Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3650567/33E3302674BA11EEAA94C1734AD9E6FC/X8N97OtwCLunQTR4RbdrR2d66mk.mft
File:                     X8N97OtwCLunQTR4RbdrR2d66mk.mft (raw, json)
Hash identifier:          BTpRXnx/nFJdGBpUHV1ehrwCoFtxt61AMblOp5B9qd4=
Subject key identifier:   25:73:A7:28:C5:5E:CA:06:49:D4:19:F1:18:BA:8A:52:7A:CE:BA:06
Authority key identifier: 5F:C3:7D:EC:EB:70:08:BB:A7:41:34:78:45:B7:6B:47:67:7A:EA:69
Certificate issuer:       /CN=F3650567AF/serialNumber=5FC37DECEB7008BBA741347845B76B47677AEA69
Certificate serial:       0417
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/X8N97OtwCLunQTR4RbdrR2d66mk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3650567/33E3302674BA11EEAA94C1734AD9E6FC/X8N97OtwCLunQTR4RbdrR2d66mk.mft
Manifest number:          040E
Signing time:             Fri 24 Jul 2026 03:46:20 +0000
Manifest this update:     Fri 24 Jul 2026 03:46:19 +0000
Manifest next update:     Sun 26 Jul 2026 03:46:19 +0000
Files and hashes:         1: X8N97OtwCLunQTR4RbdrR2d66mk.crl (hash: NY7jRBaYZ7x3e+YX/lzTi4aAasp6BT1WE17Ax3Qba5A=)
                          2: BFAA8AC8221E11F192CFBEB7DAE4EC9C.roa (hash: QgCzz1u02jAncdSqmMDgneUgSDpivS4kunm1jBqDAMg=)
                          3: AE083B9A221D11F1B6A7C7B1DAE4EC9C.roa (hash: BZz928+JG9DymUs/tfXn2o5xj9tzz1PFhKTIyjMNWuU=)
                          4: 6DA5A2565FD511EFA88ABB88762E951A.roa (hash: ro2wQBC/RLqE0zVlMpswfR5i9xWzti7o20ft60EsccY=)
                          5: EEED23E0221E11F1929878B9DAE4EC9C.roa (hash: PIbvfw2+WuzsuifwkM5C+2Xq3LEZFo6ygJtOvVyzU5Q=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3650567/33E3302674BA11EEAA94C1734AD9E6FC/X8N97OtwCLunQTR4RbdrR2d66mk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3650567/33E3302674BA11EEAA94C1734AD9E6FC/X8N97OtwCLunQTR4RbdrR2d66mk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/X8N97OtwCLunQTR4RbdrR2d66mk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 26 Jul 2026 00:07:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1047 (0x417)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3650567AF, serialNumber=5FC37DECEB7008BBA741347845B76B47677AEA69
        Validity
            Not Before: Jul 24 03:46:19 2026 GMT
            Not After : Jul 26 03:46:19 2026 GMT
        Subject: CN=6a62e00c-240a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:95:20:05:44:20:6e:e2:70:98:93:4b:7a:75:
                    c8:18:b3:c2:7b:5e:5f:36:97:94:7f:a1:15:01:a6:
                    12:a2:79:d4:71:f4:55:19:8b:85:36:18:35:b6:df:
                    fc:4f:47:96:f9:f8:d0:ec:1d:48:a2:78:90:f1:6a:
                    ae:bf:90:36:6f:8f:ff:0e:f4:45:1a:56:93:0e:e2:
                    57:ae:01:2e:ee:a3:b2:1a:29:53:84:07:35:ab:21:
                    54:11:d6:0f:87:7c:66:fc:84:e4:ff:fc:d0:68:c3:
                    47:2d:cd:16:41:91:ff:91:66:b3:e5:3c:42:9b:fb:
                    28:f0:c4:aa:47:b2:33:e3:86:5b:e2:3d:fa:93:11:
                    88:f7:50:53:9e:98:a3:0b:58:10:4d:d7:a5:84:00:
                    2b:7c:c4:d7:f9:d2:ca:b0:31:75:72:f8:76:db:59:
                    0a:a3:1f:1b:e9:c3:f5:86:53:78:fa:d3:42:3e:89:
                    52:a0:16:50:77:c9:16:12:0f:9e:6a:54:e0:d5:b9:
                    1c:f9:e6:66:94:0b:5b:11:32:b0:50:25:ec:36:b8:
                    52:f8:90:d0:96:15:e0:0d:d5:41:62:f5:03:f1:77:
                    9e:5d:b8:42:0c:46:22:6d:cc:1f:9c:e8:28:3f:5a:
                    96:e2:57:25:32:d7:26:3b:d6:31:19:5d:5e:bb:fe:
                    65:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:73:A7:28:C5:5E:CA:06:49:D4:19:F1:18:BA:8A:52:7A:CE:BA:06
            X509v3 Authority Key Identifier:
                keyid:5F:C3:7D:EC:EB:70:08:BB:A7:41:34:78:45:B7:6B:47:67:7A:EA:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3650567/33E3302674BA11EEAA94C1734AD9E6FC/X8N97OtwCLunQTR4RbdrR2d66mk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/X8N97OtwCLunQTR4RbdrR2d66mk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3650567/33E3302674BA11EEAA94C1734AD9E6FC/X8N97OtwCLunQTR4RbdrR2d66mk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:1b:01:cc:25:da:5f:cc:8d:e8:7d:d3:02:1f:3d:ca:38:51:
         6a:11:83:43:43:03:ad:4e:2a:72:0f:d2:4f:91:88:0e:03:70:
         84:33:90:8d:31:b9:0f:3c:bb:69:01:53:b5:c3:59:04:d9:f2:
         34:1e:2b:80:f0:e8:ba:4f:89:e5:44:2c:e0:a9:7e:22:94:44:
         fb:88:79:0f:ae:f3:29:e7:88:2f:43:89:0d:53:4a:cf:53:20:
         47:f1:a4:bf:0a:dd:2d:4b:c0:04:7f:8e:7b:85:ea:11:81:1e:
         11:2f:26:d5:f7:88:a0:5c:25:37:35:26:d5:b6:ed:12:03:37:
         54:4d:6d:a1:9c:e3:74:86:b5:37:e9:16:d7:36:cd:4d:80:b7:
         e7:98:2f:3c:50:82:cb:36:5c:4e:5d:e0:e8:8d:6d:64:6b:e8:
         f0:6e:d1:a4:f6:02:b9:d1:fd:35:d7:f7:02:11:b0:e4:52:7b:
         bf:6e:52:db:01:0e:0a:3d:3c:d3:3f:59:16:f1:e9:fd:b4:fe:
         5d:fb:7d:d1:ff:5e:3e:ba:bb:88:8c:1f:74:cc:b4:aa:28:19:
         9a:03:56:67:87:04:d6:e9:ec:06:18:57:83:44:7f:c6:28:e1:
         75:93:3d:91:9b:a1:bc:25:1b:d8:55:a7:cf:10:78:9e:86:57:
         5c:13:f2:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:08:19 2026 by rpki-client