Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3692D98/AFE95F7498F011EE8A47CA59D25BE465/-YeB5n2eqWryWAashtEAb4IfqjY.mft
File:                     -YeB5n2eqWryWAashtEAb4IfqjY.mft (raw, json)
Hash identifier:          yXD0NR6YKVGK/ZCuBlD9P8NJn/YYIDqMTkS3RbuumtQ=
Subject key identifier:   7F:49:43:7E:6C:1D:56:1D:1C:90:FD:00:F6:C1:4D:F0:36:F1:3A:B6
Authority key identifier: F9:87:81:E6:7D:9E:A9:6A:F2:58:06:AC:86:D1:00:6F:82:1F:AA:36
Certificate issuer:       /CN=F3692D98AF/serialNumber=F98781E67D9EA96AF25806AC86D1006F821FAA36
Certificate serial:       03E7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/-YeB5n2eqWryWAashtEAb4IfqjY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3692D98/AFE95F7498F011EE8A47CA59D25BE465/-YeB5n2eqWryWAashtEAb4IfqjY.mft
Manifest number:          03E2
Signing time:             Fri 24 Jul 2026 03:52:32 +0000
Manifest this update:     Fri 24 Jul 2026 03:52:31 +0000
Manifest next update:     Sun 26 Jul 2026 03:52:31 +0000
Files and hashes:         1: -YeB5n2eqWryWAashtEAb4IfqjY.crl (hash: e5xUprTeiENm7giK5KxL6ThWhol8KrZTxb+vijmRuXM=)
                          2: F3D28466A49B11EE881B3A7CD25BE465.roa (hash: 8ql7+vusURAXXO1QjIU3wb4N2LTfHKWe3IzCBlZgxWQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3692D98/AFE95F7498F011EE8A47CA59D25BE465/-YeB5n2eqWryWAashtEAb4IfqjY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3692D98/AFE95F7498F011EE8A47CA59D25BE465/-YeB5n2eqWryWAashtEAb4IfqjY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/-YeB5n2eqWryWAashtEAb4IfqjY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 26 Jul 2026 00:07:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 999 (0x3e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3692D98AF, serialNumber=F98781E67D9EA96AF25806AC86D1006F821FAA36
        Validity
            Not Before: Jul 24 03:52:31 2026 GMT
            Not After : Jul 26 03:52:31 2026 GMT
        Subject: CN=6a62e180-cf0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:63:24:7c:0b:49:29:13:64:22:38:28:a0:73:
                    21:79:41:ae:5c:eb:25:4b:79:20:14:10:b7:fb:09:
                    ad:b1:c2:84:97:d4:d8:03:2d:8a:66:2c:99:9d:19:
                    c0:97:4c:fd:c2:d2:b8:97:b1:0e:7f:ea:d9:5a:70:
                    f0:7d:7f:21:62:78:da:b3:bf:7f:f5:61:e1:a0:ae:
                    00:e4:bd:c2:f5:b9:b2:c2:41:83:1c:5f:8f:ea:5d:
                    1f:fb:94:21:9c:c7:b5:a1:25:6b:97:49:77:70:5f:
                    bf:26:d5:45:65:b8:6e:56:bf:ef:80:91:9d:93:40:
                    00:51:1a:28:fe:f5:55:20:d0:38:65:91:e5:34:54:
                    a2:91:65:3f:91:ad:99:e3:ae:dd:56:79:eb:15:e0:
                    bf:f2:57:8c:09:6c:16:29:61:42:cd:1e:39:ca:93:
                    3c:de:80:83:95:d0:56:b3:fd:77:81:88:55:ac:af:
                    44:86:35:f5:68:c4:bd:5b:2b:1b:07:6a:9e:58:fc:
                    d6:8e:63:46:83:a4:28:88:ab:79:29:f6:c1:3a:ab:
                    31:38:90:6f:91:ee:1f:1d:36:3c:57:2a:7f:df:99:
                    a7:ba:d1:40:0a:8d:61:c5:f7:d5:da:f7:71:39:c3:
                    b2:02:88:87:7e:bf:fb:54:31:e2:ff:e0:1a:26:46:
                    8f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:49:43:7E:6C:1D:56:1D:1C:90:FD:00:F6:C1:4D:F0:36:F1:3A:B6
            X509v3 Authority Key Identifier:
                keyid:F9:87:81:E6:7D:9E:A9:6A:F2:58:06:AC:86:D1:00:6F:82:1F:AA:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3692D98/AFE95F7498F011EE8A47CA59D25BE465/-YeB5n2eqWryWAashtEAb4IfqjY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-YeB5n2eqWryWAashtEAb4IfqjY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3692D98/AFE95F7498F011EE8A47CA59D25BE465/-YeB5n2eqWryWAashtEAb4IfqjY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:30:f6:d9:a4:3c:51:2f:75:64:e1:0a:23:91:a7:df:2a:9d:
         2c:5f:39:69:af:df:ec:2b:4b:6a:5e:5a:ff:77:e9:e0:e8:2d:
         1c:9d:43:c1:7b:48:74:a4:80:d4:ea:00:a5:f5:b3:ed:c5:17:
         c0:38:75:d6:6d:73:ca:e6:7b:d6:f0:86:c7:06:cc:6c:b3:71:
         23:3b:fc:db:be:c4:ad:92:37:a0:bf:80:b8:39:59:4d:7e:38:
         a5:5c:6e:a8:f8:02:78:1d:62:16:01:8e:29:3e:ef:66:33:45:
         cb:2a:8c:e1:46:ad:73:ba:aa:6d:9a:d2:5f:ff:ef:69:94:ed:
         51:c8:bf:0b:ca:2e:0d:34:ec:f4:fc:30:36:b6:fb:d9:42:6b:
         56:e5:8d:a9:ce:94:ff:6a:58:c0:94:f1:47:3f:d3:b8:19:3c:
         5e:96:c9:8e:08:06:99:70:9e:cb:54:8e:4a:2e:35:5c:9e:24:
         a4:39:ce:53:bf:76:fa:cc:fc:1e:b3:a8:df:4f:75:37:d4:6c:
         37:c8:ce:19:c4:63:e8:d2:09:3a:5e:5c:89:c7:11:ce:2f:c6:
         3d:ff:89:e8:52:d9:4a:40:46:73:90:f3:50:0f:df:7a:82:72:
         cc:bb:5f:13:82:fd:ab:e8:00:d9:96:1f:df:df:62:97:bb:6e:
         67:d9:38:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:22:49 2026 by rpki-client