Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E6802/F6AA6EE8653D11EF844B268E762E951A/aL00PB2fcEbGL5VfhnMZ2FKxShA.mft
File:                     aL00PB2fcEbGL5VfhnMZ2FKxShA.mft (raw, json)
Hash identifier:          JTd8zjaNY8dVn8mQEy1gcsjGOV4tNb/RnzpfAqiER7I=
Subject key identifier:   93:B7:1F:9C:4E:EE:72:7F:E4:D1:72:8F:12:6B:FF:D2:21:90:A6:9C
Authority key identifier: 68:BD:34:3C:1D:9F:70:46:C6:2F:95:5F:86:73:19:D8:52:B1:4A:10
Certificate issuer:       /CN=F36E6802AF/serialNumber=68BD343C1D9F7046C62F955F867319D852B14A10
Certificate serial:       02C7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/aL00PB2fcEbGL5VfhnMZ2FKxShA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E6802/F6AA6EE8653D11EF844B268E762E951A/aL00PB2fcEbGL5VfhnMZ2FKxShA.mft
Manifest number:          02C6
Signing time:             Fri 24 Jul 2026 04:26:34 +0000
Manifest this update:     Fri 24 Jul 2026 04:26:33 +0000
Manifest next update:     Sun 26 Jul 2026 04:26:33 +0000
Files and hashes:         1: aL00PB2fcEbGL5VfhnMZ2FKxShA.crl (hash: FUlijVvUXiwj65AfCQbJaQ6aFndBckrFoVUJn++B8QM=)
                          2: 10CA293E653F11EF8C440393762E951A.roa (hash: nhNLmRsBHLhK6LTWVHLzqZimVfw7FMGqSN9TfNAWHoE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E6802/F6AA6EE8653D11EF844B268E762E951A/aL00PB2fcEbGL5VfhnMZ2FKxShA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E6802/F6AA6EE8653D11EF844B268E762E951A/aL00PB2fcEbGL5VfhnMZ2FKxShA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/aL00PB2fcEbGL5VfhnMZ2FKxShA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 26 Jul 2026 00:07:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 711 (0x2c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E6802AF, serialNumber=68BD343C1D9F7046C62F955F867319D852B14A10
        Validity
            Not Before: Jul 24 04:26:33 2026 GMT
            Not After : Jul 26 04:26:33 2026 GMT
        Subject: CN=6a62e97a-de3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:6f:62:55:b9:20:ba:da:a3:c5:24:c3:fa:10:
                    e3:f1:da:9e:3d:8f:9c:91:55:80:fe:98:75:06:f6:
                    18:da:82:74:47:67:ce:93:5c:cf:95:82:13:8c:10:
                    72:d9:71:56:41:e0:58:0a:23:dc:20:98:14:b2:88:
                    fa:cf:a6:a4:10:11:d5:f3:78:e9:72:43:a1:59:59:
                    a6:a3:34:e8:9d:fb:ad:ae:9f:c5:7f:e6:1c:d7:23:
                    aa:ee:6f:3d:05:6a:37:f4:de:26:79:69:33:89:e1:
                    db:e9:ae:43:ab:58:e4:13:3d:4d:82:4a:2e:93:ad:
                    b4:c9:e0:72:52:1c:62:2d:8e:5b:00:5d:a3:20:71:
                    f4:d5:7f:29:eb:c7:ed:0e:f8:ae:62:86:72:60:1a:
                    fc:34:3b:d3:b2:8e:9a:ef:6d:e3:25:d4:29:5e:3c:
                    f1:ce:27:25:37:d3:cc:29:8d:f0:95:18:85:c5:c9:
                    9f:eb:8b:36:6b:5f:08:b0:6f:ff:58:e3:71:0e:db:
                    dd:3a:95:33:2b:bb:b3:4e:11:3e:ce:92:e2:2d:93:
                    32:ef:2e:9a:c3:8c:4e:68:c0:c8:df:a0:84:d1:d9:
                    7e:c3:93:f2:6e:3f:2e:6e:40:38:21:b3:33:fc:0f:
                    57:97:90:4a:a6:6d:32:e5:b2:33:f7:83:17:22:da:
                    c9:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:B7:1F:9C:4E:EE:72:7F:E4:D1:72:8F:12:6B:FF:D2:21:90:A6:9C
            X509v3 Authority Key Identifier:
                keyid:68:BD:34:3C:1D:9F:70:46:C6:2F:95:5F:86:73:19:D8:52:B1:4A:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E6802/F6AA6EE8653D11EF844B268E762E951A/aL00PB2fcEbGL5VfhnMZ2FKxShA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/aL00PB2fcEbGL5VfhnMZ2FKxShA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E6802/F6AA6EE8653D11EF844B268E762E951A/aL00PB2fcEbGL5VfhnMZ2FKxShA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:8f:e2:ab:40:2a:dc:62:49:d9:6e:da:17:e9:8e:51:3a:cc:
         2c:32:c3:15:c3:e5:fd:2d:78:55:1d:02:16:e3:80:1e:96:26:
         a6:e4:65:72:ca:32:71:1b:3f:c5:8f:56:ad:17:b3:75:91:35:
         12:f9:5d:85:bc:66:f9:20:8d:3b:d1:f2:8b:23:c2:3d:39:8e:
         37:54:df:7e:fc:65:63:85:f3:dd:44:f7:45:bb:18:12:59:31:
         d3:74:17:2d:81:c0:60:0a:56:b5:92:50:e5:77:98:88:a9:a8:
         cd:97:02:64:4d:da:5e:6d:88:11:27:f8:77:6f:89:ea:72:50:
         79:6b:9f:4c:06:00:ef:0b:1b:97:1c:37:53:6d:0a:3d:39:54:
         d8:b4:e9:dc:b9:77:7b:b4:66:31:c9:26:b4:0f:c1:ab:d7:bc:
         ed:61:45:1c:00:58:34:09:50:22:6f:35:ad:74:cd:2e:08:e9:
         2f:a7:d5:52:11:07:87:8d:50:c5:a2:33:f4:b5:2d:4b:2c:be:
         32:0f:41:de:59:db:e5:97:25:d1:be:2f:a6:de:b2:32:67:31:
         7d:0b:1e:14:6f:57:c9:35:1f:49:8d:b7:e6:13:3b:a5:7f:ad:
         a1:f7:c5:9c:7b:3f:e8:43:d4:f5:ab:29:19:56:99:f4:ce:26:
         5a:85:bb:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:05:28 2026 by rpki-client