Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3675681/3A811A06B37111EE992D23C5775412E6/shxmbZvNmMAZWRBxeUg3JoQDINk.mft
File:                     shxmbZvNmMAZWRBxeUg3JoQDINk.mft (raw, json)
Hash identifier:          JqiKSpE3gsX2Su/x5FfCKR3mKn4FbUrjMZBJFvXiTiY=
Subject key identifier:   D3:7D:94:93:D3:FF:78:23:CC:35:F5:3D:27:AD:9D:FC:0F:66:6C:E9
Authority key identifier: B2:1C:66:6D:9B:CD:98:C0:19:59:10:71:79:48:37:26:84:03:20:D9
Certificate issuer:       /CN=F3675681AF/serialNumber=B21C666D9BCD98C01959107179483726840320D9
Certificate serial:       03B5
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/shxmbZvNmMAZWRBxeUg3JoQDINk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3675681/3A811A06B37111EE992D23C5775412E6/shxmbZvNmMAZWRBxeUg3JoQDINk.mft
Manifest number:          03B2
Signing time:             Fri 24 Jul 2026 03:55:32 +0000
Manifest this update:     Fri 24 Jul 2026 03:55:31 +0000
Manifest next update:     Sun 26 Jul 2026 03:55:31 +0000
Files and hashes:         1: shxmbZvNmMAZWRBxeUg3JoQDINk.crl (hash: Ar2k+lxfzT3CLGo2XNmaO4007sTZsb1waQdl5nRs8TM=)
                          2: 3C5DC152150F11F0AFA3C00D6EB8BCC6.roa (hash: fH15aNCg4OTSLMaHS4OXxFDniAhEu0g0inrw6icGVBw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3675681/3A811A06B37111EE992D23C5775412E6/shxmbZvNmMAZWRBxeUg3JoQDINk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3675681/3A811A06B37111EE992D23C5775412E6/shxmbZvNmMAZWRBxeUg3JoQDINk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/shxmbZvNmMAZWRBxeUg3JoQDINk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 26 Jul 2026 00:07:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 949 (0x3b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3675681AF, serialNumber=B21C666D9BCD98C01959107179483726840320D9
        Validity
            Not Before: Jul 24 03:55:31 2026 GMT
            Not After : Jul 26 03:55:31 2026 GMT
        Subject: CN=6a62e234-aa6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:28:3a:38:5e:e8:15:95:50:28:18:fb:6b:00:
                    d1:c6:1a:0f:f2:7a:10:d3:4a:6d:78:54:2f:d1:31:
                    06:5b:5e:02:aa:ee:61:aa:95:96:7f:3c:3c:ab:34:
                    00:02:88:ed:99:60:80:49:97:f1:e6:ef:a6:a6:8b:
                    e6:02:5e:8e:4b:56:42:93:c0:61:78:d0:f0:10:55:
                    96:59:b5:3d:15:29:34:2b:d1:7e:b6:a4:1b:36:a5:
                    36:83:a1:b8:ca:b9:05:c2:71:9f:86:f1:3e:97:d5:
                    e1:0e:26:c9:8f:b4:3d:38:ea:f0:03:ef:98:22:07:
                    57:4d:6c:66:69:21:a1:01:b1:11:ff:fa:be:5a:22:
                    22:ca:91:04:ed:a7:ca:73:ee:e9:48:98:3b:48:27:
                    9c:d9:8d:09:bd:d0:92:06:93:d4:59:03:79:58:07:
                    aa:5d:02:b8:57:1d:58:61:37:a9:ac:28:dc:3e:b1:
                    70:47:b4:2f:3b:26:ee:fa:b9:05:27:7e:96:89:7d:
                    b7:c9:1e:6a:25:95:7e:c4:d0:21:4f:69:bb:3d:a5:
                    38:6b:08:bf:84:3e:75:7b:9c:36:b7:af:58:a5:78:
                    80:dd:96:d2:71:16:7d:8b:3e:2d:55:1b:64:2c:c9:
                    b7:6e:f8:9b:94:08:53:94:e5:c7:8e:e4:68:f1:0a:
                    7f:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:7D:94:93:D3:FF:78:23:CC:35:F5:3D:27:AD:9D:FC:0F:66:6C:E9
            X509v3 Authority Key Identifier:
                keyid:B2:1C:66:6D:9B:CD:98:C0:19:59:10:71:79:48:37:26:84:03:20:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3675681/3A811A06B37111EE992D23C5775412E6/shxmbZvNmMAZWRBxeUg3JoQDINk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/shxmbZvNmMAZWRBxeUg3JoQDINk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3675681/3A811A06B37111EE992D23C5775412E6/shxmbZvNmMAZWRBxeUg3JoQDINk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:d2:d6:a7:5b:45:2a:61:76:11:ca:a5:45:47:0e:e8:03:62:
         2c:92:bf:ee:84:d0:11:39:f7:54:26:fa:a4:f7:4d:48:45:34:
         22:ab:55:7a:06:8d:61:36:fd:cb:f3:57:23:1e:5a:36:a4:44:
         98:c1:88:c0:b8:20:7d:19:23:9b:84:25:15:4c:8d:66:a0:5e:
         ff:93:d6:a9:9d:f0:12:af:d6:bc:cc:7c:90:c6:59:93:dc:97:
         af:93:ec:0a:8a:e7:50:da:9b:ce:5c:5c:cd:ee:9f:1e:16:76:
         35:85:89:a2:5a:3b:e8:fa:b3:78:50:d2:25:b2:4e:90:69:a5:
         4e:95:4d:41:d3:90:59:e4:85:e3:53:c8:67:d4:0a:a0:4a:28:
         10:dd:2a:d1:8c:05:7d:b5:fc:36:f4:3e:bd:3c:4c:66:b9:b4:
         b0:fa:12:17:4b:fe:e2:12:cf:3f:3c:c9:d1:50:b6:6b:dc:37:
         17:d9:f6:9d:65:2b:f0:82:4b:b5:53:91:c7:70:87:a3:d8:aa:
         d8:35:f2:36:cc:b0:d3:10:a3:cd:d9:63:40:df:da:d9:6b:a1:
         81:f2:80:3c:21:44:c1:a0:e8:15:c4:85:a6:40:7b:a0:ec:d6:
         2a:84:6c:58:8c:28:dd:31:5a:c3:8f:4f:a0:96:b5:ff:06:15:
         f4:3f:7e:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:44:30 2026 by rpki-client