Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3695C0A/4F556FEAAB7511ED93E656AFF1222468/5IF89uPaBQJQGf_Vqru3g4R18ps.mft
File:                     5IF89uPaBQJQGf_Vqru3g4R18ps.mft (raw, json)
Hash identifier:          2lfTE6C+BY5zS1Z0iGtriFZhTz/vn+0Mi6o/uBMThHo=
Subject key identifier:   BF:ED:FD:07:FA:0F:D2:71:75:EF:5C:ED:36:EA:30:9C:29:E3:A1:35
Authority key identifier: E4:81:7C:F6:E3:DA:05:02:50:19:FF:D5:AA:BB:B7:83:84:75:F2:9B
Certificate issuer:       /CN=F3695C0AAF/serialNumber=E4817CF6E3DA05025019FFD5AABBB7838475F29B
Certificate serial:       0517
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/5IF89uPaBQJQGf_Vqru3g4R18ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3695C0A/4F556FEAAB7511ED93E656AFF1222468/5IF89uPaBQJQGf_Vqru3g4R18ps.mft
Manifest number:          0513
Signing time:             Fri 24 Jul 2026 03:13:50 +0000
Manifest this update:     Fri 24 Jul 2026 03:13:50 +0000
Manifest next update:     Sun 26 Jul 2026 03:13:50 +0000
Files and hashes:         1: 5IF89uPaBQJQGf_Vqru3g4R18ps.crl (hash: YgA7Z6jE4VQdPbUGyN72WyNyOY3RsNkeQJoadME+MZQ=)
                          2: BEA919C4656B11F1A8C307A6CE1D38B0.roa (hash: uyFvxrrHoUVF5pFRmc1EEEH7IhJZrM0RVpCUzrF7KEY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3695C0A/4F556FEAAB7511ED93E656AFF1222468/5IF89uPaBQJQGf_Vqru3g4R18ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3695C0A/4F556FEAAB7511ED93E656AFF1222468/5IF89uPaBQJQGf_Vqru3g4R18ps.mft
                          rsync://rpki.afrinic.net/repository/afrinic/5IF89uPaBQJQGf_Vqru3g4R18ps.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 26 Jul 2026 00:07:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1303 (0x517)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3695C0AAF, serialNumber=E4817CF6E3DA05025019FFD5AABBB7838475F29B
        Validity
            Not Before: Jul 24 03:13:50 2026 GMT
            Not After : Jul 26 03:13:50 2026 GMT
        Subject: CN=6a62d86e-8653
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:fd:00:0d:62:d0:44:4c:b8:d5:42:1b:f5:68:
                    c6:42:4b:01:ad:85:5b:aa:0f:50:67:db:09:3c:39:
                    85:c8:05:7b:12:82:87:a4:86:ed:2f:27:bc:47:3e:
                    78:0a:f2:09:4c:b7:91:7a:b8:97:00:bf:f9:56:79:
                    31:1a:1f:64:2a:55:7f:13:53:1a:7c:59:0b:36:ab:
                    aa:84:d4:b0:f5:eb:dc:ef:03:fd:db:18:15:77:a0:
                    d9:fe:31:c9:f5:ac:50:bd:8b:ac:54:82:2e:55:77:
                    26:a1:50:1a:76:66:69:a0:4d:6d:3b:d4:f0:dd:10:
                    aa:eb:1c:17:9a:bb:29:0a:bf:67:08:83:43:6a:00:
                    50:21:c6:4a:ce:e3:c6:a6:02:3c:81:0c:52:d4:d9:
                    f4:ca:5c:4a:a4:9e:54:44:94:73:fd:eb:9a:c2:44:
                    22:15:9b:78:b9:1f:43:15:ad:6a:7a:3d:f5:1a:a7:
                    7b:a8:0f:62:86:05:15:77:1c:29:6b:3d:a3:a5:3c:
                    1f:f0:57:ec:e4:04:dd:b6:40:d3:a8:4a:6a:dd:cc:
                    9d:19:4b:82:f9:18:ce:2d:fd:09:08:fe:ee:12:08:
                    5e:17:e3:6a:41:48:ae:0d:bf:b3:e5:4f:43:8a:fe:
                    79:f7:21:b4:57:38:af:9c:8c:44:e2:d1:49:86:2c:
