Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.mft
File:                     QS0Z-aThegTQm63JAqsLCQgk6tc.mft (raw, json)
Hash identifier:          R7YTKfCgBOIliomTrThAmx74MwTMoEIYa4LVG5rT+FI=
Subject key identifier:   CC:FB:90:CB:B6:41:ED:06:0D:70:6D:86:03:1E:61:C5:E7:A8:47:8A
Authority key identifier: 41:2D:19:F9:A4:E1:7A:04:D0:9B:AD:C9:02:AB:0B:09:08:24:EA:D7
Certificate issuer:       /CN=F36FFD1EAF/serialNumber=412D19F9A4E17A04D09BADC902AB0B090824EAD7
Certificate serial:       1002
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QS0Z-aThegTQm63JAqsLCQgk6tc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.mft
Manifest number:          1000
Signing time:             Fri 24 Jul 2026 00:52:54 +0000
Manifest this update:     Fri 24 Jul 2026 00:52:53 +0000
Manifest next update:     Sun 26 Jul 2026 00:52:53 +0000
Files and hashes:         1: QS0Z-aThegTQm63JAqsLCQgk6tc.crl (hash: teIL0RSePSZX0u7D9QRaenDcZozbYSyiMkAZfPe2p94=)
                          2: 353655B83FCC11F1922821BFCE1D38B0.roa (hash: IRSZKYkm7LcuUToOhHCRKBS+q6X69O13ur9lhLNv9xs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/QS0Z-aThegTQm63JAqsLCQgk6tc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 26 Jul 2026 00:07:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4098 (0x1002)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FFD1EAF, serialNumber=412D19F9A4E17A04D09BADC902AB0B090824EAD7
        Validity
            Not Before: Jul 24 00:52:53 2026 GMT
            Not After : Jul 26 00:52:53 2026 GMT
        Subject: CN=6a62b766-1e7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:52:14:35:d9:b2:ae:bb:6d:34:f2:1f:3a:7e:
                    a2:67:61:56:9c:46:32:08:44:82:a9:87:96:08:43:
                    36:75:5d:55:6e:ac:fd:ac:56:f2:16:5d:3a:3a:49:
                    16:de:bd:ff:0e:c6:c8:8a:da:29:91:0d:4e:b2:9c:
                    a2:3e:7d:a6:86:bd:39:62:6b:49:b9:78:07:f2:ea:
                    b5:29:33:a4:39:67:47:85:0e:54:71:02:f3:2f:42:
                    4e:d2:63:cd:1c:80:17:9a:c2:2d:6e:b4:ff:28:9c:
                    64:45:a8:42:36:3c:fc:30:9e:12:13:63:28:f7:6e:
                    56:60:08:73:4b:6e:58:57:4c:cd:86:52:1f:ed:bb:
                    cf:d8:06:40:d7:3c:6e:1a:24:7e:ed:1d:b7:8f:64:
                    6d:d4:a4:e7:25:38:8f:39:0b:95:cc:79:31:e1:6a:
                    2b:24:75:d9:c3:29:ea:80:84:a9:10:3e:55:59:3b:
                    b6:9f:79:b8:f0:5e:e6:4f:d6:c4:6f:e6:31:c6:67:
                    e9:68:2f:dc:15:ca:a6:7f:ef:04:53:6e:ab:b2:b9:
                    c8:98:58:e2:64:2d:a5:32:aa:dd:8f:6d:dc:ee:f0:
                    99:c8:62:7a:cd:5c:a2:f3:d9:bc:5a:7b:f1:2f:75:
                    d6:16:86:2e:2c:4a:cc:2e:d6:79:10:78:e9:44:a2:
                    96:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:FB:90:CB:B6:41:ED:06:0D:70:6D:86:03:1E:61:C5:E7:A8:47:8A
            X509v3 Authority Key Identifier:
                keyid:41:2D:19:F9:A4:E1:7A:04:D0:9B:AD:C9:02:AB:0B:09:08:24:EA:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QS0Z-aThegTQm63JAqsLCQgk6tc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:54:92:56:c2:2f:1f:92:f4:8a:b8:70:dd:25:99:af:10:5e:
         33:72:9f:ec:aa:fb:9c:92:b5:52:fa:9f:6b:64:1d:a0:88:82:
         19:c3:3d:16:7f:11:00:49:14:90:38:5d:97:be:ce:13:67:d7:
         6f:57:a1:3d:0a:2b:cf:28:2c:c0:7c:24:b4:02:73:c1:d8:69:
         18:df:9b:4e:06:dd:fe:f4:a3:62:58:33:bd:b6:e0:5b:57:9a:
         9f:b5:69:c8:7b:b0:7d:24:84:b6:e1:06:e6:72:9d:40:c9:90:
         a8:a5:bf:e4:31:86:3b:27:94:55:b1:6d:62:96:a0:12:99:ab:
         5a:61:13:8d:7a:fe:43:31:6a:17:74:5f:4b:5b:84:fc:53:98:
         e5:2b:12:e4:d1:7a:d7:09:7e:f5:f9:c2:a5:d8:46:8e:3c:f3:
         f1:0a:bf:cd:b9:2a:e1:72:7f:e2:a1:79:88:63:0c:eb:d8:29:
         0f:0c:60:31:9e:ae:34:30:be:cf:aa:05:8e:4d:43:a9:ef:4c:
         92:e3:b0:f8:e8:4f:d0:d9:4a:72:40:9d:3c:d7:38:d1:a5:56:
         9f:59:45:5e:58:19:8b:eb:be:05:c6:60:2a:54:f5:10:42:80:
         e1:be:85:77:13:67:32:64:c1:dc:3e:2f:14:ae:9e:81:d2:16:
         0e:d6:55:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:07:18 2026 by rpki-client