Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3633204/13204AC61F8B11EC91E3A235D8A014CE/QabtdYD_4RTJIrivEHMnCV4AVbo.mft
File:                     QabtdYD_4RTJIrivEHMnCV4AVbo.mft (raw, json)
Hash identifier:          sJ7aseq5TtrFL53jrwCKu5dglV9OqG9AyY7+aP+Njhc=
Subject key identifier:   C0:61:45:91:D7:7A:23:4A:5A:44:96:E7:70:79:4E:AD:07:9D:52:1E
Authority key identifier: 41:A6:ED:75:80:FF:E1:14:C9:22:B8:AF:10:73:27:09:5E:00:55:BA
Certificate issuer:       /CN=F3633204AF/serialNumber=41A6ED7580FFE114C922B8AF107327095E0055BA
Certificate serial:       070F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QabtdYD_4RTJIrivEHMnCV4AVbo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3633204/13204AC61F8B11EC91E3A235D8A014CE/QabtdYD_4RTJIrivEHMnCV4AVbo.mft
Manifest number:          070D
Signing time:             Thu 23 Jul 2026 02:25:07 +0000
Manifest this update:     Thu 23 Jul 2026 02:25:06 +0000
Manifest next update:     Sat 25 Jul 2026 02:25:06 +0000
Files and hashes:         1: QabtdYD_4RTJIrivEHMnCV4AVbo.crl (hash: DtUJrdkX+Q6D+p3mzgGJipgiAkKNiWjeVdzCiAconlU=)
                          2: B904AFAE405211F0AECBAA98DAE4EC9C.roa (hash: EPkgdYP45sUjC5MQQ8eIhXPc3ynifHxMQiyi4EpsgAM=)
                          3: 60C18DA81F8B11EC8FB62036D8A014CE.roa (hash: Jdq3emfvNJDMjT/lQOHOUpy/8j3a1sny+FYMlqTox8c=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3633204/13204AC61F8B11EC91E3A235D8A014CE/QabtdYD_4RTJIrivEHMnCV4AVbo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3633204/13204AC61F8B11EC91E3A235D8A014CE/QabtdYD_4RTJIrivEHMnCV4AVbo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/QabtdYD_4RTJIrivEHMnCV4AVbo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 25 Jul 2026 02:25:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1807 (0x70f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3633204AF, serialNumber=41A6ED7580FFE114C922B8AF107327095E0055BA
        Validity
            Not Before: Jul 23 02:25:06 2026 GMT
            Not After : Jul 25 02:25:06 2026 GMT
        Subject: CN=6a617b82-17b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:cf:32:78:8f:c4:81:1e:80:ca:ce:42:5f:4a:
                    a5:16:57:58:a9:ae:ad:e5:d3:24:1c:8b:cf:e2:4b:
                    72:ad:24:c8:2e:ec:71:73:97:1c:18:dc:65:32:61:
                    1b:4c:2f:fd:67:74:fd:4a:4a:9f:97:70:59:f5:26:
                    04:d7:46:16:73:77:ef:69:d3:ab:61:0e:9e:1f:30:
                    ca:f8:77:89:b2:ce:00:e3:d6:f7:f5:97:97:bc:08:
                    c9:53:59:0a:dd:f8:b4:a7:1d:80:ff:4b:1c:83:a8:
                    ba:29:12:98:4d:ff:8c:a3:8b:20:c9:dd:94:80:e1:
                    ee:9f:06:8c:2c:7a:f6:44:e6:5a:ad:bb:9e:90:7c:
                    fd:6d:47:3e:c6:45:fa:d9:0b:7d:34:cc:79:3f:8a:
                    fa:97:0c:39:44:26:89:d8:c7:9f:ac:e9:22:7c:5f:
                    8b:e9:75:c5:8c:f1:be:fd:71:e9:58:18:f2:83:28:
                    5e:4c:c0:fa:d6:b0:53:8f:56:23:c0:13:6a:89:82:
                    29:bd:33:71:af:b8:be:8f:2c:dd:f6:e2:cb:d0:ed:
                    a5:93:3e:77:0c:91:6f:cd:f5:68:4a:3a:4b:22:12:
                    0c:01:54:b9:cf:b7:e9:fc:6e:9a:2e:b8:aa:95:ef:
                    91:a3:04:ff:5c:d5:57:ea:05:9b:37:f3:c2:ac:b0:
                    fc:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:61:45:91:D7:7A:23:4A:5A:44:96:E7:70:79:4E:AD:07:9D:52:1E
            X509v3 Authority Key Identifier:
                keyid:41:A6:ED:75:80:FF:E1:14:C9:22:B8:AF:10:73:27:09:5E:00:55:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3633204/13204AC61F8B11EC91E3A235D8A014CE/QabtdYD_4RTJIrivEHMnCV4AVbo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QabtdYD_4RTJIrivEHMnCV4AVbo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3633204/13204AC61F8B11EC91E3A235D8A014CE/QabtdYD_4RTJIrivEHMnCV4AVbo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:0e:24:89:91:31:c2:79:ad:5a:51:88:a9:74:c6:f0:2c:bc:
         4e:90:17:52:06:d7:76:bf:9a:d6:a8:fa:3b:7d:2a:19:b8:a8:
         1c:33:d4:ae:77:a6:b9:4b:75:0c:69:ca:cb:aa:06:27:d6:18:
         45:c9:f2:64:c2:43:bb:a7:ac:73:ff:9c:83:b9:19:03:05:3a:
         15:45:fe:95:bc:7d:28:8c:8d:c2:ea:0a:e6:bc:ac:37:04:35:
         17:e3:9b:74:69:77:72:85:e2:9e:a9:4b:14:b7:5a:cb:9e:80:
         45:2f:15:2d:29:59:40:12:1d:95:cc:8d:5c:38:0c:d1:44:2b:
         ab:ea:d3:c7:b8:06:b1:f9:e9:f7:35:c4:f6:30:27:d3:e2:99:
         b5:57:bc:1d:12:9d:e6:dc:84:f2:2f:60:90:0f:5e:75:2f:3b:
         06:04:a2:4c:be:33:24:bf:31:fb:f4:ce:bb:dd:b1:bc:89:2b:
         c4:b9:b3:66:32:78:13:d0:2f:06:b1:d4:4a:d4:31:e7:8a:96:
         bb:92:bb:41:a5:ca:4f:09:27:ad:e6:d2:29:44:b8:75:e5:97:
         8a:4f:8f:a4:10:b0:18:ec:77:1d:e5:ad:3b:f5:14:52:78:b9:
         b3:62:72:8f:37:04:68:47:5b:04:a4:dc:9c:ae:07:a8:09:bd:
         2f:c3:8d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:47:15 2026 by rpki-client