Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36ED442/9ED8257A57C811E5A805BD3EF8AEA228/iVUnx34gFEZnMJDwgWSPGGEnsbo.mft
File:                     iVUnx34gFEZnMJDwgWSPGGEnsbo.mft (raw, json)
Hash identifier:          PZYwtOim+KIFs18fBOfjMmD7ZmrudF8wZRcSNwizv8w=
Subject key identifier:   1D:E0:D1:A5:4B:A7:50:C6:EC:D6:18:8F:CE:3A:67:DD:1E:20:76:9A
Authority key identifier: 89:55:27:C7:7E:20:14:46:67:30:90:F0:81:64:8F:18:61:27:B1:BA
Certificate issuer:       /CN=F36ED442AF/serialNumber=895527C77E201446673090F081648F186127B1BA
Certificate serial:       0FD4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/iVUnx34gFEZnMJDwgWSPGGEnsbo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36ED442/9ED8257A57C811E5A805BD3EF8AEA228/iVUnx34gFEZnMJDwgWSPGGEnsbo.mft
Manifest number:          0FD2
Signing time:             Fri 24 Jul 2026 00:56:52 +0000
Manifest this update:     Fri 24 Jul 2026 00:56:51 +0000
Manifest next update:     Sun 26 Jul 2026 00:56:51 +0000
Files and hashes:         1: iVUnx34gFEZnMJDwgWSPGGEnsbo.crl (hash: Y1pHfnFQOeitYcrig+K3eobKRPB15jZkjP1kguop0H4=)
                          2: D1595E92479F11F1955B4AE8CE1D38B0.roa (hash: rIbLa5rpV4WAj/sqUqpq18W5uZz1OXNKu6ZwE1OKxqg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36ED442/9ED8257A57C811E5A805BD3EF8AEA228/iVUnx34gFEZnMJDwgWSPGGEnsbo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36ED442/9ED8257A57C811E5A805BD3EF8AEA228/iVUnx34gFEZnMJDwgWSPGGEnsbo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/iVUnx34gFEZnMJDwgWSPGGEnsbo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 26 Jul 2026 00:07:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4052 (0xfd4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36ED442AF, serialNumber=895527C77E201446673090F081648F186127B1BA
        Validity
            Not Before: Jul 24 00:56:51 2026 GMT
            Not After : Jul 26 00:56:51 2026 GMT
        Subject: CN=6a62b854-05b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d5:f0:d9:fd:62:8e:54:09:e4:60:6d:67:d6:
                    66:92:3e:95:65:79:ef:67:6e:7d:98:b8:9d:ad:69:
                    fc:40:f8:18:dc:3d:b4:bd:e8:50:1d:cf:15:87:b8:
                    1f:6f:06:ef:73:88:36:2b:4c:84:a6:5d:d8:2b:8d:
                    25:0f:5f:c9:b9:13:d0:b7:6c:a0:04:fd:a2:af:44:
                    b4:07:dc:e4:22:58:13:63:8a:ee:c0:ea:16:25:05:
                    08:d5:f4:c7:f4:87:ba:14:db:58:6e:0b:dc:e8:50:
                    c3:1e:d8:f0:61:da:98:98:c1:b5:ef:7f:9d:3b:c2:
                    e1:ca:b9:7a:ee:13:11:a6:ad:79:dd:2c:02:08:69:
                    ad:c7:ac:8c:75:35:d4:d4:47:21:2e:06:3e:5e:9b:
                    26:cc:ac:a3:5a:91:0c:6f:aa:a2:d8:ae:a7:5f:fb:
                    22:9f:4e:37:42:b6:ef:af:0c:59:f4:dc:03:20:76:
                    7b:e5:12:08:d0:6a:d5:ad:7a:ac:cd:1c:b7:38:85:
                    47:e3:5c:fa:f8:71:87:0a:90:cd:b6:1b:46:12:2b:
                    a4:21:43:75:55:f9:40:bf:18:88:b3:16:60:0d:e4:
                    12:86:0d:17:72:d0:cf:eb:af:31:47:61:6a:24:52:
                    cd:f2:c7:0e:5c:50:d4:67:c2:57:17:c5:eb:fb:33:
                    f8:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:E0:D1:A5:4B:A7:50:C6:EC:D6:18:8F:CE:3A:67:DD:1E:20:76:9A
            X509v3 Authority Key Identifier:
                keyid:89:55:27:C7:7E:20:14:46:67:30:90:F0:81:64:8F:18:61:27:B1:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36ED442/9ED8257A57C811E5A805BD3EF8AEA228/iVUnx34gFEZnMJDwgWSPGGEnsbo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/iVUnx34gFEZnMJDwgWSPGGEnsbo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36ED442/9ED8257A57C811E5A805BD3EF8AEA228/iVUnx34gFEZnMJDwgWSPGGEnsbo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:b9:20:dc:21:a5:0f:9a:b2:d5:94:5e:d3:dd:f5:a9:da:e5:
         49:ea:0c:c2:5e:a6:db:0b:90:92:ce:79:ef:a2:39:fa:ea:0b:
         58:0d:cd:65:7b:e4:c9:83:4e:e7:3b:5e:d3:72:29:a7:7f:88:
         4e:96:2a:a3:6e:ee:54:93:12:2b:96:d7:f3:c0:99:65:37:ae:
         a9:f6:ac:2d:a0:3e:ec:b6:d5:3f:98:35:fc:9a:bb:4c:d3:5f:
         24:1e:a7:3d:da:c4:4c:1c:b8:fe:1f:da:48:e7:eb:f2:5d:af:
         09:29:61:af:9f:9e:f4:96:4f:90:e0:a3:77:e3:91:cf:26:93:
         4f:a8:d2:7a:ea:c8:0a:69:ab:f8:5a:8d:26:63:c5:63:f3:24:
         38:80:8f:2a:de:6f:e1:14:46:ad:7a:d0:64:0d:4a:17:87:69:
         b1:ee:f5:ac:de:53:04:4a:4a:82:da:98:84:96:c6:b7:78:b4:
         5d:bd:ba:89:b4:51:29:82:4c:26:95:fc:70:18:ce:43:3b:50:
         42:6a:6c:30:b5:2d:26:5b:9b:e3:a8:a6:04:51:58:80:9b:9f:
         cf:36:7c:82:0c:ff:8f:29:e4:8e:11:2a:8e:1d:fc:9a:e4:1d:
         48:d6:d6:c9:3b:26:23:01:05:be:44:68:e3:9c:93:4f:9d:56:
         98:fb:6d:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:04:40 2026 by rpki-client