Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A0B3B/EC692812DFA311EFA7A90C4E762E951A/On6mEjuyi5myrc0qWftjiY7momU.mft
File:                     On6mEjuyi5myrc0qWftjiY7momU.mft (raw, json)
Hash identifier:          jGxiaz3OsQwUEokZn6Ln7UP4sYsq0uXN+36B8h6j2Jo=
Subject key identifier:   61:60:A6:4B:F1:16:68:CE:DC:8E:7B:D0:3D:46:C6:AF:1F:24:1B:14
Authority key identifier: 3A:7E:A6:12:3B:B2:8B:99:B2:AD:CD:2A:59:FB:63:89:8E:E6:A2:65
Certificate issuer:       /CN=F36A0B3BAF/serialNumber=3A7EA6123BB28B99B2ADCD2A59FB63898EE6A265
Certificate serial:       0224
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/On6mEjuyi5myrc0qWftjiY7momU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A0B3B/EC692812DFA311EFA7A90C4E762E951A/On6mEjuyi5myrc0qWftjiY7momU.mft
Manifest number:          0223
Signing time:             Fri 24 Jul 2026 04:46:23 +0000
Manifest this update:     Fri 24 Jul 2026 04:46:23 +0000
Manifest next update:     Sun 26 Jul 2026 04:46:23 +0000
Files and hashes:         1: On6mEjuyi5myrc0qWftjiY7momU.crl (hash: bcTlrWoSsMA3b6ejhfEXy1cTcjLlBbbeH/OLG5CkbrM=)
                          2: 8500AAA4DFA511EFA4A0995A762E951A.roa (hash: vzRjRuX2GZhGU/X4T8gnBdvjxS1YirPqGZKLuKJg1+Q=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A0B3B/EC692812DFA311EFA7A90C4E762E951A/On6mEjuyi5myrc0qWftjiY7momU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A0B3B/EC692812DFA311EFA7A90C4E762E951A/On6mEjuyi5myrc0qWftjiY7momU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/On6mEjuyi5myrc0qWftjiY7momU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 26 Jul 2026 00:07:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 548 (0x224)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A0B3BAF, serialNumber=3A7EA6123BB28B99B2ADCD2A59FB63898EE6A265
        Validity
            Not Before: Jul 24 04:46:23 2026 GMT
            Not After : Jul 26 04:46:23 2026 GMT
        Subject: CN=6a62ee1f-da50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:9f:1b:db:98:e2:d1:2b:a9:89:cc:72:3a:ab:
                    8d:ce:49:2c:70:f7:e8:30:b8:b3:5b:8b:df:c7:2b:
                    53:ed:3a:ca:99:82:0e:6c:e1:4b:f5:c0:ec:74:d1:
                    41:26:16:38:1c:5f:22:c1:42:0f:89:ac:20:47:47:
                    e2:0e:9c:28:e8:65:a3:19:02:9d:99:f6:05:90:81:
                    bd:13:ee:e0:10:55:94:ab:d0:53:a4:09:ae:7a:c7:
                    f8:1f:75:ca:87:c0:2c:de:78:ca:a6:d2:ca:29:b2:
                    ad:d8:e6:f3:62:e6:3e:73:0c:63:91:c2:54:7a:53:
                    c5:81:52:9a:45:fd:d6:fd:6b:7e:ab:80:08:e8:a2:
                    38:91:ba:5d:94:6e:08:e4:30:16:69:0b:94:1d:51:
                    bd:52:94:8a:9a:d6:95:81:68:d3:d2:16:47:68:8b:
                    a5:c5:81:e9:be:e2:56:d4:24:53:fe:62:8e:79:44:
                    67:4e:a4:53:6c:a5:61:92:80:b5:9f:7c:69:a2:ab:
                    b4:6b:ed:b3:44:cc:bb:58:c3:f7:42:2f:d7:11:29:
                    93:34:c9:5e:2a:af:8a:52:7a:f8:ca:88:1a:54:9b:
                    e9:ac:96:07:94:16:1a:af:c9:23:f0:93:8c:b7:eb:
                    f1:54:ae:f2:4b:61:ed:8b:a1:d7:f7:34:0d:c7:e6:
                    11:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:60:A6:4B:F1:16:68:CE:DC:8E:7B:D0:3D:46:C6:AF:1F:24:1B:14
            X509v3 Authority Key Identifier:
                keyid:3A:7E:A6:12:3B:B2:8B:99:B2:AD:CD:2A:59:FB:63:89:8E:E6:A2:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A0B3B/EC692812DFA311EFA7A90C4E762E951A/On6mEjuyi5myrc0qWftjiY7momU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/On6mEjuyi5myrc0qWftjiY7momU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A0B3B/EC692812DFA311EFA7A90C4E762E951A/On6mEjuyi5myrc0qWftjiY7momU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:24:34:f5:5e:bc:6a:c9:22:b9:dc:51:44:75:5e:ab:dc:31:
         bd:15:59:5a:e9:0f:c0:6f:d7:79:1a:da:71:4b:b0:27:33:f0:
         d7:c7:ec:c8:8f:73:86:84:24:25:e4:66:b8:1f:4f:fb:3c:06:
         ca:55:0b:dc:c9:d8:7e:6e:cd:93:ff:59:11:2e:fe:2b:14:5b:
         d0:bc:07:ef:e3:97:1a:1f:0c:06:2b:17:03:c8:33:4a:e6:03:
         60:16:45:fe:65:7a:cb:61:55:2d:19:7a:83:8a:a7:c3:31:a5:
         23:0e:af:a9:a2:f3:24:f8:e2:01:d0:d8:49:bc:92:81:b5:e2:
         bc:17:2b:0d:2a:e9:16:bc:c3:88:1a:9e:de:68:5a:91:5b:30:
         64:45:4d:d1:2f:be:35:e7:75:74:c0:1f:06:85:d5:95:9e:3b:
         84:8f:ab:65:3d:d2:a8:72:d5:6d:90:54:10:ce:68:f0:73:16:
         65:f8:47:62:16:f1:0f:70:8e:7c:65:75:59:50:d9:dd:59:fd:
         0e:0b:25:11:db:fe:04:aa:ba:ba:fe:12:fe:79:07:b6:b4:1f:
         a6:60:39:d2:61:61:d3:0a:0f:82:05:7c:93:41:e2:0e:ba:ee:
         42:61:5e:8c:e3:38:8d:03:e3:54:e3:da:1f:5d:ae:3c:d0:4f:
         30:14:d2:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:15:31 2026 by rpki-client