Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A3983/09B8183E9B9C11EFA012F94F762E951A/ih_PKB86N6VQ5kE32QhVCuiQIzo.mft
File:                     ih_PKB86N6VQ5kE32QhVCuiQIzo.mft (raw, json)
Hash identifier:          qGl/hMGhPwd9xpTkDWQP508GHewyqcovo8r+zx3NjMU=
Subject key identifier:   3F:9C:A5:60:5C:70:16:15:DA:1A:3F:D8:9E:C9:C5:CB:21:87:61:B2
Authority key identifier: 8A:1F:CF:28:1F:3A:37:A5:50:E6:41:37:D9:08:55:0A:E8:90:23:3A
Certificate issuer:       /CN=F36A3983AF/serialNumber=8A1FCF281F3A37A550E64137D908550AE890233A
Certificate serial:       0280
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ih_PKB86N6VQ5kE32QhVCuiQIzo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A3983/09B8183E9B9C11EFA012F94F762E951A/ih_PKB86N6VQ5kE32QhVCuiQIzo.mft
Manifest number:          027F
Signing time:             Fri 24 Jul 2026 04:37:11 +0000
Manifest this update:     Fri 24 Jul 2026 04:37:10 +0000
Manifest next update:     Sun 26 Jul 2026 04:37:10 +0000
Files and hashes:         1: ih_PKB86N6VQ5kE32QhVCuiQIzo.crl (hash: EnBPHL5AM9rhfXtoi+aoESyUZIVrigc7l+uKpiusqaE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A3983/09B8183E9B9C11EFA012F94F762E951A/ih_PKB86N6VQ5kE32QhVCuiQIzo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A3983/09B8183E9B9C11EFA012F94F762E951A/ih_PKB86N6VQ5kE32QhVCuiQIzo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ih_PKB86N6VQ5kE32QhVCuiQIzo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 26 Jul 2026 00:07:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 640 (0x280)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A3983AF, serialNumber=8A1FCF281F3A37A550E64137D908550AE890233A
        Validity
            Not Before: Jul 24 04:37:10 2026 GMT
            Not After : Jul 26 04:37:10 2026 GMT
        Subject: CN=6a62ebf7-f087
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e4:8c:0e:66:2d:f4:ad:0c:16:6d:10:84:73:
                    0f:66:24:f7:df:7d:95:ab:dc:1d:0e:0e:25:d0:5d:
                    b2:0f:33:fd:92:25:e6:1b:02:50:68:b1:67:9d:73:
                    c1:58:fb:f7:16:b2:03:1c:df:7e:12:e7:0e:5e:66:
                    20:b7:d3:21:10:97:06:49:ca:65:05:39:02:0b:6b:
                    83:9f:2a:81:ef:b2:c7:d8:af:44:a1:42:0f:ac:be:
                    ce:82:89:8f:55:c8:6a:1f:6e:e6:17:c0:94:0c:1f:
                    2a:5d:81:b6:6c:f4:95:6c:64:74:2c:b7:0a:cd:f0:
                    99:57:b7:20:4f:c2:f6:60:de:b9:db:62:ae:6c:a8:
                    7c:6c:73:8b:28:23:fc:0f:28:9d:ed:04:22:0b:00:
                    50:3b:da:b2:f7:d6:54:df:79:3d:c4:6b:8c:cb:09:
                    d8:cd:4b:08:44:2d:bc:74:75:a9:2a:8a:9c:45:12:
                    8b:e9:3e:93:4d:3b:12:0d:61:74:50:ef:26:58:b6:
                    be:1d:fb:53:31:d4:c5:17:df:de:3c:32:92:9f:f5:
                    7e:14:41:af:35:dc:86:45:84:72:a0:11:dc:a0:68:
                    99:9b:df:f4:e2:44:23:bf:0e:eb:82:2c:8a:0a:68:
                    bd:2f:77:e9:95:dd:e7:29:3a:c4:70:74:7f:8c:7c:
                    d5:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:9C:A5:60:5C:70:16:15:DA:1A:3F:D8:9E:C9:C5:CB:21:87:61:B2
            X509v3 Authority Key Identifier:
                keyid:8A:1F:CF:28:1F:3A:37:A5:50:E6:41:37:D9:08:55:0A:E8:90:23:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A3983/09B8183E9B9C11EFA012F94F762E951A/ih_PKB86N6VQ5kE32QhVCuiQIzo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ih_PKB86N6VQ5kE32QhVCuiQIzo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A3983/09B8183E9B9C11EFA012F94F762E951A/ih_PKB86N6VQ5kE32QhVCuiQIzo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:79:d9:9c:6b:9e:bb:2d:72:0d:5c:19:2b:91:3c:63:f7:ed:
         55:0c:af:bc:a3:a3:be:6f:b5:ff:a7:fa:fa:0a:e3:69:2e:38:
         af:2a:6b:f9:90:aa:e4:cb:a8:d5:c6:bc:fe:65:ac:6c:2d:0b:
         82:f4:50:a0:c2:83:56:54:be:73:db:60:be:fe:b9:1b:e2:43:
         1f:19:ed:a3:5f:05:c3:73:b1:e4:70:5a:df:68:24:bf:64:7c:
         39:6f:80:ef:d2:16:3f:f5:a2:cf:2c:55:e3:03:60:ea:17:82:
         cc:ae:25:9b:4e:74:3d:1b:25:da:6e:bb:1b:46:49:c5:81:6f:
         b7:5f:e1:ad:c1:72:29:0c:b2:32:c2:27:e1:88:c4:fe:7f:a6:
         f5:ea:f9:2f:bf:cd:de:c0:ba:90:7e:b6:df:13:7a:3a:11:e0:
         62:9d:07:2b:a5:fc:b8:e6:30:13:31:56:d2:e8:6e:d5:78:4c:
         db:f3:77:60:ef:3c:87:3e:43:5c:5e:26:f4:bc:1a:aa:7c:2a:
         2a:d7:32:aa:1f:10:d1:bb:26:db:01:32:d5:2e:82:48:3b:a8:
         1f:07:20:78:ae:df:bc:34:aa:35:24:de:3c:47:74:02:43:a7:
         d0:43:46:80:06:4d:89:78:0e:70:ad:c6:1a:4c:6c:48:47:e2:
         2c:6c:38:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:28:15 2026 by rpki-client