Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D104B/6977A4BA9BD511ED9F8809CCF1222468/8N_7--IrTkOYavhggOjb0m5nNXs.mft
File:                     8N_7--IrTkOYavhggOjb0m5nNXs.mft (raw, json)
Hash identifier:          74v3Gwvl3OwOkztbB/9p8dfPEO8VAZtFFUlmhlCpOoI=
Subject key identifier:   BD:45:D0:0A:09:54:67:7F:44:E5:B9:4D:DD:01:61:6A:04:EF:3C:BE
Authority key identifier: F0:DF:FB:FB:E2:2B:4E:43:98:6A:F8:60:80:E8:DB:D2:6E:67:35:7B
Certificate issuer:       /CN=F36D104BAF/serialNumber=F0DFFBFBE22B4E43986AF86080E8DBD26E67357B
Certificate serial:       0522
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/8N_7--IrTkOYavhggOjb0m5nNXs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D104B/6977A4BA9BD511ED9F8809CCF1222468/8N_7--IrTkOYavhggOjb0m5nNXs.mft
Manifest number:          0521
Signing time:             Fri 24 Jul 2026 03:10:48 +0000
Manifest this update:     Fri 24 Jul 2026 03:10:48 +0000
Manifest next update:     Sun 26 Jul 2026 03:10:48 +0000
Files and hashes:         1: 8N_7--IrTkOYavhggOjb0m5nNXs.crl (hash: CDFadg62xRLVW6sagP1sDc8FV5IUPGTO+c+dWz+7N2c=)
                          2: 788B31649BD611ED8E8A06CFF1222468.roa (hash: /DoapaGd3eagMu4E2GG71poz4ouCwc0M0wO9yu8zX6c=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D104B/6977A4BA9BD511ED9F8809CCF1222468/8N_7--IrTkOYavhggOjb0m5nNXs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D104B/6977A4BA9BD511ED9F8809CCF1222468/8N_7--IrTkOYavhggOjb0m5nNXs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/8N_7--IrTkOYavhggOjb0m5nNXs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 26 Jul 2026 00:07:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1314 (0x522)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D104BAF, serialNumber=F0DFFBFBE22B4E43986AF86080E8DBD26E67357B
        Validity
            Not Before: Jul 24 03:10:48 2026 GMT
            Not After : Jul 26 03:10:48 2026 GMT
        Subject: CN=6a62d7b8-f98a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c9:fd:99:19:1e:92:f0:51:8d:8d:dd:a5:63:
                    ed:07:b7:b7:2b:9a:81:72:27:63:f8:a1:bf:d8:2d:
                    9b:e6:b5:a2:c2:a0:1b:72:2d:1e:97:07:ed:2f:e9:
                    2d:5f:bb:ad:9f:fd:2d:26:a9:b4:89:0c:ab:bd:9a:
                    9b:1e:da:c1:b2:8b:41:58:8f:03:d1:ba:82:b9:c1:
                    37:8f:01:93:dc:73:b5:af:54:ce:14:8d:08:6e:7e:
                    11:27:b5:8d:36:88:54:f9:c5:58:97:8b:67:b1:98:
                    cb:f1:52:2b:6c:b1:22:c5:b8:34:f7:5d:9f:94:c7:
                    1a:a2:29:2f:e5:ac:3b:61:14:e1:b6:59:27:da:72:
                    44:e4:26:d9:34:41:c9:32:fe:6d:de:ec:31:c0:da:
                    7c:14:47:67:c8:1b:97:69:9a:98:76:ea:af:66:0e:
                    c1:6f:b0:9b:1a:c7:bd:e5:71:0b:f4:2c:d1:10:2f:
                    52:5c:05:d2:2f:71:25:91:e5:91:78:cd:64:1b:8b:
                    f7:6d:4a:17:29:cb:36:ab:06:f0:23:36:e7:ee:ea:
                    fe:32:c2:1b:fe:0a:63:18:cf:4f:f1:97:a8:dc:a5:
                    40:56:96:33:39:cf:95:46:4c:ce:17:cf:da:c3:13:
                    cf:f8:c7:e1:c7:bb:9c:94:99:5f:a9:3e:eb:cc:f5:
                    2f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:45:D0:0A:09:54:67:7F:44:E5:B9:4D:DD:01:61:6A:04:EF:3C:BE
            X509v3 Authority Key Identifier:
                keyid:F0:DF:FB:FB:E2:2B:4E:43:98:6A:F8:60:80:E8:DB:D2:6E:67:35:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D104B/6977A4BA9BD511ED9F8809CCF1222468/8N_7--IrTkOYavhggOjb0m5nNXs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/8N_7--IrTkOYavhggOjb0m5nNXs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D104B/6977A4BA9BD511ED9F8809CCF1222468/8N_7--IrTkOYavhggOjb0m5nNXs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:48:d3:bb:37:2c:67:3f:6b:89:c4:d6:e7:6d:d7:79:a5:13:
         e5:48:97:f3:2b:cd:31:4c:8c:d6:f4:04:c6:a4:55:8d:52:24:
         53:27:3f:9a:be:a4:1e:58:f8:1c:62:08:74:91:71:48:e5:9c:
         26:98:a2:4c:81:f7:1a:03:4f:0a:a4:e8:db:f5:2f:93:6e:0a:
         06:4f:a1:b5:40:46:3d:e2:1d:62:b9:c0:62:28:b7:75:34:f9:
         76:1b:fc:94:9a:58:64:ac:e1:a8:97:a2:bc:95:e0:3c:ce:38:
         7d:c1:f7:87:3a:03:9e:38:b2:87:da:fa:bb:06:42:6b:bf:4a:
         f6:84:01:e2:cd:0c:3f:bc:55:d9:e6:c0:84:b7:4d:92:9a:3e:
         bc:04:54:d9:16:61:73:13:54:4a:f6:8f:26:f8:43:f3:2f:13:
         28:36:6a:2a:21:04:84:5e:e9:20:94:cf:c5:a9:f1:0f:5f:58:
         6c:e8:cd:d4:c4:10:5f:79:9f:6d:b3:1c:5d:30:98:db:74:cb:
         d0:94:1c:29:b3:d8:57:51:bc:5d:c1:31:0d:10:cb:60:bb:1b:
         0c:ad:a0:ce:cb:2e:db:43:d4:e2:72:e4:66:22:3b:2a:b4:f1:
         b6:e4:9e:b6:3f:78:21:0e:54:76:24:c2:5b:9d:43:7f:7e:7f:
         e1:95:af:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:36:08 2026 by rpki-client