Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36429BB/5F4E1BC878AA11E5AB4EDE28F8AEA228/a80vareT2tF2SQgQRK-wMtX7SVc.mft
File:                     a80vareT2tF2SQgQRK-wMtX7SVc.mft (raw, json)
Hash identifier:          g6jwyMrvgIlHbe4klyATkCMsQDYQswD4LnAPJTU5P34=
Subject key identifier:   17:4E:D0:10:1C:8E:DF:49:83:36:C0:E6:75:69:47:A9:C2:8A:A8:A1
Authority key identifier: 6B:CD:2F:6A:B7:93:DA:D1:76:49:08:10:44:AF:B0:32:D5:FB:49:57
Certificate issuer:       /CN=F36429BBAF/serialNumber=6BCD2F6AB793DAD17649081044AFB032D5FB4957
Certificate serial:       0FAB
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/a80vareT2tF2SQgQRK-wMtX7SVc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36429BB/5F4E1BC878AA11E5AB4EDE28F8AEA228/a80vareT2tF2SQgQRK-wMtX7SVc.mft
Manifest number:          0FA9
Signing time:             Fri 24 Jul 2026 00:59:05 +0000
Manifest this update:     Fri 24 Jul 2026 00:59:04 +0000
Manifest next update:     Sun 26 Jul 2026 00:59:04 +0000
Files and hashes:         1: a80vareT2tF2SQgQRK-wMtX7SVc.crl (hash: VOtDrqgZPz1nebt3N3Ev55m4THbH5YAeoj0yXalEOmM=)
                          2: 187EDD9C7AED11E984C8C332F8AEA228.roa (hash: nhY0hDClfKko61UqhvpEoCzSPfAm4A5VUTRq1mCbE5Q=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36429BB/5F4E1BC878AA11E5AB4EDE28F8AEA228/a80vareT2tF2SQgQRK-wMtX7SVc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36429BB/5F4E1BC878AA11E5AB4EDE28F8AEA228/a80vareT2tF2SQgQRK-wMtX7SVc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/a80vareT2tF2SQgQRK-wMtX7SVc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 26 Jul 2026 00:07:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4011 (0xfab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36429BBAF, serialNumber=6BCD2F6AB793DAD17649081044AFB032D5FB4957
        Validity
            Not Before: Jul 24 00:59:04 2026 GMT
            Not After : Jul 26 00:59:04 2026 GMT
        Subject: CN=6a62b8d9-ad61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:35:83:9f:11:4b:e3:5e:09:5d:f9:67:a6:fe:
                    39:13:11:ba:08:85:c3:6a:c6:9d:18:b6:9e:3a:4c:
                    99:94:b1:82:63:01:ae:0d:20:12:aa:e2:2c:83:12:
                    b2:59:e1:ce:ec:62:85:6b:36:da:46:60:b9:c5:6c:
                    1c:d8:df:4b:8b:f7:a7:b9:43:ec:68:b6:3d:80:a2:
                    36:4c:f0:6c:35:72:32:3d:b3:27:c9:72:09:7b:90:
                    cf:af:b8:ef:7d:37:d5:ea:b6:bd:09:58:c7:93:b5:
                    93:10:cd:0a:8e:54:ad:80:9c:a5:cf:a8:ef:4b:26:
                    cb:a6:b9:45:91:2b:3b:95:ab:8a:03:7f:ff:e6:ad:
                    77:4e:01:a0:da:ad:ea:65:9a:a8:df:2c:74:56:f2:
                    c3:76:a1:00:d2:62:8a:99:9f:fe:21:78:65:76:ba:
                    30:7a:db:e6:10:0e:14:68:13:43:8e:ef:6b:ac:9c:
                    41:55:a3:07:de:27:c6:fd:ef:7d:26:f4:2c:5e:df:
                    bb:1d:fd:6f:36:61:7b:7d:5f:0d:e8:05:11:b5:09:
                    dc:7c:60:96:79:1c:48:02:d9:f4:c7:a6:c9:f7:54:
                    de:33:a0:70:10:46:92:5f:8f:fe:1d:fb:88:18:ba:
                    3c:5b:9a:24:2c:da:b2:5c:a4:99:32:d6:cf:a3:ba:
