Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369B304/B98A352CEC1211F0ABA757A0DAE4EC9C/XY4nZDYESZrfo7elNFeDrRLbr_M.mft
File:                     XY4nZDYESZrfo7elNFeDrRLbr_M.mft (raw, json)
Hash identifier:          12d4vP1fGMynu7T1Dw92b6PnuY6SJstIkjSjPNAXvdQ=
Subject key identifier:   00:68:0B:B9:B9:4A:6B:93:2C:97:74:58:37:C4:80:42:31:2B:9B:BC
Authority key identifier: 5D:8E:27:64:36:04:49:9A:DF:A3:B7:A5:34:57:83:AD:12:DB:AF:F3
Certificate issuer:       /CN=F369B304AF/serialNumber=5D8E27643604499ADFA3B7A5345783AD12DBAFF3
Certificate serial:       CA
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/XY4nZDYESZrfo7elNFeDrRLbr_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369B304/B98A352CEC1211F0ABA757A0DAE4EC9C/XY4nZDYESZrfo7elNFeDrRLbr_M.mft
Manifest number:          C9
Signing time:             Fri 24 Jul 2026 05:21:23 +0000
Manifest this update:     Fri 24 Jul 2026 05:21:22 +0000
Manifest next update:     Sun 26 Jul 2026 05:21:22 +0000
Files and hashes:         1: XY4nZDYESZrfo7elNFeDrRLbr_M.crl (hash: S44ldEhBXfWwdNu2Nup44XjOT/9MvaQ7eTjq4MabAco=)
                          2: 6940FEB07FA711F1B3D47110CF1D38B0.roa (hash: wxbOmuOUCEqbkjwrgojW0bKcYQ5TMR+fX4e4p9xnvNg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369B304/B98A352CEC1211F0ABA757A0DAE4EC9C/XY4nZDYESZrfo7elNFeDrRLbr_M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369B304/B98A352CEC1211F0ABA757A0DAE4EC9C/XY4nZDYESZrfo7elNFeDrRLbr_M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/XY4nZDYESZrfo7elNFeDrRLbr_M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 26 Jul 2026 00:07:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 202 (0xca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369B304AF, serialNumber=5D8E27643604499ADFA3B7A5345783AD12DBAFF3
        Validity
            Not Before: Jul 24 05:21:22 2026 GMT
            Not After : Jul 26 05:21:22 2026 GMT
        Subject: CN=6a62f653-e67a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:2a:48:2b:ee:e3:29:33:d4:08:60:cb:dd:db:
                    04:55:59:f2:7c:d1:7b:20:5b:a7:48:47:d8:24:66:
                    3e:c9:97:0c:8e:68:73:94:c6:c0:b5:dc:c0:f3:94:
                    1a:dc:15:f7:e4:bf:27:71:41:e0:6f:1c:a0:10:66:
                    43:0e:30:a6:35:00:45:26:db:ae:da:6f:c4:b3:64:
                    d0:40:eb:9d:a8:bd:20:5a:72:ae:6f:fc:1f:39:5e:
                    bd:d0:1a:33:64:cc:40:5e:66:79:88:f3:68:80:b1:
                    63:bf:0f:1a:52:c2:a1:11:96:93:f9:da:cb:c2:d4:
                    6f:04:b2:2c:f4:81:07:9d:a7:fd:fd:b6:9d:d2:1c:
                    05:21:48:a8:aa:2a:ca:5c:53:b1:73:37:16:50:c1:
                    2b:61:f7:b3:a4:4a:e0:97:68:d4:da:86:e4:fc:00:
                    34:df:5e:77:39:d5:e6:3e:17:8b:a6:eb:91:8a:20:
                    c5:d8:48:33:35:77:b5:e5:ec:9c:34:0e:fb:a7:f4:
                    a4:46:ca:de:c7:55:87:11:e4:8c:32:87:10:66:8e:
                    0b:54:e1:c3:67:d8:97:f0:b5:9f:33:0b:2a:32:73:
                    09:66:8b:93:9a:90:b8:e0:57:34:a5:a9:41:cd:93:
                    6b:05:d8:c1:88:de:04:d7:12:75:60:32:0d:92:ef:
                    8c:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:68:0B:B9:B9:4A:6B:93:2C:97:74:58:37:C4:80:42:31:2B:9B:BC
            X509v3 Authority Key Identifier:
                keyid:5D:8E:27:64:36:04:49:9A:DF:A3:B7:A5:34:57:83:AD:12:DB:AF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369B304/B98A352CEC1211F0ABA757A0DAE4EC9C/XY4nZDYESZrfo7elNFeDrRLbr_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XY4nZDYESZrfo7elNFeDrRLbr_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369B304/B98A352CEC1211F0ABA757A0DAE4EC9C/XY4nZDYESZrfo7elNFeDrRLbr_M.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:9c:e8:1c:c4:61:14:9c:29:c4:3a:18:ce:fa:e0:27:63:a9:
         67:73:45:8e:52:6d:be:ad:ff:b4:b4:5f:2d:7d:2d:c6:25:01:
         72:69:e9:c5:6b:19:c9:34:f3:e8:7b:0b:8f:e4:b3:32:e4:57:
         61:39:33:28:3f:80:53:e3:37:2a:53:fd:a5:cb:2a:df:11:ec:
         4c:24:6f:39:28:d1:de:0b:70:f2:6d:cf:ac:79:2c:21:f5:f0:
         2e:f8:89:3a:a7:30:e8:f3:43:13:a5:1d:bd:a2:5e:4c:06:43:
         a0:42:6f:50:12:97:45:40:02:ed:ef:6e:76:4e:90:37:d3:83:
         97:8f:89:ee:4f:b2:a8:13:44:0b:04:bc:0d:59:6d:a2:e9:f0:
         3f:9d:4c:5c:ae:24:7f:99:24:e4:42:5d:ff:95:97:a6:5e:76:
         8a:ee:3a:bd:34:e8:cb:6f:ec:74:f4:03:d2:e8:83:b2:68:47:
         43:dc:92:88:1e:14:25:db:c5:99:2d:de:e6:b7:1d:49:19:54:
         c9:b8:8b:4d:3c:30:08:c1:f8:b5:2a:f7:0e:26:e0:46:84:0a:
         1e:5e:01:2e:39:9d:2a:80:f9:2d:ac:80:a6:ff:b5:f8:2b:22:
         1e:fa:91:18:e9:de:e8:d6:e2:92:83:52:d4:d2:af:59:d0:2a:
         73:a3:4a:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:29:00 2026 by rpki-client