Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B4580/E19B7B22E21711EEA18E8ABF775412E6/LO0lCJLZepCqEzI6yk5F0lF2klg.mft
File:                     LO0lCJLZepCqEzI6yk5F0lF2klg.mft (raw, json)
Hash identifier:          0l4QWFBi8JxshGXi+VdUpuFNFOBHkBs6lHgbBpwp5SQ=
Subject key identifier:   C9:A9:FF:64:13:27:0D:94:14:FD:83:47:C3:48:4A:08:6B:F0:9D:C4
Authority key identifier: 2C:ED:25:08:92:D9:7A:90:AA:13:32:3A:CA:4E:45:D2:51:76:92:58
Certificate issuer:       /CN=F36B4580AF/serialNumber=2CED250892D97A90AA13323ACA4E45D251769258
Certificate serial:       0371
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/LO0lCJLZepCqEzI6yk5F0lF2klg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B4580/E19B7B22E21711EEA18E8ABF775412E6/LO0lCJLZepCqEzI6yk5F0lF2klg.mft
Manifest number:          0370
Signing time:             Fri 24 Jul 2026 04:05:10 +0000
Manifest this update:     Fri 24 Jul 2026 04:05:09 +0000
Manifest next update:     Sun 26 Jul 2026 04:05:09 +0000
Files and hashes:         1: LO0lCJLZepCqEzI6yk5F0lF2klg.crl (hash: zun+NfBT1IPRkOzqpVH+baGwvmugupKcnTzl9POUyQs=)
                          2: 33CDD534E21811EEADAEADC1775412E6.roa (hash: zBCcaHSSJiFVaqIDbPbS61APz7NmOnVb/26SMlWLcvQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B4580/E19B7B22E21711EEA18E8ABF775412E6/LO0lCJLZepCqEzI6yk5F0lF2klg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B4580/E19B7B22E21711EEA18E8ABF775412E6/LO0lCJLZepCqEzI6yk5F0lF2klg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/LO0lCJLZepCqEzI6yk5F0lF2klg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 26 Jul 2026 00:07:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 881 (0x371)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B4580AF, serialNumber=2CED250892D97A90AA13323ACA4E45D251769258
        Validity
            Not Before: Jul 24 04:05:09 2026 GMT
            Not After : Jul 26 04:05:09 2026 GMT
        Subject: CN=6a62e476-54a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:5d:6b:66:75:fa:39:f8:57:0c:7e:51:3b:45:
                    a4:a8:19:02:da:48:2c:f3:c9:90:65:87:02:99:4c:
                    93:2a:57:c9:2e:5d:77:b1:ab:df:71:8c:f1:92:9f:
                    25:1b:04:1e:53:a3:b2:b3:46:9f:01:b8:4a:b7:63:
                    3c:d2:78:e6:d1:c9:ff:fc:36:4c:0c:25:dd:b7:79:
                    1d:09:d9:d5:7b:a6:76:e3:e1:f0:91:06:a4:29:dd:
                    f4:ca:5a:2e:79:ad:12:2a:13:16:27:17:a6:73:96:
                    7c:36:1d:04:53:cd:7b:15:3a:ab:dd:71:d6:6d:02:
                    e2:27:85:c7:26:08:9f:6a:77:7b:82:68:af:29:b1:
                    2a:8c:ce:6e:2c:33:7b:cc:8c:30:56:cd:75:76:4b:
                    c7:df:de:73:c0:04:cc:50:f8:8f:e5:51:fa:7e:12:
                    5f:45:09:65:07:0a:04:f1:4d:4c:79:88:3e:81:d9:
                    85:67:f6:09:8e:a3:3a:2b:2a:e7:c2:a7:61:c9:04:
                    81:e6:7a:a3:ca:44:db:0d:a8:b0:e4:ed:a7:04:e7:
                    21:bf:0d:59:b8:1a:22:5f:e7:c3:27:37:45:37:08:
                    72:e3:4e:da:c8:82:c4:87:13:bc:3d:30:99:90:84:
                    b8:02:8a:8f:29:0d:b3:4b:1a:b2:65:73:51:9b:d2:
                    1c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:A9:FF:64:13:27:0D:94:14:FD:83:47:C3:48:4A:08:6B:F0:9D:C4
            X509v3 Authority Key Identifier:
                keyid:2C:ED:25:08:92:D9:7A:90:AA:13:32:3A:CA:4E:45:D2:51:76:92:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B4580/E19B7B22E21711EEA18E8ABF775412E6/LO0lCJLZepCqEzI6yk5F0lF2klg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LO0lCJLZepCqEzI6yk5F0lF2klg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B4580/E19B7B22E21711EEA18E8ABF775412E6/LO0lCJLZepCqEzI6yk5F0lF2klg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:23:75:6f:8b:c2:7e:ea:8a:c6:8e:27:5c:97:b5:fd:18:61:
         44:95:52:7f:51:75:8b:bc:b3:09:5a:c5:2d:50:78:28:46:a9:
         4a:e3:41:75:b0:24:9c:4c:16:5f:29:d0:48:b0:bb:c8:7f:03:
         19:aa:12:40:e7:ad:42:ec:b9:50:41:b8:a3:b5:d2:d6:3d:f3:
         8a:c4:e9:42:f3:ad:bc:c8:ca:de:29:e2:5c:70:df:6d:9d:00:
         8a:3b:da:d1:2d:8d:93:88:dd:6d:78:c8:8d:b4:93:df:a7:c5:
         54:bf:9f:3b:1d:9c:e0:79:3b:95:0a:17:a8:e7:57:8f:85:7c:
         85:6c:89:85:6b:8b:7b:47:e2:1c:6e:3c:0e:25:f5:bd:3e:3b:
         83:03:47:80:88:aa:8a:85:ff:1b:a2:34:f7:be:ff:8f:23:f3:
         71:bb:2f:7e:e5:48:5e:75:60:2c:79:31:13:1c:83:ad:56:21:
         99:1b:d8:49:d4:ad:92:2f:1e:56:8d:37:15:63:fd:d1:5b:bc:
         67:4a:b3:55:4a:47:83:f5:bc:c0:0c:d1:e2:4a:70:0b:78:5d:
         93:9c:73:d6:bc:8a:3c:02:8d:f6:a5:bd:15:ab:3e:09:03:45:
         7a:de:e2:b2:7a:1e:34:90:bd:95:fe:9b:0b:a7:6d:d1:e1:fc:
         c0:9b:ef:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:54:43 2026 by rpki-client