Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3671BB4/02E646F8061D11EABC386256F8AEA228/9yrHa7B-RN3HrGDmYx8c0u3wNd0.mft
File:                     9yrHa7B-RN3HrGDmYx8c0u3wNd0.mft (raw, json)
Hash identifier:          JNlQgH4t4RB6k6IK8XX2UKyhZYxdF1Pvo4ZmIXPnHHk=
Subject key identifier:   76:C1:6F:FE:0A:73:F5:6B:50:D0:3E:61:AB:F6:23:DC:4C:DD:85:D4
Authority key identifier: F7:2A:C7:6B:B0:7E:44:DD:C7:AC:60:E6:63:1F:1C:D2:ED:F0:35:DD
Certificate issuer:       /CN=F3671BB4AF/serialNumber=F72AC76BB07E44DDC7AC60E6631F1CD2EDF035DD
Certificate serial:       09D0
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/9yrHa7B-RN3HrGDmYx8c0u3wNd0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3671BB4/02E646F8061D11EABC386256F8AEA228/9yrHa7B-RN3HrGDmYx8c0u3wNd0.mft
Manifest number:          09CB
Signing time:             Fri 24 Jul 2026 01:38:09 +0000
Manifest this update:     Fri 24 Jul 2026 01:38:08 +0000
Manifest next update:     Sun 26 Jul 2026 01:38:08 +0000
Files and hashes:         1: 9yrHa7B-RN3HrGDmYx8c0u3wNd0.crl (hash: HjiCZdwx4X0b+AB7UWefAUvIxs46HX+w8+ZE6nhYASs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3671BB4/02E646F8061D11EABC386256F8AEA228/9yrHa7B-RN3HrGDmYx8c0u3wNd0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3671BB4/02E646F8061D11EABC386256F8AEA228/9yrHa7B-RN3HrGDmYx8c0u3wNd0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/9yrHa7B-RN3HrGDmYx8c0u3wNd0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 26 Jul 2026 00:07:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2512 (0x9d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3671BB4AF, serialNumber=F72AC76BB07E44DDC7AC60E6631F1CD2EDF035DD
        Validity
            Not Before: Jul 24 01:38:08 2026 GMT
            Not After : Jul 26 01:38:08 2026 GMT
        Subject: CN=6a62c201-5ebf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:9e:67:e3:b2:44:39:d1:d1:a1:e6:56:1a:e7:
                    bb:e8:05:aa:46:4a:96:26:76:f1:de:ff:29:05:95:
                    97:9c:e0:17:7b:41:a4:5c:e9:cc:96:ad:15:0e:1b:
                    b5:ab:18:b1:77:66:d2:4e:f3:06:3c:73:55:73:08:
                    d3:d3:74:9d:01:b3:97:41:75:10:ab:a2:18:d3:f5:
                    e3:a6:4d:a6:1f:b1:6e:8e:ae:cb:0c:6b:41:d0:b3:
                    e3:9b:7c:43:30:ab:f1:80:b8:c2:f1:5c:5e:b5:be:
                    0c:1a:a9:47:0f:e3:cd:3e:de:2f:d5:f7:b6:5b:a2:
                    bf:39:d9:ca:3a:ca:2b:87:08:f1:ee:45:a5:07:78:
                    98:86:60:d9:cf:ce:b3:78:76:fc:6d:2e:f9:19:4a:
                    5e:40:53:1f:5e:79:d3:af:25:99:d9:1d:c8:22:f5:
                    1e:3d:66:74:0c:6b:7b:6d:ea:4a:03:cc:2d:66:28:
                    04:91:a8:20:e6:09:1e:3e:6e:2e:7e:c1:c8:09:55:
                    80:ee:45:6a:ac:40:13:a9:99:0b:0f:96:ec:04:ab:
                    5b:bb:29:8b:b0:c6:19:9e:51:c6:f9:a6:22:28:c5:
                    67:51:a2:f1:96:7c:5f:e6:0f:c9:1e:9d:7b:b3:c3:
                    f3:3a:ed:66:10:8f:78:89:f2:00:80:b6:02:b0:c1:
                    b3:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:C1:6F:FE:0A:73:F5:6B:50:D0:3E:61:AB:F6:23:DC:4C:DD:85:D4
