Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3642818/9224B30A49FD11ED86901991F1222468/jq1LkUtvfJKOEv440cRAvFMJwTM.mft
File:                     jq1LkUtvfJKOEv440cRAvFMJwTM.mft (raw, json)
Hash identifier:          v3QNny0fSW5Uza+PfuPYjFihL3XLly4FBTVgAlr6JyE=
Subject key identifier:   29:C8:95:66:2B:9B:3D:36:00:84:EE:87:F9:04:08:37:7B:76:D2:9D
Authority key identifier: 8E:AD:4B:91:4B:6F:7C:92:8E:12:FE:38:D1:C4:40:BC:53:09:C1:33
Certificate issuer:       /CN=F3642818AF/serialNumber=8EAD4B914B6F7C928E12FE38D1C440BC5309C133
Certificate serial:       0597
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/jq1LkUtvfJKOEv440cRAvFMJwTM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3642818/9224B30A49FD11ED86901991F1222468/jq1LkUtvfJKOEv440cRAvFMJwTM.mft
Manifest number:          0592
Signing time:             Fri 24 Jul 2026 03:00:56 +0000
Manifest this update:     Fri 24 Jul 2026 03:00:56 +0000
Manifest next update:     Sun 26 Jul 2026 03:00:56 +0000
Files and hashes:         1: jq1LkUtvfJKOEv440cRAvFMJwTM.crl (hash: Uo2eI3sWfS+R+ZOrD7p3ckgVKGqMFrVjJwACLhDYspI=)
                          2: 45D1D714068B11F1B2B0DFC5DAE4EC9C.roa (hash: k+Zzix2q4ja3ETayVUtqKJofOjoyeVoddBz/cw7MwUo=)
                          3: 7318CAFC068B11F1B3ADE4C5DAE4EC9C.roa (hash: n40nUjLwRlCqHskgafPlAGCOiGivJPI1YmSXzTyPafc=)
                          4: 01C2346A068B11F1BC83A6C5DAE4EC9C.roa (hash: 4GrU3dea3pBBteCk+wcUG3w5UC1FXBPW1sooz5OsDs0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3642818/9224B30A49FD11ED86901991F1222468/jq1LkUtvfJKOEv440cRAvFMJwTM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3642818/9224B30A49FD11ED86901991F1222468/jq1LkUtvfJKOEv440cRAvFMJwTM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/jq1LkUtvfJKOEv440cRAvFMJwTM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 26 Jul 2026 00:07:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1431 (0x597)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3642818AF, serialNumber=8EAD4B914B6F7C928E12FE38D1C440BC5309C133
        Validity
            Not Before: Jul 24 03:00:56 2026 GMT
            Not After : Jul 26 03:00:56 2026 GMT
        Subject: CN=6a62d568-5597
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:9d:1e:c7:80:9a:57:52:07:a6:62:51:d8:18:
                    8c:bc:17:0e:95:a1:8e:85:31:ec:83:b2:e9:34:af:
                    82:c6:7e:15:b9:e0:66:43:7f:14:0a:99:31:53:e0:
                    74:ce:5d:24:02:a1:8a:dc:0e:17:08:c0:1c:68:45:
                    93:02:9d:5a:57:25:6d:05:98:be:ba:ac:fe:fd:67:
                    af:d9:7b:00:3b:f2:65:89:d6:ff:76:8f:7b:78:f2:
                    f1:e5:47:32:fb:d0:a2:75:65:47:ba:b4:3e:1e:21:
                    93:e2:71:d6:2d:89:17:1f:e7:87:e5:65:ab:d0:6d:
                    77:04:97:e4:3f:9c:56:51:88:f9:40:7f:2c:95:46:
                    41:de:83:47:13:d3:d3:74:74:33:d0:01:a4:d1:0d:
                    da:07:78:41:d6:8e:1c:c8:1a:a4:de:ad:aa:40:7e:
                    ff:11:5f:c0:f2:79:64:15:1b:b0:93:4d:32:79:8e:
                    20:65:58:50:cb:3c:88:c0:9a:6a:10:9c:21:dd:37:
                    8a:ae:41:66:d6:1b:52:28:06:4f:ae:b0:ba:de:2b:
                    4a:b3:00:a3:63:72:0d:79:e0:28:e1:bc:d6:86:1d:
                    0e:ad:06:d5:13:0d:f8:7e:03:75:b2:8c:7e:54:ae:
                    ba:04:f5:68:a5:10:fc:3a:d4:e7:d1:c6:d3:84:59:
                    f0:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:C8:95:66:2B:9B:3D:36:00:84:EE:87:F9:04:08:37:7B:76:D2:9D
            X509v3 Authority Key Identifier:
                keyid:8E:AD:4B:91:4B:6F:7C:92:8E:12:FE:38:D1:C4:40:BC:53:09:C1:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3642818/9224B30A49FD11ED86901991F1222468/jq1LkUtvfJKOEv440cRAvFMJwTM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/jq1LkUtvfJKOEv440cRAvFMJwTM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3642818/9224B30A49FD11ED86901991F1222468/jq1LkUtvfJKOEv440cRAvFMJwTM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:8f:23:db:d5:a7:74:30:57:f0:d1:62:4e:9d:b6:42:7e:2f:
         da:0b:dc:59:29:80:aa:75:84:df:b6:7e:2b:da:be:4d:c1:b6:
         3a:37:ed:c5:90:38:b9:56:2d:08:87:cd:2a:d9:7e:ac:0e:98:
         05:5e:fc:ff:47:5f:30:74:fe:e2:31:8c:86:e1:14:a5:fa:9f:
         90:6b:5e:e7:8a:1c:3f:6e:85:fa:8f:ca:66:5b:a9:00:fc:8f:
         88:b2:22:9e:ef:7a:60:fa:ed:88:96:fc:21:ab:d2:33:23:b5:
         26:48:65:56:ff:bc:88:28:57:b2:d3:60:9f:5d:57:9f:35:33:
         cf:c6:51:c1:22:88:a0:86:27:3c:a0:95:3f:8d:e3:3d:e4:d8:
         60:15:bd:14:5e:0a:13:33:b1:04:6e:cd:99:4c:35:46:fc:ab:
         ba:fc:d1:7b:28:d8:f8:74:87:fc:ad:b0:05:fd:3b:c4:71:ca:
         97:a0:4c:11:41:46:19:4f:93:2e:fb:0e:08:15:7a:a9:1e:94:
         46:97:a2:d7:2c:6d:93:81:cb:e4:bf:8c:3a:47:2a:40:51:f0:
         b2:d4:2e:46:46:f4:df:55:12:68:ee:01:02:3e:d6:71:1a:49:
         ed:73:1c:19:a3:76:ea:ba:95:c3:bf:e8:7b:bb:4a:29:57:5d:
         9f:fc:81:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:22:36 2026 by rpki-client