Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3670369/691565D27E7811ECB77461CB5A40D577/yLuITQS6vBYFq333lYeWBZySwmo.mft
File:                     yLuITQS6vBYFq333lYeWBZySwmo.mft (raw, json)
Hash identifier:          f5gmZPUnP5bh+RQe3Psh//edW+z+/eKsZSh2sw6AiXI=
Subject key identifier:   48:4D:DF:2A:55:2A:74:7E:6F:7A:10:6F:05:B3:E7:7A:7D:DD:06:6D
Authority key identifier: C8:BB:88:4D:04:BA:BC:16:05:AB:7D:F7:95:87:96:05:9C:92:C2:6A
Certificate issuer:       /CN=F3670369AF/serialNumber=C8BB884D04BABC1605AB7DF7958796059C92C26A
Certificate serial:       0699
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/yLuITQS6vBYFq333lYeWBZySwmo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3670369/691565D27E7811ECB77461CB5A40D577/yLuITQS6vBYFq333lYeWBZySwmo.mft
Manifest number:          0697
Signing time:             Fri 24 Jul 2026 02:35:24 +0000
Manifest this update:     Fri 24 Jul 2026 02:35:23 +0000
Manifest next update:     Sun 26 Jul 2026 02:35:23 +0000
Files and hashes:         1: yLuITQS6vBYFq333lYeWBZySwmo.crl (hash: CMhzqy5nt1Reubrs+tMjXBEiAoxkO9HOI/0FL3HQasc=)
                          2: 615F683284E611F1AB42B3D5CE1D38B0.roa (hash: Rwiymxl+gzzR6gzEBzteCvpbPYriPshX9t+Q/e9SKWc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3670369/691565D27E7811ECB77461CB5A40D577/yLuITQS6vBYFq333lYeWBZySwmo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3670369/691565D27E7811ECB77461CB5A40D577/yLuITQS6vBYFq333lYeWBZySwmo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/yLuITQS6vBYFq333lYeWBZySwmo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 26 Jul 2026 00:07:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1689 (0x699)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3670369AF, serialNumber=C8BB884D04BABC1605AB7DF7958796059C92C26A
        Validity
            Not Before: Jul 24 02:35:23 2026 GMT
            Not After : Jul 26 02:35:23 2026 GMT
        Subject: CN=6a62cf6c-d8ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:8a:90:7b:86:5e:2f:8b:53:45:2b:14:69:ef:
                    37:a2:2f:7e:7e:23:89:a3:89:5f:8c:c4:14:d4:3a:
                    66:90:2a:c9:8d:43:dd:18:aa:9b:ae:0b:4c:08:74:
                    13:9e:1d:a2:bf:b9:f2:20:5e:c4:33:79:9e:4f:0d:
                    ae:4c:49:97:48:40:e1:17:21:e2:ce:45:71:20:ac:
                    06:46:0b:64:da:7d:ae:7d:6f:d3:b3:9b:96:e4:f9:
                    b8:c1:e2:f4:4b:d1:13:35:9a:d7:c8:19:c6:e1:fd:
                    66:fe:ec:51:52:08:86:79:7e:9c:f6:2b:bb:6f:89:
                    54:62:5a:38:b4:b4:f0:ea:d8:07:49:d0:2d:26:5e:
                    53:16:d0:82:f2:ca:1d:85:a6:7e:2f:80:42:ea:26:
                    85:77:aa:1a:2f:d6:7b:0c:10:7a:93:0d:5d:18:31:
                    3a:f8:d6:68:d3:24:0f:30:49:4f:c3:cf:03:3c:cd:
                    84:e8:6c:99:e7:e2:7e:5e:dc:b8:be:77:8d:fa:0d:
                    48:ef:bd:ff:eb:ac:8d:6d:6a:6e:59:24:ba:ef:18:
                    85:59:3f:df:c9:e8:65:48:8a:26:24:30:79:09:a4:
                    11:54:91:d5:d5:ad:d1:00:60:48:77:28:88:aa:c3:
                    a4:d3:66:d4:a4:fd:98:af:72:70:27:2c:42:a2:ed:
                    95:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:4D:DF:2A:55:2A:74:7E:6F:7A:10:6F:05:B3:E7:7A:7D:DD:06:6D
            X509v3 Authority Key Identifier:
                keyid:C8:BB:88:4D:04:BA:BC:16:05:AB:7D:F7:95:87:96:05:9C:92:C2:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3670369/691565D27E7811ECB77461CB5A40D577/yLuITQS6vBYFq333lYeWBZySwmo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/yLuITQS6vBYFq333lYeWBZySwmo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3670369/691565D27E7811ECB77461CB5A40D577/yLuITQS6vBYFq333lYeWBZySwmo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:c3:b3:66:11:a8:11:f4:bb:df:2f:2f:bf:be:79:10:f7:79:
         e9:a1:75:b2:ac:67:8f:8b:ac:7b:94:4f:38:21:14:dc:c3:76:
         49:d3:c8:68:f8:43:f7:ee:01:7c:33:30:c2:a0:00:dd:0e:35:
         09:48:e9:df:a7:6b:40:e0:30:e4:5d:f9:3d:b4:10:ac:1a:a7:
         5b:6a:c9:f2:5d:5c:16:4d:eb:fc:42:9c:24:22:c4:b7:d5:6c:
         1c:73:f7:ad:ab:ab:03:8c:11:9f:16:ae:5d:fd:75:7e:ee:7d:
         d6:20:26:8a:a4:61:23:34:38:06:3a:98:55:5f:7d:fe:b6:3b:
         1e:a2:82:5e:57:18:aa:7b:8d:55:d3:60:97:e9:51:e2:06:b0:
         cf:0e:70:b0:bb:36:b5:e0:e0:c2:39:a9:dc:7f:89:71:c1:aa:
         0e:a0:04:1d:86:44:24:75:9e:b8:f9:57:27:2c:ce:ed:a2:b1:
         b6:56:4b:06:df:90:5f:b2:a0:cd:57:91:69:12:ed:83:d0:45:
         79:52:c0:0a:f6:16:76:df:fb:fb:3b:69:9e:6a:d7:d1:7a:85:
         31:dd:2c:a6:66:39:5e:62:2a:7d:7b:62:95:d3:90:62:a9:65:
         cf:38:b5:b7:7e:5b:70:f8:90:c9:17:1d:1f:b5:15:70:69:79:
         6a:5c:08:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:48:08 2026 by rpki-client