Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362E4AF/0D5EA672805311F1B94B32AACE1D38B0/TpKdLt9gOvd04YalOhkf_QUMzgY.mft
File:                     TpKdLt9gOvd04YalOhkf_QUMzgY.mft (raw, json)
Hash identifier:          WRHJSAI5h7Lcd50bppwIfb0ok22Q20L5YPuT/p2tTaw=
Subject key identifier:   DF:32:22:CB:7A:60:E3:C9:ED:65:D3:43:3B:83:4A:68:01:E9:54:74
Authority key identifier: 4E:92:9D:2E:DF:60:3A:F7:74:E1:86:A5:3A:19:1F:FD:05:0C:CE:06
Certificate issuer:       /CN=F362E4AFAR/serialNumber=4E929D2EDF603AF774E186A53A191FFD050CCE06
Certificate serial:       0B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/TpKdLt9gOvd04YalOhkf_QUMzgY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362E4AF/0D5EA672805311F1B94B32AACE1D38B0/TpKdLt9gOvd04YalOhkf_QUMzgY.mft
Manifest number:          0B
Signing time:             Thu 23 Jul 2026 05:45:01 +0000
Manifest this update:     Thu 23 Jul 2026 05:45:01 +0000
Manifest next update:     Sat 25 Jul 2026 05:45:01 +0000
Files and hashes:         1: TpKdLt9gOvd04YalOhkf_QUMzgY.crl (hash: KrID9HDY7dlUoCKXzkxyk64WCQP2JJRygIhkb4x8yzk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362E4AF/0D5EA672805311F1B94B32AACE1D38B0/TpKdLt9gOvd04YalOhkf_QUMzgY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362E4AF/0D5EA672805311F1B94B32AACE1D38B0/TpKdLt9gOvd04YalOhkf_QUMzgY.mft
                          rsync://rpki.afrinic.net/repository/arin/TpKdLt9gOvd04YalOhkf_QUMzgY.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 25 Jul 2026 05:44:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11 (0xb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362E4AFAR, serialNumber=4E929D2EDF603AF774E186A53A191FFD050CCE06
        Validity
            Not Before: Jul 23 05:45:01 2026 GMT
            Not After : Jul 25 05:45:01 2026 GMT
        Subject: CN=6a61aa5d-2094
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:58:20:42:d9:17:f2:b2:09:99:d3:f2:80:42:
                    22:27:f3:17:a4:4f:b9:11:13:ed:87:da:de:d7:72:
                    71:a8:a7:dc:38:fd:c9:38:9a:76:c4:6b:a8:9c:6b:
                    a8:7d:d8:5c:d3:35:e2:59:77:8e:98:ba:71:84:0b:
                    75:ec:cd:10:24:be:99:a2:09:69:17:2c:0f:f1:be:
                    15:4d:b0:f1:cc:75:a9:03:02:76:82:8f:60:95:b7:
                    b6:09:76:5a:67:8b:95:3c:7c:37:1d:80:b6:a7:66:
                    bc:ac:ee:69:f3:63:3e:a7:66:3d:fd:5e:f9:fc:0b:
                    5d:3f:ba:5e:02:bd:e4:98:f4:b3:06:0e:7d:e5:55:
                    b4:75:22:92:61:7a:f3:38:3f:9c:87:b8:67:b8:d2:
                    c5:2a:fd:8c:fd:61:c2:17:85:c2:ac:03:b8:9c:19:
                    bf:47:cb:4f:88:ea:ae:e5:99:0d:8c:2c:7c:9c:fa:
                    29:b0:57:a1:2b:18:fc:77:6a:ab:a5:22:41:85:c9:
                    31:1b:7c:82:c3:a7:ea:b7:1b:7e:98:d8:a9:35:3f:
                    de:e7:d8:c3:e2:55:e9:0b:97:c4:f6:fd:dc:13:b3:
                    ab:70:0b:78:93:6b:e9:04:aa:db:6c:81:e8:8c:ad:
                    e2:dd:20:71:1b:72:88:76:f3:2e:f0:a7:15:1c:04:
                    8c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:32:22:CB:7A:60:E3:C9:ED:65:D3:43:3B:83:4A:68:01:E9:54:74
            X509v3 Authority Key Identifier:
