Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3628DDE/BF78233A369E11E9A7D5E220F8AEA228/QrWM7qosEujy3JjWRMIM-BzhzgU.mft
File:                     QrWM7qosEujy3JjWRMIM-BzhzgU.mft (raw, json)
Hash identifier:          MIjyhVUpQVL44Gy7AraFyY6bLp2fIuq5l+ZYhz2pm20=
Subject key identifier:   5C:53:8A:A2:5A:AD:41:09:28:89:F9:1D:8B:98:97:78:9B:C8:0D:2E
Authority key identifier: 42:B5:8C:EE:AA:2C:12:E8:F2:DC:98:D6:44:C2:0C:F8:1C:E1:CE:05
Certificate issuer:       /CN=F3628DDEAF/serialNumber=42B58CEEAA2C12E8F2DC98D644C20CF81CE1CE05
Certificate serial:       0ADF
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QrWM7qosEujy3JjWRMIM-BzhzgU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3628DDE/BF78233A369E11E9A7D5E220F8AEA228/QrWM7qosEujy3JjWRMIM-BzhzgU.mft
Manifest number:          0ADB
Signing time:             Fri 24 Jul 2026 01:17:20 +0000
Manifest this update:     Fri 24 Jul 2026 01:17:19 +0000
Manifest next update:     Sun 26 Jul 2026 01:17:19 +0000
Files and hashes:         1: QrWM7qosEujy3JjWRMIM-BzhzgU.crl (hash: aKzGGqQ6EsN9ow1+LZ7nXHZmxuWnJZhgaZ31QjiSga4=)
                          2: 1119CD76DFD311EB88361B37F8AEA228.roa (hash: 4I2Xxy2pBMpErR6JgtR0kZIJe7vFEf1qAmaSQyw+k7I=)
                          3: F539AC2ADFD211EBB0D1FD36F8AEA228.roa (hash: eXFh4emIQs516bgW52azXjxVc2VVoIN8dsu/3Z+Sdok=)
                          4: EE5F2E50369E11E98EDB1621F8AEA228.roa (hash: weMqKqZKyHm0tyqjfHAxnqGFkomIgwidKnm2Dpx5xnA=)
                          5: 14DA972C369F11E9A85A3C21F8AEA228.roa (hash: rRgU+4tFqjCwv3sj5zK6L+vCSIEp2/0zfXQO2ATh2MM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3628DDE/BF78233A369E11E9A7D5E220F8AEA228/QrWM7qosEujy3JjWRMIM-BzhzgU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3628DDE/BF78233A369E11E9A7D5E220F8AEA228/QrWM7qosEujy3JjWRMIM-BzhzgU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/QrWM7qosEujy3JjWRMIM-BzhzgU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 26 Jul 2026 00:07:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2783 (0xadf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3628DDEAF, serialNumber=42B58CEEAA2C12E8F2DC98D644C20CF81CE1CE05
        Validity
            Not Before: Jul 24 01:17:19 2026 GMT
            Not After : Jul 26 01:17:19 2026 GMT
        Subject: CN=6a62bd20-b8d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:be:dd:28:d8:b9:d4:b0:50:9d:55:21:65:23:
                    cf:0c:07:eb:7e:d4:62:db:53:25:78:aa:af:9e:0b:
                    af:90:46:32:95:1d:86:21:02:46:82:1b:27:db:89:
                    ad:3d:b2:84:60:ce:75:ef:4f:cb:f9:f3:9a:41:ec:
                    dc:e0:04:b9:a2:c1:9d:34:90:75:dc:49:29:f8:2d:
                    e6:26:f9:1e:46:de:ea:c9:f9:60:37:b4:b4:57:57:
                    c8:0a:82:e3:d6:f8:a0:96:cd:6c:9b:ee:fa:d9:3f:
                    24:22:a6:de:1d:a8:2b:03:ba:1f:bd:49:8f:57:d3:
                    a1:3e:34:b9:b8:39:9f:74:0f:25:64:b4:06:0a:78:
                    bf:3a:70:67:68:34:9c:21:55:f7:e2:a0:f1:df:cd:
                    60:eb:84:e2:f2:47:9d:f2:df:08:c3:d4:da:e2:02:
                    cf:b0:d1:0a:73:f7:1d:07:b9:38:26:43:d0:2c:a1:
                    42:ed:e8:f8:d6:37:d1:ad:bf:e9:a6:91:9d:ee:4d:
                    07:79:9c:0a:cc:86:e8:67:40:0d:16:e3:db:fd:90:
                    21:05:c3:32:64:2a:d4:b5:b2:84:21:fe:0d:c9:7f:
