Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CC2A9/5CD08C0284D711F090616CDDDAE4EC9C/1RGLbnz4HPiGAv8RMd_CRJgby8s.mft
File:                     1RGLbnz4HPiGAv8RMd_CRJgby8s.mft (raw, json)
Hash identifier:          AvZ3QlAwQf0fm6ARPsLrakuROr6IdcqOgBbJArV6hk0=
Subject key identifier:   71:4D:A4:F7:A4:3D:09:8C:82:2A:D8:E1:86:59:18:C4:7B:C4:10:C0
Authority key identifier: D5:11:8B:6E:7C:F8:1C:F8:86:02:FF:11:31:DF:C2:44:98:1B:CB:CB
Certificate issuer:       /CN=F36CC2A9AF/serialNumber=D5118B6E7CF81CF88602FF1131DFC244981BCBCB
Certificate serial:       0151
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/1RGLbnz4HPiGAv8RMd_CRJgby8s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36CC2A9/5CD08C0284D711F090616CDDDAE4EC9C/1RGLbnz4HPiGAv8RMd_CRJgby8s.mft
Manifest number:          0150
Signing time:             Fri 24 Jul 2026 05:07:54 +0000
Manifest this update:     Fri 24 Jul 2026 05:07:53 +0000
Manifest next update:     Sun 26 Jul 2026 05:07:53 +0000
Files and hashes:         1: 1RGLbnz4HPiGAv8RMd_CRJgby8s.crl (hash: YAoH3iEcJ+TcBbGeplNjTvim/Iim06bZrc9uMgX5Vpc=)
                          2: CF7A3D1084D811F0991D61E9DAE4EC9C.roa (hash: CLx4M5rD3GsDVl3HuiPKVBhnWanTS93U+Boym11lIdI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36CC2A9/5CD08C0284D711F090616CDDDAE4EC9C/1RGLbnz4HPiGAv8RMd_CRJgby8s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36CC2A9/5CD08C0284D711F090616CDDDAE4EC9C/1RGLbnz4HPiGAv8RMd_CRJgby8s.mft
                          rsync://rpki.afrinic.net/repository/afrinic/1RGLbnz4HPiGAv8RMd_CRJgby8s.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 26 Jul 2026 00:07:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 337 (0x151)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36CC2A9AF, serialNumber=D5118B6E7CF81CF88602FF1131DFC244981BCBCB
        Validity
            Not Before: Jul 24 05:07:53 2026 GMT
            Not After : Jul 26 05:07:53 2026 GMT
        Subject: CN=6a62f32a-7226
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c7:11:15:b7:57:50:10:f9:c1:bd:25:e1:6a:
                    9b:83:ae:b8:f7:3c:dc:92:46:4e:c3:62:c2:b3:a1:
                    03:1a:e2:4b:b4:1e:62:ae:53:fb:35:7a:f2:96:84:
                    1d:78:92:ac:46:1e:35:b1:40:f1:70:54:b5:0d:2d:
                    03:f5:f9:ab:b6:b9:59:96:88:53:65:92:84:4d:93:
                    7c:55:0e:0e:a6:70:c3:88:12:76:7d:25:11:0f:ce:
                    51:25:11:72:d9:63:dd:b6:bd:e2:40:3f:90:1c:35:
                    ea:e3:74:3d:3f:4a:77:22:44:4b:81:2a:55:5a:29:
                    f5:ed:a0:2c:1a:0e:0c:0f:85:e1:e6:f7:15:38:e1:
                    b6:40:ab:a9:71:cc:55:23:4f:59:da:d5:1c:f4:6b:
                    f1:9d:53:fc:e7:66:49:90:72:cc:88:59:46:08:56:
                    57:0f:71:52:02:47:56:e1:2b:8b:96:67:88:87:e9:
                    3d:dc:fb:53:c2:fa:3e:15:39:be:d8:ea:e0:e5:68:
                    74:ff:89:ac:e3:70:89:26:1b:56:31:be:9b:9a:36:
                    71:8f:92:f4:80:d8:21:82:17:b0:ed:df:5b:01:27:
                    c4:6e:67:c3:a6:94:f7:8d:8a:a3:51:37:ff:a5:e2:
                    39:86:d5:66:ba:41:41:f6:46:93:f3:83:17:ad:87:
                    00:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:4D:A4:F7:A4:3D:09:8C:82:2A:D8:E1:86:59:18:C4:7B:C4:10:C0
            X509v3 Authority Key Identifier:
                keyid:D5:11:8B:6E:7C:F8:1C:F8:86:02:FF:11:31:DF:C2:44:98:1B:CB:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36CC2A9/5CD08C0284D711F090616CDDDAE4EC9C/1RGLbnz4HPiGAv8RMd_CRJgby8s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/1RGLbnz4HPiGAv8RMd_CRJgby8s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CC2A9/5CD08C0284D711F090616CDDDAE4EC9C/1RGLbnz4HPiGAv8RMd_CRJgby8s.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:f0:42:09:63:61:94:14:16:f6:ab:c5:b2:10:94:ae:86:f1:
         92:9f:c0:7f:f6:b9:96:f6:b3:ef:27:7a:e5:b8:71:a1:1f:fe:
         e6:84:05:ab:f3:4a:7b:26:ca:fc:7a:ec:4b:43:38:80:92:64:
         4b:15:88:d2:c9:76:e2:23:cd:64:3d:96:7c:e1:ca:5f:5e:1a:
         af:52:7c:4c:ef:42:27:68:ed:41:c1:45:9a:09:da:60:f1:e6:
         38:b3:2f:92:60:30:44:d1:6e:61:8b:20:0e:86:e3:75:a9:cc:
         68:d4:8c:5d:dd:fb:24:40:3d:77:46:20:8c:00:4b:32:82:57:
         06:f8:01:56:75:d4:08:00:80:cc:d6:c1:ec:f3:c0:89:75:4e:
         9f:38:ae:03:0a:58:4c:94:a1:2b:a1:0f:2e:04:6c:a0:06:72:
         4d:d2:f6:9b:ce:ad:ec:a0:b7:86:b1:ca:64:17:3d:7d:48:b8:
         2b:d6:6e:4c:fc:3c:e2:fc:35:34:4b:ab:e6:fd:29:0d:d9:7e:
         c8:1b:a4:dd:4e:3d:d7:36:86:ac:d4:78:aa:06:3e:3f:7e:c4:
         30:37:3a:25:11:db:68:d4:a7:86:c3:f9:82:e8:e8:a7:01:e8:
         36:b9:12:c5:60:32:04:3a:93:4d:c0:aa:6d:8d:df:bc:02:67:
         41:1b:3e:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:57:20 2026 by rpki-client