                keyid:4E:92:9D:2E:DF:60:3A:F7:74:E1:86:A5:3A:19:1F:FD:05:0C:CE:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362E4AF/0D5EA672805311F1B94B32AACE1D38B0/TpKdLt9gOvd04YalOhkf_QUMzgY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/TpKdLt9gOvd04YalOhkf_QUMzgY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362E4AF/0D5EA672805311F1B94B32AACE1D38B0/TpKdLt9gOvd04YalOhkf_QUMzgY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:6c:fd:f2:8b:8b:53:61:af:5f:2d:76:90:c0:1b:8f:5e:74:
         3e:45:86:f0:9b:a0:cb:64:38:3e:6f:07:ab:55:87:a6:b4:38:
         47:f4:1f:e8:3c:e4:ac:53:37:96:c7:87:0a:b1:7c:42:e9:a1:
         a2:43:7e:d8:bf:44:2b:20:de:f0:a7:10:f4:7c:4e:2b:9a:43:
         c6:f4:96:f9:e5:ca:5b:9f:8b:81:d2:bb:6a:be:83:8c:1b:fc:
         53:45:b6:a5:5d:0d:a3:e7:83:a3:35:94:ce:1e:c4:68:32:cc:
         4a:71:05:fc:5d:63:86:df:fb:29:07:d0:2f:3c:16:28:fd:02:
         1b:4b:07:33:a7:cf:58:5e:73:d6:4e:6a:c8:11:91:63:02:1e:
         98:ed:a5:ee:6c:1b:0e:c8:fd:16:8e:54:57:02:82:71:48:9c:
         d1:1b:5b:69:73:98:be:a1:98:66:5f:ba:10:c4:b8:aa:dd:f9:
         7a:31:64:8a:76:98:0a:90:39:04:08:71:05:75:d3:fe:94:5c:
         41:24:78:4d:7b:1e:b5:e3:52:23:57:0d:23:83:ab:f7:a4:26:
         1d:30:df:ea:1e:84:6f:4a:44:1f:f8:4e:b8:28:9a:2c:31:8d:
         9a:3f:af:20:aa:6f:54:80:8c:7d:76:fe:f5:31:10:fa:01:4b:
         ed:b7:b0:e6
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgIBCzANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzYy
RTRBRkFSMTEwLwYDVQQFEyg0RTkyOUQyRURGNjAzQUY3NzRFMTg2QTUzQTE5MUZG
RDA1MENDRTA2MB4XDTI2MDcyMzA1NDUwMVoXDTI2MDcyNTA1NDUwMVowGDEWMBQG
A1UEAxMNNmE2MWFhNWQtMjA5NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMtYIELZF/KyCZnT8oBCIifzF6RPuRET7Yfa3tdycain3Dj9yTiadsRrqJxr
qH3YXNM14ll3jpi6cYQLdezNECS+maIJaRcsD/G+FU2w8cx1qQMCdoKPYJW3tgl2
WmeLlTx8Nx2AtqdmvKzuafNjPqdmPf1e+fwLXT+6XgK95Jj0swYOfeVVtHUikmF6
8zg/nIe4Z7jSxSr9jP1hwheFwqwDuJwZv0fLT4jqruWZDYwsfJz6KbBXoSsY/Hdq
q6UiQYXJMRt8gsOn6rcbfpjYqTU/3ufYw+JV6QuXxPb93BOzq3ALeJNr6QSq22yB
6Iyt4t0gcRtyiHbzLvCnFRwEjIMCAwEAAaOCArUwggKxMB0GA1UdDgQWBBTfMiLL
emDjye1l00M7g0poAelUdDAfBgNVHSMEGDAWgBROkp0u32A693ThhqU6GR/9BQzO
BjAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2MkU0QUYvMEQ1RUE2NzI4MDUzMTFGMUI5NEIzMkFBQ0UxRDM4QjAvVHBLZEx0
OWdPdmQwNFlhbE9oa2ZfUVVNemdZLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2FyaW4v
VHBLZEx0OWdPdmQwNFlhbE9oa2ZfUVVNemdZLmNlcjBPBgNVHSABAf8ERTBDMEEG
CCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmljLm5l
dC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUFBzAL
hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw
b3NpdG9yeS9GMzYyRTRBRi8wRDVFQTY3MjgwNTMxMUYxQjk0QjMyQUFDRTFEMzhC
MC9UcEtkTHQ5Z092ZDA0WWFsT2hrZl9RVU16Z1kubWZ0MDUGCCsGAQUFBzANhilo
dHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEF
BQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwDQYJKoZIhvcNAQELBQADggEBAABs/fKLi1Nhr18tdpDAG49edD5FhvCboMtk
OD5vB6tVh6a0OEf0H+g85KxTN5bHhwqxfELpoaJDfti/RCsg3vCnEPR8TiuaQ8b0
lvnlylufi4HSu2q+g4wb/FNFtqVdDaPng6M1lM4exGgyzEpxBfxdY4bf+ykH0C88
Fij9AhtLBzOnz1hec9ZOasgRkWMCHpjtpe5sGw7I/RaOVFcCgnFInNEbW2lzmL6h
mGZfuhDEuKrd+XoxZIp2mAqQOQQIcQV10/6UXEEkeE17HrXjUiNXDSODq/ekJh0w
3+oehG9KRB/4TrgomiwxjZo/ryCqb1SAjH12/vUxEPoBS+23sOY=
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:27:14 2026 by rpki-client