Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F68F4/51DF5004C67311EE84C75AA5775412E6/YnpDuw3zxvXmKHq_6henXbeyswM.mft
File:                     YnpDuw3zxvXmKHq_6henXbeyswM.mft (raw, json)
Hash identifier:          dPIXwRL6cgcUkJ6v6RJ7JO75VkNo+eLcAfQLNED9+A0=
Subject key identifier:   B9:E8:6A:84:8B:CF:53:4A:CD:91:23:76:64:73:B6:0F:9A:07:B6:95
Authority key identifier: 62:7A:43:BB:0D:F3:C6:F5:E6:28:7A:BF:EA:17:A7:5D:B7:B2:B3:03
Certificate issuer:       /CN=F36F68F4AF/serialNumber=627A43BB0DF3C6F5E6287ABFEA17A75DB7B2B303
Certificate serial:       039C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/YnpDuw3zxvXmKHq_6henXbeyswM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/51DF5004C67311EE84C75AA5775412E6/YnpDuw3zxvXmKHq_6henXbeyswM.mft
Manifest number:          039A
Signing time:             Fri 24 Jul 2026 04:01:09 +0000
Manifest this update:     Fri 24 Jul 2026 04:01:08 +0000
Manifest next update:     Sun 26 Jul 2026 04:01:08 +0000
Files and hashes:         1: YnpDuw3zxvXmKHq_6henXbeyswM.crl (hash: s+GauogsNxi5Gtue+KoJHAaEy0lgBY5GcYjqv37/wkM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/51DF5004C67311EE84C75AA5775412E6/YnpDuw3zxvXmKHq_6henXbeyswM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/51DF5004C67311EE84C75AA5775412E6/YnpDuw3zxvXmKHq_6henXbeyswM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/YnpDuw3zxvXmKHq_6henXbeyswM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 26 Jul 2026 00:07:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 924 (0x39c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F68F4AF, serialNumber=627A43BB0DF3C6F5E6287ABFEA17A75DB7B2B303
        Validity
            Not Before: Jul 24 04:01:08 2026 GMT
            Not After : Jul 26 04:01:08 2026 GMT
        Subject: CN=6a62e385-86ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:71:b9:e2:f5:ab:b0:b9:e2:85:9b:37:e0:a6:
                    c1:f8:48:32:f4:9e:10:ba:b9:e3:d9:47:43:08:f3:
                    70:b2:02:3f:9a:de:3f:89:5a:ab:6b:92:08:c8:af:
                    95:1d:3f:3d:5c:73:48:2f:68:f3:21:fc:1d:2c:d5:
                    8c:a8:ba:7c:ee:2c:65:fa:6c:4e:67:9a:bb:9f:72:
                    03:78:7a:35:f7:86:9a:34:35:2b:37:4a:14:0d:1b:
                    6d:6d:b9:fd:50:c7:70:34:70:ab:cc:1f:9a:47:c1:
                    97:92:84:8f:8f:2f:b4:9f:34:bf:93:1e:a5:58:75:
                    5c:6e:7c:65:fb:95:d4:97:59:49:22:f8:70:67:90:
                    bd:f2:fa:ce:b9:1f:4d:61:d5:22:62:d0:e0:20:3e:
                    e3:93:c5:b9:cd:09:7a:58:e2:a6:c9:99:26:39:7e:
                    82:61:8d:48:24:8e:f4:fc:1a:c6:25:26:fe:44:ec:
                    b4:76:f2:2a:87:b7:87:71:42:77:fd:a9:30:0f:88:
                    38:b6:ce:1f:35:52:49:d7:81:c9:cf:c9:97:2d:cb:
                    53:4e:fe:a9:27:5d:84:27:99:9c:dc:8a:f0:f2:eb:
                    c4:f5:30:d3:1f:f6:97:bb:c6:50:8e:c3:f8:13:e9:
                    a3:7d:3e:fa:91:18:30:58:d8:ca:e7:22:b8:e6:99:
                    58:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:E8:6A:84:8B:CF:53:4A:CD:91:23:76:64:73:B6:0F:9A:07:B6:95
            X509v3 Authority Key Identifier:
                keyid:62:7A:43:BB:0D:F3:C6:F5:E6:28:7A:BF:EA:17:A7:5D:B7:B2:B3:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/51DF5004C67311EE84C75AA5775412E6/YnpDuw3zxvXmKHq_6henXbeyswM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YnpDuw3zxvXmKHq_6henXbeyswM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/51DF5004C67311EE84C75AA5775412E6/YnpDuw3zxvXmKHq_6henXbeyswM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:f6:1b:36:61:71:c7:ce:54:4e:82:bc:09:0e:92:07:40:fd:
         c4:ef:05:73:9d:ee:ba:d8:f0:d8:05:e9:67:6d:c0:80:69:ad:
         20:3e:a4:89:7e:ab:b1:f0:9c:2d:29:c6:65:f5:5e:a9:e4:cd:
         92:7d:8b:bd:a4:32:df:de:35:68:48:c2:35:1a:03:12:71:84:
         0a:f5:91:a4:32:04:58:d6:4a:d1:37:90:fa:54:35:65:d3:45:
         39:14:ac:8c:73:4b:14:68:e7:b7:51:7d:8c:a4:f7:c0:46:10:
         b6:cf:e4:dc:e3:17:06:71:17:7c:8d:45:e6:af:ea:85:80:76:
         d8:52:c1:2b:a3:27:d1:97:bc:02:25:a9:be:cb:a4:16:aa:94:
         fe:34:7f:0e:ea:c7:80:6a:b7:bb:ce:6f:5e:fb:72:33:39:7f:
         51:a0:df:c8:71:7f:5f:5b:5b:a2:5f:45:9c:66:1e:92:de:69:
         af:a0:05:38:b1:78:9b:09:f7:3a:33:b0:ba:7f:76:0f:f1:9a:
         a4:11:35:96:e1:59:61:47:26:7e:fe:57:59:d7:a0:f9:d7:99:
         1a:37:71:7e:21:35:67:77:2b:88:f5:a6:bf:cd:8a:66:52:87:
         6b:c4:f2:12:bc:9f:47:3b:7c:0b:fc:15:82:7f:b0:a4:97:09:
         27:01:c0:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:35:40 2026 by rpki-client