Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BB70A/FFFFEBA0791611F1B9FF45F2CE1D38B0/aFPE4htdM3CLD16uGLeJ_Gd8gQg.mft
File:                     aFPE4htdM3CLD16uGLeJ_Gd8gQg.mft (raw, json)
Hash identifier:          ykKzVF283goqfNt7//xicU87SeUxW0q3lVyVkqTss3I=
Subject key identifier:   0B:49:2A:67:1A:8E:FD:52:87:E9:73:C9:02:E8:10:D4:BF:13:5C:D2
Authority key identifier: 68:53:C4:E2:1B:5D:33:70:8B:0F:5E:AE:18:B7:89:FC:67:7C:81:08
Certificate issuer:       /CN=F36BB70AAF/serialNumber=6853C4E21B5D33708B0F5EAE18B789FC677C8108
Certificate serial:       23
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/aFPE4htdM3CLD16uGLeJ_Gd8gQg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BB70A/FFFFEBA0791611F1B9FF45F2CE1D38B0/aFPE4htdM3CLD16uGLeJ_Gd8gQg.mft
Manifest number:          1D
Signing time:             Thu 23 Jul 2026 05:43:37 +0000
Manifest this update:     Thu 23 Jul 2026 05:43:36 +0000
Manifest next update:     Sat 25 Jul 2026 05:43:36 +0000
Files and hashes:         1: aFPE4htdM3CLD16uGLeJ_Gd8gQg.crl (hash: fPJ47dayDqpT1BW2J5aTGuF+TAbW5+p7Aa9jdhLzaPs=)
                          2: B263604E7B9011F18B89CAB7CE1D38B0.roa (hash: agshf4kc1QeGwzwdxAbbchgJDxavR9643QWxtUo7IzQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BB70A/FFFFEBA0791611F1B9FF45F2CE1D38B0/aFPE4htdM3CLD16uGLeJ_Gd8gQg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BB70A/FFFFEBA0791611F1B9FF45F2CE1D38B0/aFPE4htdM3CLD16uGLeJ_Gd8gQg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/aFPE4htdM3CLD16uGLeJ_Gd8gQg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 25 Jul 2026 05:43:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 35 (0x23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BB70AAF, serialNumber=6853C4E21B5D33708B0F5EAE18B789FC677C8108
        Validity
            Not Before: Jul 23 05:43:36 2026 GMT
            Not After : Jul 25 05:43:36 2026 GMT
        Subject: CN=6a61aa09-dd5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:2c:f7:99:82:77:86:b7:2b:16:1c:4b:e2:3c:
                    3d:e3:d4:82:2c:22:4a:6b:13:d1:5f:11:ab:8c:17:
                    96:7d:fe:37:e5:2a:a0:08:ce:87:42:06:de:1b:cf:
                    c5:2e:23:80:f7:fd:7c:4a:6f:1e:75:e2:bf:5a:15:
                    5c:93:55:7c:bd:cb:75:3c:84:4d:d7:68:6d:0b:86:
                    dc:1a:da:5e:b3:fc:07:9e:ec:61:c4:ce:b2:2e:3c:
                    82:b4:1a:7e:fc:de:0f:23:85:b5:f5:2d:6b:4f:1d:
                    8f:93:e6:b3:9f:0e:c1:2e:bb:54:e2:83:39:3b:f7:
                    d7:cc:c0:28:67:09:71:37:ed:79:a9:09:6f:47:7a:
                    48:9d:86:b2:e3:32:5b:6d:78:51:9e:bc:0e:d0:3e:
                    19:2d:66:97:2a:55:a8:27:cb:57:45:64:99:5c:af:
                    6b:da:d2:41:aa:54:8f:15:e4:99:6e:cf:ea:b2:1e:
                    e1:b4:89:44:53:95:ee:3e:1a:57:53:b9:9f:ef:78:
                    8e:de:d2:a2:36:1f:c0:12:e6:ef:73:95:07:7f:22:
                    f9:a9:6b:3a:8b:c3:f1:6e:c8:c0:0c:ca:3c:e7:9f:
                    13:9d:bc:05:4d:5d:56:47:5c:26:76:d9:18:0d:21:
                    ee:cf:3f:61:62:c0:c8:4f:56:22:97:bd:bf:c1:c8:
                    22:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:49:2A:67:1A:8E:FD:52:87:E9:73:C9:02:E8:10:D4:BF:13:5C:D2
            X509v3 Authority Key Identifier:
                keyid:68:53:C4:E2:1B:5D:33:70:8B:0F:5E:AE:18:B7:89:FC:67:7C:81:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BB70A/FFFFEBA0791611F1B9FF45F2CE1D38B0/aFPE4htdM3CLD16uGLeJ_Gd8gQg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/aFPE4htdM3CLD16uGLeJ_Gd8gQg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BB70A/FFFFEBA0791611F1B9FF45F2CE1D38B0/aFPE4htdM3CLD16uGLeJ_Gd8gQg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:74:86:d9:4e:e6:1b:a4:0f:9c:71:e4:7b:16:2a:6f:b9:d1:
         40:ae:0f:45:dc:26:93:4c:e8:18:90:0c:7a:c8:5c:7f:6b:0c:
         1c:ce:1c:99:62:ac:0f:db:50:04:c8:cc:78:60:c2:6b:48:6d:
         78:21:f3:31:4a:66:e7:24:93:a1:a3:95:83:c9:90:26:94:52:
         55:0f:ec:2d:18:8e:99:66:c1:1a:17:ed:c8:cc:21:4f:08:f6:
         ed:83:6a:c1:e5:04:6d:f1:46:85:32:fc:a5:72:7c:d1:f5:05:
         e9:c7:a7:8d:18:62:8b:47:9e:1e:e4:35:6d:ff:a5:d2:89:a4:
         d9:57:d6:1f:48:4f:dd:d2:5a:42:08:e6:6e:c0:4d:72:89:6e:
         9e:de:81:85:ea:78:f9:3c:9d:76:90:62:8e:29:cc:8b:db:f0:
         c9:73:a4:04:fd:f5:e1:12:8c:6c:09:d7:70:d1:a7:69:7c:b2:
         36:b9:32:9a:65:92:fd:75:44:97:b0:f8:60:8f:55:28:dd:5b:
         fa:df:ac:6d:1f:88:2e:00:a8:84:bc:64:c3:1e:a6:21:49:5f:
         2b:ab:9f:86:f4:99:e0:d3:f8:eb:a1:9c:5c:74:1e:6d:68:43:
         0a:96:e1:2d:fe:1e:7d:e4:b1:ff:57:21:74:cb:cb:4d:80:b8:
         8d:02:ef:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:38:17 2026 by rpki-client