Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3624132/8BFBD952D1AC11EFA5D11655762E951A/ksorQe7D4BoZOJ4iIIisP8OhSO0.mft
File:                     ksorQe7D4BoZOJ4iIIisP8OhSO0.mft (raw, json)
Hash identifier:          SBs4jZVifUwuprc4c5cVE+CX5eKu2RvEKWDfhEZteec=
Subject key identifier:   46:68:34:D5:AB:F8:D6:3E:97:7B:3E:04:E5:1D:58:E2:04:7C:1F:D8
Authority key identifier: 92:CA:2B:41:EE:C3:E0:1A:19:38:9E:22:20:88:AC:3F:C3:A1:48:ED
Certificate issuer:       /CN=F3624132AF/serialNumber=92CA2B41EEC3E01A19389E222088AC3FC3A148ED
Certificate serial:       0238
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ksorQe7D4BoZOJ4iIIisP8OhSO0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3624132/8BFBD952D1AC11EFA5D11655762E951A/ksorQe7D4BoZOJ4iIIisP8OhSO0.mft
Manifest number:          0236
Signing time:             Fri 24 Jul 2026 04:42:57 +0000
Manifest this update:     Fri 24 Jul 2026 04:42:57 +0000
Manifest next update:     Sun 26 Jul 2026 04:42:57 +0000
Files and hashes:         1: ksorQe7D4BoZOJ4iIIisP8OhSO0.crl (hash: vW/WUCfZKxapm0XHvTGOi+0GjUbpMwr1r+pBWiDi0AI=)
                          2: 2C6E0438D1B111EFAE9F9072762E951A.roa (hash: B0CbiM/bAowuKqrYGTi8MxK8c+r/1xQQXbcFOdolRIY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3624132/8BFBD952D1AC11EFA5D11655762E951A/ksorQe7D4BoZOJ4iIIisP8OhSO0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3624132/8BFBD952D1AC11EFA5D11655762E951A/ksorQe7D4BoZOJ4iIIisP8OhSO0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ksorQe7D4BoZOJ4iIIisP8OhSO0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 26 Jul 2026 00:07:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 568 (0x238)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3624132AF, serialNumber=92CA2B41EEC3E01A19389E222088AC3FC3A148ED
        Validity
            Not Before: Jul 24 04:42:57 2026 GMT
            Not After : Jul 26 04:42:57 2026 GMT
        Subject: CN=6a62ed51-ace2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:bf:76:a4:f4:4f:a7:98:3f:f8:35:f1:c8:d7:
                    91:b6:c8:94:3f:ec:4d:8f:9a:da:8e:3c:b4:bf:1e:
                    cf:3e:95:42:08:2c:15:d4:79:5d:36:bc:ca:a8:c0:
                    db:2f:72:7f:3f:c5:d5:01:9f:fe:27:ce:e8:12:62:
                    0a:95:26:86:00:92:bf:eb:b6:a2:3e:6e:ef:4e:2c:
                    68:69:58:a7:8c:4e:17:08:f8:4e:b2:82:aa:bd:22:
                    b6:bc:5d:d0:20:08:a1:ab:2e:89:9d:c8:d7:c6:ce:
                    c4:fe:78:e5:90:a8:eb:79:ce:10:16:d9:27:a7:65:
                    ab:9f:09:93:5e:d7:cc:f7:d4:85:71:0c:35:c9:69:
                    31:6d:9d:e9:54:35:68:cf:9e:40:4c:8c:fd:63:8c:
                    ee:64:08:73:4b:33:ee:ae:5d:43:91:5a:bc:0a:ff:
                    a1:35:40:b6:06:ce:fb:01:66:2e:fd:0c:88:8a:a0:
                    58:7b:4b:20:f1:f4:ce:1b:dc:00:79:45:cd:09:24:
                    72:81:e1:c7:11:58:8d:eb:f5:62:9b:ff:76:d9:91:
                    e4:91:58:97:10:26:29:9c:ca:4a:5d:06:78:31:d6:
                    ae:20:70:3d:86:54:87:29:e3:d0:ef:0d:aa:64:ab:
                    a8:c5:b2:c0:b2:b9:ec:1d:73:ce:b3:d2:b8:b8:77:
                    60:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:68:34:D5:AB:F8:D6:3E:97:7B:3E:04:E5:1D:58:E2:04:7C:1F:D8
            X509v3 Authority Key Identifier:
                keyid:92:CA:2B:41:EE:C3:E0:1A:19:38:9E:22:20:88:AC:3F:C3:A1:48:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3624132/8BFBD952D1AC11EFA5D11655762E951A/ksorQe7D4BoZOJ4iIIisP8OhSO0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ksorQe7D4BoZOJ4iIIisP8OhSO0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3624132/8BFBD952D1AC11EFA5D11655762E951A/ksorQe7D4BoZOJ4iIIisP8OhSO0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:e0:fe:4a:5a:d3:d9:10:f1:1f:2b:e6:87:2b:23:1b:78:40:
         5b:a2:33:81:ad:3b:60:ff:39:76:23:67:99:5d:f9:17:0f:39:
         f2:05:3c:cd:17:df:79:ef:9c:58:e0:72:9f:04:4d:8c:a6:d0:
         e0:43:55:5b:ac:4c:82:e0:df:7b:a6:77:7a:80:29:eb:bd:ab:
         ba:9c:ad:60:f5:8f:ee:cf:31:5e:bd:00:e0:17:75:df:c2:b9:
         0f:6c:f6:df:3c:3a:56:e1:5f:b8:47:2c:ec:f6:47:46:f4:44:
         23:6d:47:0d:3e:d4:ef:33:a0:8f:8e:3b:b7:44:4b:70:c7:11:
         41:04:fa:1d:ae:05:95:c7:ab:1b:d5:3c:74:f5:d2:4f:b5:f1:
         f1:5f:97:44:d3:e2:25:0b:de:74:0a:f2:16:1a:37:53:12:8d:
         31:99:72:33:e7:d1:09:9b:11:3e:28:e1:b5:87:1c:35:7e:fb:
         8b:06:18:b1:00:26:93:c4:3a:66:e2:e6:bb:80:c3:4a:20:db:
         76:0a:82:af:6a:23:76:7d:e8:9d:32:cd:83:4a:e4:42:12:1f:
         fb:43:51:68:7b:00:f7:35:2b:1f:19:3f:58:07:10:bb:ff:1f:
         b2:64:15:ec:63:dd:e6:94:4e:11:68:06:9b:f9:2f:07:75:c5:
         b0:d3:b4:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:26:05 2026 by rpki-client