Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3636791/557822D8340611F1A55233CBCE1D38B0/2FLZY43gNj3YSH_gDch1vI-a080.mft
File:                     2FLZY43gNj3YSH_gDch1vI-a080.mft (raw, json)
Hash identifier:          /ce/a1CmmcBdA3XT7nBlfMiRyJFIQQz7pK1Z9UFGDKU=
Subject key identifier:   4E:64:B6:DB:41:F8:E8:82:A2:19:53:88:CD:EA:BC:BE:9B:BE:C9:7E
Authority key identifier: D8:52:D9:63:8D:E0:36:3D:D8:48:7F:E0:0D:C8:75:BC:8F:9A:D3:CD
Certificate issuer:       /CN=F3636791AF/serialNumber=D852D9638DE0363DD8487FE00DC875BC8F9AD3CD
Certificate serial:       72
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/2FLZY43gNj3YSH_gDch1vI-a080.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3636791/557822D8340611F1A55233CBCE1D38B0/2FLZY43gNj3YSH_gDch1vI-a080.mft
Manifest number:          6F
Signing time:             Fri 24 Jul 2026 05:32:57 +0000
Manifest this update:     Fri 24 Jul 2026 05:32:56 +0000
Manifest next update:     Sun 26 Jul 2026 05:32:56 +0000
Files and hashes:         1: 2FLZY43gNj3YSH_gDch1vI-a080.crl (hash: peZR1Zp1R+DgU2Jqd53gyooc7mHiZSeuyhPqjjMshbk=)
                          2: 3CC30608340711F1AFB184CFCE1D38B0.roa (hash: I53gWi2CJOwoPI79Xfi6bjQo4aU2ORPkeD1ir1Rh7cI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3636791/557822D8340611F1A55233CBCE1D38B0/2FLZY43gNj3YSH_gDch1vI-a080.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3636791/557822D8340611F1A55233CBCE1D38B0/2FLZY43gNj3YSH_gDch1vI-a080.mft
                          rsync://rpki.afrinic.net/repository/afrinic/2FLZY43gNj3YSH_gDch1vI-a080.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 26 Jul 2026 00:07:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 114 (0x72)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3636791AF, serialNumber=D852D9638DE0363DD8487FE00DC875BC8F9AD3CD
        Validity
            Not Before: Jul 24 05:32:56 2026 GMT
            Not After : Jul 26 05:32:56 2026 GMT
        Subject: CN=6a62f909-f470
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ee:d7:40:26:be:4b:f8:23:00:5b:80:7f:2f:
                    28:b1:6a:85:37:f3:fc:9b:e8:91:59:a1:b2:89:6f:
                    a9:45:7f:b6:96:8f:58:4c:18:e5:28:5f:92:d9:59:
                    35:ec:6f:a6:69:23:7f:37:ec:93:07:c8:58:9f:8e:
                    f5:a9:dc:94:e4:d5:cf:70:b7:5a:6f:ac:fa:b7:cf:
                    a0:95:a6:4c:1d:a8:bb:88:b7:03:77:6c:1b:de:d4:
                    09:e2:c3:58:28:db:15:ce:a3:38:a1:7c:a3:18:3d:
                    2c:92:79:54:d8:91:a5:5d:df:41:c4:5e:d4:06:b3:
                    e0:50:67:b7:cb:aa:32:0e:fd:31:32:5d:1a:b5:7c:
                    06:79:57:14:e1:86:8a:49:dd:09:dc:72:9a:31:d0:
                    4f:b1:57:4b:86:7a:e0:6b:cc:91:5c:1c:11:0f:87:
                    34:8b:ee:50:f9:69:0c:99:00:1e:3b:ec:06:82:36:
                    ad:22:09:5a:e4:51:fe:81:d5:70:42:a0:b5:31:2a:
                    51:82:2d:7a:29:19:d0:46:d2:3c:85:cd:38:05:b0:
                    0c:b6:76:35:e1:e1:22:93:c6:4e:2b:4d:54:79:e4:
                    ed:b6:93:3d:91:fa:d3:e4:23:19:2f:67:93:ea:df:
                    3d:07:a6:7c:2c:8e:02:92:3c:b5:8e:ba:69:52:9e:
                    fd:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:64:B6:DB:41:F8:E8:82:A2:19:53:88:CD:EA:BC:BE:9B:BE:C9:7E
            X509v3 Authority Key Identifier:
                keyid:D8:52:D9:63:8D:E0:36:3D:D8:48:7F:E0:0D:C8:75:BC:8F:9A:D3:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3636791/557822D8340611F1A55233CBCE1D38B0/2FLZY43gNj3YSH_gDch1vI-a080.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2FLZY43gNj3YSH_gDch1vI-a080.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3636791/557822D8340611F1A55233CBCE1D38B0/2FLZY43gNj3YSH_gDch1vI-a080.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:68:8e:40:64:c9:3a:5a:7f:1e:da:b7:fc:1e:63:0f:1e:a4:
         51:3f:bf:5f:a6:f2:84:56:56:45:2b:65:c1:59:72:1c:78:66:
         b2:31:db:a3:b3:28:dc:c0:ac:b3:b0:75:e9:23:84:c6:e4:da:
         49:2a:35:8f:89:ab:22:2e:8a:42:99:ac:3c:87:9a:08:45:75:
         d0:42:89:9e:2a:68:f2:1c:81:e3:f6:f1:1c:c6:54:63:92:e8:
         da:bd:b8:ef:2e:f4:cb:b4:e2:f4:c1:90:05:3f:c3:95:ac:6e:
         a0:31:8c:ce:68:eb:1e:53:67:c3:61:44:4a:af:98:36:52:76:
         d5:b0:5b:b3:90:ed:50:f1:cb:2d:3f:80:63:f2:6d:13:13:f3:
         46:02:f0:1c:0b:be:40:b6:71:81:23:43:9f:d1:fc:80:fe:60:
         b2:76:d4:82:b5:bd:03:02:10:43:52:75:2c:d5:af:ad:c6:ae:
         49:a0:53:44:2b:2a:29:69:0c:03:7d:3b:21:be:1d:e1:8e:9b:
         27:05:02:22:95:f4:17:24:d5:5f:3b:9d:92:70:91:2a:c7:8a:
         af:35:9a:b8:1f:51:99:75:a3:f7:8d:31:fd:ae:9a:af:84:a1:
         b8:49:ab:8f:59:74:7b:c9:44:d0:60:11:27:9e:fb:31:51:04:
         e3:8b:3c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:57:29 2026 by rpki-client