Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36592B4/BE3F89E20C2B11EEA3A5016C4AD9E6FC/4sEXgjtyd70rre-ytXfGz5x2TY4.mft
File:                     4sEXgjtyd70rre-ytXfGz5x2TY4.mft (raw, json)
Hash identifier:          JP44iYW/P7g8XBALKSl5YKVlj++TfDCLZ/EjEzjo32c=
Subject key identifier:   76:E8:BB:A6:57:90:FA:AF:A5:1F:14:08:67:CE:10:D0:5B:AB:32:F3
Authority key identifier: E2:C1:17:82:3B:72:77:BD:2B:AD:EF:B2:B5:77:C6:CF:9C:76:4D:8E
Certificate issuer:       /CN=F36592B4AF/serialNumber=E2C117823B7277BD2BADEFB2B577C6CF9C764D8E
Certificate serial:       048A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/4sEXgjtyd70rre-ytXfGz5x2TY4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36592B4/BE3F89E20C2B11EEA3A5016C4AD9E6FC/4sEXgjtyd70rre-ytXfGz5x2TY4.mft
Manifest number:          048A
Signing time:             Fri 24 Jul 2026 03:30:29 +0000
Manifest this update:     Fri 24 Jul 2026 03:30:28 +0000
Manifest next update:     Sun 26 Jul 2026 03:30:28 +0000
Files and hashes:         1: 4sEXgjtyd70rre-ytXfGz5x2TY4.crl (hash: L6XaLc04SzH6I3KJ2Uuj2ab93Kb0roEUvh1BIfg4P/E=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36592B4/BE3F89E20C2B11EEA3A5016C4AD9E6FC/4sEXgjtyd70rre-ytXfGz5x2TY4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36592B4/BE3F89E20C2B11EEA3A5016C4AD9E6FC/4sEXgjtyd70rre-ytXfGz5x2TY4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/4sEXgjtyd70rre-ytXfGz5x2TY4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 26 Jul 2026 00:07:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1162 (0x48a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36592B4AF, serialNumber=E2C117823B7277BD2BADEFB2B577C6CF9C764D8E
        Validity
            Not Before: Jul 24 03:30:28 2026 GMT
            Not After : Jul 26 03:30:28 2026 GMT
        Subject: CN=6a62dc55-f968
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:05:7a:f9:a5:14:2e:3d:1e:93:e6:91:d4:9d:
                    ce:28:b1:3f:d8:0d:59:c6:45:5c:63:49:a3:43:5c:
                    af:a8:ce:28:80:62:2e:f8:84:7b:23:c0:50:62:11:
                    67:a8:a9:9e:38:e9:c0:ed:dd:8d:40:7a:02:74:a0:
                    09:ec:f6:46:3a:8e:00:fc:df:2d:39:39:9f:b9:30:
                    d5:0d:2a:31:a7:e6:80:51:a2:8f:0e:34:3e:67:41:
                    52:e2:78:06:6f:5c:17:ad:4e:e4:8a:1e:00:e5:71:
                    bf:29:d0:0d:4b:23:20:57:0f:49:7f:9f:ec:5e:be:
                    f8:d1:6d:b6:8d:9e:ff:a6:1a:0c:b3:90:52:8a:07:
                    16:70:1b:fa:39:53:6d:21:8f:19:a0:a8:8c:04:58:
                    f3:ed:d6:4e:09:a0:93:85:de:70:ca:bb:f4:24:36:
                    67:4a:5f:51:bc:ef:0c:d0:11:cd:02:4a:c0:03:d9:
                    39:79:20:2f:73:e4:b3:a4:6b:e9:a5:0a:84:80:7c:
                    29:cc:6f:69:98:51:7d:f6:f7:f1:66:cf:04:c4:d1:
                    db:b4:42:be:a8:21:e0:5c:0c:39:8e:e1:30:91:ee:
                    c1:5d:76:f0:4b:7c:06:df:d2:6c:af:d3:8f:58:b3:
                    e5:42:8d:ec:1b:97:21:88:5b:ed:87:99:5d:93:d9:
                    ff:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:E8:BB:A6:57:90:FA:AF:A5:1F:14:08:67:CE:10:D0:5B:AB:32:F3
            X509v3 Authority Key Identifier:
                keyid:E2:C1:17:82:3B:72:77:BD:2B:AD:EF:B2:B5:77:C6:CF:9C:76:4D:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36592B4/BE3F89E20C2B11EEA3A5016C4AD9E6FC/4sEXgjtyd70rre-ytXfGz5x2TY4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4sEXgjtyd70rre-ytXfGz5x2TY4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36592B4/BE3F89E20C2B11EEA3A5016C4AD9E6FC/4sEXgjtyd70rre-ytXfGz5x2TY4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:70:20:93:06:5f:4c:32:62:9d:20:1b:a7:f5:6b:e7:de:08:
         8c:cb:ae:48:22:f8:28:dc:d8:8b:9a:9f:60:d1:0e:37:ff:f0:
         1c:67:f5:6e:b4:d3:ae:bc:79:12:f5:ed:d9:29:b3:0b:76:80:
         87:94:93:64:bc:4c:f6:e9:d7:e3:36:07:3f:7d:d0:0b:bb:38:
         dc:e6:ab:ee:f0:5b:40:5a:cf:19:e3:c6:58:7a:9a:d6:19:db:
         a8:b4:b3:ff:bd:75:ec:38:68:a8:23:cd:f2:0d:f2:9a:3c:88:
         ce:94:1a:30:2a:56:4f:12:08:ea:9f:14:5d:5a:37:50:9b:92:
         7b:f1:06:75:41:bc:ce:28:66:51:99:59:af:4d:13:7f:7d:29:
         49:a2:92:91:e8:a8:4b:49:d3:78:b1:0e:82:02:d2:55:d8:8c:
         a5:09:42:f5:d1:c0:6f:cf:bd:a4:98:45:37:9e:f9:09:cf:b2:
         9d:c5:bc:f9:29:dc:1c:8f:1c:47:cc:5f:26:4e:0c:ec:51:d1:
         2f:c7:47:01:f3:30:ff:7d:bd:a6:a0:c3:65:41:7f:d7:ae:7c:
         e5:50:d7:ae:95:a0:12:41:58:a3:e5:a4:c7:ee:20:92:8e:27:
         bd:38:a1:90:4d:f0:23:13:f5:1d:73:f6:79:40:db:8f:f5:fb:
         4b:1a:d5:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:48:44 2026 by rpki-client