Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363A48B/103FED46574711F0BA585979DAE4EC9C/4-0KKxQeZZxFITmco8yPgYx19x0.mft
File:                     4-0KKxQeZZxFITmco8yPgYx19x0.mft (raw, json)
Hash identifier:          KKKX+P2AWj0+fLvz92KjOv/BmR8Dl50Ql9eXIPkQayI=
Subject key identifier:   DD:82:71:69:79:30:44:1F:CC:7E:DE:FE:76:5E:30:7A:23:47:72:B2
Authority key identifier: E3:ED:0A:2B:14:1E:65:9C:45:21:39:9C:A3:CC:8F:81:8C:75:F7:1D
Certificate issuer:       /CN=F363A48BAF/serialNumber=E3ED0A2B141E659C4521399CA3CC8F818C75F71D
Certificate serial:       018A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/4-0KKxQeZZxFITmco8yPgYx19x0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363A48B/103FED46574711F0BA585979DAE4EC9C/4-0KKxQeZZxFITmco8yPgYx19x0.mft
Manifest number:          0189
Signing time:             Fri 24 Jul 2026 04:58:29 +0000
Manifest this update:     Fri 24 Jul 2026 04:58:28 +0000
Manifest next update:     Sun 26 Jul 2026 04:58:28 +0000
Files and hashes:         1: 4-0KKxQeZZxFITmco8yPgYx19x0.crl (hash: uRDRsRX9zwCDXjyTq6VQXDh2S0eqey9hwdQGHWZeMLw=)
                          2: 075271E4574811F0A7DC6D7EDAE4EC9C.roa (hash: zOGSgi/1KJ9xQcEdBGnV40++jUsJYV1/+BcJ8fXP1w8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363A48B/103FED46574711F0BA585979DAE4EC9C/4-0KKxQeZZxFITmco8yPgYx19x0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363A48B/103FED46574711F0BA585979DAE4EC9C/4-0KKxQeZZxFITmco8yPgYx19x0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/4-0KKxQeZZxFITmco8yPgYx19x0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 26 Jul 2026 00:07:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 394 (0x18a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363A48BAF, serialNumber=E3ED0A2B141E659C4521399CA3CC8F818C75F71D
        Validity
            Not Before: Jul 24 04:58:28 2026 GMT
            Not After : Jul 26 04:58:28 2026 GMT
        Subject: CN=6a62f0f5-f0a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:cb:32:6f:17:59:34:c8:38:ad:19:c0:0c:1c:
                    d7:3a:22:a0:38:f4:a3:86:3f:dd:f7:09:30:63:9e:
                    7d:1b:f6:3c:c5:ec:4f:6a:a7:6a:06:9a:49:e0:82:
                    d9:3d:ba:02:6e:c6:1f:0d:b3:2f:67:c8:f3:cf:82:
                    7a:28:c1:c9:92:55:88:d8:a6:58:45:d7:51:32:da:
                    b0:10:a7:11:c8:6f:65:36:2f:c5:a8:81:4f:6b:7e:
                    4e:cf:53:49:32:95:e5:f4:e5:a6:a8:c3:26:26:ea:
                    8f:a6:1e:e6:d9:6a:72:86:8d:5a:b4:9b:6a:a8:a9:
                    6f:4d:82:bf:c2:c1:8e:e0:09:83:70:9f:a1:90:bd:
                    c0:08:48:0d:77:cd:58:38:1b:76:9c:9f:83:d9:6a:
                    fb:8f:3e:5e:14:77:4e:d4:16:c8:8c:2d:fe:1b:98:
                    e9:d3:a8:62:cc:b3:97:dc:73:d6:c0:2f:42:6f:7b:
                    af:57:d5:94:8d:65:b0:97:bf:c0:1e:ef:c5:44:c5:
                    32:93:f5:13:2b:98:4a:32:09:62:f6:da:81:8d:0d:
                    ac:03:09:0a:77:4e:5a:ea:2e:73:66:42:46:a3:09:
                    66:c3:63:9e:80:56:82:21:20:a1:6d:7c:01:83:bc:
                    29:f1:ad:1c:23:bd:44:2e:43:df:a9:a0:7b:a0:65:
                    1f:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:82:71:69:79:30:44:1F:CC:7E:DE:FE:76:5E:30:7A:23:47:72:B2
            X509v3 Authority Key Identifier:
                keyid:E3:ED:0A:2B:14:1E:65:9C:45:21:39:9C:A3:CC:8F:81:8C:75:F7:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363A48B/103FED46574711F0BA585979DAE4EC9C/4-0KKxQeZZxFITmco8yPgYx19x0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4-0KKxQeZZxFITmco8yPgYx19x0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363A48B/103FED46574711F0BA585979DAE4EC9C/4-0KKxQeZZxFITmco8yPgYx19x0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:15:97:9e:70:4b:ee:9e:28:0f:4e:94:c5:9d:01:51:e0:78:
         46:d1:ab:ca:ad:a6:ff:22:b9:b0:c6:7e:31:28:24:fb:2c:41:
         73:bb:69:03:00:ee:af:99:25:7e:42:b8:1f:3c:a7:32:05:4b:
         f1:23:1d:07:15:e9:4e:ff:0d:a0:30:5a:b0:74:9e:31:0c:18:
         36:f4:17:e8:6d:f6:40:cb:a8:6e:2d:1b:b6:c5:96:4f:83:c3:
         e7:30:9b:15:36:69:08:75:35:71:7c:b9:a1:32:c5:55:3f:77:
         d4:37:c6:7f:bf:6c:e3:f9:db:2b:f3:8e:f3:ae:52:a6:54:a2:
         c8:23:db:59:8c:e4:43:75:d4:07:71:50:1c:d7:ce:f8:13:dd:
         6b:0a:75:9a:ed:39:7c:f4:06:67:15:ff:74:a5:c9:55:e0:58:
         e2:7a:65:87:19:0a:2d:09:47:73:4d:1e:2f:1b:70:4e:38:cc:
         51:87:88:85:3f:f7:fd:39:e4:18:75:a0:28:e4:f4:91:b3:8d:
         ab:55:bf:ee:e3:bf:64:c7:a9:16:58:56:dc:5f:62:56:a0:d3:
         ca:e4:c5:72:dd:fb:e0:fa:6b:49:7e:d7:d1:58:46:c6:7f:83:
         77:3e:0d:d1:fc:f2:90:fa:df:37:46:80:89:78:6f:48:da:87:
         d3:db:7d:2c
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAYowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0E0OEJBRjExMC8GA1UEBRMoRTNFRDBBMkIxNDFFNjU5QzQ1MjEzOTlDQTNDQzhG
ODE4Qzc1RjcxRDAeFw0yNjA3MjQwNDU4MjhaFw0yNjA3MjYwNDU4MjhaMBgxFjAU
BgNVBAMTDTZhNjJmMGY1LWYwYTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDByzJvF1k0yDitGcAMHNc6IqA49KOGP933CTBjnn0b9jzF7E9qp2oGmkng
gtk9ugJuxh8Nsy9nyPPPgnoowcmSVYjYplhF11Ey2rAQpxHIb2U2L8WogU9rfk7P
U0kyleX05aaowyYm6o+mHubZanKGjVq0m2qoqW9Ngr/CwY7gCYNwn6GQvcAISA13
zVg4G3acn4PZavuPPl4Ud07UFsiMLf4bmOnTqGLMs5fcc9bAL0Jve69X1ZSNZbCX
v8Ae78VExTKT9RMrmEoyCWL22oGNDawDCQp3TlrqLnNmQkajCWbDY56AVoIhIKFt
fAGDvCnxrRwjvUQuQ9+poHugZR8dAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU3YJx
aXkwRB/Mft7+dl4weiNHcrIwHwYDVR0jBBgwFoAU4+0KKxQeZZxFITmco8yPgYx1
9x0wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNBNDhCLzEwM0ZFRDQ2NTc0NzExRjBCQTU4NTk3OURBRTRFQzlDLzQtMEtL
eFFlWlp4RklUbWNvOHlQZ1l4MTl4MC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzQtMEtLeFFlWlp4RklUbWNvOHlQZ1l4MTl4MC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2M0E0OEIvMTAzRkVENDY1NzQ3MTFGMEJBNTg1OTc5REFF
NEVDOUMvNC0wS0t4UWVaWnhGSVRtY284eVBnWXgxOXgwLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBvFZeecEvunigPTpTFnQFR4HhG0avK
rab/Irmwxn4xKCT7LEFzu2kDAO6vmSV+QrgfPKcyBUvxIx0HFelO/w2gMFqwdJ4x
DBg29BfobfZAy6huLRu2xZZPg8PnMJsVNmkIdTVxfLmhMsVVP3fUN8Z/v2zj+dsr
847zrlKmVKLII9tZjORDddQHcVAc1874E91rCnWa7Tl89AZnFf90pclV4FjiemWH
GQotCUdzTR4vG3BOOMxRh4iFP/f9OeQYdaAo5PSRs42rVb/u479kx6kWWFbcX2JW
oNPK5MVy3fvg+mtJftfRWEbGf4N3Pg3R/PKQ+t83RoCJeG9I2ofT230s
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:47:26 2026 by rpki-client