Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36723E1/7E3FA3F0FA1911EDBE8EE4254AD9E6FC/0RDaMi-Zhc--woypzoUgREhmujc.mft
File:                     0RDaMi-Zhc--woypzoUgREhmujc.mft (raw, json)
Hash identifier:          w+7oXdGWwI3yF+XE8HQWBJ1PDN3+PV62sONO7J++esU=
Subject key identifier:   A0:00:DB:FB:C2:4D:D7:1F:7C:79:F6:83:8F:B8:2A:1B:6F:10:4D:FC
Authority key identifier: D1:10:DA:32:2F:99:85:CF:BE:C2:8C:A9:CE:85:20:44:48:66:BA:37
Certificate issuer:       /CN=F36723E1AF/serialNumber=D110DA322F9985CFBEC28CA9CE8520444866BA37
Certificate serial:       04B4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/0RDaMi-Zhc--woypzoUgREhmujc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36723E1/7E3FA3F0FA1911EDBE8EE4254AD9E6FC/0RDaMi-Zhc--woypzoUgREhmujc.mft
Manifest number:          04AC
Signing time:             Fri 24 Jul 2026 03:25:49 +0000
Manifest this update:     Fri 24 Jul 2026 03:25:48 +0000
Manifest next update:     Sun 26 Jul 2026 03:25:48 +0000
Files and hashes:         1: 0RDaMi-Zhc--woypzoUgREhmujc.crl (hash: A3dawMmb8BYtkyza5gOTNcM/n2EVijZqotBcxTYxiM0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36723E1/7E3FA3F0FA1911EDBE8EE4254AD9E6FC/0RDaMi-Zhc--woypzoUgREhmujc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36723E1/7E3FA3F0FA1911EDBE8EE4254AD9E6FC/0RDaMi-Zhc--woypzoUgREhmujc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/0RDaMi-Zhc--woypzoUgREhmujc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 26 Jul 2026 00:07:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1204 (0x4b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36723E1AF, serialNumber=D110DA322F9985CFBEC28CA9CE8520444866BA37
        Validity
            Not Before: Jul 24 03:25:48 2026 GMT
            Not After : Jul 26 03:25:48 2026 GMT
        Subject: CN=6a62db3d-44d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d6:c4:b3:f4:0b:f9:df:50:25:15:5d:58:3d:
                    de:85:59:77:1c:ab:d3:f0:ea:6a:d6:b4:0b:6a:6e:
                    93:58:86:18:69:a7:47:7f:9f:b0:b8:a0:bb:b1:e7:
                    1d:ad:47:64:bf:f7:15:43:b5:78:8f:fc:9b:15:79:
                    4e:fe:5e:44:f1:b3:c3:c4:38:68:26:c9:04:93:19:
                    84:cc:f6:50:23:64:00:98:3f:e7:78:60:4c:a6:11:
                    ae:f0:63:ca:d7:da:a6:50:cc:33:c8:5c:4c:33:82:
                    75:f0:6b:86:5d:ce:a3:a9:94:07:26:e1:c4:dd:3d:
                    f2:0f:00:7d:12:f6:f8:87:5f:f8:f0:82:8a:e3:b7:
                    49:f0:f3:7f:da:e4:d3:51:51:dd:61:35:5a:33:b7:
                    25:0b:69:7b:9c:3a:0c:9c:a5:a0:ff:d3:3d:f5:be:
                    65:8a:eb:be:a2:bd:e1:4c:05:18:ab:13:db:b2:df:
                    4e:e8:62:f2:df:8a:63:bd:08:43:e3:0a:57:d1:a1:
                    45:92:e8:60:fc:a9:69:99:15:9a:a0:58:00:b4:f3:
                    06:e4:9a:ec:e0:a3:29:42:b6:73:20:69:12:6c:a9:
                    19:37:ca:fc:29:b8:93:9a:77:c5:cb:c1:b7:fe:f9:
                    02:08:fa:8c:4c:82:01:1a:df:02:21:9b:40:d6:36:
                    27:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:00:DB:FB:C2:4D:D7:1F:7C:79:F6:83:8F:B8:2A:1B:6F:10:4D:FC
            X509v3 Authority Key Identifier:
                keyid:D1:10:DA:32:2F:99:85:CF:BE:C2:8C:A9:CE:85:20:44:48:66:BA:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36723E1/7E3FA3F0FA1911EDBE8EE4254AD9E6FC/0RDaMi-Zhc--woypzoUgREhmujc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0RDaMi-Zhc--woypzoUgREhmujc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36723E1/7E3FA3F0FA1911EDBE8EE4254AD9E6FC/0RDaMi-Zhc--woypzoUgREhmujc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:1d:c9:aa:e6:63:89:3c:ea:ce:91:bb:c9:c8:6a:25:41:62:
         aa:b2:3f:e1:43:d6:86:c5:30:18:04:99:08:a2:0f:fc:2e:a3:
         4e:d8:06:8e:75:5c:70:0a:d0:f6:75:58:67:a2:4c:42:5c:98:
         52:88:78:9d:cc:9e:de:af:13:47:47:04:86:37:c4:7f:fe:ef:
         84:8e:4b:04:d8:3e:23:38:ee:cf:76:39:4c:fa:da:e3:fb:40:
         bb:70:57:f7:5e:f4:4d:08:3d:33:79:52:eb:81:0b:01:00:20:
         44:f5:3c:6f:c3:06:a3:a5:f0:3c:50:40:1f:ce:f5:e9:99:3f:
         aa:83:f3:72:81:ca:5b:a2:2c:80:4c:57:f9:f7:d6:27:bc:d7:
         2d:7f:4f:ca:98:05:0f:e7:c3:3f:f5:55:65:f8:4d:5f:c1:49:
         de:23:20:18:f2:bf:af:ea:da:ff:4d:83:ce:3c:ce:0f:fd:03:
         68:b6:f0:88:ce:2e:05:48:ca:63:94:de:95:f1:02:dc:be:e5:
         31:7c:04:4a:35:02:76:c2:f3:4c:b1:be:cd:e7:85:9c:8a:4f:
         2d:6b:d2:9a:81:31:e5:c7:18:8d:c8:4f:0f:73:60:f2:6b:f1:
         e9:0f:5c:39:7a:7b:3b:59:8f:38:7d:e9:ed:0a:4c:2f:b5:6f:
         42:80:3e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:51:59 2026 by rpki-client