Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/opdOZzBDJDiMiIAucX1rkoGlJjI.mft
File:                     opdOZzBDJDiMiIAucX1rkoGlJjI.mft (raw, json)
Hash identifier:          c+mrolOBhjg7pCENt3lhzWlUtTQ53zxksuu8t/TBoeA=
Subject key identifier:   D5:E4:08:FF:9D:6D:23:B1:43:05:3C:8D:37:D3:0B:0A:78:A4:74:78
Authority key identifier: A2:97:4E:67:30:43:24:38:8C:88:80:2E:71:7D:6B:92:81:A5:26:32
Certificate issuer:       /CN=F364819CAF/serialNumber=A2974E67304324388C88802E717D6B9281A52632
Certificate serial:       05B4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/opdOZzBDJDiMiIAucX1rkoGlJjI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/opdOZzBDJDiMiIAucX1rkoGlJjI.mft
Manifest number:          05A4
Signing time:             Fri 24 Jul 2026 03:02:33 +0000
Manifest this update:     Fri 24 Jul 2026 03:02:33 +0000
Manifest next update:     Sun 26 Jul 2026 03:02:33 +0000
Files and hashes:         1: opdOZzBDJDiMiIAucX1rkoGlJjI.crl (hash: /9VURhDYTp61W4P96Ve4yL3RddTOb+Ppp6MPJTg3raM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/opdOZzBDJDiMiIAucX1rkoGlJjI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/opdOZzBDJDiMiIAucX1rkoGlJjI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/opdOZzBDJDiMiIAucX1rkoGlJjI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 26 Jul 2026 00:07:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1460 (0x5b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364819CAF, serialNumber=A2974E67304324388C88802E717D6B9281A52632
        Validity
            Not Before: Jul 24 03:02:33 2026 GMT
            Not After : Jul 26 03:02:33 2026 GMT
        Subject: CN=6a62d5c9-86cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:99:ef:7b:7a:0b:98:41:93:aa:11:b4:ff:c6:
                    8a:39:ae:f9:81:2c:11:53:0d:56:c8:a3:35:b8:32:
                    88:a3:f4:98:35:e9:e3:e5:9e:31:e4:d1:be:51:73:
                    54:b5:87:75:df:a2:53:21:ea:54:5a:d5:62:5c:5b:
                    84:ea:12:28:ea:0a:7a:fc:41:89:83:6b:30:db:22:
                    82:7c:8c:2e:92:38:f8:47:e6:50:05:f1:24:38:44:
                    92:2a:b0:a1:48:d4:53:82:cb:3f:a1:22:a4:e5:58:
                    67:2e:b5:1d:b3:8a:df:90:48:c5:98:a1:9a:c8:fb:
                    f9:07:6a:42:f3:1c:2d:08:8e:d7:1b:05:72:72:2e:
                    f9:0d:13:c9:69:37:fa:59:d4:70:93:ac:20:33:e0:
                    52:d9:fb:a8:92:eb:72:fa:8a:66:66:3e:b1:c5:f5:
                    91:02:fe:57:cb:b2:c0:9a:98:b9:1c:63:be:96:a2:
                    6d:b8:d0:a9:8a:6a:72:05:05:47:34:62:49:94:2f:
                    74:a1:62:c4:0a:99:5e:b7:6f:8d:63:a7:f8:c6:80:
                    cf:0d:7a:37:06:37:01:7a:ec:49:66:bc:f4:b6:c2:
                    d1:93:e8:d8:9f:2f:8f:1a:1d:eb:ad:42:ab:6d:f0:
                    f2:47:02:9f:8b:f6:5c:34:61:3f:8c:b0:08:30:dd:
                    be:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:E4:08:FF:9D:6D:23:B1:43:05:3C:8D:37:D3:0B:0A:78:A4:74:78
            X509v3 Authority Key Identifier:
                keyid:A2:97:4E:67:30:43:24:38:8C:88:80:2E:71:7D:6B:92:81:A5:26:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/opdOZzBDJDiMiIAucX1rkoGlJjI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/opdOZzBDJDiMiIAucX1rkoGlJjI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/opdOZzBDJDiMiIAucX1rkoGlJjI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:36:5d:c7:ab:40:a4:91:16:24:31:05:1a:5d:9a:68:d1:ab:
         e1:3f:0e:ee:13:80:d6:c3:a1:6b:c1:52:fa:ed:e6:10:89:04:
         67:35:bf:1b:9e:51:02:d0:81:ce:e6:ab:f4:69:44:e5:9c:c2:
         2f:8a:c6:58:fb:10:fa:16:6d:9f:41:eb:53:dd:8d:64:fa:6e:
         cb:5c:f4:64:45:58:b9:fd:65:53:5b:e9:97:3d:93:06:e6:bd:
         c4:52:6d:aa:61:f4:4a:70:b5:dd:b3:94:08:8d:c5:10:e5:64:
         67:2c:84:23:b9:5a:63:01:59:25:de:7c:31:00:61:1e:97:6e:
         0f:21:3c:b9:23:cd:8f:f3:c4:20:77:0f:94:81:ec:1f:7a:c9:
         06:b3:ed:51:77:6f:e2:55:e0:26:b6:4d:09:48:75:bb:ca:0f:
         90:fd:2b:16:d5:44:b6:21:11:61:e2:8b:8d:e5:d2:af:04:c6:
         43:5a:d0:b9:ca:33:78:90:64:de:8b:0b:62:21:a6:d1:26:40:
         a3:34:47:71:06:f7:a5:0d:34:44:f5:e1:75:c6:09:6d:bc:1e:
         e2:8d:e1:06:e4:00:6d:68:7e:2e:26:ea:9b:89:f3:49:5f:b8:
         30:57:39:d0:5c:01:ba:56:c9:9d:e2:f4:8c:e7:4c:bc:86:c6:
         d2:cc:ec:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:09:51 2026 by rpki-client