY1axfBwoNJJHew9dV+Qm9lvVzIwBeU5MJzOPHTL030=)
                          2: 7C0BFD26F4F511EFB3E4B9B5762E951A.roa (hash: 5wXs7RMJiyud6JyXFkR1o4z/jMZs+dRUug3mlkais2g=)
                          3: 603F44FEF4F511EF825958B5762E951A.roa (hash: Ba8AFZPMa3HGsyKURqI70r5EW0Munyy3hZ7Nh86XhXk=)
                          4: BE403084F2A411EFA60BB451762E951A.roa (hash: ia48RiXRj/TS/ZIH2z01yABB9uM5rlXdHXcHKIZJfs4=)
                          5: E5D310BCF2A411EF9A7E2652762E951A.roa (hash: ZQkJvtNfrwoPVbwO+rTZ+tWRmqiD9tIx3HghRCOVm/Y=)
                          6: CAFDB41AD1C211F0A9C2D38DDAE4EC9C.roa (hash: otkoUIeVC07ZHogmrq0P3r+9c9Hq45HdG/7TPnP6EBo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/KyRChIF0qoiURpp3m5_X2klYxmk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/KyRChIF0qoiURpp3m5_X2klYxmk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/KyRChIF0qoiURpp3m5_X2klYxmk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 26 Jul 2026 00:07:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4082 (0xff2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361D299AF, serialNumber=2B2442848174AA8894469A779B9FD7DA4958C669
        Validity
            Not Before: Jul 24 00:55:54 2026 GMT
            Not After : Jul 26 00:55:54 2026 GMT
        Subject: CN=6a62b81b-fd25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:2d:10:9b:38:bc:88:85:42:b1:e8:61:a3:9c:
                    78:2c:28:45:fb:f6:a3:c6:3f:b9:23:ef:80:e3:64:
                    6a:82:1e:2b:f3:1f:1e:96:81:c6:7c:65:90:ee:3f:
                    c2:80:6f:46:0b:bc:97:6b:73:64:a2:f9:9f:06:a3:
                    f4:76:6f:15:0a:17:72:a4:50:d6:53:63:81:78:b2:
                    dd:55:e1:69:28:00:c2:ac:58:fb:59:bc:bc:db:5e:
                    6e:ad:9b:63:f5:46:8e:26:47:28:da:ce:dd:73:df:
                    81:d4:70:26:23:a8:e3:db:c8:76:3c:1d:f8:fe:04:
                    42:bc:0d:d0:1c:2f:97:ed:c4:64:15:3c:51:5e:fb:
                    cc:69:0b:35:2a:72:37:b2:3a:50:89:2b:0d:5e:5d:
                    f2:c2:68:6b:23:ca:54:5e:c8:1e:61:17:26:a7:11:
                    00:3b:b2:5d:60:24:12:27:c8:8f:c2:df:89:09:7f:
                    6e:c4:14:6f:c1:69:ac:fc:82:45:c1:32:c9:37:cf:
                    35:da:bb:29:e0:6f:90:e9:90:a3:e9:95:31:e3:8d:
                    63:a4:d0:14:54:a7:98:b9:ec:d0:a9:fe:fa:fc:f5:
                    52:4e:88:37:ad:8a:6f:43:82:a3:a1:09:f4:0d:83:
                    58:ae:5a:d8:87:c6:f3:04:db:fc:71:57:4c:94:81:
                    52:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:D7:7D:DA:72:39:9B:87:F1:72:DE:E7:7F:95:2D:21:9C:17:2F:97
            X509v3 Authority Key Identifier:
