Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FC4AA/43A969D46DFC11F08A39DCC1DAE4EC9C/dUkJrgeKY-ifABHj0kq7f951hnc.mft
File:                     dUkJrgeKY-ifABHj0kq7f951hnc.mft (raw, json)
Hash identifier:          3Vg/uhOfSpbNbaJSHZVOMJGQshj2Oc0VR2g8yVhNYWY=
Subject key identifier:   C4:B7:15:22:11:0D:B3:70:65:39:72:16:27:5E:4A:DB:EF:35:23:C8
Authority key identifier: 75:49:09:AE:07:8A:63:E8:9F:00:11:E3:D2:4A:BB:7F:DE:75:86:77
Certificate issuer:       /CN=F36FC4AAAF/serialNumber=754909AE078A63E89F0011E3D24ABB7FDE758677
Certificate serial:       016D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/dUkJrgeKY-ifABHj0kq7f951hnc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FC4AA/43A969D46DFC11F08A39DCC1DAE4EC9C/dUkJrgeKY-ifABHj0kq7f951hnc.mft
Manifest number:          016C
Signing time:             Fri 24 Jul 2026 05:02:53 +0000
Manifest this update:     Fri 24 Jul 2026 05:02:52 +0000
Manifest next update:     Sun 26 Jul 2026 05:02:52 +0000
Files and hashes:         1: dUkJrgeKY-ifABHj0kq7f951hnc.crl (hash: lY54OpsB89XQdgIF53TOhVLTycTG4W2HBuGAyRE5l5g=)
                          2: 433EBDCA6DFF11F0AA2AADD3DAE4EC9C.roa (hash: A3nkp4rPy53u0Z5Ms+sfzKlD65yMF9PSrDUFPQ1Fzco=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FC4AA/43A969D46DFC11F08A39DCC1DAE4EC9C/dUkJrgeKY-ifABHj0kq7f951hnc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FC4AA/43A969D46DFC11F08A39DCC1DAE4EC9C/dUkJrgeKY-ifABHj0kq7f951hnc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/dUkJrgeKY-ifABHj0kq7f951hnc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 26 Jul 2026 00:07:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 365 (0x16d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FC4AAAF, serialNumber=754909AE078A63E89F0011E3D24ABB7FDE758677
        Validity
            Not Before: Jul 24 05:02:52 2026 GMT
            Not After : Jul 26 05:02:52 2026 GMT
        Subject: CN=6a62f1fd-88ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:1e:74:e8:72:84:98:af:ba:1c:c5:42:dd:07:
                    e3:89:9f:9a:1d:39:91:44:a0:06:42:f9:4e:b6:ed:
                    e9:4f:12:09:0d:7f:6e:b9:43:c0:51:d1:b4:66:63:
                    07:33:f8:9b:5c:5d:14:9a:10:de:ae:8f:07:7c:04:
                    1c:6d:5c:7c:80:e3:75:71:22:16:6c:dd:6f:7d:43:
                    98:9d:40:e5:95:91:06:fa:7a:7b:77:57:75:02:ac:
                    a8:37:f6:f0:dc:1e:b9:8e:32:38:34:53:91:d3:40:
                    30:2e:7c:bc:10:c0:b9:b0:57:00:cd:6e:3f:ae:75:
                    f3:9d:8b:08:45:35:22:5c:d7:06:57:2b:9a:90:8e:
                    c4:4e:8a:6f:d7:7d:9c:3a:13:69:4d:23:08:48:ba:
                    12:63:7a:e6:57:9b:93:76:27:58:e6:b6:5d:0d:38:
                    0b:ed:2a:51:a6:c6:31:23:e1:49:59:a3:d2:be:95:
                    ac:48:0a:32:ca:c3:21:01:57:ab:f5:16:4a:c6:76:
                    8a:3e:64:5a:c9:28:b4:a2:2a:81:5c:74:e0:47:ca:
                    aa:47:3a:63:0e:23:21:9c:bb:6f:fe:36:5d:5e:6d:
                    78:b3:ff:da:fb:0a:fe:08:4e:5b:11:e3:55:0b:d0:
                    f0:8e:41:12:d2:5b:3a:68:d2:47:27:2e:99:70:e5:
                    65:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:B7:15:22:11:0D:B3:70:65:39:72:16:27:5E:4A:DB:EF:35:23:C8
            X509v3 Authority Key Identifier:
                keyid:75:49:09:AE:07:8A:63:E8:9F:00:11:E3:D2:4A:BB:7F:DE:75:86:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FC4AA/43A969D46DFC11F08A39DCC1DAE4EC9C/dUkJrgeKY-ifABHj0kq7f951hnc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/dUkJrgeKY-ifABHj0kq7f951hnc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FC4AA/43A969D46DFC11F08A39DCC1DAE4EC9C/dUkJrgeKY-ifABHj0kq7f951hnc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:11:39:24:5b:77:7e:e7:ac:1a:79:70:2f:c2:31:05:f9:df:
         4c:88:43:2e:d4:e1:7f:59:4e:3a:d9:d9:53:8e:cc:66:8a:89:
         f6:86:e7:b0:fd:74:84:a5:b4:e6:a1:a3:e9:f2:ea:2d:ed:de:
         6e:eb:ca:5d:00:8e:e8:44:93:1a:9f:5a:01:fe:4c:69:9d:32:
         69:cd:93:ee:a2:79:ef:1d:6d:8d:77:55:ec:df:6c:dd:34:bf:
         44:1f:3c:a5:23:f7:0e:ed:b7:64:1b:42:2c:18:1a:16:d7:0f:
         b2:31:d7:10:ad:fb:00:25:50:95:c5:7d:ca:52:40:0a:a4:0b:
         70:f7:3f:35:0f:27:d0:89:e8:05:45:11:52:2d:2c:f3:73:5f:
         1e:86:31:ee:0b:e8:9f:3b:99:c6:ac:e7:08:d2:d7:34:cd:38:
         90:5b:2d:c2:89:cb:62:a1:ae:f1:a8:1b:4c:04:fc:c7:c1:c8:
         04:4d:d4:fb:81:52:82:37:f6:55:80:85:09:20:9f:aa:15:20:
         e9:e8:2c:10:32:be:c5:fa:38:ec:61:d8:1a:6a:b8:fe:ff:30:
         c0:c1:92:84:46:59:5e:ef:4d:17:58:b6:b2:7a:df:29:f8:d5:
         b4:49:48:6a:6f:90:0b:7f:c7:1f:6f:a3:fd:45:6c:e8:c2:22:
         6a:4f:b3:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:55:07 2026 by rpki-client