Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36390A9/31A3DDA286E211EFBB3D6C96762E951A/x0I-0nr8wQ1ZgpqAsXlxYrZG_90.mft
File:                     x0I-0nr8wQ1ZgpqAsXlxYrZG_90.mft (raw, json)
Hash identifier:          IuqNyUEhEEBczEeqLTMeN6ZBTNXRh3Akz6neiQyYCYA=
Subject key identifier:   08:6F:CC:50:0A:99:AD:C2:CB:92:4A:5E:44:BD:FD:90:84:A5:85:BF
Authority key identifier: C7:42:3E:D2:7A:FC:C1:0D:59:82:9A:80:B1:79:71:62:B6:46:FF:DD
Certificate issuer:       /CN=F36390A9AF/serialNumber=C7423ED27AFCC10D59829A80B1797162B646FFDD
Certificate serial:       029B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/x0I-0nr8wQ1ZgpqAsXlxYrZG_90.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36390A9/31A3DDA286E211EFBB3D6C96762E951A/x0I-0nr8wQ1ZgpqAsXlxYrZG_90.mft
Manifest number:          029A
Signing time:             Fri 24 Jul 2026 04:34:35 +0000
Manifest this update:     Fri 24 Jul 2026 04:34:34 +0000
Manifest next update:     Sun 26 Jul 2026 04:34:34 +0000
Files and hashes:         1: x0I-0nr8wQ1ZgpqAsXlxYrZG_90.crl (hash: WxMw0iZtULTkhkO8AFfhIUS8sw9LZP9Qg8fRrEzP/bc=)
                          2: 2043601A871311EFAA833C47762E951A.roa (hash: 7V2EXwaz5iXOD12PTDbUdoIOuqdno8tko8fgycVsw+8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36390A9/31A3DDA286E211EFBB3D6C96762E951A/x0I-0nr8wQ1ZgpqAsXlxYrZG_90.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36390A9/31A3DDA286E211EFBB3D6C96762E951A/x0I-0nr8wQ1ZgpqAsXlxYrZG_90.mft
                          rsync://rpki.afrinic.net/repository/afrinic/x0I-0nr8wQ1ZgpqAsXlxYrZG_90.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 26 Jul 2026 00:07:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 667 (0x29b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36390A9AF, serialNumber=C7423ED27AFCC10D59829A80B1797162B646FFDD
        Validity
            Not Before: Jul 24 04:34:34 2026 GMT
            Not After : Jul 26 04:34:34 2026 GMT
        Subject: CN=6a62eb5b-49df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:84:26:ac:aa:45:84:d3:eb:16:8e:5c:37:11:
                    cc:34:2c:27:83:ec:36:f1:eb:e4:ff:68:de:df:65:
                    de:fd:71:9d:78:7c:80:b8:e0:aa:cd:54:d7:26:99:
                    52:8e:d8:61:02:a2:f9:40:77:5f:a2:12:56:75:a1:
                    00:3d:4d:71:54:d0:f1:cc:e9:ee:b5:20:dc:78:3a:
                    fd:cb:92:88:61:ef:2d:fb:8c:c4:1d:86:c4:60:12:
                    f6:b2:28:c9:ab:7c:4d:4b:47:1d:96:70:e0:06:28:
                    77:a9:61:d0:1e:c3:b4:b8:72:45:30:f8:a7:3c:8d:
                    0f:e6:53:91:06:32:f9:93:1e:6b:aa:c4:42:0f:f7:
                    9b:62:8f:36:7f:5d:25:f8:fc:29:ea:74:40:54:46:
                    a3:d0:10:e1:18:5c:b5:5f:13:95:84:ad:f8:29:38:
                    4a:80:f6:74:dd:a4:89:12:fe:81:31:c7:ca:e4:32:
                    10:be:80:e8:c5:fd:31:d8:6f:a9:ed:77:de:90:01:
                    54:40:de:8d:f1:92:cf:cf:86:02:b1:81:38:b4:85:
                    8f:ef:25:52:fd:fc:76:c0:66:5b:11:0c:db:5f:7e:
                    b9:a8:77:b1:80:68:7c:e3:1a:44:0e:55:1b:2c:3c:
                    5b:03:b7:a6:93:cf:2a:73:ac:b5:72:39:c4:e9:cf:
                    14:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:6F:CC:50:0A:99:AD:C2:CB:92:4A:5E:44:BD:FD:90:84:A5:85:BF
            X509v3 Authority Key Identifier:
                keyid:C7:42:3E:D2:7A:FC:C1:0D:59:82:9A:80:B1:79:71:62:B6:46:FF:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36390A9/31A3DDA286E211EFBB3D6C96762E951A/x0I-0nr8wQ1ZgpqAsXlxYrZG_90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/x0I-0nr8wQ1ZgpqAsXlxYrZG_90.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36390A9/31A3DDA286E211EFBB3D6C96762E951A/x0I-0nr8wQ1ZgpqAsXlxYrZG_90.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:b9:36:77:ab:b1:75:d7:ab:a4:d5:0b:c6:1c:f4:4c:a6:a7:
         d9:99:b2:2f:f1:bb:52:4f:09:06:e2:22:96:73:eb:3f:b6:2c:
         41:2b:46:81:be:4a:cb:b1:0b:c2:ed:a3:3d:6a:81:82:6b:1e:
         d8:c9:30:6b:9d:ce:4c:18:71:e7:a7:ce:e0:78:18:64:cf:8b:
         82:53:f7:1b:dc:4e:ec:08:05:0c:86:20:ef:de:8e:7d:23:cb:
         82:7f:08:a0:ca:36:10:39:5e:99:a8:64:d1:7f:de:9e:b2:5b:
         a9:5d:55:d7:5e:6c:ee:c7:45:70:60:45:07:22:f2:34:fe:b3:
         30:91:dd:2e:cb:7b:6e:de:bd:fd:5a:79:b9:4d:59:07:5c:e1:
         ae:d6:b2:f0:4a:bf:ab:26:29:ba:d5:15:16:a6:80:29:11:4a:
         bd:9a:ee:16:9d:7c:2a:c8:3d:a7:2a:f5:0d:1b:ce:59:c3:5e:
         1c:62:be:02:db:d8:87:d6:14:c5:3a:02:a5:f9:10:c8:d0:a2:
         e8:b5:9e:ab:ca:70:7c:2b:a7:05:20:62:06:17:79:2d:ab:a9:
         64:cf:ed:91:cc:a4:7a:29:9e:fd:b5:65:cf:85:df:eb:e0:6c:
         fb:27:0a:b2:5b:a5:08:06:96:b6:4b:65:85:0a:12:a7:8b:9c:
         9e:0f:d0:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:42:51 2026 by rpki-client