Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369F058/9CF6AE44553911E9A315872FF8AEA228/qjkCIoK-Ps773Fjln5ljk4Jku0I.mft
File:                     qjkCIoK-Ps773Fjln5ljk4Jku0I.mft (raw, json)
Hash identifier:          F6j4qauhuar1yuJ+3BWbSGYqmzQqGuADwQIXtAfol8w=
Subject key identifier:   C6:AE:13:B1:C8:06:46:A5:C8:EB:7E:67:65:A5:EA:BD:FC:49:65:73
Authority key identifier: AA:39:02:22:82:BE:3E:CE:FB:DC:58:E5:9F:99:63:93:82:64:BB:42
Certificate issuer:       /CN=F369F058AR/serialNumber=AA39022282BE3ECEFBDC58E59F9963938264BB42
Certificate serial:       0AB2
Authority info access:    rsync://rpki.afrinic.net/repository/arin/qjkCIoK-Ps773Fjln5ljk4Jku0I.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369F058/9CF6AE44553911E9A315872FF8AEA228/qjkCIoK-Ps773Fjln5ljk4Jku0I.mft
Manifest number:          0AAF
Signing time:             Fri 24 Jul 2026 01:17:44 +0000
Manifest this update:     Fri 24 Jul 2026 01:17:44 +0000
Manifest next update:     Sun 26 Jul 2026 01:17:44 +0000
Files and hashes:         1: qjkCIoK-Ps773Fjln5ljk4Jku0I.crl (hash: 1/IZaoCeE7NM5r2r3uqDz6Nr9gagYvWd1WmFxFJQzy4=)
                          2: 48619D24149E11EF81414965017001B1.roa (hash: 3GarqsJ4VJ1/CLoT1EAlZXSx5zt3151P9uVE5+wGgZ8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369F058/9CF6AE44553911E9A315872FF8AEA228/qjkCIoK-Ps773Fjln5ljk4Jku0I.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369F058/9CF6AE44553911E9A315872FF8AEA228/qjkCIoK-Ps773Fjln5ljk4Jku0I.mft
                          rsync://rpki.afrinic.net/repository/arin/qjkCIoK-Ps773Fjln5ljk4Jku0I.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 26 Jul 2026 00:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2738 (0xab2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369F058AR, serialNumber=AA39022282BE3ECEFBDC58E59F9963938264BB42
        Validity
            Not Before: Jul 24 01:17:44 2026 GMT
            Not After : Jul 26 01:17:44 2026 GMT
        Subject: CN=6a62bd38-35d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:da:c1:88:8f:c1:da:12:f8:b4:6e:58:93:dc:
                    1b:60:3b:5e:67:67:88:db:54:75:62:bc:41:7e:8a:
                    66:5f:51:ff:fe:01:e0:3a:22:5d:69:25:b6:4f:63:
                    ab:8b:63:c3:d4:2d:0d:86:65:6a:3a:39:72:74:77:
                    52:35:00:7c:37:1c:73:72:0d:00:e7:98:97:b8:49:
                    40:05:74:13:6f:35:bb:f3:bf:fd:fb:fa:ce:be:ff:
                    31:7a:07:c2:d5:a5:3f:88:e9:72:17:8b:26:09:6d:
                    7b:2f:36:7c:da:ee:18:62:30:33:64:4f:32:82:b1:
                    e7:dd:ec:b8:63:ed:a9:15:5f:e6:44:0d:10:f1:8d:
                    ee:40:7b:85:d1:d8:5f:e2:2f:78:32:aa:5f:83:74:
                    60:3b:64:b1:ed:d0:db:4c:cd:fc:2b:86:44:a8:2e:
                    10:f4:07:d7:88:a0:a3:52:70:7b:2b:62:0b:db:aa:
                    6b:d6:0c:12:14:d7:56:ea:e7:f1:0c:0d:26:19:31:
                    31:ee:1a:45:fd:6f:37:d5:5a:03:52:05:d5:23:ff:
                    24:d4:fa:99:4d:41:59:0c:7f:75:51:32:db:08:c4:
                    26:ea:9b:84:17:42:7c:85:57:9f:4d:da:eb:f2:36:
                    5b:d9:55:b7:17:3a:9b:ec:53:02:ff:68:90:e9:63:
                    23:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:AE:13:B1:C8:06:46:A5:C8:EB:7E:67:65:A5:EA:BD:FC:49:65:73
            X509v3 Authority Key Identifier:
                keyid:AA:39:02:22:82:BE:3E:CE:FB:DC:58:E5:9F:99:63:93:82:64:BB:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369F058/9CF6AE44553911E9A315872FF8AEA228/qjkCIoK-Ps773Fjln5ljk4Jku0I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/qjkCIoK-Ps773Fjln5ljk4Jku0I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369F058/9CF6AE44553911E9A315872FF8AEA228/qjkCIoK-Ps773Fjln5ljk4Jku0I.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:dd:ea:4c:24:d3:08:d0:b3:ba:5f:1a:07:ad:4b:7a:b4:d6:
         37:b0:f0:7e:e5:a7:ad:83:1e:24:71:b7:0a:f3:cc:a9:cd:8b:
         fa:fe:c0:95:d2:56:1d:b1:44:53:8c:fb:46:97:1a:d7:33:ac:
         68:e4:63:b5:4f:2a:06:5f:2e:1b:3c:7a:fb:ef:76:b9:5e:f8:
         e9:34:e2:21:7a:cf:69:c2:1d:1c:10:5b:33:bd:2d:59:dc:b8:
         b5:93:d4:53:dd:7c:a6:8c:a0:51:cd:95:b3:f6:86:37:38:3a:
         57:19:27:19:a6:4c:dd:4b:07:84:7a:43:23:7a:3f:6e:7c:b4:
         99:40:70:5a:a6:0a:fc:31:e5:f5:04:c3:a0:67:bc:f5:64:1f:
         32:99:71:49:29:68:15:e8:2c:16:95:2c:da:9d:0f:07:2f:0d:
         0f:2a:60:80:70:68:aa:8c:6b:85:cc:43:1c:0d:03:a5:5d:a0:
         34:39:cd:d6:5d:c8:4e:03:aa:8b:f0:3e:e8:49:7b:49:1e:80:
         bd:9e:4e:41:b5:69:c1:18:e6:17:aa:af:54:3a:f7:ed:f4:a5:
         ee:06:3b:eb:4d:65:95:29:a9:7b:bd:ae:8d:87:a5:d8:1f:0e:
         9f:21:52:d8:b5:fe:1a:97:3a:f9:94:f4:c4:46:ba:7c:74:4c:
         75:3d:7e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:27:39 2026 by rpki-client