Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3690C51/AE080A8CA67F11EF97375182762E951A/M9k2dXxyMpyzVJDsNDXRPytwToI.mft
File:                     M9k2dXxyMpyzVJDsNDXRPytwToI.mft (raw, json)
Hash identifier:          5xPcqTdq3mMMsKbAB3CFoUdoc3bmasmrOTie0Og0XrI=
Subject key identifier:   2A:59:93:D8:56:C9:C1:FD:F4:F0:31:27:6F:70:67:09:03:BF:D8:84
Authority key identifier: 33:D9:36:75:7C:72:32:9C:B3:54:90:EC:34:35:D1:3F:2B:70:4E:82
Certificate issuer:       /CN=F3690C51AF/serialNumber=33D936757C72329CB35490EC3435D13F2B704E82
Certificate serial:       0271
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/M9k2dXxyMpyzVJDsNDXRPytwToI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3690C51/AE080A8CA67F11EF97375182762E951A/M9k2dXxyMpyzVJDsNDXRPytwToI.mft
Manifest number:          0270
Signing time:             Fri 24 Jul 2026 04:38:10 +0000
Manifest this update:     Fri 24 Jul 2026 04:38:10 +0000
Manifest next update:     Sun 26 Jul 2026 04:38:10 +0000
Files and hashes:         1: M9k2dXxyMpyzVJDsNDXRPytwToI.crl (hash: Ya0FiCPgrRF+QdE9p4C3rmY8201Gp+/OzCLuHZc16vM=)
                          2: 2E2B725AEEF411EFBCFA6F43762E951A.roa (hash: pbm0HU0V1QcdM+FCx6QyJP3O4fULzd1SgmZHd7KGnyo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3690C51/AE080A8CA67F11EF97375182762E951A/M9k2dXxyMpyzVJDsNDXRPytwToI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3690C51/AE080A8CA67F11EF97375182762E951A/M9k2dXxyMpyzVJDsNDXRPytwToI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/M9k2dXxyMpyzVJDsNDXRPytwToI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 26 Jul 2026 00:07:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 625 (0x271)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3690C51AF, serialNumber=33D936757C72329CB35490EC3435D13F2B704E82
        Validity
            Not Before: Jul 24 04:38:10 2026 GMT
            Not After : Jul 26 04:38:10 2026 GMT
        Subject: CN=6a62ec32-0875
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:02:70:4b:f4:11:7f:9e:d2:91:0a:65:4e:84:
                    96:c6:fd:35:45:38:6b:de:7e:9b:b3:b2:90:b7:53:
                    9e:dd:4c:e6:d1:07:d1:52:be:2c:3f:e7:59:72:ec:
                    c5:dc:bc:b4:b7:f5:f2:54:91:81:06:ee:a5:5a:ff:
                    80:ef:24:1a:9a:de:8c:62:62:90:e7:15:60:96:3b:
                    ea:2b:8a:a2:60:69:d3:5b:8d:e0:79:9e:3a:8c:ad:
                    a6:fe:48:98:19:7e:bb:60:d0:96:81:af:79:b9:a4:
                    30:18:2e:f0:eb:c8:e7:eb:f2:1b:ea:8b:45:c1:78:
                    43:c3:12:ef:5e:51:ed:dd:99:93:b5:ff:a9:da:14:
                    e9:ad:04:c6:e3:8e:32:77:37:e7:78:c3:b0:3b:36:
                    3c:5b:7b:a0:6d:e0:aa:61:db:2a:b9:0c:3d:d8:45:
                    10:97:8a:35:9a:70:f0:07:04:ce:dd:7a:42:58:f4:
                    ee:cd:bf:4d:7f:a1:7c:ad:4b:ae:f0:93:e6:33:77:
                    c2:d1:79:49:ae:37:8c:a8:c9:39:d1:b2:5b:2f:25:
                    77:70:ef:28:d4:2d:e1:0c:1a:95:5d:e1:92:9a:f7:
                    e3:0f:7f:e0:b5:32:d5:7d:1a:51:2c:6c:3a:79:21:
                    e6:bd:de:35:9f:59:13:7a:b8:7e:e3:70:b3:5b:5b:
                    bd:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:59:93:D8:56:C9:C1:FD:F4:F0:31:27:6F:70:67:09:03:BF:D8:84
            X509v3 Authority Key Identifier:
                keyid:33:D9:36:75:7C:72:32:9C:B3:54:90:EC:34:35:D1:3F:2B:70:4E:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3690C51/AE080A8CA67F11EF97375182762E951A/M9k2dXxyMpyzVJDsNDXRPytwToI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/M9k2dXxyMpyzVJDsNDXRPytwToI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3690C51/AE080A8CA67F11EF97375182762E951A/M9k2dXxyMpyzVJDsNDXRPytwToI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:94:93:94:a9:14:e9:34:de:5c:3c:6f:e8:9a:4c:7e:fe:98:
         c3:cc:55:a7:92:c2:59:fb:b4:13:11:05:ee:ba:37:62:71:31:
         10:1c:39:9d:eb:9e:16:d4:df:68:81:3e:e2:ae:32:7d:f5:2f:
         26:5a:94:67:14:26:1a:c6:a2:25:93:71:01:45:63:b3:93:0b:
         14:f3:02:9e:ec:2b:e7:0b:76:cd:28:2c:40:a5:4d:06:ef:91:
         73:e1:2d:8c:74:01:64:08:5d:0f:b5:a0:b1:e9:36:3d:64:4b:
         31:ea:f5:86:92:f8:f7:95:b1:27:f5:f1:9f:26:bb:9d:a8:66:
         fc:5b:84:95:68:6a:ef:05:2c:19:0d:6e:fd:cb:80:fe:88:4d:
         c8:d0:82:e8:0c:53:12:d3:9c:d4:d3:ef:41:fd:cc:4b:e8:37:
         f3:1e:aa:84:f4:09:a4:31:27:fe:47:07:04:ad:57:79:c7:ec:
         94:cf:11:44:ba:9e:bb:1b:81:d7:bf:46:bb:53:65:1e:2c:8d:
         69:c7:2c:82:25:d1:56:30:ce:1b:ba:28:5c:4d:29:13:4e:48:
         36:ed:69:79:f7:42:ce:0b:92:8b:c3:73:12:62:c7:3a:ab:0d:
         7d:ee:61:2e:92:a5:ca:70:0b:92:44:0f:e4:1d:c2:91:df:fd:
         33:ed:f3:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:18:16 2026 by rpki-client