Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3624E32/08D6A70AEE7311ED942F54164AD9E6FC/l9Y19-2_mFQOYSLJxsIL43gotSY.mft
File:                     l9Y19-2_mFQOYSLJxsIL43gotSY.mft (raw, json)
Hash identifier:          6gpM2v0pUgwwzAv/XRAR2IfCzixeS9+ZauyrJoYzF0g=
Subject key identifier:   88:BC:EB:44:7A:30:49:5B:E4:74:11:40:98:78:28:F0:40:A3:C7:DE
Authority key identifier: 97:D6:35:F7:ED:BF:98:54:0E:61:22:C9:C6:C2:0B:E3:78:28:B5:26
Certificate issuer:       /CN=F3624E32AF/serialNumber=97D635F7EDBF98540E6122C9C6C20BE37828B526
Certificate serial:       04B3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/l9Y19-2_mFQOYSLJxsIL43gotSY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3624E32/08D6A70AEE7311ED942F54164AD9E6FC/l9Y19-2_mFQOYSLJxsIL43gotSY.mft
Manifest number:          04B2
Signing time:             Fri 24 Jul 2026 03:24:36 +0000
Manifest this update:     Fri 24 Jul 2026 03:24:35 +0000
Manifest next update:     Sun 26 Jul 2026 03:24:35 +0000
Files and hashes:         1: l9Y19-2_mFQOYSLJxsIL43gotSY.crl (hash: ZwQLx+/8X4Zy0cdUBIG7P5I///Nrr9OwsJ6VCHyYv0U=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3624E32/08D6A70AEE7311ED942F54164AD9E6FC/l9Y19-2_mFQOYSLJxsIL43gotSY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3624E32/08D6A70AEE7311ED942F54164AD9E6FC/l9Y19-2_mFQOYSLJxsIL43gotSY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/l9Y19-2_mFQOYSLJxsIL43gotSY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 26 Jul 2026 00:07:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1203 (0x4b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3624E32AF, serialNumber=97D635F7EDBF98540E6122C9C6C20BE37828B526
        Validity
            Not Before: Jul 24 03:24:35 2026 GMT
            Not After : Jul 26 03:24:35 2026 GMT
        Subject: CN=6a62daf4-93cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c0:d3:c1:9b:65:6b:f5:5c:f6:c3:59:78:c9:
                    ab:dd:d6:0b:e2:5e:f3:7a:c6:41:4a:ee:28:75:7b:
                    91:8a:a9:7f:8f:62:e3:66:72:0c:12:a8:de:a9:73:
                    c9:7d:51:1a:34:c3:5d:86:5c:f6:d9:d4:79:db:69:
                    0b:1d:e1:93:45:83:17:52:de:cd:06:f3:cd:04:06:
                    8c:77:89:35:9f:b1:aa:f6:d3:32:55:1b:10:be:53:
                    2b:68:98:51:ed:63:41:c0:16:30:a1:7b:a8:7e:5f:
                    e6:6c:34:0e:1b:ae:81:b6:0f:2a:2e:17:ca:79:dd:
                    cb:94:94:2d:f0:5a:75:0a:21:80:d5:02:a2:9f:cc:
                    3d:e3:18:c7:8a:7a:0a:78:1b:e6:9d:f3:a7:a4:56:
                    ad:b6:a3:c1:95:58:3c:d4:16:8e:fd:ba:70:79:ea:
                    09:ae:46:7e:2f:4c:6d:ac:3d:c5:e0:c2:0d:2a:f9:
                    15:6f:f7:74:02:0a:64:64:87:7d:d1:28:4e:d2:52:
                    71:6b:5a:e2:53:b7:dc:c4:f1:31:61:79:f5:cd:4f:
                    82:54:20:4e:b3:07:a7:ea:c1:1c:d0:2f:46:e9:4f:
                    1a:24:95:91:1d:76:6e:cd:df:91:72:46:11:15:6b:
                    5b:ff:96:46:c4:86:a4:88:eb:6a:ea:7e:d3:db:9f:
                    97:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:BC:EB:44:7A:30:49:5B:E4:74:11:40:98:78:28:F0:40:A3:C7:DE
            X509v3 Authority Key Identifier:
                keyid:97:D6:35:F7:ED:BF:98:54:0E:61:22:C9:C6:C2:0B:E3:78:28:B5:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3624E32/08D6A70AEE7311ED942F54164AD9E6FC/l9Y19-2_mFQOYSLJxsIL43gotSY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l9Y19-2_mFQOYSLJxsIL43gotSY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3624E32/08D6A70AEE7311ED942F54164AD9E6FC/l9Y19-2_mFQOYSLJxsIL43gotSY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:b7:0c:42:e3:d9:f9:7c:86:f6:d9:24:71:64:57:d9:85:72:
         3d:58:f7:b0:9c:dd:28:cd:b2:61:4f:e4:31:c3:4b:45:b1:c1:
         1a:ba:10:65:21:3d:66:9c:7e:71:06:a6:a7:e7:d1:36:23:31:
         a6:25:8b:5c:c4:a6:75:60:aa:98:65:e7:c4:50:ed:75:77:41:
         a0:de:4f:49:01:cc:f5:f5:69:be:2d:8e:d8:51:26:b3:ad:a4:
         42:cd:38:60:4b:08:be:79:47:38:70:6b:73:86:b3:39:09:11:
         4f:c5:ea:52:cb:99:0b:6e:a6:92:e2:2e:8f:b5:fe:23:f6:37:
         9d:d6:06:10:fc:b9:b2:37:59:38:a9:26:46:39:03:9f:0b:c5:
         7d:60:3d:10:02:fa:d4:1d:07:73:a7:26:59:05:ea:d2:e6:bd:
         17:d3:61:f0:de:86:9b:01:34:b0:e5:c6:58:32:aa:33:0f:90:
         35:80:54:cb:05:0a:bb:8d:e6:eb:13:b9:17:92:be:ce:c8:35:
         24:db:2e:2a:65:b6:69:75:3c:18:d1:bf:ba:82:07:87:83:0b:
         ff:de:4f:10:e7:10:2b:f5:9c:15:18:9f:34:9e:90:0a:7c:8b:
         89:2b:f7:21:f3:a7:86:7c:ff:8e:64:c7:a8:09:f7:45:b7:f0:
         96:c9:49:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:36:09 2026 by rpki-client