Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36596DE/965DA4FAB33A11F097B64ACDDAE4EC9C/UpunS83yaGnfBI9JzaZV3lnZgeE.mft
File:                     UpunS83yaGnfBI9JzaZV3lnZgeE.mft (raw, json)
Hash identifier:          S9xOrH1qf75hy4ZoWY338eEn0SJsr/A0JUQrFdy2FTA=
Subject key identifier:   AC:78:B6:CB:D3:75:9F:54:A2:9C:9E:6A:6E:ED:CC:9A:4C:D4:E7:65
Authority key identifier: 52:9B:A7:4B:CD:F2:68:69:DF:04:8F:49:CD:A6:55:DE:59:D9:81:E1
Certificate issuer:       /CN=F36596DEAF/serialNumber=529BA74BCDF26869DF048F49CDA655DE59D981E1
Certificate serial:       0112
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/UpunS83yaGnfBI9JzaZV3lnZgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36596DE/965DA4FAB33A11F097B64ACDDAE4EC9C/UpunS83yaGnfBI9JzaZV3lnZgeE.mft
Manifest number:          0111
Signing time:             Thu 23 Jul 2026 05:11:51 +0000
Manifest this update:     Thu 23 Jul 2026 05:11:51 +0000
Manifest next update:     Sat 25 Jul 2026 05:11:51 +0000
Files and hashes:         1: UpunS83yaGnfBI9JzaZV3lnZgeE.crl (hash: g2aMhd9N1nEpWtGx3rw5wgkCaFMOIGpS1+iibRQ2JN0=)
                          2: 6FAF0A32B3C711F0B62E26D6DAE4EC9C.roa (hash: WZmCRWW8TtxV2D+03+Gg2hGc4lK2ghh6H+qHzsYjVjY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36596DE/965DA4FAB33A11F097B64ACDDAE4EC9C/UpunS83yaGnfBI9JzaZV3lnZgeE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36596DE/965DA4FAB33A11F097B64ACDDAE4EC9C/UpunS83yaGnfBI9JzaZV3lnZgeE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/UpunS83yaGnfBI9JzaZV3lnZgeE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 25 Jul 2026 05:11:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 274 (0x112)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36596DEAF, serialNumber=529BA74BCDF26869DF048F49CDA655DE59D981E1
        Validity
            Not Before: Jul 23 05:11:51 2026 GMT
            Not After : Jul 25 05:11:51 2026 GMT
        Subject: CN=6a61a297-77fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d5:4d:4c:0e:ae:58:59:b6:29:40:ee:60:57:
                    02:25:c9:73:b6:52:b9:5e:14:03:15:2a:80:1b:70:
                    9c:bf:01:00:12:1c:e7:1a:34:21:4d:7e:66:65:09:
                    39:f3:28:e9:6b:d7:f9:5d:ab:1b:c6:e0:81:ae:1a:
                    cf:23:23:65:94:02:32:9c:70:73:d1:44:c2:26:94:
                    a6:fc:b3:24:ad:13:58:f3:57:8f:46:bf:05:f7:71:
                    21:cc:79:bc:af:a0:99:82:d5:0f:e2:54:68:0c:7f:
                    d3:e4:dd:b7:57:1a:78:57:c2:ee:0f:61:ea:3d:ed:
                    17:3d:7c:cd:23:6e:12:94:78:dc:14:45:8c:ed:d9:
                    59:b0:8c:8a:ab:7c:d6:70:c6:31:86:91:6b:6e:02:
                    2c:90:b9:30:cb:47:2c:cb:9c:c4:19:d5:66:47:80:
                    72:71:6d:7b:68:2c:8a:00:f0:9d:33:e2:6e:d5:a4:
                    d1:28:b6:14:b8:bf:63:14:94:e5:37:c0:e8:20:87:
                    1e:10:35:90:4e:70:76:4c:8d:fa:c6:bd:0d:39:a5:
                    f3:b0:8c:37:4f:d9:52:d7:7c:5a:86:15:e2:c0:1a:
                    c4:9a:dd:af:fb:8f:41:f1:0a:bc:e9:93:5e:e0:4c:
                    ff:1c:53:58:8d:93:c3:45:61:be:58:e1:a8:11:5b:
