Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366F191/1DA5A51E07F711E79CDBB30AF8AEA228/pz69jeko0iBEFPgOnBKclZ18RIk.mft
File:                     pz69jeko0iBEFPgOnBKclZ18RIk.mft (raw, json)
Hash identifier:          m0+5SWirAS5WLa5GhJMby2QJOf1to3VBi5TYgxwfwxQ=
Subject key identifier:   14:E9:7A:43:06:8E:C6:FB:E6:A5:38:17:15:C9:28:45:0A:04:B8:86
Authority key identifier: A7:3E:BD:8D:E9:28:D2:20:44:14:F8:0E:9C:12:9C:95:9D:7C:44:89
Certificate issuer:       /CN=F366F191AF/serialNumber=A73EBD8DE928D2204414F80E9C129C959D7C4489
Certificate serial:       0DA6
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/pz69jeko0iBEFPgOnBKclZ18RIk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366F191/1DA5A51E07F711E79CDBB30AF8AEA228/pz69jeko0iBEFPgOnBKclZ18RIk.mft
Manifest number:          0DA4
Signing time:             Fri 24 Jul 2026 01:07:37 +0000
Manifest this update:     Fri 24 Jul 2026 01:07:36 +0000
Manifest next update:     Sun 26 Jul 2026 01:07:36 +0000
Files and hashes:         1: pz69jeko0iBEFPgOnBKclZ18RIk.crl (hash: 5tjy40nEXIgvOc7183mJxJsCbKKw/BXAQldSY6vdmBE=)
                          2: A5F505EE310A11E89814DE46F8AEA228.roa (hash: G7wALW0FIkxQXpAJOH3ldp5an+aZ2+T0e/6OMG97saU=)
                          3: E7F9C2D60E4C11E795956341F8AEA228.roa (hash: emeNnLebc/Q9zvHY298LJgCEJ9keSysC0t/xMmR8occ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366F191/1DA5A51E07F711E79CDBB30AF8AEA228/pz69jeko0iBEFPgOnBKclZ18RIk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366F191/1DA5A51E07F711E79CDBB30AF8AEA228/pz69jeko0iBEFPgOnBKclZ18RIk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/pz69jeko0iBEFPgOnBKclZ18RIk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 26 Jul 2026 00:07:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3494 (0xda6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366F191AF, serialNumber=A73EBD8DE928D2204414F80E9C129C959D7C4489
        Validity
            Not Before: Jul 24 01:07:36 2026 GMT
            Not After : Jul 26 01:07:36 2026 GMT
        Subject: CN=6a62bad9-9d48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:5d:26:44:56:e1:05:d6:3d:9e:5e:10:f1:14:
                    85:86:63:34:5c:f4:e6:49:a1:1c:a4:fd:73:c0:05:
                    9d:f0:b5:23:69:28:e9:10:01:28:52:a5:47:e4:c2:
                    80:fa:a6:41:fd:ce:c0:50:f6:08:67:d5:fe:ba:f4:
                    b4:ab:e5:a0:23:da:c8:35:c2:0b:10:65:60:2c:54:
                    01:59:40:a0:8b:24:5a:ab:20:93:ee:24:07:97:44:
                    51:01:15:23:b1:b8:64:31:8b:a1:e9:4d:b3:02:2a:
                    84:e1:0a:1f:8a:e2:17:37:3c:89:42:4a:0a:15:d1:
                    f6:92:5c:67:68:5c:40:1a:98:5b:75:47:97:47:2f:
                    89:b7:bb:42:b2:f9:80:ae:9c:e6:9b:13:71:70:51:
                    8d:3f:69:96:30:37:04:12:27:5a:ad:9b:6b:12:07:
                    18:2a:17:de:53:f8:8d:7a:f2:e6:99:a3:e7:ef:c4:
                    7e:e5:b7:fd:f3:c6:2b:a6:74:25:7b:92:ee:bd:d2:
                    9a:06:a8:58:d1:ff:d0:74:c2:50:3c:8d:74:81:97:
                    a4:7d:5d:7f:af:c5:ce:dc:be:9d:86:55:15:d3:37:
                    c6:d6:2a:32:d8:67:b7:cb:17:6f:5e:70:67:4a:09:
                    df:b5:de:12:cd:40:11:f5:97:f9:b7:f8:da:c3:7d:
                    a2:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:E9:7A:43:06:8E:C6:FB:E6:A5:38:17:15:C9:28:45:0A:04:B8:86
            X509v3 Authority Key Identifier:
                keyid:A7:3E:BD:8D:E9:28:D2:20:44:14:F8:0E:9C:12:9C:95:9D:7C:44:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366F191/1DA5A51E07F711E79CDBB30AF8AEA228/pz69jeko0iBEFPgOnBKclZ18RIk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/pz69jeko0iBEFPgOnBKclZ18RIk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366F191/1DA5A51E07F711E79CDBB30AF8AEA228/pz69jeko0iBEFPgOnBKclZ18RIk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:1c:ec:e0:3b:dc:02:2c:ac:17:ee:1c:30:58:37:d5:0f:89:
         b7:f8:0e:d2:c7:1b:03:7d:07:d0:95:96:29:5e:5e:ba:75:c9:
         01:b7:43:b3:c8:89:5a:05:d2:4d:12:0d:f3:35:46:bc:40:57:
         5d:87:36:47:2d:52:0f:61:7c:6d:4f:be:94:ea:ef:75:86:5c:
         71:df:2e:af:43:f8:d3:85:70:0d:ef:c8:4e:3e:91:56:c0:75:
         00:72:ae:1f:d2:ec:33:ce:58:5a:3f:5e:49:ab:33:f4:9c:de:
         3b:ab:11:49:ab:79:a6:30:37:4a:1a:62:fd:ae:c0:10:ac:c5:
         a9:dd:96:68:10:74:90:c8:1a:de:cf:87:49:83:0f:d2:bd:51:
         b3:15:00:19:b6:23:d2:ea:7b:fe:18:c8:89:5b:ce:50:0b:62:
         27:c4:9d:30:4f:a2:4f:33:b1:e7:cf:94:ce:88:f9:88:38:fb:
         f2:2f:d5:81:03:7b:c9:37:da:20:0e:57:61:ee:cc:f9:73:5c:
         51:23:38:0d:d3:b8:f5:99:97:30:da:47:0b:29:91:44:4c:95:
         72:4f:21:b6:82:c1:6f:e1:3b:c7:02:0f:25:3c:70:79:71:cb:
         c5:83:b6:04:17:bc:2c:4a:35:d2:2e:c6:84:79:4a:07:33:98:
         07:e7:93:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:50:59 2026 by rpki-client