Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363C396/CAE0D4D81E9C11EFBCA1A4227DDC24C2/iO95xkHBXokYHnKdSKj-bnPOJac.mft
File:                     iO95xkHBXokYHnKdSKj-bnPOJac.mft (raw, json)
Hash identifier:          U/T8XeLMHxfkriqzxBp4gdsZaUY7nROG2iO2HFiysqg=
Subject key identifier:   1E:A9:BB:4C:02:5D:5A:8B:66:42:ED:55:D8:6B:02:3E:53:D3:56:0B
Authority key identifier: 88:EF:79:C6:41:C1:5E:89:18:1E:72:9D:48:A8:FE:6E:73:CE:25:A7
Certificate issuer:       /CN=F363C396AF/serialNumber=88EF79C641C15E89181E729D48A8FE6E73CE25A7
Certificate serial:       0323
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/iO95xkHBXokYHnKdSKj-bnPOJac.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363C396/CAE0D4D81E9C11EFBCA1A4227DDC24C2/iO95xkHBXokYHnKdSKj-bnPOJac.mft
Manifest number:          0322
Signing time:             Fri 24 Jul 2026 04:12:49 +0000
Manifest this update:     Fri 24 Jul 2026 04:12:48 +0000
Manifest next update:     Sun 26 Jul 2026 04:12:48 +0000
Files and hashes:         1: iO95xkHBXokYHnKdSKj-bnPOJac.crl (hash: HwuR1sHC9oDwkizOUHJwKPbWAREH8nW3NrMnA7v7IDg=)
                          2: AB00E3321E9D11EFAD20E30A7DDC24C2.roa (hash: jczqBl4rLfWV3D8zqP6XHofdCAQZu3xZe0wHy+hc42o=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363C396/CAE0D4D81E9C11EFBCA1A4227DDC24C2/iO95xkHBXokYHnKdSKj-bnPOJac.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363C396/CAE0D4D81E9C11EFBCA1A4227DDC24C2/iO95xkHBXokYHnKdSKj-bnPOJac.mft
                          rsync://rpki.afrinic.net/repository/afrinic/iO95xkHBXokYHnKdSKj-bnPOJac.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 26 Jul 2026 00:07:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 803 (0x323)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363C396AF, serialNumber=88EF79C641C15E89181E729D48A8FE6E73CE25A7
        Validity
            Not Before: Jul 24 04:12:48 2026 GMT
            Not After : Jul 26 04:12:48 2026 GMT
        Subject: CN=6a62e640-a6aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9b:10:44:e8:67:fe:56:c3:05:2f:24:ab:1d:
                    84:1c:03:d3:de:5b:49:de:27:4d:16:08:6b:f3:54:
                    43:79:d0:5d:f9:29:01:f0:66:b7:fe:0c:13:06:52:
                    4a:a1:bd:07:1a:c2:23:b9:a8:33:93:fe:dc:f9:09:
                    c6:c8:79:40:36:db:42:77:0c:2d:a3:82:ae:0d:2d:
                    0c:8b:e8:f9:e0:57:c4:1d:8d:02:01:fd:b6:df:c4:
                    f0:95:d4:e7:f9:b5:d5:e6:79:03:1e:82:4f:42:c4:
                    9f:97:df:f4:c4:2c:b5:d4:9d:2e:66:90:08:33:87:
                    ad:aa:7a:d1:51:63:01:41:6d:09:22:b4:42:4c:c5:
                    64:43:0e:ab:5d:06:5b:72:16:ea:54:f4:a2:8b:6b:
                    93:ad:e9:85:dc:0a:00:0f:35:34:f1:1c:c3:04:60:
                    1e:9e:b1:da:74:14:f5:85:5e:ad:a4:b6:c1:7f:31:
                    12:72:de:b2:ab:20:0a:bb:28:fc:fc:67:ed:cb:a0:
                    a5:6d:cd:aa:fb:b8:ff:a5:13:c6:ec:d5:7f:90:da:
                    64:cb:40:23:e9:65:bc:57:67:89:13:45:04:5b:0d:
                    e1:c8:2f:f5:fe:44:e0:fc:5b:58:64:67:a5:eb:3b:
                    e0:10:42:1d:f0:67:c3:f5:98:8f:90:b8:e2:c3:aa:
                    48:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:A9:BB:4C:02:5D:5A:8B:66:42:ED:55:D8:6B:02:3E:53:D3:56:0B
            X509v3 Authority Key Identifier:
                keyid:88:EF:79:C6:41:C1:5E:89:18:1E:72:9D:48:A8:FE:6E:73:CE:25:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363C396/CAE0D4D81E9C11EFBCA1A4227DDC24C2/iO95xkHBXokYHnKdSKj-bnPOJac.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/iO95xkHBXokYHnKdSKj-bnPOJac.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363C396/CAE0D4D81E9C11EFBCA1A4227DDC24C2/iO95xkHBXokYHnKdSKj-bnPOJac.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:e4:41:44:9b:eb:95:ba:d5:38:5d:d8:97:e7:4e:73:ba:9a:
         05:f2:3b:21:06:58:98:f8:43:53:95:33:2a:34:8c:42:c8:90:
         0d:ab:a7:8d:b4:db:fe:ca:64:aa:53:24:93:e9:61:71:df:12:
         ee:a7:c9:85:64:7e:7f:8a:9c:8e:a5:2b:42:67:28:c4:0e:30:
         17:76:1d:ab:ae:02:bf:80:f5:30:c7:e0:5b:0e:61:a3:ae:16:
         19:b5:f5:1d:07:c1:1d:f2:bc:aa:b5:96:99:47:d1:32:4a:3d:
         0d:fe:41:02:a3:59:67:8e:13:94:67:df:bc:9c:f0:a9:a1:b3:
         92:d9:45:eb:68:c7:62:d8:fe:e8:16:a0:d8:8b:98:ac:81:f1:
         36:c2:5d:64:3e:5f:88:2f:8d:4c:2a:01:b7:30:ef:e6:53:85:
         a3:00:01:e7:cb:10:07:26:93:5a:35:e3:aa:5c:ca:ce:e1:4d:
         b9:30:c3:d6:4d:f1:d8:1b:a0:d1:17:43:8e:a7:f7:34:d1:b5:
         e8:32:f6:35:e8:63:f3:69:41:55:c2:8c:6a:2a:c3:93:ff:94:
         10:1d:09:14:fa:67:78:2f:68:95:19:fe:cc:06:39:3e:26:b2:
         f4:c1:ec:98:f0:3d:4e:b2:47:08:bc:93:0e:d4:58:bf:2f:32:
         d2:6c:05:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:38:37 2026 by rpki-client