                    5a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:78:B6:CB:D3:75:9F:54:A2:9C:9E:6A:6E:ED:CC:9A:4C:D4:E7:65
            X509v3 Authority Key Identifier:
                keyid:52:9B:A7:4B:CD:F2:68:69:DF:04:8F:49:CD:A6:55:DE:59:D9:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36596DE/965DA4FAB33A11F097B64ACDDAE4EC9C/UpunS83yaGnfBI9JzaZV3lnZgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/UpunS83yaGnfBI9JzaZV3lnZgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36596DE/965DA4FAB33A11F097B64ACDDAE4EC9C/UpunS83yaGnfBI9JzaZV3lnZgeE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:87:05:e9:68:aa:55:1c:35:80:58:d3:b3:06:c4:fe:53:eb:
         f6:a7:9e:95:77:a0:db:85:29:1b:ed:5a:fa:9f:e6:96:28:f7:
         d6:91:5b:16:ec:c2:4d:11:e0:94:f6:e7:3d:8a:b5:a5:61:49:
         3e:a2:f6:18:71:89:7b:48:ce:3b:ec:b5:7a:7a:41:c9:6b:41:
         5f:49:ae:95:32:63:f4:0c:48:e6:cf:23:d5:7e:97:bc:28:72:
         ed:49:c7:01:f0:c7:5c:19:3d:30:a7:7c:6e:26:3b:f7:1b:73:
         80:4d:49:ea:6b:d6:12:be:e0:6d:a4:c9:9a:59:6d:23:0b:47:
         41:ec:da:82:1a:21:a6:49:95:83:b1:79:53:69:05:14:4c:06:
         4e:cb:5e:6a:bb:f6:ee:ca:e4:46:a8:c6:17:a8:e4:ba:70:db:
         cb:42:2c:15:9b:54:26:70:05:70:5b:5f:b9:4a:34:a1:3f:41:
         d0:bf:b8:05:1a:52:f6:92:20:de:3b:e5:58:32:06:6e:6e:e8:
         2a:ec:dc:2d:af:87:28:02:fb:54:81:05:df:74:e7:8f:ee:df:
         9c:a8:68:b0:5f:89:fd:1f:64:de:fc:5c:07:ba:92:22:d5:55:
         25:f5:b1:c9:8c:cf:63:08:ed:0a:7c:76:5f:22:56:e6:66:00:
         32:bb:f6:5b
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICARIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NTk2REVBRjExMC8GA1UEBRMoNTI5QkE3NEJDREYyNjg2OURGMDQ4RjQ5Q0RBNjU1
REU1OUQ5ODFFMTAeFw0yNjA3MjMwNTExNTFaFw0yNjA3MjUwNTExNTFaMBgxFjAU
BgNVBAMTDTZhNjFhMjk3LTc3ZmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCq1U1MDq5YWbYpQO5gVwIlyXO2UrleFAMVKoAbcJy/AQASHOcaNCFNfmZl
CTnzKOlr1/ldqxvG4IGuGs8jI2WUAjKccHPRRMImlKb8syStE1jzV49GvwX3cSHM
ebyvoJmC1Q/iVGgMf9Pk3bdXGnhXwu4PYeo97Rc9fM0jbhKUeNwURYzt2VmwjIqr
fNZwxjGGkWtuAiyQuTDLRyzLnMQZ1WZHgHJxbXtoLIoA8J0z4m7VpNEothS4v2MU
lOU3wOgghx4QNZBOcHZMjfrGvQ05pfOwjDdP2VLXfFqGFeLAGsSa3a/7j0HxCrzp
k17gTP8cU1iNk8NFYb5Y4agRW1rpAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUrHi2
y9N1n1SinJ5qbu3MmkzU52UwHwYDVR0jBBgwFoAUUpunS83yaGnfBI9JzaZV3lnZ
geEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjU5NkRFLzk2NURBNEZBQjMzQTExRjA5N0I2NEFDRERBRTRFQzlDL1VwdW5T
ODN5YUduZkJJOUp6YVpWM2xuWmdlRS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1VwdW5TODN5YUduZkJJOUp6YVpWM2xuWmdlRS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NTk2REUvOTY1REE0RkFCMzNBMTFGMDk3QjY0QUNEREFF
NEVDOUMvVXB1blM4M3lhR25mQkk5SnphWlYzbG5aZ2VFLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA7hwXpaKpVHDWAWNOzBsT+U+v2p56V
d6DbhSkb7Vr6n+aWKPfWkVsW7MJNEeCU9uc9irWlYUk+ovYYcYl7SM477LV6ekHJ
a0FfSa6VMmP0DEjmzyPVfpe8KHLtSccB8MdcGT0wp3xuJjv3G3OATUnqa9YSvuBt
pMmaWW0jC0dB7NqCGiGmSZWDsXlTaQUUTAZOy15qu/buyuRGqMYXqOS6cNvLQiwV
m1QmcAVwW1+5SjShP0HQv7gFGlL2kiDeO+VYMgZubugq7Nwtr4coAvtUgQXfdOeP
7t+cqGiwX4n9H2Te/FwHupIi1VUl9bHJjM9jCO0KfHZfIlbmZgAyu/Zb
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:09:39 2026 by rpki-client