Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363235D/677CFDEC4C3911F083EC3397DAE4EC9C/Bal449VH9Vk-SwMZcDhZhpRQWMY.mft
File:                     Bal449VH9Vk-SwMZcDhZhpRQWMY.mft (raw, json)
Hash identifier:          GhjmMz9UXd3Qee6umpRbgCEgeGGzITvHFAkjLkbVkGM=
Subject key identifier:   A2:35:93:F4:99:5D:A9:08:AE:95:70:89:E7:16:4D:FB:27:C1:99:20
Authority key identifier: 05:A9:78:E3:D5:47:F5:59:3E:4B:03:19:70:38:59:86:94:50:58:C6
Certificate issuer:       /CN=F363235DAF/serialNumber=05A978E3D547F5593E4B031970385986945058C6
Certificate serial:       01A9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Bal449VH9Vk-SwMZcDhZhpRQWMY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363235D/677CFDEC4C3911F083EC3397DAE4EC9C/Bal449VH9Vk-SwMZcDhZhpRQWMY.mft
Manifest number:          01A4
Signing time:             Thu 23 Jul 2026 04:56:03 +0000
Manifest this update:     Thu 23 Jul 2026 04:56:02 +0000
Manifest next update:     Sat 25 Jul 2026 04:56:02 +0000
Files and hashes:         1: Bal449VH9Vk-SwMZcDhZhpRQWMY.crl (hash: ecueSrmNaX16TdLn42FgUbNBP+AUQm7Fq/FgtYFSTkg=)
                          2: 956D6C004C7A11F0941F5DBBDAE4EC9C.roa (hash: 4pbVD/R5drzn4R/PeVc+1JSe6FAId7REQJilHo0BefE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363235D/677CFDEC4C3911F083EC3397DAE4EC9C/Bal449VH9Vk-SwMZcDhZhpRQWMY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363235D/677CFDEC4C3911F083EC3397DAE4EC9C/Bal449VH9Vk-SwMZcDhZhpRQWMY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Bal449VH9Vk-SwMZcDhZhpRQWMY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 25 Jul 2026 04:56:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 425 (0x1a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363235DAF, serialNumber=05A978E3D547F5593E4B031970385986945058C6
        Validity
            Not Before: Jul 23 04:56:02 2026 GMT
            Not After : Jul 25 04:56:02 2026 GMT
        Subject: CN=6a619ee2-c67d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:25:be:26:74:ba:67:ae:9c:f3:74:ea:c0:85:
                    1f:d7:4f:5f:d9:3a:6a:c2:78:d0:3f:61:a6:e0:6f:
                    ca:38:e4:11:54:4c:68:1a:b9:2d:ff:02:61:16:3e:
                    29:61:e6:01:b8:8e:d4:4b:f9:db:87:24:4a:35:75:
                    ab:d9:02:80:ef:f9:86:07:13:91:68:59:1a:cb:47:
                    be:b4:60:d5:03:be:39:36:c1:8b:9e:37:5e:7d:30:
                    11:68:82:e4:de:1e:7b:75:c1:1e:9d:0e:c8:e9:5b:
                    2c:2d:75:5a:56:2c:5e:4c:f1:53:e0:15:29:0a:89:
                    e0:ff:84:a3:b5:af:61:91:41:51:dc:32:d0:15:21:
                    d4:6e:4a:a1:1c:71:17:5f:42:1e:0d:8f:2f:26:18:
                    b1:ca:b9:1e:6a:89:5a:0c:fa:32:24:92:d9:51:ae:
                    85:72:7a:03:21:69:9d:02:b1:03:8a:db:40:fc:be:
                    a3:b4:1b:ba:9a:f4:dc:46:4a:d4:fc:38:29:cf:07:
                    71:26:c8:37:89:ac:b9:da:bd:f5:21:83:42:eb:f1:
                    f6:5a:0b:0b:66:d4:b6:cc:3b:59:e4:92:82:7b:1f:
                    44:50:6f:a9:a2:91:8d:15:29:b0:74:9f:69:cc:db:
                    31:fd:25:ef:df:d8:63:28:77:a8:36:8a:7b:a7:e8:
                    cb:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:35:93:F4:99:5D:A9:08:AE:95:70:89:E7:16:4D:FB:27:C1:99:20
            X509v3 Authority Key Identifier:
                keyid:05:A9:78:E3:D5:47:F5:59:3E:4B:03:19:70:38:59:86:94:50:58:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363235D/677CFDEC4C3911F083EC3397DAE4EC9C/Bal449VH9Vk-SwMZcDhZhpRQWMY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Bal449VH9Vk-SwMZcDhZhpRQWMY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363235D/677CFDEC4C3911F083EC3397DAE4EC9C/Bal449VH9Vk-SwMZcDhZhpRQWMY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:69:25:47:05:a8:de:5e:4e:17:f5:f1:d4:d0:3d:64:6d:88:
         bb:2d:40:1a:b0:eb:d7:f1:e6:b2:1b:b0:0e:ba:ce:af:45:93:
         43:42:b7:5e:77:0c:d6:54:47:53:d0:cc:7b:e0:fc:31:0a:86:
         2c:32:41:f3:2c:63:d9:82:84:28:10:0e:5a:e3:25:e2:ca:c4:
         1a:dc:64:43:38:3a:4b:fd:59:c8:9c:92:39:9b:69:a6:be:fd:
         7c:73:91:8f:bd:18:48:7c:2b:88:5f:bf:ba:23:b4:5f:81:f4:
         18:6b:0c:a3:6a:87:11:e0:90:b2:e9:40:16:9d:8f:40:1d:c3:
         04:d9:d7:ed:3f:89:16:09:17:30:6c:59:2c:5e:45:61:a3:59:
         2a:a9:20:83:08:1b:7d:33:c4:fa:68:d4:4d:50:68:4a:1f:37:
         9c:c4:7c:c1:6f:16:77:08:ec:52:0d:80:15:9a:ff:e0:89:7e:
         5f:ee:13:5b:35:a2:ae:6d:cf:80:a4:37:3b:77:a9:12:ea:a4:
         77:17:dd:eb:dd:76:40:4c:11:75:ce:3c:ae:ef:7c:07:ba:75:
         d5:56:c3:4f:05:7a:6d:58:97:b7:0e:3a:30:6c:d1:b1:eb:03:
         36:d7:49:1f:5c:4a:b4:d4:ab:c3:46:7b:ff:0c:ef:ba:01:b5:
         4a:6e:5f:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:37:18 2026 by rpki-client