Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C3DC5/711CB0F6355D11EBB53E0546F8AEA228/zCzeBNPUNh6EROKuXkLw7fYi3OQ.mft
File:                     zCzeBNPUNh6EROKuXkLw7fYi3OQ.mft (raw, json)
Hash identifier:          Kt/NA2Zw/yB0/LD79NB2C1gRrva6Vl6GEeALYGphhYU=
Subject key identifier:   A7:6E:2B:4F:ED:00:8D:B5:B6:6F:E7:1E:89:66:7F:C6:B8:8E:9B:4A
Authority key identifier: CC:2C:DE:04:D3:D4:36:1E:84:44:E2:AE:5E:42:F0:ED:F6:22:DC:E4
Certificate issuer:       /CN=F36C3DC5AF/serialNumber=CC2CDE04D3D4361E8444E2AE5E42F0EDF622DCE4
Certificate serial:       07F8
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/zCzeBNPUNh6EROKuXkLw7fYi3OQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C3DC5/711CB0F6355D11EBB53E0546F8AEA228/zCzeBNPUNh6EROKuXkLw7fYi3OQ.mft
Manifest number:          07F7
Signing time:             Wed 13 May 2026 01:56:36 +0000
Manifest this update:     Wed 13 May 2026 01:56:35 +0000
Manifest next update:     Fri 15 May 2026 01:56:35 +0000
Files and hashes:         1: zCzeBNPUNh6EROKuXkLw7fYi3OQ.crl (hash: xMdnsS+zO1QPSMKklB/JuwCrHLR6fXMStG/+QUdhn8U=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C3DC5/711CB0F6355D11EBB53E0546F8AEA228/zCzeBNPUNh6EROKuXkLw7fYi3OQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C3DC5/711CB0F6355D11EBB53E0546F8AEA228/zCzeBNPUNh6EROKuXkLw7fYi3OQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/zCzeBNPUNh6EROKuXkLw7fYi3OQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 15 May 2026 01:56:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2040 (0x7f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C3DC5AF, serialNumber=CC2CDE04D3D4361E8444E2AE5E42F0EDF622DCE4
        Validity
            Not Before: May 13 01:56:35 2026 GMT
            Not After : May 15 01:56:35 2026 GMT
        Subject: CN=6a03da54-2ee3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:fd:f0:d5:26:00:78:dd:b3:6a:cb:4b:95:33:
                    1b:76:ef:f8:0f:b6:29:bc:a0:ef:e2:f2:b7:77:82:
                    ad:7c:74:3c:aa:8b:5d:b7:f6:b8:4d:89:22:0f:74:
                    34:5b:99:53:be:48:7d:82:79:45:e9:8d:de:d6:b8:
                    e7:c5:d5:26:13:35:54:2e:72:01:5b:cc:24:49:1d:
                    ec:c8:5e:06:be:c6:db:92:e4:4a:61:f8:65:de:1c:
                    ef:7a:5d:c6:0a:f8:8e:52:0d:d4:76:b4:b1:6b:51:
                    23:b3:df:93:e6:77:fe:13:04:10:f2:c1:e7:86:17:
                    06:48:a5:b6:0f:83:91:28:28:4a:31:b7:d8:85:d0:
                    7e:96:03:ef:67:6b:92:8d:43:2e:0e:00:0f:38:e2:
                    fd:6a:b8:2c:33:23:75:11:43:17:b9:ca:bd:c3:40:
                    37:7f:e0:a6:0e:ac:c1:b3:77:71:87:bf:96:16:0e:
                    f2:51:f2:61:85:b6:9d:55:32:87:78:a5:7f:8d:b2:
                    66:cd:a5:d7:24:c3:6f:21:ce:5f:98:e4:f1:db:a1:
                    16:aa:27:c5:a2:66:a0:2f:77:f8:4f:4d:da:3b:d6:
                    f1:e5:4d:2a:a1:b2:85:ec:c9:70:d1:88:36:bb:ae:
                    63:b4:a7:70:f3:be:d3:09:83:6e:ce:1c:8e:41:48:
                    45:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:6E:2B:4F:ED:00:8D:B5:B6:6F:E7:1E:89:66:7F:C6:B8:8E:9B:4A
            X509v3 Authority Key Identifier:
                keyid:CC:2C:DE:04:D3:D4:36:1E:84:44:E2:AE:5E:42:F0:ED:F6:22:DC:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C3DC5/711CB0F6355D11EBB53E0546F8AEA228/zCzeBNPUNh6EROKuXkLw7fYi3OQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zCzeBNPUNh6EROKuXkLw7fYi3OQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C3DC5/711CB0F6355D11EBB53E0546F8AEA228/zCzeBNPUNh6EROKuXkLw7fYi3OQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:26:bb:c4:ea:56:1d:ec:c4:65:11:93:48:34:fe:07:6d:b6:
         87:b2:73:3a:c3:f9:6c:a2:1c:2f:3b:54:5b:24:45:cd:f9:85:
         50:d7:35:3a:0e:8b:dc:c4:de:2b:13:b7:91:04:7e:4c:c7:c1:
         5d:43:19:c5:cb:67:a5:16:fd:67:28:89:61:b6:d2:af:50:53:
         b0:06:ab:0f:e0:15:79:a6:d3:3f:40:73:e2:c9:8f:b9:f1:e0:
         69:fd:99:69:92:c7:fd:cd:64:e1:45:2c:17:fc:32:56:f2:68:
         44:70:38:77:06:da:ae:9e:37:a0:90:b2:1a:02:34:96:7b:39:
         1a:a5:2f:a0:24:d0:f1:6d:82:2c:52:2f:0e:6a:7a:2c:2d:2e:
         69:7e:d3:d8:09:3e:9e:80:0e:44:ca:bb:6a:10:2c:72:bf:e4:
         0e:1e:a0:ea:90:e6:91:3d:07:03:d7:f8:98:61:bf:16:c1:9b:
         3a:38:d0:72:c9:3f:43:cb:9e:39:4c:df:68:f4:23:c7:17:ff:
         a6:60:4a:60:45:e5:e2:08:62:fe:e5:5e:c7:a5:bb:2a:a6:cf:
         19:b9:d7:09:c8:9b:77:d9:38:6c:80:ef:8a:f6:d4:65:27:c5:
         9d:b2:4f:6a:89:64:81:78:a2:5f:b1:0e:a4:99:18:93:cc:21:
         4e:62:63:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:22:01 2026 by rpki-client