            X509v3 Authority Key Identifier:
                keyid:F7:2A:C7:6B:B0:7E:44:DD:C7:AC:60:E6:63:1F:1C:D2:ED:F0:35:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3671BB4/02E646F8061D11EABC386256F8AEA228/9yrHa7B-RN3HrGDmYx8c0u3wNd0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9yrHa7B-RN3HrGDmYx8c0u3wNd0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3671BB4/02E646F8061D11EABC386256F8AEA228/9yrHa7B-RN3HrGDmYx8c0u3wNd0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:ce:d1:1c:9d:12:63:79:d0:ba:f3:05:a4:ea:91:77:46:7e:
         d8:9c:b9:4d:f1:1c:f6:b6:a8:52:3e:e9:3d:ce:00:c8:63:8d:
         54:de:b2:52:3d:ce:b3:10:65:00:1b:49:9e:76:b1:07:f5:cd:
         e0:4d:81:54:1d:26:5d:38:7e:7f:09:ec:51:cf:32:40:4b:2d:
         bb:b0:6b:79:ce:4e:2d:e2:d2:5e:05:eb:a6:b3:83:f9:69:3d:
         0a:58:ef:da:8d:08:30:c9:6c:c2:32:5d:30:a3:90:bb:34:58:
         4d:52:6e:a0:76:8b:db:38:75:e2:a1:c4:de:22:3e:fc:14:c5:
         e6:8e:e0:fc:c8:c0:d8:64:23:db:61:a4:74:0d:0b:50:dc:07:
         a1:93:8b:ad:84:44:f3:9a:c0:93:a3:42:bb:f6:aa:60:6e:92:
         30:20:13:fe:8e:cb:2a:37:8c:cb:ce:7b:e0:d6:48:0d:12:92:
         4d:3d:ad:e4:cc:98:67:fe:8c:7f:e5:eb:2d:0a:ca:40:8d:ad:
         70:fe:ad:88:df:ec:6b:a1:47:d1:b2:cd:17:64:84:98:a6:76:
         2b:8c:38:ee:6e:75:af:0e:c7:97:d4:b7:9e:9d:40:ff:05:73:
         9d:36:17:d8:31:80:ca:8c:95:f2:19:8f:54:6f:f1:a8:ba:0c:
         df:ca:d4:c7
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCdAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NzFCQjRBRjExMC8GA1UEBRMoRjcyQUM3NkJCMDdFNDREREM3QUM2MEU2NjMxRjFD
RDJFREYwMzVERDAeFw0yNjA3MjQwMTM4MDhaFw0yNjA3MjYwMTM4MDhaMBgxFjAU
BgNVBAMTDTZhNjJjMjAxLTVlYmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC1nmfjskQ50dGh5lYa57voBapGSpYmdvHe/ykFlZec4Bd7QaRc6cyWrRUO
G7WrGLF3ZtJO8wY8c1VzCNPTdJ0Bs5dBdRCrohjT9eOmTaYfsW6OrssMa0HQs+Ob
fEMwq/GAuMLxXF61vgwaqUcP480+3i/V97Zbor852co6yiuHCPHuRaUHeJiGYNnP
zrN4dvxtLvkZSl5AUx9eedOvJZnZHcgi9R49ZnQMa3tt6koDzC1mKASRqCDmCR4+
bi5+wcgJVYDuRWqsQBOpmQsPluwEq1u7KYuwxhmeUcb5piIoxWdRovGWfF/mD8ke
nXuzw/M67WYQj3iJ8gCAtgKwwbNLAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUdsFv
/gpz9WtQ0D5hq/Yj3EzdhdQwHwYDVR0jBBgwFoAU9yrHa7B+RN3HrGDmYx8c0u3w
Nd0wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjcxQkI0LzAyRTY0NkY4MDYxRDExRUFCQzM4NjI1NkY4QUVBMjI4Lzl5ckhh
N0ItUk4zSHJHRG1ZeDhjMHUzd05kMC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzl5ckhhN0ItUk4zSHJHRG1ZeDhjMHUzd05kMC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NzFCQjQvMDJFNjQ2RjgwNjFEMTFFQUJDMzg2MjU2RjhB
RUEyMjgvOXlySGE3Qi1STjNIckdEbVl4OGMwdTN3TmQwLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBiztEcnRJjedC68wWk6pF3Rn7YnLlN
8Rz2tqhSPuk9zgDIY41U3rJSPc6zEGUAG0medrEH9c3gTYFUHSZdOH5/CexRzzJA
Sy27sGt5zk4t4tJeBeums4P5aT0KWO/ajQgwyWzCMl0wo5C7NFhNUm6gdovbOHXi
ocTeIj78FMXmjuD8yMDYZCPbYaR0DQtQ3Aehk4uthETzmsCTo0K79qpgbpIwIBP+
jssqN4zLznvg1kgNEpJNPa3kzJhn/ox/5estCspAja1w/q2I3+xroUfRss0XZISY
pnYrjDjubnWvDseX1LeenUD/BXOdNhfYMYDKjJXyGY9Ub/GougzfytTH
-----END CERTIFICATE-----
Generated at Fri Jul 24 21:33:43 2026 by rpki-client