Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3668037/2AB390E26DC711E68265362DF8AEA228/MU_85UKRThk8fBoqA8c1dGLqGBY.mft
File:                     MU_85UKRThk8fBoqA8c1dGLqGBY.mft (raw, json)
Hash identifier:          NKzvJI2Ud4beFN6NEe2XZp2QyoCT3BbjMGBb6SBLxC4=
Subject key identifier:   F1:78:23:8C:A1:0F:D7:05:EB:18:5D:5C:2A:D1:13:10:93:BA:36:6E
Authority key identifier: 31:4F:FC:E5:42:91:4E:19:3C:7C:1A:2A:03:C7:35:74:62:EA:18:16
Certificate issuer:       /CN=F3668037AF/serialNumber=314FFCE542914E193C7C1A2A03C7357462EA1816
Certificate serial:       0EC4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/MU_85UKRThk8fBoqA8c1dGLqGBY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3668037/2AB390E26DC711E68265362DF8AEA228/MU_85UKRThk8fBoqA8c1dGLqGBY.mft
Manifest number:          0EA4
Signing time:             Fri 24 Jul 2026 01:03:13 +0000
Manifest this update:     Fri 24 Jul 2026 01:03:12 +0000
Manifest next update:     Sun 26 Jul 2026 01:03:12 +0000
Files and hashes:         1: MU_85UKRThk8fBoqA8c1dGLqGBY.crl (hash: C/pENX7w8g2ax+K3uY1gSDW8clO4MONRkLy8cpBtYo0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3668037/2AB390E26DC711E68265362DF8AEA228/MU_85UKRThk8fBoqA8c1dGLqGBY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3668037/2AB390E26DC711E68265362DF8AEA228/MU_85UKRThk8fBoqA8c1dGLqGBY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/MU_85UKRThk8fBoqA8c1dGLqGBY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 26 Jul 2026 00:07:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3780 (0xec4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3668037AF, serialNumber=314FFCE542914E193C7C1A2A03C7357462EA1816
        Validity
            Not Before: Jul 24 01:03:12 2026 GMT
            Not After : Jul 26 01:03:12 2026 GMT
        Subject: CN=6a62b9d0-18e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a5:56:d0:04:ef:08:c4:69:5c:f7:e3:45:bb:
                    53:6b:ad:08:7f:e5:a5:86:7f:34:87:e8:df:c7:05:
                    6c:f6:6d:f5:0e:c6:59:27:c9:d7:20:4d:e6:2c:89:
                    00:30:f4:b9:2f:a0:9e:d5:c4:79:f2:ac:52:66:e6:
                    e9:fd:18:a6:d2:cf:b1:59:25:64:19:40:99:13:ed:
                    58:0b:e3:6c:aa:8b:41:7b:9d:83:d4:a5:06:85:73:
                    24:4d:c5:c3:e6:73:dc:65:85:d5:5a:f3:72:85:18:
                    ce:a9:8e:61:70:d3:51:e8:0e:92:dd:4a:08:df:f6:
                    55:6d:69:75:c1:64:69:90:59:70:27:82:d9:4b:0d:
                    d1:cf:52:56:ab:62:16:bb:89:d6:9c:7f:1c:ff:4a:
                    c7:88:63:b8:9c:57:e5:cb:89:7d:3b:ef:be:a8:29:
                    9f:fe:28:2c:59:45:de:4c:cb:47:c7:2c:fe:dd:8f:
                    d0:82:5a:6b:ee:b0:ba:91:94:47:20:ac:ab:fd:89:
                    7a:74:f1:3e:28:40:a7:1a:b4:21:db:71:47:c4:f4:
                    0d:cd:18:af:f8:0a:cd:87:c7:7e:6c:41:26:37:56:
                    c2:11:5b:14:5c:2f:fa:13:68:ad:fd:eb:b1:fe:70:
                    26:1b:d0:1d:eb:50:81:27:51:76:8c:63:16:85:bd:
                    ee:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:78:23:8C:A1:0F:D7:05:EB:18:5D:5C:2A:D1:13:10:93:BA:36:6E
            X509v3 Authority Key Identifier:
                keyid:31:4F:FC:E5:42:91:4E:19:3C:7C:1A:2A:03:C7:35:74:62:EA:18:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3668037/2AB390E26DC711E68265362DF8AEA228/MU_85UKRThk8fBoqA8c1dGLqGBY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/MU_85UKRThk8fBoqA8c1dGLqGBY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668037/2AB390E26DC711E68265362DF8AEA228/MU_85UKRThk8fBoqA8c1dGLqGBY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:cc:3e:bb:b9:9f:db:31:94:c3:70:a2:68:f4:84:47:af:dc:
         70:58:bb:90:83:37:1e:1b:2f:7a:70:32:c6:88:30:c2:b5:fb:
         53:ad:a1:c7:09:c0:57:3f:e1:23:d4:4e:d4:f5:c5:8f:84:96:
         04:02:4b:a7:ac:4a:9d:5c:b5:9f:72:45:5c:85:93:9b:d0:5c:
         51:83:50:2a:9a:f3:e9:8e:0e:46:dc:ac:97:7d:27:29:2f:6f:
         2e:48:78:11:62:63:1f:3f:2f:b7:f4:9e:26:cc:93:64:ec:97:
         30:59:57:77:30:86:81:45:64:2b:a7:e7:bf:22:ac:cf:82:a5:
         f1:94:57:0d:79:d6:15:05:cf:b2:2e:02:25:fd:ca:28:f1:56:
         8d:c6:bc:fa:3e:fc:61:bd:d5:90:82:ad:ab:c3:62:a6:de:3d:
         3a:d2:8e:16:b1:96:73:5f:98:f5:00:73:da:95:2a:74:95:bb:
         a8:d3:86:41:47:b5:cf:3f:3b:4c:09:53:16:26:80:4e:fd:a5:
         e2:be:69:00:64:2e:c1:e8:c3:9b:d8:ed:3e:11:e6:a1:76:fb:
         d0:b8:f0:1c:5b:d4:17:70:6a:d0:7c:3e:34:40:b4:6e:bd:8b:
         18:be:b3:ae:ba:f2:c8:c5:e1:de:46:8b:3b:94:a1:34:21:8d:
         44:fb:03:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:57:08 2026 by rpki-client