Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3639B8C/81FF998E8EF311F0B1EF4DCEDAE4EC9C/KrDy-gyWo3s8ZFOURZffPfDF0bc.mft
File:                     KrDy-gyWo3s8ZFOURZffPfDF0bc.mft (raw, json)
Hash identifier:          VywxCA+tEMpPhlzqZppKYVPzRWQUCYOJTgOGRhIsm4M=
Subject key identifier:   C8:74:C3:53:F9:3F:4F:2F:88:0E:A3:AB:B1:C6:75:FA:CD:BB:60:CD
Authority key identifier: 2A:B0:F2:FA:0C:96:A3:7B:3C:64:53:94:45:97:DF:3D:F0:C5:D1:B7
Certificate issuer:       /CN=F3639B8CAF/serialNumber=2AB0F2FA0C96A37B3C6453944597DF3DF0C5D1B7
Certificate serial:       0142
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/KrDy-gyWo3s8ZFOURZffPfDF0bc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3639B8C/81FF998E8EF311F0B1EF4DCEDAE4EC9C/KrDy-gyWo3s8ZFOURZffPfDF0bc.mft
Manifest number:          0141
Signing time:             Thu 23 Jul 2026 05:09:27 +0000
Manifest this update:     Thu 23 Jul 2026 05:09:26 +0000
Manifest next update:     Sat 25 Jul 2026 05:09:26 +0000
Files and hashes:         1: KrDy-gyWo3s8ZFOURZffPfDF0bc.crl (hash: y1mJOv4xl9AVIlWA1UNqWbcC6gO3jZubyO5XTJ+4UzI=)
                          2: 224E010A8EF911F08110F6F0DAE4EC9C.roa (hash: q4S/Fbxq3yG0xFEOwYvKuxGf0Ynd7Ff6WDMdEih5OjM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3639B8C/81FF998E8EF311F0B1EF4DCEDAE4EC9C/KrDy-gyWo3s8ZFOURZffPfDF0bc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3639B8C/81FF998E8EF311F0B1EF4DCEDAE4EC9C/KrDy-gyWo3s8ZFOURZffPfDF0bc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/KrDy-gyWo3s8ZFOURZffPfDF0bc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 25 Jul 2026 05:09:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 322 (0x142)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3639B8CAF, serialNumber=2AB0F2FA0C96A37B3C6453944597DF3DF0C5D1B7
        Validity
            Not Before: Jul 23 05:09:26 2026 GMT
            Not After : Jul 25 05:09:26 2026 GMT
        Subject: CN=6a61a207-1f63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ac:2f:57:d3:ae:fe:d7:0c:08:a7:8c:84:f6:
                    92:d6:8f:33:bf:be:f6:19:4d:a9:5d:5e:4e:66:30:
                    03:73:87:ed:79:16:26:4a:52:0a:25:f3:f7:0c:ef:
                    c1:a0:b6:eb:0d:e4:e2:5d:b5:2e:00:bd:c7:fa:79:
                    0a:48:89:5c:32:b3:d2:13:45:4d:5d:55:68:0e:c3:
                    39:f4:f4:14:33:1a:8a:67:0e:c4:07:94:59:49:dd:
                    e9:c5:ef:6d:83:ff:39:26:80:c2:d5:51:cf:25:7f:
                    3c:c4:87:74:2d:42:c7:0b:f7:39:a2:cc:69:05:69:
                    71:e3:f7:0b:57:f2:78:ed:36:75:d2:a1:a0:24:b9:
                    85:16:1e:93:38:56:6e:17:5e:24:e8:00:2b:cb:6d:
                    3a:4d:d4:46:e9:ae:7f:5d:49:5c:ee:3f:5c:93:3e:
                    4b:8e:8d:09:44:36:77:40:3f:4a:4b:18:4c:50:34:
                    f8:d9:aa:2a:f7:66:78:cb:28:bc:4c:4f:30:eb:5f:
                    f2:da:ac:0e:82:39:9b:55:f8:cc:1c:77:ae:07:b4:
                    ce:f3:5d:db:52:fb:a3:e4:db:dc:02:75:ed:1c:1c:
                    c8:81:f1:3d:df:d7:e3:e9:a7:bd:95:4d:15:b8:99:
                    76:fc:a9:09:7e:f3:d8:23:25:98:ec:c0:25:1b:6f:
