Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36ABB63/E08FB58213F311E5A8E5AE44F8AEA228/41870XBX5RmmOBSWl-AwgOrYdys.mft
File:                     41870XBX5RmmOBSWl-AwgOrYdys.mft (raw, json)
Hash identifier:          V8lOtWFjOJWwVlSg/vYqacDTGtlqlEzD6bo0XdyOZps=
Subject key identifier:   B5:4C:F8:9F:BA:E8:3F:B0:45:F5:C9:26:5D:24:2B:41:66:1D:08:B2
Authority key identifier: E3:5F:3B:D1:70:57:E5:19:A6:38:14:96:97:E0:30:80:EA:D8:77:2B
Certificate issuer:       /CN=F36ABB63AF/serialNumber=E35F3BD17057E519A638149697E03080EAD8772B
Certificate serial:       1029
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/41870XBX5RmmOBSWl-AwgOrYdys.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36ABB63/E08FB58213F311E5A8E5AE44F8AEA228/41870XBX5RmmOBSWl-AwgOrYdys.mft
Manifest number:          1027
Signing time:             Fri 24 Jul 2026 00:51:35 +0000
Manifest this update:     Fri 24 Jul 2026 00:51:34 +0000
Manifest next update:     Sun 26 Jul 2026 00:51:34 +0000
Files and hashes:         1: 41870XBX5RmmOBSWl-AwgOrYdys.crl (hash: tyn69KQnItWu5DmnIRwIJJkj8O/3bGu90e8kCb/EWMA=)
                          2: 752DB50C461511E99A25B144F8AEA228.roa (hash: k0Rhsuh/b99q9kDn1FoP+OO8bsw50UMZoPySxuOGhI8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36ABB63/E08FB58213F311E5A8E5AE44F8AEA228/41870XBX5RmmOBSWl-AwgOrYdys.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36ABB63/E08FB58213F311E5A8E5AE44F8AEA228/41870XBX5RmmOBSWl-AwgOrYdys.mft
                          rsync://rpki.afrinic.net/repository/afrinic/41870XBX5RmmOBSWl-AwgOrYdys.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 26 Jul 2026 00:07:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4137 (0x1029)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36ABB63AF, serialNumber=E35F3BD17057E519A638149697E03080EAD8772B
        Validity
            Not Before: Jul 24 00:51:34 2026 GMT
            Not After : Jul 26 00:51:34 2026 GMT
        Subject: CN=6a62b716-d127
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:20:8d:a6:a4:0c:ea:48:e8:fc:79:59:08:17:
                    6e:ac:15:43:1e:83:4c:c4:40:90:ea:09:1e:6c:8e:
                    1f:f2:f1:92:f4:ab:f5:14:be:55:7a:6c:e1:e8:fd:
                    59:d6:b6:e7:65:c6:2f:ea:cc:c4:fe:b6:08:84:8e:
                    b1:9a:63:16:43:cd:ef:3a:23:59:6c:6f:7b:01:fe:
                    28:6d:4d:12:4e:34:56:dd:2c:46:bf:19:09:9a:e7:
                    b2:db:ab:50:0d:5b:60:f2:d1:57:e8:91:8f:6e:a0:
                    92:d2:ec:bf:af:3b:ea:51:77:98:60:35:f0:ca:42:
                    88:a0:62:27:c8:2f:00:68:67:9d:85:47:91:ce:9c:
                    c6:35:25:ce:f0:40:5e:c9:c8:4c:1c:58:6e:ed:5d:
                    3f:10:9e:79:a4:c9:fc:8e:aa:65:1c:19:ed:63:da:
                    b3:00:e9:0a:39:53:f0:cf:72:c0:2c:40:e5:6b:3e:
                    01:fc:55:9c:22:8a:8e:70:ce:5b:5d:87:b3:80:e6:
                    b3:6e:f0:fd:6e:67:90:f4:cc:f8:20:07:2d:fb:30:
                    a0:5d:db:74:d5:28:4a:d7:70:cc:ed:d0:0b:78:3d:
                    4a:48:85:5c:3a:6e:4f:60:1b:77:06:ee:c4:50:41:
                    84:e6:8a:24:5e:54:c7:29:e6:d3:2f:bb:19:99:12:
                    79:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:4C:F8:9F:BA:E8:3F:B0:45:F5:C9:26:5D:24:2B:41:66:1D:08:B2
            X509v3 Authority Key Identifier:
                keyid:E3:5F:3B:D1:70:57:E5:19:A6:38:14:96:97:E0:30:80:EA:D8:77:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36ABB63/E08FB58213F311E5A8E5AE44F8AEA228/41870XBX5RmmOBSWl-AwgOrYdys.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/41870XBX5RmmOBSWl-AwgOrYdys.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36ABB63/E08FB58213F311E5A8E5AE44F8AEA228/41870XBX5RmmOBSWl-AwgOrYdys.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:7c:77:a2:f4:b8:c0:2e:c5:c6:d6:6a:db:ba:7a:8d:2d:05:
         fc:1b:5a:09:43:86:14:1c:d8:cf:89:4a:a0:2e:03:af:a0:d4:
         e8:87:80:e0:e8:bd:6b:58:41:46:d0:ac:e0:61:23:ab:63:e5:
         20:93:ba:f3:0a:5e:e9:40:e3:e0:62:66:60:43:4f:bd:92:32:
         0d:a2:f2:0d:3b:ed:4e:72:3c:42:0d:4f:a7:f9:88:84:8c:e7:
         25:79:f2:9d:b0:a7:2d:d4:49:0d:e8:22:9b:d1:e5:a6:e1:f3:
         40:ba:65:fc:d2:ed:b0:03:cd:28:9b:66:c8:5e:32:95:14:ad:
         5b:e8:41:28:85:f1:84:90:8f:80:67:81:35:f2:e4:33:5d:38:
         26:37:7b:a5:3b:df:3c:cf:2a:3f:2d:17:71:6e:ac:1b:86:f3:
         6e:90:b3:6f:da:86:78:85:c4:10:d9:58:6a:13:d8:8c:1e:b6:
         fa:cb:3d:39:9b:78:66:96:b0:04:56:f3:2b:a8:c4:fa:f1:f9:
         99:9b:2c:c0:6f:ee:a9:c6:94:a6:29:ef:cd:7f:76:63:84:b0:
         33:03:c7:1a:0c:de:9a:1a:63:ff:b7:aa:77:b4:02:78:8b:b7:
         7e:13:ac:0d:44:c9:b7:71:fa:e0:ca:50:ae:5b:ac:7b:b9:c0:
         41:c1:a9:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:58:36 2026 by rpki-client