Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C3584/95BF1038DB7E11ED90298FD42F6D8C1D/bAtGOE6TmiDXeDZGVmRQE7X3Zv4.mft
File:                     bAtGOE6TmiDXeDZGVmRQE7X3Zv4.mft (raw, json)
Hash identifier:          mmtqlexLemTHKKjYybEIfwDMfpcybo7UUQuSqI/j6y8=
Subject key identifier:   B7:E4:B3:8F:83:63:19:6D:0C:25:DC:B3:83:B7:3E:04:C4:65:86:2B
Authority key identifier: 6C:0B:46:38:4E:93:9A:20:D7:78:36:46:56:64:50:13:B5:F7:66:FE
Certificate issuer:       /CN=F36C3584AF/serialNumber=6C0B46384E939A20D778364656645013B5F766FE
Certificate serial:       04CD
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/bAtGOE6TmiDXeDZGVmRQE7X3Zv4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C3584/95BF1038DB7E11ED90298FD42F6D8C1D/bAtGOE6TmiDXeDZGVmRQE7X3Zv4.mft
Manifest number:          04CD
Signing time:             Fri 24 Jul 2026 03:21:59 +0000
Manifest this update:     Fri 24 Jul 2026 03:21:59 +0000
Manifest next update:     Sun 26 Jul 2026 03:21:59 +0000
Files and hashes:         1: bAtGOE6TmiDXeDZGVmRQE7X3Zv4.crl (hash: ctzqVXBNRtTgg+v6TlomVeixdnAgfUjxzcOzDYNfXv0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C3584/95BF1038DB7E11ED90298FD42F6D8C1D/bAtGOE6TmiDXeDZGVmRQE7X3Zv4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C3584/95BF1038DB7E11ED90298FD42F6D8C1D/bAtGOE6TmiDXeDZGVmRQE7X3Zv4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/bAtGOE6TmiDXeDZGVmRQE7X3Zv4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 26 Jul 2026 00:07:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1229 (0x4cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C3584AF, serialNumber=6C0B46384E939A20D778364656645013B5F766FE
        Validity
            Not Before: Jul 24 03:21:59 2026 GMT
            Not After : Jul 26 03:21:59 2026 GMT
        Subject: CN=6a62da57-b45c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:9b:d6:a0:dc:61:1a:96:df:9f:78:37:6a:62:
                    ec:85:dd:9a:ae:8b:f9:e0:7a:c4:e6:5f:59:ee:5e:
                    48:72:50:90:e1:b2:c3:ac:9a:71:83:2d:b8:f8:b6:
                    ec:89:c9:2c:d6:5c:62:ab:30:25:45:bd:88:0b:68:
                    50:b6:d9:dd:a9:6f:ab:46:c0:25:c8:cd:90:ba:6b:
                    fd:c2:53:51:75:f0:1d:aa:15:55:c6:e1:7e:bb:88:
                    1e:b1:65:b0:a0:f3:85:69:11:27:1d:e7:da:89:17:
                    2d:7f:cf:be:a5:9a:df:8b:06:e9:55:22:c3:74:2a:
                    66:29:d4:62:61:42:83:60:8f:1a:41:39:2d:bd:99:
                    57:6d:12:42:30:52:23:4f:07:05:be:19:bf:ba:3e:
                    4d:02:23:ba:f0:e3:0b:55:cb:53:59:ff:1f:fe:3c:
                    b5:eb:7a:b5:8c:ad:0a:c4:36:52:63:5b:43:f2:de:
                    a5:48:83:34:fc:24:a2:4b:d4:0f:24:6f:81:77:74:
                    56:f5:09:63:42:90:94:be:7b:61:5e:52:27:e0:8e:
                    ba:ce:21:15:10:48:2a:3c:ac:9e:7e:cc:4d:32:5a:
                    c2:0a:47:07:fc:27:ae:40:d4:77:d7:a6:90:0b:28:
                    e9:97:fa:ac:6a:be:59:a3:d5:d2:6a:db:e8:e2:47:
                    f9:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:E4:B3:8F:83:63:19:6D:0C:25:DC:B3:83:B7:3E:04:C4:65:86:2B
            X509v3 Authority Key Identifier:
                keyid:6C:0B:46:38:4E:93:9A:20:D7:78:36:46:56:64:50:13:B5:F7:66:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C3584/95BF1038DB7E11ED90298FD42F6D8C1D/bAtGOE6TmiDXeDZGVmRQE7X3Zv4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/bAtGOE6TmiDXeDZGVmRQE7X3Zv4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C3584/95BF1038DB7E11ED90298FD42F6D8C1D/bAtGOE6TmiDXeDZGVmRQE7X3Zv4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:d9:7c:8f:12:b7:0a:d3:85:f1:de:a6:eb:05:ce:f6:e6:c1:
         bb:ff:6f:c4:e3:92:62:58:fc:47:1a:30:d3:99:9f:bc:08:97:
         52:48:37:fd:3d:ef:82:fc:34:69:d0:f4:05:ff:8f:1f:f2:00:
         da:57:97:0c:99:06:59:72:eb:4d:4e:b7:9b:31:ff:ee:68:d2:
         25:b4:fe:f6:f8:56:2f:85:58:49:5a:84:4e:07:e4:84:b5:65:
         91:00:36:72:89:b7:6c:be:cf:a2:37:c1:ca:9b:82:56:a0:02:
         62:05:6e:c2:24:7e:ab:1b:f3:d0:34:9b:61:4c:d5:b6:46:3f:
         ed:b2:f4:71:6a:b1:47:0e:18:47:9b:e2:00:c4:f0:31:65:7d:
         f5:31:6f:56:80:ad:8d:21:8f:6c:43:67:d9:af:63:b9:24:50:
         00:21:13:19:eb:88:8a:ef:ff:b3:6e:0a:71:e9:b1:6e:d2:27:
         c5:69:3f:8b:c0:a5:a9:f5:92:e1:8d:05:c4:10:5f:8c:0a:d5:
         44:53:23:90:8e:06:de:18:95:6c:94:c3:b8:05:eb:e1:b2:73:
         24:01:3c:c2:82:d1:1c:42:3c:3b:f1:b1:f9:8d:da:b1:2a:bc:
         c6:d6:f0:2b:03:c9:39:fb:d2:f1:12:82:b5:52:18:bc:59:63:
         0d:85:19:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:22:55 2026 by rpki-client