Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368D59F/CF10B148324211F18586228DDAE4EC9C/B0Bo8Lwdf2xlr15SAuIhENaFelk.mft
File:                     B0Bo8Lwdf2xlr15SAuIhENaFelk.mft (raw, json)
Hash identifier:          x9xIUvVZTGJvM34bxDGjl+4Dy6l+egzcEcDo+S3/hCY=
Subject key identifier:   BD:57:AA:6A:79:F4:7B:84:F8:E2:04:71:E7:30:BF:01:F4:61:A0:C4
Authority key identifier: 07:40:68:F0:BC:1D:7F:6C:65:AF:5E:52:02:E2:21:10:D6:85:7A:59
Certificate issuer:       /CN=F368D59FAF/serialNumber=074068F0BC1D7F6C65AF5E5202E22110D6857A59
Certificate serial:       70
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/B0Bo8Lwdf2xlr15SAuIhENaFelk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368D59F/CF10B148324211F18586228DDAE4EC9C/B0Bo8Lwdf2xlr15SAuIhENaFelk.mft
Manifest number:          6F
Signing time:             Fri 24 Jul 2026 05:31:58 +0000
Manifest this update:     Fri 24 Jul 2026 05:31:57 +0000
Manifest next update:     Sun 26 Jul 2026 05:31:57 +0000
Files and hashes:         1: B0Bo8Lwdf2xlr15SAuIhENaFelk.crl (hash: joFGYAKVR73Cqh/TJucPzS8sGn3ZSjBIi1/7oUYWQc0=)
                          2: CDA23108324A11F1B60EAEB9DAE4EC9C.roa (hash: cE1RonJWQjRj/5iPA//z9En6WXcsSeuTNBdrevPeLx8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368D59F/CF10B148324211F18586228DDAE4EC9C/B0Bo8Lwdf2xlr15SAuIhENaFelk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368D59F/CF10B148324211F18586228DDAE4EC9C/B0Bo8Lwdf2xlr15SAuIhENaFelk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/B0Bo8Lwdf2xlr15SAuIhENaFelk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 26 Jul 2026 00:07:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112 (0x70)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368D59FAF, serialNumber=074068F0BC1D7F6C65AF5E5202E22110D6857A59
        Validity
            Not Before: Jul 24 05:31:57 2026 GMT
            Not After : Jul 26 05:31:57 2026 GMT
        Subject: CN=6a62f8ce-a662
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c1:13:8d:c4:27:b1:10:e8:84:9c:0e:d8:74:
                    ba:6d:69:f0:d3:39:66:41:b4:1f:74:a8:fb:3d:8f:
                    54:93:73:28:71:89:43:f5:cd:77:b4:16:50:49:70:
                    b7:62:d5:d5:87:f1:f0:e1:17:18:67:cf:7d:d4:95:
                    96:4e:9d:50:52:05:d8:78:3c:70:d7:92:cc:37:c7:
                    ab:29:ac:9f:6f:f8:08:d9:fe:ba:a9:27:1c:4a:42:
                    ca:cb:a2:3d:c4:c4:e2:9a:83:8e:6b:ca:b5:a3:4f:
                    7a:d2:b5:78:5f:19:5d:ec:a3:f8:ca:34:44:c5:2c:
                    01:06:bf:0c:ec:57:14:65:a3:72:2d:f2:cb:38:42:
                    37:1d:1a:2d:96:9d:9a:53:a8:e7:e9:48:f9:75:96:
                    7e:cc:35:9d:28:05:77:9b:78:9f:b1:89:8d:51:28:
                    e1:a5:81:a3:0f:49:1c:78:97:32:df:7c:c6:91:17:
                    d3:71:6c:37:d4:8f:64:5d:93:92:58:b3:67:42:18:
                    ff:a8:eb:10:0a:e7:92:1f:66:44:bd:57:58:06:0a:
                    ab:1f:b8:b3:a6:f3:27:c7:ae:77:09:e2:69:2d:2a:
                    fa:af:88:55:cc:02:0b:1f:03:f3:aa:f4:1b:c2:85:
                    e3:e9:ec:c1:1a:ef:3c:8f:aa:34:bb:62:56:c1:9e:
                    ec:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:57:AA:6A:79:F4:7B:84:F8:E2:04:71:E7:30:BF:01:F4:61:A0:C4
            X509v3 Authority Key Identifier:
                keyid:07:40:68:F0:BC:1D:7F:6C:65:AF:5E:52:02:E2:21:10:D6:85:7A:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368D59F/CF10B148324211F18586228DDAE4EC9C/B0Bo8Lwdf2xlr15SAuIhENaFelk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/B0Bo8Lwdf2xlr15SAuIhENaFelk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368D59F/CF10B148324211F18586228DDAE4EC9C/B0Bo8Lwdf2xlr15SAuIhENaFelk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:46:40:1f:aa:59:a4:06:a3:93:ce:d3:4c:8c:3d:d2:44:15:
         9b:4f:55:ad:d8:9f:d0:d6:d4:ef:54:06:94:14:75:61:18:4b:
         95:3d:bd:eb:a2:f0:dd:bf:58:56:36:a9:ac:a6:c4:5b:26:fb:
         7e:d4:9f:8e:31:75:34:12:c9:73:41:d3:2a:c2:19:06:bf:08:
         d7:9d:42:70:93:69:aa:67:53:d3:50:ff:d9:84:bf:08:ce:43:
         28:4f:76:d0:9d:4a:a9:73:7c:9f:16:08:af:62:02:5b:47:8b:
         74:9e:83:a9:55:5e:ed:06:4c:eb:e9:94:9a:a4:39:2c:4d:b2:
         c7:64:f7:d9:ef:97:6b:0f:a7:5a:79:53:96:ef:07:82:da:1c:
         b8:90:1b:ec:c1:9e:8f:86:16:86:7c:ae:fd:ce:96:fa:85:1f:
         e2:b6:56:dd:2a:30:d8:c9:19:f5:c6:b6:3b:48:7d:63:5a:2c:
         76:c1:d5:fb:63:b2:81:1e:2d:e7:46:5c:5b:cd:bb:8c:e8:27:
         f9:e9:ae:36:81:d0:75:b0:fb:b7:4e:f1:2e:25:9e:1d:15:40:
         7f:d4:9a:9f:9b:63:c4:2a:f6:68:05:f3:42:b6:88:1e:1a:76:
         e9:29:08:2f:e4:31:e3:0c:8e:d2:11:5b:67:37:96:a4:76:36:
         a6:32:fa:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:09:57 2026 by rpki-client