Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/KVkcZVM-_QiXL0qXW-xBxltEXuA.mft
File:                     KVkcZVM-_QiXL0qXW-xBxltEXuA.mft (raw, json)
Hash identifier:          ZZbGo5Qa+jY+AGzZU8ks8K6vUmZQd5duZRnUSTcntDA=
Subject key identifier:   FB:0E:53:92:8B:20:E1:CD:7A:C1:4D:50:1C:CB:4C:D9:5D:2D:13:22
Authority key identifier: 29:59:1C:65:53:3E:FD:08:97:2F:4A:97:5B:EC:41:C6:5B:44:5E:E0
Certificate issuer:       /CN=F3670369AR/serialNumber=29591C65533EFD08972F4A975BEC41C65B445EE0
Certificate serial:       06A7
Authority info access:    rsync://rpki.afrinic.net/repository/arin/KVkcZVM-_QiXL0qXW-xBxltEXuA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/KVkcZVM-_QiXL0qXW-xBxltEXuA.mft
Manifest number:          069F
Signing time:             Fri 24 Jul 2026 02:35:12 +0000
Manifest this update:     Fri 24 Jul 2026 02:35:11 +0000
Manifest next update:     Sun 26 Jul 2026 02:35:11 +0000
Files and hashes:         1: KVkcZVM-_QiXL0qXW-xBxltEXuA.crl (hash: HlnSNaUSiCw5aLncoE852hIGgQLrU+x8BWZfpjeEAzY=)
                          2: FA488F2084E511F1ACE5B8D1CE1D38B0.roa (hash: Pd+84KPhPBsNkpBN1hVe9FHlx1CumYc3oDhGGRlaBgg=)
                          3: DE53055A2E1311EFAE851899762E951A.roa (hash: UcFSJfUBz/jAMPlBsM0sx0A7nrbCZ5eci3vzt8nRiuU=)
                          4: F05CDE6684E611F1886BCED9CE1D38B0.roa (hash: BKX3UcRCwM62AYLNiq8SzyAS2T5C7ScNOyMg7wplAWU=)
                          5: 2C82DE8284E611F19FB81CD2CE1D38B0.roa (hash: b3bTfsHITdYZ9ni2iIT1pWPRt5idzYLvZ2tzcXpea+8=)
                          6: EAF40C665BD311F0B32EE4A3DAE4EC9C.roa (hash: fL1+phnAmmLMQW8rzdMcPM0YqGLRk7qlgGhlyEQ369E=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/KVkcZVM-_QiXL0qXW-xBxltEXuA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/KVkcZVM-_QiXL0qXW-xBxltEXuA.mft
                          rsync://rpki.afrinic.net/repository/arin/KVkcZVM-_QiXL0qXW-xBxltEXuA.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 26 Jul 2026 00:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1703 (0x6a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3670369AR, serialNumber=29591C65533EFD08972F4A975BEC41C65B445EE0
        Validity
            Not Before: Jul 24 02:35:11 2026 GMT
            Not After : Jul 26 02:35:11 2026 GMT
        Subject: CN=6a62cf60-ae18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f5:5a:d1:1b:02:6e:a7:9a:f5:29:be:06:ce:
                    8f:2e:fe:e1:cd:c2:38:f2:ee:05:09:57:37:26:f4:
                    76:6b:6d:0f:b5:5a:d8:9f:16:dd:c7:87:d0:22:e0:
                    7a:17:ed:b2:07:a1:7c:2f:56:f7:be:9c:a4:0f:df:
                    21:83:09:f0:24:35:c2:39:37:26:7d:75:6b:61:e3:
                    48:b2:fa:9f:c5:2a:a5:39:0e:63:35:f2:7a:93:11:
                    85:19:5c:9b:01:bd:d4:85:17:8a:b3:c3:d2:01:cc:
                    9f:df:eb:2e:cf:dd:03:80:3f:17:28:bf:4a:9f:6b:
                    b3:eb:13:ea:9d:3d:14:81:69:a0:fd:d5:b2:46:c4:
                    1e:d0:ab:3e:69:c3:d5:a2:dc:54:92:d4:4e:9d:6d:
                    fc:d8:e0:5c:fd:00:72:0f:b1:df:97:df:c0:47:6a:
                    c3:4c:08:e3:eb:28:ac:bf:0c:1f:73:56:c1:c4:ea:
                    57:6f:64:17:de:d6:3e:f7:a2:c9:2e:d6:02:0b:24:
                    08:9c:f0:52:58:5f:93:88:dc:89:ce:80:65:d2:25:
                    c7:6b:9a:b1:24:01:d1:c4:33:69:58:29:36:4f:90:
                    aa:09:dd:a3:b5:ac:dc:9a:50:4c:9a:e5:ef:3a:86:
                    b4:c3:c1:8c:ed:0d:69:b9:21:cb:62:96:0d:b8:52:
                    dc:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:0E:53:92:8B:20:E1:CD:7A:C1:4D:50:1C:CB:4C:D9:5D:2D:13:22
            X509v3 Authority Key Identifier:
                keyid:29:59:1C:65:53:3E:FD:08:97:2F:4A:97:5B:EC:41:C6:5B:44:5E:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/KVkcZVM-_QiXL0qXW-xBxltEXuA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/KVkcZVM-_QiXL0qXW-xBxltEXuA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/KVkcZVM-_QiXL0qXW-xBxltEXuA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:d6:59:ee:a7:50:ad:0e:62:4c:63:86:97:e2:2f:ab:c4:ef:
         70:e0:7f:ec:0c:20:58:0f:3c:d6:93:8f:cd:e8:35:2a:63:5f:
         57:15:ab:98:fd:4a:55:e0:01:3d:43:28:79:47:2a:d5:c9:3f:
         f6:eb:d5:b9:b5:c0:fa:99:81:75:e4:78:42:b4:73:e5:b6:dc:
         e7:b3:c8:a6:4b:5b:b8:fb:86:49:a3:35:03:4a:91:e4:dd:1d:
         25:d9:55:13:0b:bb:d7:f4:78:04:33:87:6c:a6:23:2a:d1:cc:
         95:2c:67:e1:28:03:f3:3f:0d:37:4b:cf:87:a4:a0:21:e9:97:
         72:40:f7:88:b5:7c:e7:3a:bc:6b:96:15:b6:8d:2c:04:c7:8d:
         c2:6a:d3:55:19:77:88:0b:dc:08:33:9e:1f:26:27:ab:09:be:
         40:a9:d6:2a:be:fa:1b:47:c1:b7:9c:f3:5b:41:02:24:a1:b0:
         37:f3:7c:e6:e7:30:e6:3b:9f:29:2f:91:c6:43:6f:87:c6:71:
         16:ed:52:e2:4e:53:a4:01:47:83:17:99:1b:47:8a:f8:58:ab:
         47:72:7b:f1:1c:0f:70:ff:77:23:fb:40:15:64:b2:45:fd:e4:
         b4:3a:b0:4b:26:57:01:c2:50:68:88:ca:bc:35:74:e2:81:f3:
         06:d9:18:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:06:58 2026 by rpki-client