Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CEA2A/4C669B2C484611F097D84AD9DAE4EC9C/sNdja0QI8KwoxZz1uRZkvYIxQFA.mft
File:                     sNdja0QI8KwoxZz1uRZkvYIxQFA.mft (raw, json)
Hash identifier:          juJw7m7BwQHFlP44m5kF5JavRewXfRXnk/3PC08C9Lk=
Subject key identifier:   36:51:B4:5D:49:0E:FB:BF:1D:6D:78:FD:7D:58:2E:45:74:DB:E4:F1
Authority key identifier: B0:D7:63:6B:44:08:F0:AC:28:C5:9C:F5:B9:16:64:BD:82:31:40:50
Certificate issuer:       /CN=F36CEA2AAF/serialNumber=B0D7636B4408F0AC28C59CF5B91664BD82314050
Certificate serial:       019C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/sNdja0QI8KwoxZz1uRZkvYIxQFA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36CEA2A/4C669B2C484611F097D84AD9DAE4EC9C/sNdja0QI8KwoxZz1uRZkvYIxQFA.mft
Manifest number:          019C
Signing time:             Thu 23 Jul 2026 04:55:51 +0000
Manifest this update:     Thu 23 Jul 2026 04:55:50 +0000
Manifest next update:     Sat 25 Jul 2026 04:55:50 +0000
Files and hashes:         1: sNdja0QI8KwoxZz1uRZkvYIxQFA.crl (hash: MUzwks5Dg9GnCWEpQ1tNE74LwNDWzXjMF1bzJBSs4IM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36CEA2A/4C669B2C484611F097D84AD9DAE4EC9C/sNdja0QI8KwoxZz1uRZkvYIxQFA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36CEA2A/4C669B2C484611F097D84AD9DAE4EC9C/sNdja0QI8KwoxZz1uRZkvYIxQFA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/sNdja0QI8KwoxZz1uRZkvYIxQFA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 25 Jul 2026 04:55:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 412 (0x19c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36CEA2AAF, serialNumber=B0D7636B4408F0AC28C59CF5B91664BD82314050
        Validity
            Not Before: Jul 23 04:55:50 2026 GMT
            Not After : Jul 25 04:55:50 2026 GMT
        Subject: CN=6a619ed7-c7d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:e0:aa:5c:9c:04:3e:4c:9e:a0:ae:d6:78:1b:
                    fd:63:a7:ed:ed:02:ec:bb:06:96:78:a5:c3:33:35:
                    fd:d5:c6:50:bf:6c:59:5d:f6:63:84:1c:77:6b:00:
                    c6:8a:5c:32:23:b3:45:ec:7a:25:bc:38:b5:3c:a9:
                    26:d4:09:b9:44:6f:60:6d:5c:93:45:a4:f7:4d:07:
                    06:1b:66:8b:86:69:de:12:c9:07:78:61:7f:23:f5:
                    08:cb:8f:ec:55:c6:9a:e0:d9:8b:71:bf:55:95:5b:
                    02:0f:41:14:1d:64:74:8f:30:2c:24:e0:be:59:52:
                    1b:1a:9c:c8:6c:2f:d4:7a:3e:ce:76:7c:23:d1:a7:
                    b6:ef:16:1b:9d:e8:9d:b8:1e:e8:f6:fd:57:0c:0d:
                    24:2f:f1:a8:de:26:d5:20:7b:d2:7f:7d:6e:c2:3d:
                    84:56:91:9e:5b:5c:04:cc:04:6d:4b:e7:70:ee:09:
                    31:4d:50:23:74:11:90:0c:4d:1b:5a:ea:0b:28:d9:
                    3e:16:6a:82:0b:82:f9:59:92:ce:f5:2e:8a:be:54:
                    dd:d0:c4:a7:40:21:4c:bf:0a:be:4c:81:5f:63:bc:
                    c1:03:68:19:32:42:fc:7f:1a:c4:5c:83:46:b9:b7:
                    53:df:2f:5d:bf:ac:fa:b6:b9:ab:6e:cc:f7:76:16:
                    dc:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:51:B4:5D:49:0E:FB:BF:1D:6D:78:FD:7D:58:2E:45:74:DB:E4:F1
            X509v3 Authority Key Identifier:
                keyid:B0:D7:63:6B:44:08:F0:AC:28:C5:9C:F5:B9:16:64:BD:82:31:40:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36CEA2A/4C669B2C484611F097D84AD9DAE4EC9C/sNdja0QI8KwoxZz1uRZkvYIxQFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/sNdja0QI8KwoxZz1uRZkvYIxQFA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CEA2A/4C669B2C484611F097D84AD9DAE4EC9C/sNdja0QI8KwoxZz1uRZkvYIxQFA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:af:bd:bd:73:d6:83:0c:8a:56:d6:0e:c9:14:95:44:bd:ed:
         fa:f0:06:07:4c:70:a0:82:2e:2d:0a:93:50:57:92:1e:52:6b:
         eb:95:97:78:b0:87:13:16:fe:d6:58:76:f4:4c:55:f8:ad:71:
         a3:eb:4d:fb:3d:0a:d0:78:11:5b:af:76:e3:f8:7c:19:6d:42:
         24:0b:ca:7a:5a:9f:1c:43:21:e1:6a:f2:d6:31:cb:59:d9:f7:
         59:e3:98:e6:cf:67:3d:0d:10:bb:eb:66:92:d1:c8:04:12:be:
         1a:14:24:46:3b:cf:bf:db:23:e3:c6:71:31:41:71:d7:98:06:
         aa:ee:c5:4a:0d:da:d3:2e:e4:ac:d4:61:8d:22:6e:86:0d:7e:
         17:ba:0d:56:5c:5a:8b:79:f4:bb:cf:60:41:55:e4:e5:af:46:
         1a:48:1e:6e:c2:ba:91:6e:4c:46:ce:00:d6:5c:01:d2:87:55:
         7f:91:a2:c2:9b:0c:6a:d3:91:b1:8e:e7:65:e1:58:91:72:f2:
         6e:90:0f:36:26:f4:b5:2a:99:ea:72:dc:05:72:c6:56:fc:43:
         a8:86:ef:8f:70:73:3a:b9:9a:be:fd:69:51:4e:f5:bd:17:16:
         31:d2:e3:ff:2a:0d:3b:0e:a3:75:03:ed:1d:3c:9c:ad:46:7c:
         f6:d2:99:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:24:11 2026 by rpki-client