Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365CA10/430D8A1674A911EA96CC793EF8AEA228/LnFCh3b4tjGvSw1suVUM0cqUVlU.mft
File:                     LnFCh3b4tjGvSw1suVUM0cqUVlU.mft (raw, json)
Hash identifier:          uzm1VwUM9bAr+JhlGwiL1i3NdpLnjUNr4WE/rF1BOzw=
Subject key identifier:   CA:54:52:4E:57:63:5D:31:62:34:F2:3E:CF:FB:81:ED:67:30:FA:23
Authority key identifier: 2E:71:42:87:76:F8:B6:31:AF:4B:0D:6C:B9:55:0C:D1:CA:94:56:55
Certificate issuer:       /CN=F365CA10AF/serialNumber=2E71428776F8B631AF4B0D6CB9550CD1CA945655
Certificate serial:       0936
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/LnFCh3b4tjGvSw1suVUM0cqUVlU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365CA10/430D8A1674A911EA96CC793EF8AEA228/LnFCh3b4tjGvSw1suVUM0cqUVlU.mft
Manifest number:          0936
Signing time:             Fri 24 Jul 2026 01:44:12 +0000
Manifest this update:     Fri 24 Jul 2026 01:44:11 +0000
Manifest next update:     Sun 26 Jul 2026 01:44:11 +0000
Files and hashes:         1: LnFCh3b4tjGvSw1suVUM0cqUVlU.crl (hash: NKNtLasPJvmJhvbBcnUiV5GW3fxgBvkelDlaU5R/xMs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365CA10/430D8A1674A911EA96CC793EF8AEA228/LnFCh3b4tjGvSw1suVUM0cqUVlU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365CA10/430D8A1674A911EA96CC793EF8AEA228/LnFCh3b4tjGvSw1suVUM0cqUVlU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/LnFCh3b4tjGvSw1suVUM0cqUVlU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 26 Jul 2026 00:07:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2358 (0x936)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365CA10AF, serialNumber=2E71428776F8B631AF4B0D6CB9550CD1CA945655
        Validity
            Not Before: Jul 24 01:44:11 2026 GMT
            Not After : Jul 26 01:44:11 2026 GMT
        Subject: CN=6a62c36c-3b67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:82:ae:df:2e:18:43:f5:4e:5e:2d:e0:d8:1d:
                    80:ca:23:c8:a1:22:e9:60:3f:d4:d9:38:26:f7:d2:
                    3d:a7:b9:b2:82:1f:43:47:6d:bc:06:73:44:b0:13:
                    ca:40:d8:2c:91:02:3f:56:f7:b5:33:b6:5b:40:44:
                    8a:78:96:b1:5f:51:be:06:50:f6:66:b6:21:b6:6a:
                    c3:6d:e7:c7:71:67:dd:40:3d:66:5a:30:6b:b8:eb:
                    f3:63:3a:ca:f1:89:47:fb:19:39:68:36:78:51:47:
                    23:6d:5f:78:b3:91:c9:2b:6a:fb:6b:2d:c9:e2:ab:
                    2a:ec:cd:30:5d:cc:68:09:68:2a:15:34:71:bb:d5:
                    8f:ba:4f:67:5b:60:a2:5d:8b:d1:b2:a8:dc:dc:90:
                    da:c2:9e:c0:f8:61:fa:0c:a9:38:3a:c3:10:f1:55:
                    27:6a:bb:ec:d5:04:0c:2a:76:b6:c2:78:fb:3e:21:
                    b4:85:ca:43:86:10:51:1f:79:d9:05:66:23:9d:3f:
                    13:a2:c7:69:0e:9e:c3:95:0e:e9:c8:db:d3:f4:89:
                    7b:bc:cc:ba:ec:a0:39:a8:6e:f9:3a:e7:22:ab:52:
                    70:74:b0:7c:34:6a:89:2c:b1:88:e3:e5:de:5e:93:
                    87:4c:76:4a:18:f0:e0:d8:9f:99:ae:08:2d:ff:37:
                    fd:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:54:52:4E:57:63:5D:31:62:34:F2:3E:CF:FB:81:ED:67:30:FA:23
            X509v3 Authority Key Identifier:
                keyid:2E:71:42:87:76:F8:B6:31:AF:4B:0D:6C:B9:55:0C:D1:CA:94:56:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365CA10/430D8A1674A911EA96CC793EF8AEA228/LnFCh3b4tjGvSw1suVUM0cqUVlU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LnFCh3b4tjGvSw1suVUM0cqUVlU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365CA10/430D8A1674A911EA96CC793EF8AEA228/LnFCh3b4tjGvSw1suVUM0cqUVlU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:92:ec:ad:42:1f:9c:13:b8:b9:21:5b:0d:77:18:55:bc:3d:
         65:dd:78:4f:a9:99:7d:82:98:44:96:30:32:a9:4c:49:f5:62:
         30:99:f7:18:98:35:fd:10:75:9c:5a:07:f4:b9:50:20:80:d7:
         42:77:44:5f:2f:03:79:f1:f8:c4:c2:5c:45:bd:3b:8e:b7:33:
         f4:aa:da:a8:c5:76:9b:0b:45:5c:7f:97:a1:46:19:8e:44:02:
         c1:6d:a8:96:df:19:81:13:11:59:fb:f6:08:3d:dc:f1:3e:53:
         b8:71:b1:e6:a5:99:cc:60:d5:44:38:e6:f0:98:b3:10:56:1f:
         b3:72:8e:2e:e3:1b:61:69:20:07:27:c7:5b:7b:11:4b:e6:b3:
         fa:42:08:29:a7:64:85:a9:9c:a3:e6:9e:17:a8:62:46:44:93:
         f9:90:69:81:5d:ac:9a:11:ce:da:c0:f3:1b:5b:59:60:80:26:
         d6:39:a1:52:34:e6:71:de:39:3a:11:1e:ed:78:bd:8d:b0:a0:
         b7:ee:b2:c7:6f:3d:b2:34:5f:67:6f:c1:af:c8:77:93:3c:fe:
         04:b8:a6:39:da:e7:03:fe:63:36:14:8b:87:8e:a2:69:32:bc:
         b8:dd:4a:bc:9a:00:df:89:61:a9:e4:50:c4:96:bb:09:e0:13:
         cd:ed:1d:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:49:25 2026 by rpki-client