                keyid:2B:24:42:84:81:74:AA:88:94:46:9A:77:9B:9F:D7:DA:49:58:C6:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/KyRChIF0qoiURpp3m5_X2klYxmk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KyRChIF0qoiURpp3m5_X2klYxmk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/KyRChIF0qoiURpp3m5_X2klYxmk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:83:df:cd:cb:86:c1:ba:be:ec:30:f5:51:25:b3:58:c2:9f:
         e0:65:c7:ae:66:7e:70:99:dd:2e:b6:64:4f:95:92:b5:b0:e0:
         a6:03:b9:fe:2b:f7:56:ed:e1:33:97:4a:ae:b0:8b:99:34:1b:
         f4:25:9b:33:ab:0f:b4:83:b4:44:81:8c:b6:fc:ad:14:67:29:
         c1:6d:be:e1:5d:82:2f:84:ea:28:27:aa:3b:86:57:a8:2c:34:
         db:b5:1e:db:06:fc:e7:5e:13:eb:5a:ea:3b:34:bc:03:3b:5e:
         bf:16:a3:8d:94:8b:f0:94:a5:96:9b:eb:1f:77:71:2d:5a:b4:
         7c:78:dc:d0:22:72:90:48:30:52:aa:cc:fe:4d:53:e2:ec:57:
         51:3f:47:02:99:6a:28:69:86:0e:c3:a9:7f:59:86:ef:f4:32:
         7a:8c:73:f5:8a:84:44:c7:bf:a9:8a:22:75:ae:f3:29:e2:c8:
         a9:cb:9a:25:8c:d3:d2:30:f4:23:36:ef:c8:1a:13:9b:0e:dd:
         98:18:9a:08:8c:71:c7:cb:31:16:79:d8:95:16:f9:b6:5c:13:
         5b:11:1b:45:09:87:f6:d8:bd:3c:c1:3a:10:4e:05:8d:72:96:
         83:3f:95:db:2f:c5:ae:ed:5d:bf:8f:17:88:0a:b4:8e:47:50:
         c5:73:e7:f2
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICD/IwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MUQyOTlBRjExMC8GA1UEBRMoMkIyNDQyODQ4MTc0QUE4ODk0NDY5QTc3OUI5RkQ3
REE0OTU4QzY2OTAeFw0yNjA3MjQwMDU1NTRaFw0yNjA3MjYwMDU1NTRaMBgxFjAU
BgNVBAMTDTZhNjJiODFiLWZkMjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCsLRCbOLyIhUKx6GGjnHgsKEX79qPGP7kj74DjZGqCHivzHx6WgcZ8ZZDu
P8KAb0YLvJdrc2Si+Z8Go/R2bxUKF3KkUNZTY4F4st1V4WkoAMKsWPtZvLzbXm6t
m2P1Ro4mRyjazt1z34HUcCYjqOPbyHY8Hfj+BEK8DdAcL5ftxGQVPFFe+8xpCzUq
cjeyOlCJKw1eXfLCaGsjylReyB5hFyanEQA7sl1gJBInyI/C34kJf27EFG/Baaz8
gkXBMsk3zzXauyngb5DpkKPplTHjjWOk0BRUp5i57NCp/vr89VJOiDetim9DgqOh
CfQNg1iuWtiHxvME2/xxV0yUgVIFAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU4dd9
2nI5m4fxct7nf5UtIZwXL5cwHwYDVR0jBBgwFoAUKyRChIF0qoiURpp3m5/X2klY
xmkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjFEMjk5LzQ4RjAwOEQ4NTZENTExRTU4NDVFRjg1Q0Y4QUVBMjI4L0t5UkNo
SUYwcW9pVVJwcDNtNV9YMmtsWXhtay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0t5UkNoSUYwcW9pVVJwcDNtNV9YMmtsWXhtay5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MUQyOTkvNDhGMDA4RDg1NkQ1MTFFNTg0NUVGODVDRjhB
RUEyMjgvS3lSQ2hJRjBxb2lVUnBwM201X1gya2xZeG1rLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBEg9/Ny4bBur7sMPVRJbNYwp/gZceu
Zn5wmd0utmRPlZK1sOCmA7n+K/dW7eEzl0qusIuZNBv0JZszqw+0g7REgYy2/K0U
ZynBbb7hXYIvhOooJ6o7hleoLDTbtR7bBvznXhPrWuo7NLwDO16/FqONlIvwlKWW
m+sfd3EtWrR8eNzQInKQSDBSqsz+TVPi7FdRP0cCmWooaYYOw6l/WYbv9DJ6jHP1
ioREx7+piiJ1rvMp4sipy5oljNPSMPQjNu/IGhObDt2YGJoIjHHHyzEWediVFvm2
XBNbERtFCYf22L08wToQTgWNcpaDP5XbL8Wu7V2/jxeICrSOR1DFc+fy
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:13:53 2026 by rpki-client