Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CAF37/426A0AD6586F11E5A3276231F8AEA228/imnjE5vX78CApC4WBIM5j6bHW7Y.mft
File:                     imnjE5vX78CApC4WBIM5j6bHW7Y.mft (raw, json)
Hash identifier:          QiviVil58bsVC03EyRNP1piZNMKa2alOKm0ZPAEUaIg=
Subject key identifier:   CB:B7:C1:00:80:BF:79:BE:01:A8:D1:88:2B:D2:F7:57:92:EF:FF:86
Authority key identifier: 8A:69:E3:13:9B:D7:EF:C0:80:A4:2E:16:04:83:39:8F:A6:C7:5B:B6
Certificate issuer:       /CN=F36CAF37AF/serialNumber=8A69E3139BD7EFC080A42E160483398FA6C75BB6
Certificate serial:       0FCD
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/imnjE5vX78CApC4WBIM5j6bHW7Y.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36CAF37/426A0AD6586F11E5A3276231F8AEA228/imnjE5vX78CApC4WBIM5j6bHW7Y.mft
Manifest number:          0FCD
Signing time:             Fri 24 Jul 2026 00:57:31 +0000
Manifest this update:     Fri 24 Jul 2026 00:57:30 +0000
Manifest next update:     Sun 26 Jul 2026 00:57:30 +0000
Files and hashes:         1: imnjE5vX78CApC4WBIM5j6bHW7Y.crl (hash: 8Mm8qV6mklQpFjY9GIib+3b6VCa5mbtgJc8OitgyG60=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36CAF37/426A0AD6586F11E5A3276231F8AEA228/imnjE5vX78CApC4WBIM5j6bHW7Y.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36CAF37/426A0AD6586F11E5A3276231F8AEA228/imnjE5vX78CApC4WBIM5j6bHW7Y.mft
                          rsync://rpki.afrinic.net/repository/afrinic/imnjE5vX78CApC4WBIM5j6bHW7Y.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 26 Jul 2026 00:07:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4045 (0xfcd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36CAF37AF, serialNumber=8A69E3139BD7EFC080A42E160483398FA6C75BB6
        Validity
            Not Before: Jul 24 00:57:30 2026 GMT
            Not After : Jul 26 00:57:30 2026 GMT
        Subject: CN=6a62b87b-b14a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:bc:a0:41:cb:ec:8b:61:81:27:2b:cd:6c:ca:
                    da:7c:f1:a5:ce:48:39:04:d1:2e:34:ab:20:f5:c6:
                    e7:db:47:f3:b2:aa:29:0b:32:0f:39:d8:62:77:53:
                    6a:95:5a:ab:02:be:93:60:f8:00:6e:01:b7:aa:8b:
                    8d:c1:de:e9:e0:3d:f8:28:7c:31:71:ce:7a:a2:1e:
                    f9:60:5b:33:f6:41:1f:0b:14:ff:92:be:ab:14:15:
                    e9:d7:d5:26:1b:75:56:d1:dc:52:89:ea:88:78:7f:
                    28:f0:89:f3:11:bc:91:cd:4a:46:c3:54:b4:de:c3:
                    82:dd:03:3d:5c:0d:5c:9e:b7:74:1f:0b:d6:8f:63:
                    21:84:d2:ca:af:5a:1d:68:32:20:e8:9d:bc:61:98:
                    11:69:18:58:e2:0d:ac:99:17:55:3d:1d:08:c2:9c:
                    e9:7a:a8:fe:dd:2d:00:ed:b1:47:5d:83:24:15:34:
                    99:11:c5:6b:08:d5:eb:9d:80:ac:6d:3a:c6:82:24:
                    19:99:74:08:3d:03:73:7b:cb:97:bb:da:a7:6f:33:
                    6c:3c:36:53:2d:4f:6e:fc:94:85:cc:7e:c4:3d:92:
                    b2:2a:14:42:72:f5:47:42:d8:1a:f4:aa:04:fa:4e:
                    6c:44:0f:f3:de:e7:57:c1:4a:38:52:ac:f5:8f:dd:
                    ae:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:B7:C1:00:80:BF:79:BE:01:A8:D1:88:2B:D2:F7:57:92:EF:FF:86
            X509v3 Authority Key Identifier:
                keyid:8A:69:E3:13:9B:D7:EF:C0:80:A4:2E:16:04:83:39:8F:A6:C7:5B:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36CAF37/426A0AD6586F11E5A3276231F8AEA228/imnjE5vX78CApC4WBIM5j6bHW7Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/imnjE5vX78CApC4WBIM5j6bHW7Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CAF37/426A0AD6586F11E5A3276231F8AEA228/imnjE5vX78CApC4WBIM5j6bHW7Y.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:67:ff:d1:f3:1f:c3:e4:bc:36:45:75:50:04:34:ae:31:e4:
         aa:f3:86:e8:08:d4:d5:2b:d7:16:c2:1e:ff:d9:3e:54:8b:0f:
         73:17:75:2e:d3:c9:08:00:6b:f1:68:6d:10:34:d1:99:cc:4d:
         fd:bb:9e:f4:62:9f:e0:73:cf:e0:fa:0c:10:8e:40:6e:b6:f9:
         30:6d:c5:35:3d:26:48:1c:d7:57:50:ce:e2:04:7c:6b:0f:43:
         08:2c:ce:14:de:e8:b6:1b:7b:d1:3b:ef:a2:98:f7:94:2c:1a:
         71:61:ce:8d:df:f8:ef:27:e7:ac:3a:26:77:74:b3:3e:7e:68:
         d9:07:19:66:c5:b3:d0:95:11:b9:53:0a:b1:24:7a:15:bf:11:
         e9:81:e5:b4:31:04:6a:1d:1c:72:f1:f2:5b:13:b6:0e:a1:75:
         01:5e:ba:92:2a:79:f0:2d:d8:21:e5:bb:97:e9:0c:38:63:2e:
         96:1c:42:c7:47:2f:37:7b:d3:c9:92:6e:75:bc:67:53:2f:7e:
         f7:5b:75:b5:fb:6f:30:eb:33:33:35:2e:12:13:ba:51:72:de:
         08:47:9c:e1:87:81:c3:ca:44:d0:6a:5b:88:8b:38:24:e7:83:
         84:06:aa:c7:c7:31:55:3d:80:1e:45:c7:b0:9d:12:cf:7a:e5:
         d3:00:ff:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:53:26 2026 by rpki-client