Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369E115/FBFEB76403C211EF9713C10C017001B1/S9EnC3AP8p0YQj8YO5-Ss2iH1t0.mft
File:                     S9EnC3AP8p0YQj8YO5-Ss2iH1t0.mft (raw, json)
Hash identifier:          8oY44JsLgdoEq3osmHjwwLIn19qT+T54AWQwSenA87A=
Subject key identifier:   8D:AE:3F:9E:45:D7:92:E6:86:44:3A:43:D0:F7:FD:C9:D8:6B:75:B6
Authority key identifier: 4B:D1:27:0B:70:0F:F2:9D:18:42:3F:18:3B:9F:92:B3:68:87:D6:DD
Certificate issuer:       /CN=F369E115AF/serialNumber=4BD1270B700FF29D18423F183B9F92B36887D6DD
Certificate serial:       034B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/S9EnC3AP8p0YQj8YO5-Ss2iH1t0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369E115/FBFEB76403C211EF9713C10C017001B1/S9EnC3AP8p0YQj8YO5-Ss2iH1t0.mft
Manifest number:          0349
Signing time:             Fri 24 Jul 2026 04:10:13 +0000
Manifest this update:     Fri 24 Jul 2026 04:10:12 +0000
Manifest next update:     Sun 26 Jul 2026 04:10:12 +0000
Files and hashes:         1: S9EnC3AP8p0YQj8YO5-Ss2iH1t0.crl (hash: X5Ah1e8/4++hkZLZ2VwvXiQq5OVUM0HRHbgseuAZKbY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369E115/FBFEB76403C211EF9713C10C017001B1/S9EnC3AP8p0YQj8YO5-Ss2iH1t0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369E115/FBFEB76403C211EF9713C10C017001B1/S9EnC3AP8p0YQj8YO5-Ss2iH1t0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/S9EnC3AP8p0YQj8YO5-Ss2iH1t0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 26 Jul 2026 00:07:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 843 (0x34b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369E115AF, serialNumber=4BD1270B700FF29D18423F183B9F92B36887D6DD
        Validity
            Not Before: Jul 24 04:10:12 2026 GMT
            Not After : Jul 26 04:10:12 2026 GMT
        Subject: CN=6a62e5a5-6d6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:cc:9c:f6:95:fc:fb:76:cd:28:73:30:22:a9:
                    16:d9:8f:46:f8:e9:52:0c:ea:eb:92:8c:e7:98:76:
                    6c:f1:50:04:5c:b7:11:1a:06:54:83:2e:d6:ed:03:
                    65:f6:c4:e5:a2:e2:78:bc:34:9e:85:59:16:65:4b:
                    b7:45:73:40:e4:3e:7a:ba:14:b2:ee:0e:d5:a2:50:
                    3b:f8:c6:a2:66:a7:b4:d5:2a:52:01:cf:b3:76:b6:
                    22:4a:cb:ed:98:91:b9:dd:49:96:a5:51:9c:b4:36:
                    80:a9:a4:53:7e:16:f8:65:ca:87:10:1e:80:99:cb:
                    52:2c:9c:93:4b:8c:78:17:5b:3c:36:c0:81:77:d6:
                    e7:36:ae:45:44:e5:84:cb:f9:e3:f9:cf:aa:2c:de:
                    54:cd:83:2a:a9:24:49:67:1b:72:6c:37:18:44:db:
                    54:0d:a5:45:1d:47:b8:57:f5:d1:bd:c2:19:65:cd:
                    5c:e9:d4:9d:bf:f2:8b:ce:45:38:cb:17:87:9b:c5:
                    99:d1:32:ad:e3:c7:03:e1:67:e0:b7:fa:ee:67:b2:
                    3b:99:42:d2:ca:2d:41:24:ff:e3:7d:35:7d:0c:92:
                    1f:71:5c:81:d1:be:33:df:5a:c6:aa:5f:d5:1e:79:
                    73:0c:dd:b2:52:ff:47:4b:56:01:21:7f:d8:f1:85:
                    2f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:AE:3F:9E:45:D7:92:E6:86:44:3A:43:D0:F7:FD:C9:D8:6B:75:B6
            X509v3 Authority Key Identifier:
                keyid:4B:D1:27:0B:70:0F:F2:9D:18:42:3F:18:3B:9F:92:B3:68:87:D6:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369E115/FBFEB76403C211EF9713C10C017001B1/S9EnC3AP8p0YQj8YO5-Ss2iH1t0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/S9EnC3AP8p0YQj8YO5-Ss2iH1t0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369E115/FBFEB76403C211EF9713C10C017001B1/S9EnC3AP8p0YQj8YO5-Ss2iH1t0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:32:98:63:61:85:8a:f0:db:bd:47:bb:64:34:b6:1c:ed:b9:
         34:cf:7a:9a:dc:ab:6d:cc:be:5e:22:83:55:33:d1:b9:4f:fa:
         7f:88:e1:92:6b:20:91:51:e8:07:2a:29:f5:ad:83:f1:53:d5:
         8c:dd:d2:74:1c:8a:98:93:7e:ce:58:fb:72:12:10:23:38:b7:
         81:f6:9e:94:91:23:11:be:5b:66:8a:5c:6e:96:b1:95:33:42:
         b4:5e:6c:ae:be:70:58:76:e3:d6:e5:46:29:06:36:9f:27:c9:
         26:60:4c:ac:23:b1:66:aa:05:2c:91:af:c1:30:4c:fc:fa:aa:
         8d:07:0e:64:40:2c:b6:ac:49:41:17:cc:c4:49:c5:78:f6:ac:
         04:67:1a:99:c4:75:0b:1a:f5:54:cc:67:33:dd:b9:72:c7:aa:
         d6:73:28:06:06:a7:e0:90:39:5d:f9:2c:11:4f:90:b9:a0:f9:
         ce:24:5f:11:31:61:38:42:e1:2c:25:52:54:90:f3:a0:7a:20:
         3a:f6:c9:1c:e7:ac:0a:34:f5:f7:a8:da:e9:7a:1f:24:51:ae:
         a4:62:12:03:6b:c2:43:94:cb:45:ca:d9:5a:5f:c7:86:c3:29:
         78:d4:49:2a:be:f9:a8:a4:ed:33:a3:d0:ae:9b:c5:d9:fd:0d:
         33:1e:0f:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:30:01 2026 by rpki-client