                    6b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:ED:FD:07:FA:0F:D2:71:75:EF:5C:ED:36:EA:30:9C:29:E3:A1:35
            X509v3 Authority Key Identifier:
                keyid:E4:81:7C:F6:E3:DA:05:02:50:19:FF:D5:AA:BB:B7:83:84:75:F2:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3695C0A/4F556FEAAB7511ED93E656AFF1222468/5IF89uPaBQJQGf_Vqru3g4R18ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/5IF89uPaBQJQGf_Vqru3g4R18ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3695C0A/4F556FEAAB7511ED93E656AFF1222468/5IF89uPaBQJQGf_Vqru3g4R18ps.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:98:96:28:d7:50:71:74:63:be:38:de:0b:c0:db:72:0c:94:
         5b:1d:1d:bc:33:78:06:e9:32:e9:70:22:90:e6:40:88:75:62:
         d2:be:9c:cb:e5:a5:ac:02:26:2e:b4:ef:52:80:e9:81:5a:8f:
         9b:de:19:f6:27:97:ed:01:55:2e:a0:b7:c9:bb:c1:45:ce:aa:
         9c:97:3b:f1:a6:c4:e7:a2:99:fe:0b:81:f4:05:59:54:9c:62:
         35:9d:c0:9b:ae:da:8a:4f:d1:37:60:4c:24:dd:3a:bd:43:68:
         f3:4e:69:64:d9:5c:29:7b:7e:9a:43:d5:dd:58:39:d3:5c:58:
         3d:13:eb:87:0e:23:7d:ed:a5:ae:e1:fb:66:9a:89:48:a1:69:
         d8:f8:e6:53:ea:19:e7:b5:96:5e:75:97:4c:91:a8:0e:79:e4:
         f5:37:bd:8e:b0:00:82:95:63:6b:a1:ba:08:5c:b1:c0:34:99:
         6a:cc:76:1c:1b:af:21:7e:a6:b1:a1:dc:0d:fc:20:c8:1a:0a:
         37:91:88:8c:63:97:f2:65:92:6e:97:48:7c:c6:22:28:0a:c8:
         cc:eb:e4:bd:06:98:c6:fe:f6:b3:56:23:53:1d:ce:49:1a:ca:
         55:78:65:a2:0d:95:25:05:5e:d7:bd:a4:86:13:4e:18:07:40:
         3a:46:ad:87
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBRcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OTVDMEFBRjExMC8GA1UEBRMoRTQ4MTdDRjZFM0RBMDUwMjUwMTlGRkQ1QUFCQkI3
ODM4NDc1RjI5QjAeFw0yNjA3MjQwMzEzNTBaFw0yNjA3MjYwMzEzNTBaMBgxFjAU
BgNVBAMTDTZhNjJkODZlLTg2NTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCk/QANYtBETLjVQhv1aMZCSwGthVuqD1Bn2wk8OYXIBXsSgoekhu0vJ7xH
PngK8glMt5F6uJcAv/lWeTEaH2QqVX8TUxp8WQs2q6qE1LD169zvA/3bGBV3oNn+
Mcn1rFC9i6xUgi5VdyahUBp2ZmmgTW071PDdEKrrHBeauykKv2cIg0NqAFAhxkrO
48amAjyBDFLU2fTKXEqknlRElHP965rCRCIVm3i5H0MVrWp6PfUap3uoD2KGBRV3
HClrPaOlPB/wV+zkBN22QNOoSmrdzJ0ZS4L5GM4t/QkI/u4SCF4X42pBSK4Nv7Pl
T0OK/nn3IbRXOK+cjETi0UmGLGvRAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUv+39
B/oP0nF171ztNuownCnjoTUwHwYDVR0jBBgwFoAU5IF89uPaBQJQGf/Vqru3g4R1
8pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjk1QzBBLzRGNTU2RkVBQUI3NTExRUQ5M0U2NTZBRkYxMjIyNDY4LzVJRjg5
dVBhQlFKUUdmX1ZxcnUzZzRSMThwcy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzVJRjg5dVBhQlFKUUdmX1ZxcnUzZzRSMThwcy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OTVDMEEvNEY1NTZGRUFBQjc1MTFFRDkzRTY1NkFGRjEy
MjI0NjgvNUlGODl1UGFCUUpRR2ZfVnFydTNnNFIxOHBzLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDJmJYo11BxdGO+ON4LwNtyDJRbHR28
M3gG6TLpcCKQ5kCIdWLSvpzL5aWsAiYutO9SgOmBWo+b3hn2J5ftAVUuoLfJu8FF
zqqclzvxpsTnopn+C4H0BVlUnGI1ncCbrtqKT9E3YEwk3Tq9Q2jzTmlk2Vwpe36a
Q9XdWDnTXFg9E+uHDiN97aWu4ftmmolIoWnY+OZT6hnntZZedZdMkagOeeT1N72O
sACClWNroboIXLHANJlqzHYcG68hfqaxodwN/CDIGgo3kYiMY5fyZZJul0h8xiIo
CsjM6+S9BpjG/vazViNTHc5JGspVeGWiDZUlBV7XvaSGE04YB0A6Rq2H
-----END CERTIFICATE-----
Generated at Fri Jul 24 11:32:03 2026 by rpki-client