                    ea:5e:98:da:61:dd:1a:1c:2c:fd:b1:9f:2e:88:f7:
                    da:dd:78:eb:0d:09:82:ce:52:6b:a1:1d:55:47:29:
                    52:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:53:8A:A2:5A:AD:41:09:28:89:F9:1D:8B:98:97:78:9B:C8:0D:2E
            X509v3 Authority Key Identifier:
                keyid:42:B5:8C:EE:AA:2C:12:E8:F2:DC:98:D6:44:C2:0C:F8:1C:E1:CE:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3628DDE/BF78233A369E11E9A7D5E220F8AEA228/QrWM7qosEujy3JjWRMIM-BzhzgU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QrWM7qosEujy3JjWRMIM-BzhzgU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3628DDE/BF78233A369E11E9A7D5E220F8AEA228/QrWM7qosEujy3JjWRMIM-BzhzgU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:bb:a2:47:21:ad:75:fd:42:d1:48:6d:80:f1:d6:81:2c:d0:
         3a:5a:70:07:be:07:9f:85:87:af:34:39:7f:e6:2b:af:a0:99:
         94:0b:7e:fc:17:22:f6:7d:82:c7:7a:94:08:3b:fe:e3:fa:eb:
         bf:2f:68:d4:f8:8b:da:f5:f4:6e:4f:e5:0e:a6:6b:eb:52:9c:
         b7:af:fd:a8:bf:c6:4d:f9:a7:ab:cd:92:33:f4:7b:a2:88:ba:
         5e:2d:ff:d6:29:cd:7e:dd:a8:52:ea:d7:78:6f:97:2c:80:5a:
         06:7d:d6:2a:53:b4:c2:a1:bb:27:e4:65:d9:85:2e:85:36:43:
         cb:7b:5e:62:b7:5d:bf:d4:5d:2c:67:3c:c7:5d:14:38:04:0c:
         da:1c:d3:bc:7c:f2:f6:a2:2e:e6:b0:59:b2:78:f7:c3:57:d8:
         5f:93:cf:a9:04:8e:f8:52:26:b8:a1:ce:0a:5e:9f:af:07:08:
         d8:c0:ef:f8:e4:f9:cb:23:6d:a6:26:d6:aa:3b:3a:ab:c7:61:
         0c:0f:11:6a:6e:c5:41:71:97:8e:5c:7f:6d:ae:ed:d2:e7:3d:
         2d:b8:0a:c5:81:11:05:d2:d4:2a:b5:da:a6:ec:7b:7b:41:31:
         94:1c:a4:89:d5:b8:0c:07:bb:5a:ac:9d:ad:e1:7a:78:49:2b:
         61:98:22:02
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCt8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MjhEREVBRjExMC8GA1UEBRMoNDJCNThDRUVBQTJDMTJFOEYyREM5OEQ2NDRDMjBD
RjgxQ0UxQ0UwNTAeFw0yNjA3MjQwMTE3MTlaFw0yNjA3MjYwMTE3MTlaMBgxFjAU
BgNVBAMTDTZhNjJiZDIwLWI4ZDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC/vt0o2LnUsFCdVSFlI88MB+t+1GLbUyV4qq+eC6+QRjKVHYYhAkaCGyfb
ia09soRgznXvT8v585pB7NzgBLmiwZ00kHXcSSn4LeYm+R5G3urJ+WA3tLRXV8gK
guPW+KCWzWyb7vrZPyQipt4dqCsDuh+9SY9X06E+NLm4OZ90DyVktAYKeL86cGdo
NJwhVffioPHfzWDrhOLyR53y3wjD1NriAs+w0Qpz9x0HuTgmQ9AsoULt6PjWN9Gt
v+mmkZ3uTQd5nArMhuhnQA0W49v9kCEFwzJkKtS1soQh/g3Jf+pemNph3RocLP2x
ny6I99rdeOsNCYLOUmuhHVVHKVLJAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUXFOK
olqtQQkoifkdi5iXeJvIDS4wHwYDVR0jBBgwFoAUQrWM7qosEujy3JjWRMIM+Bzh
zgUwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjI4RERFL0JGNzgyMzNBMzY5RTExRTlBN0Q1RTIyMEY4QUVBMjI4L1FyV003
cW9zRXVqeTNKaldSTUlNLUJ6aHpnVS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1FyV003cW9zRXVqeTNKaldSTUlNLUJ6aHpnVS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MjhEREUvQkY3ODIzM0EzNjlFMTFFOUE3RDVFMjIwRjhB
RUEyMjgvUXJXTTdxb3NFdWp5M0pqV1JNSU0tQnpoemdVLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBAu6JHIa11/ULRSG2A8daBLNA6WnAH
vgefhYevNDl/5iuvoJmUC378FyL2fYLHepQIO/7j+uu/L2jU+Iva9fRuT+UOpmvr
Upy3r/2ov8ZN+aerzZIz9HuiiLpeLf/WKc1+3ahS6td4b5csgFoGfdYqU7TCobsn
5GXZhS6FNkPLe15it12/1F0sZzzHXRQ4BAzaHNO8fPL2oi7msFmyePfDV9hfk8+p
BI74Uia4oc4KXp+vBwjYwO/45PnLI22mJtaqOzqrx2EMDxFqbsVBcZeOXH9tru3S
5z0tuArFgREF0tQqtdqm7Ht7QTGUHKSJ1bgMB7tarJ2t4Xp4SSthmCIC
-----END CERTIFICATE-----
Generated at Fri Jul 24 15:30:34 2026 by rpki-client