Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36914A7/D82C43FAFBFD11E99E04E847F8AEA228/9zORrduc3mc6pJF07KjUMLSfGcM.mft
File:                     9zORrduc3mc6pJF07KjUMLSfGcM.mft (raw, json)
Hash identifier:          8SULloRj6RT3vBnBOt0SbCP0f9h8+0sAeFrhHthcuBM=
Subject key identifier:   88:72:8F:94:AC:1A:3E:54:5D:7D:36:86:F4:EE:20:AF:85:87:56:B0
Authority key identifier: F7:33:91:AD:DB:9C:DE:67:3A:A4:91:74:EC:A8:D4:30:B4:9F:19:C3
Certificate issuer:       /CN=F36914A7AR/serialNumber=F73391ADDB9CDE673AA49174ECA8D430B49F19C3
Certificate serial:       09D6
Authority info access:    rsync://rpki.afrinic.net/repository/arin/9zORrduc3mc6pJF07KjUMLSfGcM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36914A7/D82C43FAFBFD11E99E04E847F8AEA228/9zORrduc3mc6pJF07KjUMLSfGcM.mft
Manifest number:          09D5
Signing time:             Fri 24 Jul 2026 01:37:21 +0000
Manifest this update:     Fri 24 Jul 2026 01:37:20 +0000
Manifest next update:     Sun 26 Jul 2026 01:37:20 +0000
Files and hashes:         1: 9zORrduc3mc6pJF07KjUMLSfGcM.crl (hash: HkWtlbNigJTI0gZRVbQC8YMIXsL0kQErdxX7xv3XPuY=)
                          2: FBB32E86FC8111E9BB7F292CF8AEA228.roa (hash: HuM3BwkpOIpwBJ+xYmwrtHtu6kY28m4Q/SLVfLjrjjs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36914A7/D82C43FAFBFD11E99E04E847F8AEA228/9zORrduc3mc6pJF07KjUMLSfGcM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36914A7/D82C43FAFBFD11E99E04E847F8AEA228/9zORrduc3mc6pJF07KjUMLSfGcM.mft
                          rsync://rpki.afrinic.net/repository/arin/9zORrduc3mc6pJF07KjUMLSfGcM.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 26 Jul 2026 00:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2518 (0x9d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36914A7AR, serialNumber=F73391ADDB9CDE673AA49174ECA8D430B49F19C3
        Validity
            Not Before: Jul 24 01:37:20 2026 GMT
            Not After : Jul 26 01:37:20 2026 GMT
        Subject: CN=6a62c1d1-3f79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d9:82:2a:38:01:ef:0f:fd:9b:3d:f1:69:66:
                    6d:40:c5:63:05:52:d5:18:8a:f1:16:be:47:ab:7b:
                    53:fc:4d:c0:e4:c0:d9:3d:14:41:46:08:c2:5d:a3:
                    0d:f8:c6:e4:ec:c0:ea:7e:0c:b4:b8:e2:fa:72:84:
                    fa:38:32:0f:53:d9:09:99:4b:ad:21:42:5c:5a:70:
                    f2:0b:c1:35:47:91:d8:06:a3:37:23:51:4d:d5:2d:
                    3c:8b:5c:bb:01:02:90:35:8d:62:63:b0:db:84:45:
                    4e:68:71:9a:bb:84:fe:78:20:ac:53:96:15:7e:13:
                    69:11:86:15:d0:7d:33:12:2a:3c:46:d8:b7:65:68:
                    9b:76:d9:8c:d8:74:c2:31:8d:03:d0:6b:f7:8d:3c:
                    23:2d:61:fb:8a:bb:ca:4f:75:68:fe:0c:47:b5:bc:
                    97:a3:78:0a:95:14:f5:0b:09:1f:77:a5:6b:b7:ac:
                    d7:9a:23:e9:dd:17:96:54:ff:6e:6f:c8:cd:43:b5:
                    6a:b5:2e:33:37:ef:62:19:bf:9e:4b:b1:e7:19:6e:
                    c8:30:2e:5a:65:cf:b7:a7:3a:6d:17:6e:ac:81:3d:
                    61:0d:a5:85:dc:67:43:99:4f:76:dc:b0:c6:b2:ef:
                    80:47:f5:5b:d0:63:54:a6:08:0b:01:30:8b:86:91:
