Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365BF9E/E18FB3DECA2411EDA24C598BF1222468/UsjVbfSu4mPoplESmKYZzpjIrA4.mft
File:                     UsjVbfSu4mPoplESmKYZzpjIrA4.mft (raw, json)
Hash identifier:          lagLCiRF1VGnX8lmtHcDm2n159o/enTUFu+XRiPLI2M=
Subject key identifier:   F0:4F:F8:7F:FA:5B:A3:03:17:B9:F4:6A:B2:54:A9:F3:4B:89:C5:34
Authority key identifier: 52:C8:D5:6D:F4:AE:E2:63:E8:A6:51:12:98:A6:19:CE:98:C8:AC:0E
Certificate issuer:       /CN=F365BF9EAF/serialNumber=52C8D56DF4AEE263E8A6511298A619CE98C8AC0E
Certificate serial:       04E2
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/UsjVbfSu4mPoplESmKYZzpjIrA4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365BF9E/E18FB3DECA2411EDA24C598BF1222468/UsjVbfSu4mPoplESmKYZzpjIrA4.mft
Manifest number:          04E2
Signing time:             Thu 23 Jul 2026 03:20:32 +0000
Manifest this update:     Thu 23 Jul 2026 03:20:31 +0000
Manifest next update:     Sat 25 Jul 2026 03:20:31 +0000
Files and hashes:         1: UsjVbfSu4mPoplESmKYZzpjIrA4.crl (hash: S6VBhE12OZraMo9YCMHjfvkJnFDlXLSGwqZcbBJQnPo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365BF9E/E18FB3DECA2411EDA24C598BF1222468/UsjVbfSu4mPoplESmKYZzpjIrA4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365BF9E/E18FB3DECA2411EDA24C598BF1222468/UsjVbfSu4mPoplESmKYZzpjIrA4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/UsjVbfSu4mPoplESmKYZzpjIrA4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 25 Jul 2026 03:20:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1250 (0x4e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365BF9EAF, serialNumber=52C8D56DF4AEE263E8A6511298A619CE98C8AC0E
        Validity
            Not Before: Jul 23 03:20:31 2026 GMT
            Not After : Jul 25 03:20:31 2026 GMT
        Subject: CN=6a618880-09f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:98:ff:85:ad:53:c5:c6:89:ea:84:cb:df:cc:
                    cd:64:b0:0f:a0:4c:f1:d0:d5:be:1e:47:5e:c7:2d:
                    3b:ca:81:e1:54:8c:cb:1b:51:4f:7e:f4:69:6a:a6:
                    19:43:72:45:8e:36:67:64:03:32:91:26:3d:3d:c1:
                    35:85:c8:4a:81:b2:b4:b9:f7:92:fd:99:93:1e:bd:
                    6d:5d:24:50:69:cd:cf:74:ed:13:6f:d4:c1:46:81:
                    93:00:0a:16:65:f1:1c:d8:4c:8b:bc:b5:b3:6f:5a:
                    71:3a:39:ef:d9:e4:22:16:5e:78:e8:f5:2a:c7:d0:
                    82:e4:57:92:d2:30:cd:96:19:86:49:21:4b:a1:01:
                    7e:2f:2d:b2:74:46:3c:01:78:97:45:41:a8:d9:60:
                    37:48:41:c3:30:69:86:b7:6b:1e:9f:c2:34:4a:1a:
                    6a:22:82:2a:96:52:b7:50:6b:5c:67:c2:11:b4:fa:
                    27:1c:0f:5a:a4:d2:23:7d:45:e7:83:dd:71:58:31:
                    c6:17:d9:6d:cf:dc:2a:80:da:9c:8b:ce:53:0c:38:
                    9d:f0:75:f5:70:b8:47:6e:57:4a:fa:74:2f:73:5c:
                    2f:da:cf:06:89:19:a8:f8:e7:7e:8d:17:c2:12:f5:
                    d0:67:d6:1d:a3:05:99:c1:37:6c:66:d2:0f:f2:2f:
                    89:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:4F:F8:7F:FA:5B:A3:03:17:B9:F4:6A:B2:54:A9:F3:4B:89:C5:34
            X509v3 Authority Key Identifier:
                keyid:52:C8:D5:6D:F4:AE:E2:63:E8:A6:51:12:98:A6:19:CE:98:C8:AC:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365BF9E/E18FB3DECA2411EDA24C598BF1222468/UsjVbfSu4mPoplESmKYZzpjIrA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/UsjVbfSu4mPoplESmKYZzpjIrA4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365BF9E/E18FB3DECA2411EDA24C598BF1222468/UsjVbfSu4mPoplESmKYZzpjIrA4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:10:9e:59:11:e1:b8:f3:7c:50:a9:75:33:fd:e8:c0:e8:21:
         7d:9f:90:97:af:89:68:4c:13:f6:be:11:aa:67:38:f7:6f:37:
         c9:ed:b9:de:0e:58:c1:44:e3:86:28:67:da:32:66:c6:37:8e:
         e9:7b:b1:e7:a7:96:22:9a:38:b0:5c:6d:4c:44:f7:76:ae:68:
         81:e0:2c:63:a6:0b:68:79:04:c0:a0:27:58:f9:1f:5a:81:5b:
         8c:1b:8a:e7:58:44:da:cb:20:1e:ff:e1:18:bc:6f:23:e7:f7:
         ea:12:17:ea:3f:9d:3f:9d:e7:d7:d9:44:29:75:f8:b0:12:a1:
         2e:63:f2:59:f1:07:8d:e2:3f:e4:90:a6:c9:c3:c2:01:a1:1a:
         4e:04:e5:c9:76:d7:da:c1:92:39:2e:e2:56:cc:ef:dc:c7:cd:
         57:c8:be:6c:9f:18:74:9a:50:80:35:5b:d8:6c:da:59:00:d3:
         1d:cc:7a:d5:28:48:aa:b4:57:c5:25:7a:ce:68:d9:42:f5:0f:
         fa:4e:78:7b:c4:fa:1d:49:37:d8:f2:30:40:72:93:3f:05:1f:
         81:13:14:5f:80:e9:d9:bb:0b:40:e8:a9:c5:7e:e5:ac:c5:8a:
         11:fc:38:1e:1b:42:67:0d:cb:08:29:56:ac:eb:2f:03:8f:46:
         d5:89:2c:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:16:58 2026 by rpki-client