Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3626CB6/F51239688BD811EBAEE28A37F8AEA228/D1lQgYEt8Vl-hOwRRk5kwYfuOAg.mft
File:                     D1lQgYEt8Vl-hOwRRk5kwYfuOAg.mft (raw, json)
Hash identifier:          +PXckRK3uGjYld4J1dOurHtCrTtypfmrDO85iBUDhtM=
Subject key identifier:   24:2C:68:52:96:8B:A6:2F:05:FF:F7:AE:BD:C4:E0:E1:0E:48:64:D1
Authority key identifier: 0F:59:50:81:81:2D:F1:59:7E:84:EC:11:46:4E:64:C1:87:EE:38:08
Certificate issuer:       /CN=F3626CB6AF/serialNumber=0F595081812DF1597E84EC11464E64C187EE3808
Certificate serial:       07CB
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/D1lQgYEt8Vl-hOwRRk5kwYfuOAg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/F51239688BD811EBAEE28A37F8AEA228/D1lQgYEt8Vl-hOwRRk5kwYfuOAg.mft
Manifest number:          07CB
Signing time:             Fri 24 Jul 2026 02:02:48 +0000
Manifest this update:     Fri 24 Jul 2026 02:02:47 +0000
Manifest next update:     Sun 26 Jul 2026 02:02:47 +0000
Files and hashes:         1: D1lQgYEt8Vl-hOwRRk5kwYfuOAg.crl (hash: +oZxveTDe/RZnDxPl5UPZbk6Wm3iDQ7QwP5t4xn+mPg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/F51239688BD811EBAEE28A37F8AEA228/D1lQgYEt8Vl-hOwRRk5kwYfuOAg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/F51239688BD811EBAEE28A37F8AEA228/D1lQgYEt8Vl-hOwRRk5kwYfuOAg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/D1lQgYEt8Vl-hOwRRk5kwYfuOAg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 26 Jul 2026 00:07:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1995 (0x7cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3626CB6AF, serialNumber=0F595081812DF1597E84EC11464E64C187EE3808
        Validity
            Not Before: Jul 24 02:02:47 2026 GMT
            Not After : Jul 26 02:02:47 2026 GMT
        Subject: CN=6a62c7c8-90ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f8:fa:19:9d:c7:6a:d3:01:3f:f8:c8:5f:c2:
                    18:b4:df:1a:79:8e:52:23:db:a4:a0:31:c4:6d:14:
                    34:fc:58:2e:62:32:0a:2c:9c:f1:b9:da:4f:d5:36:
                    16:f6:c7:9b:41:c8:69:0e:f9:ef:a7:21:4e:a4:90:
                    bb:8c:32:54:a7:46:c9:be:c7:ec:71:34:bd:bd:d4:
                    7c:82:c8:1f:37:1b:1c:c4:be:98:79:4a:3f:14:79:
                    a6:41:a1:9d:c9:dd:31:fc:8e:a9:6d:c5:b6:58:cf:
                    bb:38:10:17:8b:72:1a:49:e8:a8:e1:1e:f7:ca:91:
                    c5:79:57:a5:e6:38:e9:25:99:b4:0f:8b:37:ba:e8:
                    8a:cf:a8:08:1e:e5:d7:b1:ee:69:ba:7b:7d:55:8f:
                    63:8f:00:fc:f3:1b:da:ec:8b:33:5f:2c:41:48:f5:
                    bb:25:f8:10:92:98:29:0b:85:c4:2c:30:ec:75:43:
                    f9:52:a9:e1:1a:05:63:45:b3:49:e1:ce:49:4c:b9:
                    59:6b:d0:17:50:6e:3f:00:52:c7:eb:96:88:0b:c0:
                    b9:4a:a4:e8:32:93:19:ca:cf:df:c0:67:5b:bf:f4:
                    c2:fa:2b:28:d6:8c:cd:25:be:4f:7d:38:df:41:70:
                    91:f8:63:d9:4c:fe:65:58:68:d0:c7:cd:25:4f:14:
                    42:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:2C:68:52:96:8B:A6:2F:05:FF:F7:AE:BD:C4:E0:E1:0E:48:64:D1
            X509v3 Authority Key Identifier:
                keyid:0F:59:50:81:81:2D:F1:59:7E:84:EC:11:46:4E:64:C1:87:EE:38:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/F51239688BD811EBAEE28A37F8AEA228/D1lQgYEt8Vl-hOwRRk5kwYfuOAg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/D1lQgYEt8Vl-hOwRRk5kwYfuOAg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/F51239688BD811EBAEE28A37F8AEA228/D1lQgYEt8Vl-hOwRRk5kwYfuOAg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:e5:f8:aa:ae:93:26:9d:f7:84:6e:49:02:a8:df:66:11:19:
         c1:3b:ee:c8:6f:8e:26:0e:ec:95:9c:e6:50:3a:71:d6:1a:cb:
         b1:08:a7:5c:4e:6f:77:aa:87:b7:e7:6f:9f:a1:f2:3a:e9:81:
         ff:3b:69:2c:39:cb:7a:4f:96:d6:d3:62:4f:08:7f:b7:db:41:
         31:0d:8c:0f:e4:0d:c9:53:ab:77:68:f9:76:71:58:b5:85:3f:
         e5:13:c8:74:fd:d5:e8:66:d9:7b:90:eb:35:c1:03:ac:d6:37:
         03:e7:26:60:6c:fb:2a:3d:09:c4:97:5b:00:d1:b8:18:fd:83:
         ce:c1:82:75:ce:27:4a:37:f2:aa:c4:e8:cc:bc:b8:aa:35:cd:
         d0:98:06:21:92:be:18:88:92:76:ff:b4:6d:3e:ec:75:55:7e:
         26:f1:1f:a4:73:37:94:1f:4b:16:18:9e:41:36:fa:be:3f:64:
         04:9e:15:ae:86:28:32:ac:dd:5b:3e:68:32:50:15:f4:72:cf:
         5d:02:80:f4:55:21:16:b3:39:e9:c3:4c:28:53:4e:92:f8:55:
         04:19:f7:8b:28:4d:13:5c:ae:5e:3e:43:70:0e:1d:81:6f:f3:
         c6:2d:00:c0:bf:94:f9:e0:43:a5:fb:35:60:de:f2:55:0c:ac:
         7c:a3:8a:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:14:10 2026 by rpki-client