                    19:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:72:8F:94:AC:1A:3E:54:5D:7D:36:86:F4:EE:20:AF:85:87:56:B0
            X509v3 Authority Key Identifier:
                keyid:F7:33:91:AD:DB:9C:DE:67:3A:A4:91:74:EC:A8:D4:30:B4:9F:19:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36914A7/D82C43FAFBFD11E99E04E847F8AEA228/9zORrduc3mc6pJF07KjUMLSfGcM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/9zORrduc3mc6pJF07KjUMLSfGcM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36914A7/D82C43FAFBFD11E99E04E847F8AEA228/9zORrduc3mc6pJF07KjUMLSfGcM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:f7:94:57:a1:b6:cf:fa:bb:60:92:c3:a6:f8:ad:8a:d5:51:
         19:4a:6c:72:76:12:03:4f:2f:0e:48:41:0a:96:08:d7:98:50:
         eb:05:05:5e:ef:21:1d:99:3e:61:1c:a6:a6:8f:06:e9:56:68:
         3c:75:6e:6c:47:2b:b2:d1:a1:52:2a:f3:9d:3f:2b:f0:ca:26:
         5b:36:8e:5a:81:d2:85:4a:75:af:c1:93:c7:af:af:81:68:00:
         25:9c:b4:47:c7:06:57:2e:c2:92:e8:6d:27:2d:03:77:b8:75:
         14:24:cf:a2:b0:e1:b5:13:b5:7a:ba:e5:95:12:d0:17:eb:5c:
         d0:7c:f7:0b:da:06:12:ac:e0:60:a3:f4:71:f0:37:a3:9b:02:
         32:5f:56:72:90:f9:1c:a4:5f:5c:9e:39:be:ef:a8:5d:6c:38:
         81:84:a7:16:16:0f:1c:a3:68:ce:71:8e:d0:bb:69:41:28:47:
         4d:f2:be:f6:dc:2c:30:55:2e:99:15:f3:a6:ea:9a:c5:73:ef:
         ef:c4:fd:5d:9c:c2:19:ea:6f:89:db:77:d1:70:a0:f9:a4:22:
         7f:0c:74:41:38:05:9e:d6:b4:97:4b:21:92:37:93:9b:dd:46:
         12:a7:00:87:ce:d0:9d:00:b7:f9:25:e8:9b:e9:64:6d:0e:32:
         c3:2a:d2:5d
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICCdYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OTE0QTdBUjExMC8GA1UEBRMoRjczMzkxQUREQjlDREU2NzNBQTQ5MTc0RUNBOEQ0
MzBCNDlGMTlDMzAeFw0yNjA3MjQwMTM3MjBaFw0yNjA3MjYwMTM3MjBaMBgxFjAU
BgNVBAMTDTZhNjJjMWQxLTNmNzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC32YIqOAHvD/2bPfFpZm1AxWMFUtUYivEWvkere1P8TcDkwNk9FEFGCMJd
ow34xuTswOp+DLS44vpyhPo4Mg9T2QmZS60hQlxacPILwTVHkdgGozcjUU3VLTyL
XLsBApA1jWJjsNuERU5ocZq7hP54IKxTlhV+E2kRhhXQfTMSKjxG2LdlaJt22YzY
dMIxjQPQa/eNPCMtYfuKu8pPdWj+DEe1vJejeAqVFPULCR93pWu3rNeaI+ndF5ZU
/25vyM1DtWq1LjM372IZv55LsecZbsgwLlplz7enOm0XbqyBPWENpYXcZ0OZT3bc
sMay74BH9VvQY1SmCAsBMIuGkRnbAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUiHKP
lKwaPlRdfTaG9O4gr4WHVrAwHwYDVR0jBBgwFoAU9zORrduc3mc6pJF07KjUMLSf
GcMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjkxNEE3L0Q4MkM0M0ZBRkJGRDExRTk5RTA0RTg0N0Y4QUVBMjI4Lzl6T1Jy
ZHVjM21jNnBKRjA3S2pVTUxTZkdjTS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
Lzl6T1JyZHVjM21jNnBKRjA3S2pVTUxTZkdjTS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2OTE0QTcvRDgyQzQzRkFGQkZEMTFFOTlFMDRFODQ3RjhBRUEy
MjgvOXpPUnJkdWMzbWM2cEpGMDdLalVNTFNmR2NNLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCx95RXobbP+rtgksOm+K2K1VEZSmxydhID
Ty8OSEEKlgjXmFDrBQVe7yEdmT5hHKamjwbpVmg8dW5sRyuy0aFSKvOdPyvwyiZb
No5agdKFSnWvwZPHr6+BaAAlnLRHxwZXLsKS6G0nLQN3uHUUJM+isOG1E7V6uuWV
EtAX61zQfPcL2gYSrOBgo/Rx8DejmwIyX1ZykPkcpF9cnjm+76hdbDiBhKcWFg8c
o2jOcY7Qu2lBKEdN8r723CwwVS6ZFfOm6prFc+/vxP1dnMIZ6m+J23fRcKD5pCJ/
DHRBOAWe1rSXSyGSN5Ob3UYSpwCHztCdALf5Jeib6WRtDjLDKtJd
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:41:53 2026 by rpki-client