Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C06DF/3600B3AA856811EF8C875646762E951A/i_RKORmwHdVFpRN9yW2Ih8FElMQ.mft
File:                     i_RKORmwHdVFpRN9yW2Ih8FElMQ.mft (raw, json)
Hash identifier:          1gpOyN5env4JgbrMHWuXHdU7hb00ZOBdz/Pfx4T4ADQ=
Subject key identifier:   3E:DB:E3:2A:69:BF:78:1C:97:7F:24:83:CE:5D:93:5E:00:02:02:BD
Authority key identifier: 8B:F4:4A:39:19:B0:1D:D5:45:A5:13:7D:C9:6D:88:87:C1:44:94:C4
Certificate issuer:       /CN=F36C06DFAF/serialNumber=8BF44A3919B01DD545A5137DC96D8887C14494C4
Certificate serial:       02A5
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/i_RKORmwHdVFpRN9yW2Ih8FElMQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C06DF/3600B3AA856811EF8C875646762E951A/i_RKORmwHdVFpRN9yW2Ih8FElMQ.mft
Manifest number:          02A1
Signing time:             Thu 23 Jul 2026 04:34:16 +0000
Manifest this update:     Thu 23 Jul 2026 04:34:15 +0000
Manifest next update:     Sat 25 Jul 2026 04:34:15 +0000
Files and hashes:         1: i_RKORmwHdVFpRN9yW2Ih8FElMQ.crl (hash: K77xK5M88M70vt7vdF/S7h4S9LaG8Xqs/v8ldpxroDw=)
                          2: A50DEF3A8A1B11EF86B3879F762E951A.roa (hash: 6S2eWQOAsB1C05yblXJP2r9a9WQgQ6FEOxOlJb4U21M=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C06DF/3600B3AA856811EF8C875646762E951A/i_RKORmwHdVFpRN9yW2Ih8FElMQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C06DF/3600B3AA856811EF8C875646762E951A/i_RKORmwHdVFpRN9yW2Ih8FElMQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/i_RKORmwHdVFpRN9yW2Ih8FElMQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 25 Jul 2026 04:34:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 677 (0x2a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C06DFAF, serialNumber=8BF44A3919B01DD545A5137DC96D8887C14494C4
        Validity
            Not Before: Jul 23 04:34:15 2026 GMT
            Not After : Jul 25 04:34:15 2026 GMT
        Subject: CN=6a6199c8-58a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:7b:42:39:bf:a6:dc:e1:c4:53:34:8c:16:c9:
                    0e:1c:34:09:5e:90:4c:09:a1:6f:4e:4c:15:9d:d3:
                    8d:e8:57:14:1a:c8:40:8f:f8:f2:e6:36:01:fb:38:
                    65:21:9a:1f:66:d9:8f:ee:d9:0a:5d:6f:80:59:85:
                    3a:b5:66:71:24:02:0b:69:34:ad:77:41:e8:47:59:
                    78:46:bc:d6:a4:8e:06:97:57:9d:cc:7d:e2:03:ad:
                    8f:5e:64:78:01:09:75:6a:88:16:5e:82:69:1d:8a:
                    e7:94:d3:5a:4d:2d:fb:a3:0c:0c:cc:88:0e:6f:76:
                    5d:31:52:13:76:e4:e8:18:d8:3b:12:9c:77:77:31:
                    2d:d2:45:05:9e:bb:ff:f4:24:1d:03:f4:22:23:3b:
                    14:26:de:bf:20:23:4c:1c:75:00:38:bd:39:13:b8:
                    7f:91:bb:95:52:d9:f0:ef:1c:62:fc:e8:35:0d:3b:
                    0f:c4:09:7c:2c:34:a2:a5:ab:c4:39:14:9f:c7:fd:
                    b6:d9:0d:32:5e:1d:a8:1e:b1:98:92:b2:c4:80:cb:
                    1a:a8:2e:a1:68:97:10:5e:47:d6:8d:54:b4:e6:e4:
                    70:5d:d9:87:6f:37:e8:7c:f6:78:a0:ac:31:6e:ad:
                    11:02:f9:d8:83:8c:28:ba:b8:8a:1e:4e:6d:05:55:
                    22:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:DB:E3:2A:69:BF:78:1C:97:7F:24:83:CE:5D:93:5E:00:02:02:BD
            X509v3 Authority Key Identifier:
                keyid:8B:F4:4A:39:19:B0:1D:D5:45:A5:13:7D:C9:6D:88:87:C1:44:94:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C06DF/3600B3AA856811EF8C875646762E951A/i_RKORmwHdVFpRN9yW2Ih8FElMQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/i_RKORmwHdVFpRN9yW2Ih8FElMQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C06DF/3600B3AA856811EF8C875646762E951A/i_RKORmwHdVFpRN9yW2Ih8FElMQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:ac:fa:a3:a2:cd:31:92:03:29:3b:e4:97:0c:a2:4e:ae:39:
         ab:28:98:f4:1a:a3:32:bd:dc:6e:ad:c5:41:ab:d2:4b:b7:c7:
         02:53:35:2d:80:b9:e4:25:15:10:27:8d:3a:b5:be:ef:8b:29:
         83:6f:ce:e2:0b:d2:d2:92:ac:01:0a:fb:d1:ac:fa:7d:bb:15:
         3c:6f:02:43:6a:d6:00:70:cd:55:f1:77:3f:a0:48:a5:9c:02:
         d4:c7:23:b9:18:da:ce:8b:90:6b:c6:8f:59:bb:f3:0e:08:86:
         fe:7d:f7:8e:da:1f:5c:d5:a7:e4:e4:3c:90:12:88:ea:d7:8f:
         ef:c5:c4:17:6b:4c:5b:45:e0:cd:30:8f:2e:41:ab:c2:c5:b4:
         8a:37:bf:c5:b3:4b:ae:e2:44:c6:6f:66:d9:fb:f3:58:e4:7a:
         7e:e3:5d:24:e7:9d:11:c4:27:14:1a:2d:fa:f4:a7:aa:98:46:
         5f:94:a6:29:11:57:b5:6a:3d:63:ee:7e:a1:2d:7e:68:24:54:
         7e:46:5f:3c:fc:27:0e:1e:6a:79:4c:76:f9:e9:cd:06:e9:92:
         0c:50:59:ee:75:4d:ab:72:00:14:28:dd:ec:88:b0:69:ba:a5:
         e0:98:30:e0:ac:a0:16:50:27:40:cf:bf:9f:ba:92:a8:eb:f1:
         40:00:67:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:11:21 2026 by rpki-client