                    6d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:4E:D0:10:1C:8E:DF:49:83:36:C0:E6:75:69:47:A9:C2:8A:A8:A1
            X509v3 Authority Key Identifier:
                keyid:6B:CD:2F:6A:B7:93:DA:D1:76:49:08:10:44:AF:B0:32:D5:FB:49:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36429BB/5F4E1BC878AA11E5AB4EDE28F8AEA228/a80vareT2tF2SQgQRK-wMtX7SVc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/a80vareT2tF2SQgQRK-wMtX7SVc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36429BB/5F4E1BC878AA11E5AB4EDE28F8AEA228/a80vareT2tF2SQgQRK-wMtX7SVc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:a8:f7:2a:09:e7:7e:3c:91:1a:bf:03:45:14:ed:80:cd:e4:
         1d:4e:21:db:03:3c:13:d0:39:83:bf:85:4b:13:27:94:1d:a4:
         e3:b3:65:91:3e:ae:d8:e6:a6:5d:48:2d:5c:88:5d:5b:70:fe:
         6e:66:6c:2c:94:05:56:13:92:f5:e1:c4:d9:a9:b5:6a:21:0d:
         f8:c8:17:e3:57:08:7d:70:e4:18:89:55:5d:3e:91:28:36:24:
         ea:78:3b:16:f7:35:59:c0:a0:5e:2a:1c:2b:31:6b:6f:47:1e:
         06:6e:78:a3:fb:13:c6:14:59:15:b6:e2:b8:16:e7:82:71:d4:
         e9:99:dd:85:5f:87:03:ca:38:fa:2e:98:29:69:42:00:07:11:
         c5:80:44:5e:43:91:73:5f:af:8c:5d:98:63:13:7a:1b:93:e7:
         8b:3e:28:4e:0a:eb:ab:d7:87:25:8d:b5:d1:58:76:48:68:bb:
         f7:c6:7b:2f:1e:d1:e4:4b:20:2a:81:3b:84:a4:58:9f:c6:63:
         3c:dd:18:42:c4:52:6a:83:94:60:01:b0:c4:ac:1a:14:93:6c:
         56:58:48:e0:03:03:03:8a:93:46:8f:69:61:61:76:19:64:0b:
         d7:23:83:11:fe:0f:bc:a6:56:6c:de:d6:3c:a0:a4:0b:0e:c1:
         6d:3a:55:45
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICD6swDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NDI5QkJBRjExMC8GA1UEBRMoNkJDRDJGNkFCNzkzREFEMTc2NDkwODEwNDRBRkIw
MzJENUZCNDk1NzAeFw0yNjA3MjQwMDU5MDRaFw0yNjA3MjYwMDU5MDRaMBgxFjAU
BgNVBAMTDTZhNjJiOGQ5LWFkNjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDRNYOfEUvjXgld+Wem/jkTEboIhcNqxp0Ytp46TJmUsYJjAa4NIBKq4iyD
ErJZ4c7sYoVrNtpGYLnFbBzY30uL96e5Q+xotj2AojZM8Gw1cjI9syfJcgl7kM+v
uO99N9Xqtr0JWMeTtZMQzQqOVK2AnKXPqO9LJsumuUWRKzuVq4oDf//mrXdOAaDa
replmqjfLHRW8sN2oQDSYoqZn/4heGV2ujB62+YQDhRoE0OO72usnEFVowfeJ8b9
730m9Cxe37sd/W82YXt9Xw3oBRG1Cdx8YJZ5HEgC2fTHpsn3VN4zoHAQRpJfj/4d
+4gYujxbmiQs2rJcpJky1s+jum2xAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUF07Q
EByO30mDNsDmdWlHqcKKqKEwHwYDVR0jBBgwFoAUa80vareT2tF2SQgQRK+wMtX7
SVcwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjQyOUJCLzVGNEUxQkM4NzhBQTExRTVBQjRFREUyOEY4QUVBMjI4L2E4MHZh
cmVUMnRGMlNRZ1FSSy13TXRYN1NWYy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2E4MHZhcmVUMnRGMlNRZ1FSSy13TXRYN1NWYy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NDI5QkIvNUY0RTFCQzg3OEFBMTFFNUFCNEVERTI4RjhB
RUEyMjgvYTgwdmFyZVQydEYyU1FnUVJLLXdNdFg3U1ZjLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAVqPcqCed+PJEavwNFFO2AzeQdTiHb
AzwT0DmDv4VLEyeUHaTjs2WRPq7Y5qZdSC1ciF1bcP5uZmwslAVWE5L14cTZqbVq
IQ34yBfjVwh9cOQYiVVdPpEoNiTqeDsW9zVZwKBeKhwrMWtvRx4Gbnij+xPGFFkV
tuK4FueCcdTpmd2FX4cDyjj6LpgpaUIABxHFgEReQ5FzX6+MXZhjE3obk+eLPihO
Cuur14cljbXRWHZIaLv3xnsvHtHkSyAqgTuEpFifxmM83RhCxFJqg5RgAbDErBoU
k2xWWEjgAwMDipNGj2lhYXYZZAvXI4MR/g+8plZs3tY8oKQLDsFtOlVF
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:54:23 2026 by rpki-client