Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D8DFA/0E9B19BA140A11E5A7F5FC4CF8AEA228/1mi-yvPLFNtiSjQl1mZgm_J7Uu4.mft
File:                     1mi-yvPLFNtiSjQl1mZgm_J7Uu4.mft (raw, json)
Hash identifier:          OsoGmOnECkoTrG0u5uYs9L5ZaA2+Y/qvKF+9WSB8Q0A=
Subject key identifier:   23:35:73:03:8F:D6:91:D0:AC:B8:AD:00:11:E9:C9:97:8F:B0:68:20
Authority key identifier: D6:68:BE:CA:F3:CB:14:DB:62:4A:34:25:D6:66:60:9B:F2:7B:52:EE
Certificate issuer:       /CN=F36D8DFAAF/serialNumber=D668BECAF3CB14DB624A3425D666609BF27B52EE
Certificate serial:       102D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/1mi-yvPLFNtiSjQl1mZgm_J7Uu4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D8DFA/0E9B19BA140A11E5A7F5FC4CF8AEA228/1mi-yvPLFNtiSjQl1mZgm_J7Uu4.mft
Manifest number:          1028
Signing time:             Fri 24 Jul 2026 00:51:46 +0000
Manifest this update:     Fri 24 Jul 2026 00:51:46 +0000
Manifest next update:     Sun 26 Jul 2026 00:51:46 +0000
Files and hashes:         1: 1mi-yvPLFNtiSjQl1mZgm_J7Uu4.crl (hash: 3xc20toCOXtHOCkDyltbaa1V7HrmhyQcd/tkdixgx0A=)
                          2: 88EE59C2520511F0838F9DC4DAE4EC9C.roa (hash: FNAcobe0yOGwnLd0ymzGwbW/jHGE2cTudiyiweVPang=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D8DFA/0E9B19BA140A11E5A7F5FC4CF8AEA228/1mi-yvPLFNtiSjQl1mZgm_J7Uu4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D8DFA/0E9B19BA140A11E5A7F5FC4CF8AEA228/1mi-yvPLFNtiSjQl1mZgm_J7Uu4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/1mi-yvPLFNtiSjQl1mZgm_J7Uu4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 26 Jul 2026 00:07:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4141 (0x102d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D8DFAAF, serialNumber=D668BECAF3CB14DB624A3425D666609BF27B52EE
        Validity
            Not Before: Jul 24 00:51:46 2026 GMT
            Not After : Jul 26 00:51:46 2026 GMT
        Subject: CN=6a62b722-5db7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:4b:d1:29:14:0c:fa:e0:04:12:0b:82:ba:d5:
                    f4:b6:bb:18:74:86:c3:f8:ec:ef:a8:69:77:a8:88:
                    8b:92:8d:8f:a0:61:08:c2:82:98:a3:88:a6:1f:34:
                    d9:1e:0c:09:3d:b1:8f:ad:35:e0:47:23:24:e6:85:
                    bc:18:96:5a:64:56:8a:78:65:9d:ac:35:cc:68:d2:
                    bf:38:54:c1:3e:e2:6e:ec:cd:ea:b1:df:89:d2:63:
                    82:4c:af:33:b4:a1:ef:83:9e:d7:50:c8:5f:94:4d:
                    60:ba:25:cf:8b:40:3a:c6:a9:e7:ac:cf:39:d1:87:
                    04:e1:86:e3:e6:d5:79:83:ea:cd:68:f9:8f:5a:b9:
                    ad:2e:f1:52:5b:ba:69:53:12:06:1b:36:6e:14:99:
                    49:8e:34:ac:10:75:f1:88:ed:21:f5:51:c7:00:b5:
                    9f:4e:c0:48:e0:20:8f:9b:87:a8:d5:12:f3:41:cb:
                    6c:7c:68:5b:d2:67:27:9a:52:4a:8d:7e:8f:94:ab:
                    a7:d3:af:28:0a:f0:d8:dc:b5:fe:76:90:ff:07:b2:
                    02:ef:0d:26:e7:e4:19:dd:c5:2c:f1:a3:bb:ab:36:
                    7c:f3:11:2f:cf:6c:67:77:f4:f3:82:9e:30:2c:74:
                    82:cc:b4:b7:0f:6e:7c:29:fa:b8:86:f0:f8:38:ef:
                    0b:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:35:73:03:8F:D6:91:D0:AC:B8:AD:00:11:E9:C9:97:8F:B0:68:20
            X509v3 Authority Key Identifier:
                keyid:D6:68:BE:CA:F3:CB:14:DB:62:4A:34:25:D6:66:60:9B:F2:7B:52:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8DFA/0E9B19BA140A11E5A7F5FC4CF8AEA228/1mi-yvPLFNtiSjQl1mZgm_J7Uu4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/1mi-yvPLFNtiSjQl1mZgm_J7Uu4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8DFA/0E9B19BA140A11E5A7F5FC4CF8AEA228/1mi-yvPLFNtiSjQl1mZgm_J7Uu4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:ac:27:0e:a7:4b:cf:23:b7:89:37:8c:d1:c1:fb:87:59:c8:
         94:83:87:ba:d2:6d:bd:57:59:44:cb:e6:41:e9:cd:99:49:53:
         5f:1e:d7:e0:8d:20:5d:ad:4c:71:5b:43:dc:67:24:3f:f2:75:
         ae:6d:70:35:65:ff:15:27:9a:1f:7e:2d:5e:6e:72:85:03:06:
         0c:5c:e0:3c:6c:c9:df:f0:cb:12:94:b5:45:df:83:4f:5b:d1:
         69:d7:53:5c:73:a1:11:81:21:a4:98:53:34:22:c5:4c:1f:a1:
         71:f3:60:dd:be:98:20:9b:46:47:36:d8:1c:a4:89:06:8b:c3:
         21:51:6d:5d:6b:fd:18:ba:3b:58:82:48:f5:8b:51:72:57:2d:
         29:3a:88:6d:e4:d0:d2:5c:42:7c:3c:69:1b:6a:c1:c2:b0:ba:
         5e:b2:16:ba:42:ec:8d:49:c7:83:ee:b1:3d:6d:44:01:ea:d1:
         0e:25:47:2e:67:86:ee:15:82:ef:14:31:f6:c9:ae:0c:04:09:
         ee:86:bd:84:20:8b:0f:58:e5:86:2f:88:a2:87:99:87:0f:34:
         01:d5:48:91:82:70:14:03:ae:bf:1a:03:eb:01:97:76:78:13:
         a6:9f:20:7e:8c:22:9a:9d:34:8a:f1:84:35:de:95:75:d5:31:
         0e:fd:1a:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:26:22 2026 by rpki-client