Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D289C/12FAB962A87511E99285C745F8AEA228/bynJvMAklSDlBwZp-vZmUm98jzA.mft
File:                     bynJvMAklSDlBwZp-vZmUm98jzA.mft (raw, json)
Hash identifier:          lvRQzfnG/uBz5TkUa92kx9PG3Lf1e5NHOPit5d31Glg=
Subject key identifier:   2A:02:E6:C2:54:44:E0:FC:BA:1C:14:27:18:06:86:BD:B8:8C:45:BD
Authority key identifier: 6F:29:C9:BC:C0:24:95:20:E5:07:06:69:FA:F6:66:52:6F:7C:8F:30
Certificate issuer:       /CN=F36D289CRI/serialNumber=6F29C9BCC0249520E5070669FAF666526F7C8F30
Certificate serial:       0A4D
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/bynJvMAklSDlBwZp-vZmUm98jzA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D289C/12FAB962A87511E99285C745F8AEA228/bynJvMAklSDlBwZp-vZmUm98jzA.mft
Manifest number:          0A4B
Signing time:             Fri 24 Jul 2026 01:31:38 +0000
Manifest this update:     Fri 24 Jul 2026 01:31:37 +0000
Manifest next update:     Sun 26 Jul 2026 01:31:37 +0000
Files and hashes:         1: bynJvMAklSDlBwZp-vZmUm98jzA.crl (hash: qm49qfausbd8TnynlWA2JPcYvhuQWI8sQBZk21jEuwg=)
                          2: 931E9D64F1E611EF9602D94F762E951A.roa (hash: pu2PP2qQRpHTl0P12WcevM+SHqavoog2ZfvG3UTYFMs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D289C/12FAB962A87511E99285C745F8AEA228/bynJvMAklSDlBwZp-vZmUm98jzA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D289C/12FAB962A87511E99285C745F8AEA228/bynJvMAklSDlBwZp-vZmUm98jzA.mft
                          rsync://rpki.afrinic.net/repository/ripe/bynJvMAklSDlBwZp-vZmUm98jzA.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 26 Jul 2026 00:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2637 (0xa4d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D289CRI, serialNumber=6F29C9BCC0249520E5070669FAF666526F7C8F30
        Validity
            Not Before: Jul 24 01:31:37 2026 GMT
            Not After : Jul 26 01:31:37 2026 GMT
        Subject: CN=6a62c07a-9c61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:dc:e3:57:0d:ab:51:41:32:9f:16:9c:61:54:
                    ad:5a:66:1d:a3:dd:d3:a4:23:df:ed:1a:1a:f8:be:
                    77:e4:59:6e:7a:32:9e:b3:2d:1a:86:52:7b:07:02:
                    e7:c0:d1:21:87:fd:8d:25:25:24:c9:67:33:b9:03:
                    0b:6f:95:46:34:25:78:15:b9:ac:7b:c7:32:7f:92:
                    66:3a:f0:b5:14:b5:fc:07:07:60:7d:0c:6b:f5:d3:
                    35:56:d8:7f:c9:0e:fa:fb:c5:66:39:ca:35:b0:0f:
                    1a:e1:3c:e3:f5:a9:5e:ca:5b:30:72:5b:e4:41:c2:
                    96:48:f9:6e:da:08:f8:80:f7:a4:86:b6:76:b2:c0:
                    08:89:d7:fa:25:34:a8:f0:9d:89:f7:28:cf:69:59:
                    cb:1e:8a:dc:83:88:ff:98:4c:08:d1:a5:41:9c:f3:
                    e1:05:7a:4b:4e:46:d8:7d:9c:73:e5:32:a8:ec:42:
                    c2:8a:14:eb:69:cd:99:10:8e:d0:65:3f:08:da:4e:
                    40:c2:68:f9:f6:c5:c9:a4:9c:8b:64:0b:75:c3:d9:
                    b8:a7:fd:ae:ae:9e:b0:d8:11:c1:73:5a:6a:f4:fc:
                    57:42:8f:4a:89:d5:70:f3:e7:d2:41:c6:92:7a:73:
                    f2:5c:02:88:63:ef:b9:23:66:4f:c8:fe:4c:a6:50:
                    31:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:02:E6:C2:54:44:E0:FC:BA:1C:14:27:18:06:86:BD:B8:8C:45:BD
            X509v3 Authority Key Identifier:
                keyid:6F:29:C9:BC:C0:24:95:20:E5:07:06:69:FA:F6:66:52:6F:7C:8F:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D289C/12FAB962A87511E99285C745F8AEA228/bynJvMAklSDlBwZp-vZmUm98jzA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/bynJvMAklSDlBwZp-vZmUm98jzA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D289C/12FAB962A87511E99285C745F8AEA228/bynJvMAklSDlBwZp-vZmUm98jzA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:f9:1d:d9:42:4e:23:41:18:31:4a:cb:6c:bf:b0:d5:41:9c:
         d5:f2:ea:db:65:06:63:b5:a1:76:ab:87:96:6e:ff:a2:47:c9:
         a0:3e:15:09:13:9e:dd:59:97:9d:ae:bd:3a:b4:36:75:e7:1f:
         07:bd:13:f8:50:a8:fe:a7:21:52:97:a4:60:9e:ec:be:20:25:
         ca:34:46:4a:bc:d8:ef:53:1e:f9:df:af:76:8d:31:2e:aa:5d:
         3f:19:3c:01:7d:f5:a2:28:11:64:66:73:ad:f0:8e:a9:7d:86:
         76:00:87:9a:f6:4d:2b:3d:97:d5:47:39:96:08:49:f2:28:3f:
         81:b4:07:d1:59:2d:eb:f0:2c:51:97:1c:68:0c:77:f9:8d:47:
         10:d7:57:d9:90:4e:43:a0:73:7c:de:c4:27:47:80:f2:a4:ee:
         44:cc:3b:b0:c8:64:a5:47:a1:61:90:5c:46:e8:99:dd:25:f3:
         dd:da:8e:7b:53:50:99:70:6c:f1:96:e4:72:61:e8:ff:3c:57:
         c4:aa:93:5d:c7:31:af:1b:c8:e5:5f:3f:74:c5:5f:f3:3c:aa:
         91:d2:fe:c2:c2:4b:89:47:ce:ed:2e:58:98:56:ee:9c:11:a4:
         81:c2:5b:e3:07:88:97:cd:e4:8f:1b:ca:39:8c:ad:c2:43:e1:
         4a:92:63:de
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICCk0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RDI4OUNSSTExMC8GA1UEBRMoNkYyOUM5QkNDMDI0OTUyMEU1MDcwNjY5RkFGNjY2
NTI2RjdDOEYzMDAeFw0yNjA3MjQwMTMxMzdaFw0yNjA3MjYwMTMxMzdaMBgxFjAU
BgNVBAMTDTZhNjJjMDdhLTljNjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC+3ONXDatRQTKfFpxhVK1aZh2j3dOkI9/tGhr4vnfkWW56Mp6zLRqGUnsH
AufA0SGH/Y0lJSTJZzO5AwtvlUY0JXgVuax7xzJ/kmY68LUUtfwHB2B9DGv10zVW
2H/JDvr7xWY5yjWwDxrhPOP1qV7KWzByW+RBwpZI+W7aCPiA96SGtnaywAiJ1/ol
NKjwnYn3KM9pWcseityDiP+YTAjRpUGc8+EFektORth9nHPlMqjsQsKKFOtpzZkQ
jtBlPwjaTkDCaPn2xcmknItkC3XD2bin/a6unrDYEcFzWmr0/FdCj0qJ1XDz59JB
xpJ6c/JcAohj77kjZk/I/kymUDGzAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUKgLm
wlRE4Py6HBQnGAaGvbiMRb0wHwYDVR0jBBgwFoAUbynJvMAklSDlBwZp+vZmUm98
jzAwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkQyODlDLzEyRkFCOTYyQTg3NTExRTk5Mjg1Qzc0NUY4QUVBMjI4L2J5bkp2
TUFrbFNEbEJ3WnAtdlptVW05OGp6QS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9yaXBl
L2J5bkp2TUFrbFNEbEJ3WnAtdlptVW05OGp6QS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2RDI4OUMvMTJGQUI5NjJBODc1MTFFOTkyODVDNzQ1RjhBRUEy
MjgvYnluSnZNQWtsU0RsQndacC12Wm1VbTk4anpBLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBh+R3ZQk4jQRgxSstsv7DVQZzV8urbZQZj
taF2q4eWbv+iR8mgPhUJE57dWZedrr06tDZ15x8HvRP4UKj+pyFSl6Rgnuy+ICXK
NEZKvNjvUx753692jTEuql0/GTwBffWiKBFkZnOt8I6pfYZ2AIea9k0rPZfVRzmW
CEnyKD+BtAfRWS3r8CxRlxxoDHf5jUcQ11fZkE5DoHN83sQnR4DypO5EzDuwyGSl
R6FhkFxG6JndJfPd2o57U1CZcGzxluRyYej/PFfEqpNdxzGvG8jlXz90xV/zPKqR
0v7CwkuJR87tLliYVu6cEaSBwlvjB4iXzeSPG8o5jK3CQ+FKkmPe
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:32:55 2026 by rpki-client