Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A2CD2/553F50F064E511E8968FEF2EF8AEA228/M1pTwRMuVAw6td9C8UiHszJN60Q.mft
File:                     M1pTwRMuVAw6td9C8UiHszJN60Q.mft (raw, json)
Hash identifier:          ACY+O/kOxjzrRDV4bc0XhE3zpF0MqZ1G23BtvqQbHbM=
Subject key identifier:   89:0A:27:B9:C4:0F:64:75:43:10:E6:C4:83:4A:88:97:80:AE:52:84
Authority key identifier: 33:5A:53:C1:13:2E:54:0C:3A:B5:DF:42:F1:48:87:B3:32:4D:EB:44
Certificate issuer:       /CN=F36A2CD2AF/serialNumber=335A53C1132E540C3AB5DF42F14887B3324DEB44
Certificate serial:       0BE9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/M1pTwRMuVAw6td9C8UiHszJN60Q.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A2CD2/553F50F064E511E8968FEF2EF8AEA228/M1pTwRMuVAw6td9C8UiHszJN60Q.mft
Manifest number:          0BE6
Signing time:             Fri 24 Jul 2026 01:11:29 +0000
Manifest this update:     Fri 24 Jul 2026 01:11:28 +0000
Manifest next update:     Sun 26 Jul 2026 01:11:28 +0000
Files and hashes:         1: M1pTwRMuVAw6td9C8UiHszJN60Q.crl (hash: VS/A0Bxo0SjhqMQ7rSjC1WGZDCijn1p7QeIgeK5nlwc=)
                          2: BE11892264E511E88A76232FF8AEA228.roa (hash: dOR90EcGn41sg/4MsNNizB3oHEFvm4Z1e3qb8Nhf7Q0=)
                          3: D8C2BDE0D02211EA8498CC41F8AEA228.roa (hash: I2gZAkM/7aE0lRi9sq+Qnq3RN4IGql/esMqczFTNr+A=)
                          4: FF05885C64E511E899B3422FF8AEA228.roa (hash: SEgUfNXNKuWS5w5moDpD2nIXtoeuFn9n8YpzM5ve1qs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A2CD2/553F50F064E511E8968FEF2EF8AEA228/M1pTwRMuVAw6td9C8UiHszJN60Q.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A2CD2/553F50F064E511E8968FEF2EF8AEA228/M1pTwRMuVAw6td9C8UiHszJN60Q.mft
                          rsync://rpki.afrinic.net/repository/afrinic/M1pTwRMuVAw6td9C8UiHszJN60Q.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 26 Jul 2026 00:07:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3049 (0xbe9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A2CD2AF, serialNumber=335A53C1132E540C3AB5DF42F14887B3324DEB44
        Validity
            Not Before: Jul 24 01:11:28 2026 GMT
            Not After : Jul 26 01:11:28 2026 GMT
        Subject: CN=6a62bbc1-cbf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:62:5d:9a:26:e9:6f:78:79:fc:22:53:52:4b:
                    1f:e8:3f:21:55:88:18:f5:0a:e9:85:30:a2:cc:b8:
                    5b:d4:90:bb:b4:6b:3a:2c:a9:44:8c:29:51:12:90:
                    23:c6:89:c6:f9:b7:41:53:1f:4f:d1:a6:fb:9b:ba:
                    87:fb:cc:55:a8:c3:b2:67:47:70:a5:bd:a9:ef:49:
                    12:00:2b:9c:c9:46:2d:da:81:04:ba:c7:12:aa:2b:
                    ec:f5:d1:ca:77:e4:3f:84:04:63:ee:36:42:e6:be:
                    5a:f9:6d:4a:2f:bf:65:6d:5c:93:67:6b:5a:26:a1:
                    30:f1:bc:7b:1b:4b:a9:e5:c8:cc:69:45:ea:39:79:
                    1d:1a:bf:c2:8d:21:cd:f7:03:d1:ca:48:3b:88:27:
                    5d:3c:15:92:70:8e:7a:c2:29:8b:59:56:7b:fa:82:
                    e4:fb:b4:14:dc:0d:2e:87:13:1d:54:b1:e0:16:28:
                    ee:ba:2f:75:22:31:15:94:c6:25:20:d5:91:80:f8:
                    84:14:42:f4:18:4d:77:49:7c:75:e0:9b:0d:bc:fb:
                    b1:0f:3e:a0:0a:e2:a9:39:47:97:73:40:e4:74:d4:
                    87:4a:e6:12:fe:f5:e7:28:44:1c:31:d5:2f:c2:5c:
                    6c:0d:47:85:4b:ef:d3:e3:c6:d0:22:6e:1e:74:a3:
                    ec:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:0A:27:B9:C4:0F:64:75:43:10:E6:C4:83:4A:88:97:80:AE:52:84
            X509v3 Authority Key Identifier:
                keyid:33:5A:53:C1:13:2E:54:0C:3A:B5:DF:42:F1:48:87:B3:32:4D:EB:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A2CD2/553F50F064E511E8968FEF2EF8AEA228/M1pTwRMuVAw6td9C8UiHszJN60Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/M1pTwRMuVAw6td9C8UiHszJN60Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A2CD2/553F50F064E511E8968FEF2EF8AEA228/M1pTwRMuVAw6td9C8UiHszJN60Q.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:77:91:71:a7:e6:dd:52:b6:67:86:06:d0:d9:14:3d:f6:93:
         ae:52:db:57:c9:f6:24:5d:bb:ef:f7:59:d3:9c:ba:92:7e:9a:
         8b:b2:23:6e:c2:aa:10:b8:6a:34:24:85:76:53:34:eb:17:2e:
         9b:50:47:f4:7f:4c:ba:83:c9:3f:4c:69:04:63:e6:06:c5:0b:
         f1:b9:6f:30:42:28:e2:ed:6a:a0:b1:7a:af:05:55:d6:20:e8:
         b2:f3:83:45:23:6b:2a:28:76:f8:df:0b:fc:4e:ae:23:fe:f6:
         64:36:15:46:e1:31:0e:14:33:d3:e0:c2:9d:d4:ea:03:58:4e:
         c7:64:71:15:f1:32:61:87:9e:56:68:6c:b3:8d:6a:a7:4a:b8:
         d3:e6:93:07:8e:40:29:e8:d2:26:91:e8:71:20:89:03:e1:c4:
         ea:c0:d7:32:36:e1:f1:02:11:c0:d2:64:2f:db:3f:d3:c2:44:
         ab:a9:ff:dc:dd:7d:c9:6a:15:11:35:02:99:a0:a6:a3:b2:71:
         78:d1:d5:34:b6:3e:0c:0a:8c:bb:a0:e8:aa:01:21:c7:6f:cf:
         12:c6:f5:c5:bd:df:69:14:96:13:f3:89:76:bd:2b:27:f0:84:
         5a:02:b2:3f:ea:78:99:a9:9b:22:ec:d8:d7:d9:f1:7f:77:81:
         9a:e5:bc:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:47:35 2026 by rpki-client