                    74:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:74:C3:53:F9:3F:4F:2F:88:0E:A3:AB:B1:C6:75:FA:CD:BB:60:CD
            X509v3 Authority Key Identifier:
                keyid:2A:B0:F2:FA:0C:96:A3:7B:3C:64:53:94:45:97:DF:3D:F0:C5:D1:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3639B8C/81FF998E8EF311F0B1EF4DCEDAE4EC9C/KrDy-gyWo3s8ZFOURZffPfDF0bc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KrDy-gyWo3s8ZFOURZffPfDF0bc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3639B8C/81FF998E8EF311F0B1EF4DCEDAE4EC9C/KrDy-gyWo3s8ZFOURZffPfDF0bc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:fd:25:ed:79:a1:d3:d1:50:45:2b:c1:1f:28:9e:d3:16:b1:
         19:87:ef:f7:ff:92:dc:e1:0c:89:58:ea:4e:69:88:8b:11:0e:
         bf:51:c9:39:84:db:b1:25:20:75:ab:85:78:92:03:f7:61:8d:
         35:57:10:57:47:48:ff:d2:0f:09:c9:22:08:ba:97:11:2d:9c:
         88:33:48:eb:4c:bf:69:aa:f8:e8:d5:64:e9:95:7c:ca:5a:95:
         7e:24:02:4a:a5:fe:d5:8a:f3:58:94:41:5e:7b:8f:6f:1d:d7:
         4e:23:e1:ad:37:6d:45:21:d8:1e:fb:b3:98:7a:40:c9:53:b2:
         58:b7:47:1c:1e:a5:b6:d3:b1:af:5e:73:7d:98:0e:a2:85:a0:
         e2:c0:b4:13:5e:ff:00:69:12:d0:24:a3:b8:05:cc:b5:26:b8:
         18:a0:ad:da:3b:53:37:ea:3b:4d:cc:f0:36:f6:2a:22:df:ed:
         aa:cb:12:6f:78:9b:1c:a0:5f:7a:0c:5a:fd:95:f1:76:72:ad:
         29:d2:2a:11:f7:4a:22:4c:c9:b3:58:9e:36:41:21:0a:01:24:
         40:63:7f:95:ab:21:57:87:aa:2c:5a:ca:88:e6:d0:bc:2c:83:
         05:12:20:bc:b2:16:9c:72:b3:14:95:20:e8:0f:e6:11:db:be:
         e1:d1:5f:aa
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAUIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MzlCOENBRjExMC8GA1UEBRMoMkFCMEYyRkEwQzk2QTM3QjNDNjQ1Mzk0NDU5N0RG
M0RGMEM1RDFCNzAeFw0yNjA3MjMwNTA5MjZaFw0yNjA3MjUwNTA5MjZaMBgxFjAU
BgNVBAMTDTZhNjFhMjA3LTFmNjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCgrC9X067+1wwIp4yE9pLWjzO/vvYZTaldXk5mMANzh+15FiZKUgol8/cM
78GgtusN5OJdtS4Avcf6eQpIiVwys9ITRU1dVWgOwzn09BQzGopnDsQHlFlJ3enF
722D/zkmgMLVUc8lfzzEh3QtQscL9zmizGkFaXHj9wtX8njtNnXSoaAkuYUWHpM4
Vm4XXiToACvLbTpN1Ebprn9dSVzuP1yTPkuOjQlENndAP0pLGExQNPjZqir3ZnjL
KLxMTzDrX/LarA6COZtV+Mwcd64HtM7zXdtS+6Pk29wCde0cHMiB8T3f1+Ppp72V
TRW4mXb8qQl+89gjJZjswCUbb3SRAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUyHTD
U/k/Ty+IDqOrscZ1+s27YM0wHwYDVR0jBBgwFoAUKrDy+gyWo3s8ZFOURZffPfDF
0bcwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjM5QjhDLzgxRkY5OThFOEVGMzExRjBCMUVGNERDRURBRTRFQzlDL0tyRHkt
Z3lXbzNzOFpGT1VSWmZmUGZERjBiYy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0tyRHktZ3lXbzNzOFpGT1VSWmZmUGZERjBiYy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MzlCOEMvODFGRjk5OEU4RUYzMTFGMEIxRUY0RENFREFF
NEVDOUMvS3JEeS1neVdvM3M4WkZPVVJaZmZQZkRGMGJjLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBW/SXteaHT0VBFK8EfKJ7TFrEZh+/3
/5Lc4QyJWOpOaYiLEQ6/Uck5hNuxJSB1q4V4kgP3YY01VxBXR0j/0g8JySIIupcR
LZyIM0jrTL9pqvjo1WTplXzKWpV+JAJKpf7VivNYlEFee49vHddOI+GtN21FIdge
+7OYekDJU7JYt0ccHqW207GvXnN9mA6ihaDiwLQTXv8AaRLQJKO4Bcy1JrgYoK3a
O1M36jtNzPA29ioi3+2qyxJveJscoF96DFr9lfF2cq0p0ioR90oiTMmzWJ42QSEK
ASRAY3+VqyFXh6osWsqI5tC8LIMFEiC8shaccrMUlSDoD+YR277h0V+q
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:50:53 2026 by rpki-client