Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363FCC8/C2E12A8ACCF211EA8B7C4133F8AEA228/zES432VSaGhWOxfptlH5NdVgDNA.mft
File:                     zES432VSaGhWOxfptlH5NdVgDNA.mft (raw, json)
Hash identifier:          KGtjQ0YoSS1Qmv+3xMqywjYJhGDms+1WuU6z0l6/fXs=
Subject key identifier:   09:7E:77:EF:03:F9:66:3F:DA:08:C4:25:85:43:F4:35:BF:EB:70:D3
Authority key identifier: CC:44:B8:DF:65:52:68:68:56:3B:17:E9:B6:51:F9:35:D5:60:0C:D0
Certificate issuer:       /CN=F363FCC8AF/serialNumber=CC44B8DF65526868563B17E9B651F935D5600CD0
Certificate serial:       08CF
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/zES432VSaGhWOxfptlH5NdVgDNA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363FCC8/C2E12A8ACCF211EA8B7C4133F8AEA228/zES432VSaGhWOxfptlH5NdVgDNA.mft
Manifest number:          08CB
Signing time:             Fri 24 Jul 2026 01:52:38 +0000
Manifest this update:     Fri 24 Jul 2026 01:52:37 +0000
Manifest next update:     Sun 26 Jul 2026 01:52:37 +0000
Files and hashes:         1: zES432VSaGhWOxfptlH5NdVgDNA.crl (hash: SwY7P6zy48uo/ORdpM0b2BN+iPRLhohaWPNEZIsasBk=)
                          2: C665522E84F911F1AF90E6CACE1D38B0.roa (hash: BlAie0Tlat6KcCr7zSL4GFYwdKacjGVvkC5cmrbXIJU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363FCC8/C2E12A8ACCF211EA8B7C4133F8AEA228/zES432VSaGhWOxfptlH5NdVgDNA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363FCC8/C2E12A8ACCF211EA8B7C4133F8AEA228/zES432VSaGhWOxfptlH5NdVgDNA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/zES432VSaGhWOxfptlH5NdVgDNA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 26 Jul 2026 00:07:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2255 (0x8cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363FCC8AF, serialNumber=CC44B8DF65526868563B17E9B651F935D5600CD0
        Validity
            Not Before: Jul 24 01:52:37 2026 GMT
            Not After : Jul 26 01:52:37 2026 GMT
        Subject: CN=6a62c566-a11a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c6:fa:2e:cc:ed:d0:95:4e:f8:f8:f1:3c:1a:
                    31:f2:84:e2:54:73:ba:b7:1a:e1:56:53:f7:2c:73:
                    8b:e5:f4:72:e7:21:f9:17:c6:20:97:87:a3:f7:7e:
                    84:31:78:b5:e2:17:ea:3c:35:7b:39:28:71:54:5a:
                    1b:43:b0:f3:93:f9:d5:80:52:35:86:ba:ed:e4:69:
                    8a:70:5d:51:a1:22:17:5a:08:7a:60:84:bd:d7:a8:
                    f4:fc:2d:ef:a8:0e:ea:f4:34:80:8b:e0:f4:8f:d0:
                    39:ac:93:a7:c2:f5:3b:34:ca:83:93:76:84:4d:5d:
                    bd:a3:9b:87:ac:ad:a6:aa:1e:42:4f:63:8d:29:10:
                    ff:7a:2c:73:fb:b2:27:ca:72:32:a4:99:db:04:7b:
                    e2:a2:2b:e5:53:51:c6:04:aa:1f:92:df:bd:b1:05:
                    81:c0:2c:98:87:ff:ba:3f:22:a2:0f:5a:6f:85:82:
                    b5:7d:4a:5d:42:8c:e9:b1:7f:52:3a:55:aa:39:89:
                    7b:13:e7:af:ca:d4:ea:c9:02:f8:50:f8:e1:23:26:
                    66:b0:ed:f7:e9:76:53:b2:5a:80:06:0e:af:cd:c2:
                    bf:84:77:08:be:2f:07:93:32:28:dd:9e:36:42:b8:
                    83:a2:9a:8c:c9:94:e0:5a:d5:75:22:b9:57:2d:b2:
                    b0:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:7E:77:EF:03:F9:66:3F:DA:08:C4:25:85:43:F4:35:BF:EB:70:D3
            X509v3 Authority Key Identifier:
                keyid:CC:44:B8:DF:65:52:68:68:56:3B:17:E9:B6:51:F9:35:D5:60:0C:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363FCC8/C2E12A8ACCF211EA8B7C4133F8AEA228/zES432VSaGhWOxfptlH5NdVgDNA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zES432VSaGhWOxfptlH5NdVgDNA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363FCC8/C2E12A8ACCF211EA8B7C4133F8AEA228/zES432VSaGhWOxfptlH5NdVgDNA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:90:bf:34:70:d2:73:f3:bd:60:d5:3c:31:c9:d8:41:fd:a3:
         35:d1:0c:69:7d:07:4c:dd:04:db:71:34:b2:07:d7:f9:6b:81:
         bf:71:35:5a:3d:ef:d7:77:9d:2c:48:5b:5e:fb:82:e2:83:12:
         b5:5b:d7:c9:a4:58:1c:a5:c7:3a:1b:f0:bf:88:fb:b8:1b:52:
         6b:be:56:a2:1a:e6:e6:1b:0d:f9:36:75:80:0e:71:6e:66:64:
         5a:44:1e:90:2c:b0:2b:f6:80:c1:b1:57:18:d5:c8:f2:b2:39:
         76:94:f5:73:58:db:e4:7d:9e:b0:fa:42:79:c1:e1:6f:1b:28:
         9f:cb:6c:17:f4:fd:43:24:01:e8:45:01:93:3b:be:af:12:c8:
         37:1d:45:b5:55:e0:f9:b3:10:dc:20:0d:d4:7c:e5:b6:c7:4c:
         30:1a:86:4c:8e:72:94:5e:5a:76:2d:07:18:51:38:f4:3f:79:
         6b:f0:b3:a5:21:c4:c4:7d:32:5f:03:37:a2:00:0a:dd:d0:e4:
         ec:14:38:4f:69:ae:1e:3c:63:8a:bd:79:bf:06:29:3e:7d:34:
         6e:c7:04:9b:e4:49:f3:2e:fc:7c:fa:04:a3:52:07:0c:46:30:
         9b:24:aa:97:a5:1b:76:37:38:d0:e0:dc:3a:2e:08:4a:d1:22:
         59:53:61:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:44:53 2026 by rpki-client