Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BDAEA/3A4FB8506FB511F18C381DEBCE1D38B0/-vPHS9tBaK0Umzg5f1vk--Qjx1I.mft
File:                     -vPHS9tBaK0Umzg5f1vk--Qjx1I.mft (raw, json)
Hash identifier:          QyfUu8hoxDYtPhVF8Ewf/HdMzpaBBrsvcOHB5GvYtC4=
Subject key identifier:   06:4D:E8:C3:8E:4C:AC:18:95:0F:81:67:DB:3B:53:EF:1E:8E:2B:4D
Authority key identifier: FA:F3:C7:4B:DB:41:68:AD:14:9B:38:39:7F:5B:E4:FB:E4:23:C7:52
Certificate issuer:       /CN=F36BDAEAAF/serialNumber=FAF3C74BDB4168AD149B38397F5BE4FBE423C752
Certificate serial:       21
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/-vPHS9tBaK0Umzg5f1vk--Qjx1I.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BDAEA/3A4FB8506FB511F18C381DEBCE1D38B0/-vPHS9tBaK0Umzg5f1vk--Qjx1I.mft
Manifest number:          20
Signing time:             Fri 24 Jul 2026 05:41:42 +0000
Manifest this update:     Fri 24 Jul 2026 05:41:41 +0000
Manifest next update:     Sun 26 Jul 2026 05:41:41 +0000
Files and hashes:         1: -vPHS9tBaK0Umzg5f1vk--Qjx1I.crl (hash: JgMYho/9dmklVnXVQdD+zXzHlKfdprfzwL0hA/wmikc=)
                          2: A166CB0A6FB511F1A388A7EBCE1D38B0.roa (hash: N2A8A30zOOL02+LkqB3kmhadKKBzgndfImHLlNc0+Fg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BDAEA/3A4FB8506FB511F18C381DEBCE1D38B0/-vPHS9tBaK0Umzg5f1vk--Qjx1I.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BDAEA/3A4FB8506FB511F18C381DEBCE1D38B0/-vPHS9tBaK0Umzg5f1vk--Qjx1I.mft
                          rsync://rpki.afrinic.net/repository/afrinic/-vPHS9tBaK0Umzg5f1vk--Qjx1I.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 26 Jul 2026 00:07:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 33 (0x21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BDAEAAF, serialNumber=FAF3C74BDB4168AD149B38397F5BE4FBE423C752
        Validity
            Not Before: Jul 24 05:41:41 2026 GMT
            Not After : Jul 26 05:41:41 2026 GMT
        Subject: CN=6a62fb16-03b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1a:83:b3:41:a6:81:32:8c:03:58:22:96:5f:
                    a7:b2:f5:13:0a:bb:1e:ed:40:cc:3f:84:ce:1d:92:
                    0b:ad:ab:cc:e1:41:08:ac:c5:d4:17:b7:2d:af:0d:
                    c7:18:98:f1:0c:4b:9f:5d:2e:f8:68:63:c1:6e:ce:
                    6c:c1:e4:8a:9b:a0:37:46:79:76:35:70:b2:81:7b:
                    19:41:64:95:b0:76:49:5e:51:59:87:11:74:c0:ae:
                    ac:56:36:3b:ab:1c:73:aa:1e:f6:40:17:6b:30:dd:
                    9a:ea:cc:85:fc:28:04:b4:bb:6c:0e:d7:11:2d:2d:
                    dd:06:df:63:6a:6a:8a:ad:a0:a2:81:a4:fe:98:51:
                    fa:a5:ef:69:bd:75:98:ab:d2:c6:55:35:bb:19:5d:
                    cb:6a:1d:13:cc:95:d6:77:f9:91:0e:f2:30:8c:f3:
                    57:48:87:ba:ca:e8:1d:a9:c4:a0:a5:25:f6:48:4a:
                    5e:22:01:ed:b9:e2:07:c4:af:8b:02:11:70:31:76:
                    fc:22:20:7a:e5:df:f7:ab:88:c6:c8:a8:96:83:9f:
                    ae:5c:2d:92:6e:be:12:f4:dd:c1:60:ac:08:fe:58:
                    d1:be:8f:9d:f0:44:a3:7d:da:fc:18:b8:d7:b2:b9:
                    bc:42:8f:d7:ce:4b:bd:d1:33:bb:d5:ad:7c:34:d0:
                    cf:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:4D:E8:C3:8E:4C:AC:18:95:0F:81:67:DB:3B:53:EF:1E:8E:2B:4D
            X509v3 Authority Key Identifier:
                keyid:FA:F3:C7:4B:DB:41:68:AD:14:9B:38:39:7F:5B:E4:FB:E4:23:C7:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BDAEA/3A4FB8506FB511F18C381DEBCE1D38B0/-vPHS9tBaK0Umzg5f1vk--Qjx1I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-vPHS9tBaK0Umzg5f1vk--Qjx1I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BDAEA/3A4FB8506FB511F18C381DEBCE1D38B0/-vPHS9tBaK0Umzg5f1vk--Qjx1I.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:7a:6e:19:36:f1:5f:06:eb:31:03:a6:64:b2:4e:48:57:79:
         c9:ee:fe:60:73:08:85:52:a6:00:82:71:57:c4:b1:37:e6:05:
         93:04:7c:11:47:95:7c:e1:28:a6:8f:fd:c2:e2:cb:77:66:2c:
         fa:c2:e0:93:9d:ce:f5:f5:d7:e5:99:c7:df:cd:f5:8d:e1:58:
         6a:1b:aa:89:ab:cb:aa:22:55:c4:00:40:3e:15:bb:7c:09:6a:
         b1:2d:f6:09:b0:fd:da:e0:2b:d3:6f:47:8d:dc:eb:9b:03:24:
         98:84:cd:11:8c:60:49:11:8b:21:7c:cd:bd:35:de:5d:6d:3d:
         7e:1d:50:df:8f:42:aa:eb:4d:99:c8:ad:0e:18:d8:85:f8:78:
         8a:d5:f9:f6:4d:54:83:03:c6:7c:eb:05:31:e0:59:b8:46:07:
         36:d5:1a:76:8a:ad:da:be:1f:ff:8b:76:c6:be:40:8f:69:0c:
         36:cb:18:0d:57:c8:cd:6d:58:eb:81:fb:7e:2e:03:97:4b:d5:
         70:db:d2:80:9d:2a:b1:4b:ad:41:ce:db:31:3f:01:40:fe:59:
         c0:f7:b5:8d:85:26:83:c0:d0:7d:74:58:86:0c:7c:c1:45:d4:
         64:bd:33:40:33:b7:51:48:40:3a:36:f2:47:78:24:61:0a:2b:
         32:4d:71:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:08:55 2026 by rpki-client